This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json) Hash identifier: osG84NV+CnvavX0BzTOncxT9x5mZzgNl+nCr/y2qb6k= Subject key identifier: 28:94:93:BD:E7:C5:26:A8:CA:D6:7D:11:BD:B0:DD:E2:5B:49:24:24 Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B3D91030C708C0FE9F09E0805B02239B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft Manifest number: 14D5 Signing time: Sat 20 Dec 2025 21:01:12 +0000 Manifest this update: Sat 20 Dec 2025 21:01:12 +0000 Manifest next update: Sun 21 Dec 2025 21:01:12 +0000 Files and hashes: 1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=) 2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=) 3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: N/vVNM1t21ND2SAeNyj48gXDozPk9FZrLrh82ChAvjU=) 4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=) 5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=) 6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=) 7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:03:0c:70:8c:0f:e9:f0:9e:08:05:b0:22:39:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Dec 20 21:01:12 2025 GMT Not After : Dec 21 21:01:12 2025 GMT Subject: CN=289493bde7c526a8cad67d11bdb0dde25b492424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:c3:9f:51:4e:ed:c1:f9:b7:c2:00:31:95: b2:ab:ce:3f:ba:7e:93:07:7e:50:e4:11:dc:b1:2c: ad:60:45:12:c5:ec:cc:8b:de:e2:f5:3b:1a:ce:6e: bf:93:aa:7d:86:6f:bc:2d:53:db:a0:78:9d:41:98: b1:d2:8f:9a:84:93:cf:8a:bf:eb:12:eb:c2:fb:8c: ab:41:17:23:6a:ad:cd:c2:2a:b6:12:e6:7e:ca:a0: 45:6f:c1:68:19:b1:89:fb:fe:39:c3:8e:95:ef:83: 4d:bd:d7:b7:43:f1:2f:c0:9c:d9:4d:3a:18:59:4c: 54:93:18:b0:83:c5:b5:f5:8c:0f:5b:49:d0:0d:44: 81:fc:78:c5:e3:d7:3a:d8:11:42:67:07:59:d4:37: ad:10:ae:a3:ed:f5:6b:e5:43:93:ce:b2:3c:c5:ea: ba:22:43:24:01:2b:c5:fd:0e:e6:b9:86:19:dc:fe: 3b:b6:d3:f9:58:8a:53:bc:9a:a7:04:22:f9:c3:ee: 7a:8c:c7:78:4e:f1:19:07:39:ad:dc:2b:77:4a:b7: c7:ef:11:1d:f5:d0:2a:37:0f:84:2f:59:29:54:e1: c1:c8:38:77:35:8d:65:b1:0b:ba:d6:6f:81:b0:c8: 68:7b:5e:ed:ff:35:90:b6:a1:5c:eb:7c:c1:80:23: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:94:93:BD:E7:C5:26:A8:CA:D6:7D:11:BD:B0:DD:E2:5B:49:24:24 X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:da:7d:4d:f6:4f:26:2a:48:c2:97:78:4c:c7:2d:62:9c:ab: 08:44:f4:82:a7:13:9f:ef:84:60:6f:d4:78:a5:52:9b:b6:d3: 55:05:df:a2:8d:ea:c8:9f:bb:a7:68:47:bc:ed:bf:e1:65:5a: ea:04:af:10:52:02:24:4e:4d:cc:a2:3a:1a:7d:4a:0d:45:9f: 07:b2:fb:93:93:3b:d5:8c:d5:da:c6:4d:90:f0:bc:8f:0f:a9: e0:66:ed:d3:e5:17:24:3c:49:f5:92:73:0b:7a:8b:e8:62:69: 61:2a:62:2f:65:7a:10:79:12:a1:0a:54:f5:63:5f:7a:0a:da: e0:17:47:82:6e:bd:25:76:fd:16:d6:4e:cd:90:00:e2:6b:68: e6:d9:24:6b:b6:09:55:80:b4:52:96:91:d5:ff:f6:ce:d6:2e: 74:52:f3:af:cb:73:f4:7a:4b:9d:6b:08:a8:ec:c0:c6:fd:f2: f7:f6:ee:a6:77:14:da:95:8c:46:65:b1:20:25:42:b1:d5:ca: 4b:04:f5:b3:9e:bc:0e:d8:aa:c3:9d:f4:29:e8:ef:c0:c3:eb: 35:cd:34:48:bc:80:4d:2e:89:84:37:16:0c:75:39:7c:aa:89: dd:3c:e3:65:33:9c:61:d1:1b:1a:ac:d7:30:9f:0c:1b:d8:82: 6f:09:53:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kQMMcIwP6fCeCAWwIjm2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjUxMjIwMjEwMTEyWhcNMjUxMjIxMjEwMTEyWjAzMTEwLwYDVQQD EygyODk0OTNiZGU3YzUyNmE4Y2FkNjdkMTFiZGIwZGRlMjViNDkyNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEPDn1FO7cH5t8IAMZWyq84/un6T B35Q5BHcsSytYEUSxezMi97i9Tsazm6/k6p9hm+8LVPboHidQZix0o+ahJPPir/r EuvC+4yrQRcjaq3Nwiq2EuZ+yqBFb8FoGbGJ+/45w46V74NNvde3Q/EvwJzZTToY WUxUkxiwg8W19YwPW0nQDUSB/HjF49c62BFCZwdZ1DetEK6j7fVr5UOTzrI8xeq6 IkMkASvF/Q7muYYZ3P47ttP5WIpTvJqnBCL5w+56jMd4TvEZBzmt3Ct3SrfH7xEd 9dAqNw+EL1kpVOHByDh3NY1lsQu61m+BsMhoe17t/zWQtqFc63zBgCNF9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiUk73nxSaoytZ9Eb2w3eJbSSQkMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKtp9TfZP JipIwpd4TMctYpyrCET0gqcTn++EYG/UeKVSm7bTVQXfoo3qyJ+7p2hHvO2/4WVa 6gSvEFICJE5NzKI6Gn1KDUWfB7L7k5M71YzV2sZNkPC8jw+p4Gbt0+UXJDxJ9ZJz C3qL6GJpYSpiL2V6EHkSoQpU9WNfegra4BdHgm69JXb9FtZOzZAA4mto5tkka7YJ VYC0UpaR1f/2ztYudFLzr8tz9HpLnWsIqOzAxv3y9/bupncU2pWMRmWxICVCsdXK SwT1s568Dtiqw530KejvwMPrNc00SLyATS6JhDcWDHU5fKqJ3TzjZTOcYdEbGqzX MJ8MG9iCbwlTHw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:36:08 2025 by rpki-client