This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json) Hash identifier: QMwM6UNPxkQ3n/O1PYOx8Jd3j4b345I3prN1RYX5G+E= Subject key identifier: 44:D0:FF:6E:23:EC:35:65:32:7A:09:28:50:9A:85:D4:C4:F9:A1:D3 Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b Certificate serial: 019B292F0CEB4646EB98B4A8D19C806B7A65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft Manifest number: 0C35 Signing time: Tue 16 Dec 2025 22:01:47 +0000 Manifest this update: Tue 16 Dec 2025 22:01:47 +0000 Manifest next update: Wed 17 Dec 2025 22:01:47 +0000 Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: 1WZpO3ve7P34NDXV74YFxuSWw56QrNDz4sjxLY5t/LM=) 2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 22:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:0c:eb:46:46:eb:98:b4:a8:d1:9c:80:6b:7a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b Validity Not Before: Dec 16 22:01:47 2025 GMT Not After : Dec 17 22:01:47 2025 GMT Subject: CN=44d0ff6e23ec3565327a0928509a85d4c4f9a1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:bd:21:f8:08:17:fa:b9:40:03:11:82:a5: 45:be:3d:74:95:77:26:a7:88:2d:b1:ab:29:df:5b: aa:21:b0:3a:12:07:d8:57:26:49:a9:ea:74:21:23: bf:5d:a4:0a:cc:fe:a3:39:31:f1:15:c1:8f:0b:aa: 81:38:62:9f:b7:5f:5c:4b:7d:70:97:4b:fd:d8:c6: 92:3d:b7:e1:e3:e8:af:8a:a1:f7:c1:cb:a6:d6:32: a9:01:3b:2e:30:7c:d4:f0:bf:9f:a0:b6:14:33:0b: 60:50:3c:07:e1:c4:50:4e:0a:11:0f:08:5d:83:e6: 0e:37:a4:61:dd:10:aa:65:bd:0a:0b:2d:a7:6a:ab: 72:27:54:72:19:2b:69:b0:18:12:22:2b:0b:b3:86: 5d:85:cf:41:30:5b:a0:4e:9d:33:b6:1a:0a:7a:cc: 6d:64:e1:00:53:5a:7b:99:e8:cd:e3:fb:14:5d:f3: d2:37:d1:a4:35:a0:67:42:42:82:56:bc:96:7f:f2: bb:2e:fa:98:f5:52:eb:f8:46:e6:1d:19:6b:81:35: 77:c7:d4:46:5b:bd:fc:e1:6b:e8:25:f3:83:63:f2: 2c:e2:e0:51:50:30:f8:4f:44:39:18:ae:bc:d7:39: e5:46:dd:64:eb:31:7b:c1:28:fc:b3:1d:28:dc:2d: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D0:FF:6E:23:EC:35:65:32:7A:09:28:50:9A:85:D4:C4:F9:A1:D3 X509v3 Authority Key Identifier: keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:b5:57:aa:f1:01:4a:4a:0d:9b:0e:ea:44:43:7b:21:78:28: 56:3c:e7:82:fb:6f:7f:3b:d3:ac:b8:9a:84:84:ff:76:79:f7: a2:88:42:75:7c:74:9e:9c:a4:e9:73:2d:a3:d5:8d:6a:32:4e: e3:05:64:7e:bd:a0:cc:ef:b8:8c:2f:98:7c:25:ae:4a:11:d4: 18:de:91:96:90:53:74:2d:6d:91:da:24:52:b1:95:03:38:de: 6d:ad:77:d0:28:5c:d9:26:74:1a:f1:81:b4:c1:1c:e3:cc:11: ff:4c:3f:48:29:07:36:37:bd:b6:3d:0d:ab:b2:06:b3:b8:cc: 31:48:2e:f6:fb:a8:c7:99:b5:62:49:bd:66:7a:7f:54:d6:fd: 4a:3b:7e:07:f4:4c:a0:43:5f:ab:0b:89:6e:56:15:20:03:80: 2b:f5:0d:57:95:71:9f:e7:c9:b3:77:10:33:b6:0b:41:57:a1: 89:17:2d:74:50:49:66:5a:d0:0f:b0:93:55:ad:7a:51:29:b0: b8:09:8d:1e:5d:66:04:97:8c:9d:c1:ee:2d:6f:90:97:89:fd: 96:ed:a7:9e:dc:7c:f2:16:ec:4f:61:74:9e:34:01:9a:53:5e: e9:bf:72:d7:9b:52:03:ff:12:c2:3e:5d:de:c5:7b:15:f9:04: b0:04:f5:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLwzrRkbrmLSo0ZyAa3plMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz OTI3MWIwHhcNMjUxMjE2MjIwMTQ3WhcNMjUxMjE3MjIwMTQ3WjAzMTEwLwYDVQQD Eyg0NGQwZmY2ZTIzZWMzNTY1MzI3YTA5Mjg1MDlhODVkNGM0ZjlhMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnu9IfgIF/q5QAMRgqVFvj10lXcm p4gtsasp31uqIbA6EgfYVyZJqep0ISO/XaQKzP6jOTHxFcGPC6qBOGKft19cS31w l0v92MaSPbfh4+iviqH3wcum1jKpATsuMHzU8L+foLYUMwtgUDwH4cRQTgoRDwhd g+YON6Rh3RCqZb0KCy2naqtyJ1RyGStpsBgSIisLs4Zdhc9BMFugTp0zthoKesxt ZOEAU1p7mejN4/sUXfPSN9GkNaBnQkKCVryWf/K7LvqY9VLr+EbmHRlrgTV3x9RG W7384WvoJfODY/Is4uBRUDD4T0Q5GK681znlRt1k6zF7wSj8sx0o3C1upwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETQ/24j7DVlMnoJKFCahdTE+aHTMB8GA1UdIwQY MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4 LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLVXqvEB SkoNmw7qREN7IXgoVjzngvtvfzvTrLiahIT/dnn3oohCdXx0npyk6XMto9WNajJO 4wVkfr2gzO+4jC+YfCWuShHUGN6RlpBTdC1tkdokUrGVAzjeba130Chc2SZ0GvGB tMEc48wR/0w/SCkHNje9tj0Nq7IGs7jMMUgu9vuox5m1Ykm9Znp/VNb9Sjt+B/RM oENfqwuJblYVIAOAK/UNV5Vxn+fJs3cQM7YLQVehiRctdFBJZlrQD7CTVa16USmw uAmNHl1mBJeMncHuLW+Ql4n9lu2nntx88hbsT2F0njQBmlNe6b9y15tSA/8Swj5d 3sV7FfkEsAT1Yg== -----END CERTIFICATE-----Generated at Wed Dec 17 09:09:42 2025 by rpki-client