This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json) Hash identifier: MsaRfJeJii2zWQ3fi9LxL9xvSDgoNN6XOXGqRWkX7wo= Subject key identifier: D6:27:83:5E:C5:8A:08:61:23:FA:39:12:71:A7:36:82:D3:58:8F:05 Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce Certificate serial: 019B0E26DF50652DDC56326B3DCEE7B13B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft Manifest number: 105C Signing time: Thu 11 Dec 2025 16:03:07 +0000 Manifest this update: Thu 11 Dec 2025 16:03:07 +0000 Manifest next update: Fri 12 Dec 2025 16:03:07 +0000 Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: eZNtO75Li9CuZ4qIx5grnH+LvWOURCufucwJokPrUFY=) 2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=) 3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:df:50:65:2d:dc:56:32:6b:3d:ce:e7:b1:3b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce Validity Not Before: Dec 11 16:03:07 2025 GMT Not After : Dec 12 16:03:07 2025 GMT Subject: CN=d627835ec58a086123fa391271a73682d3588f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:f4:96:64:70:70:8c:62:7a:db:f9:37:b0: d6:c0:d5:51:88:a5:85:8f:a9:60:8d:60:2e:9f:6b: be:d4:04:11:8e:5f:44:31:77:41:e5:b5:4d:c5:24: f9:0e:9c:d3:9c:4f:9a:be:bc:b9:22:c9:06:b3:b0: 37:e5:4e:fd:5e:ef:1c:10:77:8d:69:ee:b9:7e:0c: f9:c6:1e:d7:e4:4c:69:b2:88:55:bc:4d:8a:72:f6: 35:f6:74:01:0a:7b:f2:97:9e:bc:e6:cc:d3:89:6d: 53:f3:7d:ea:92:c8:67:f2:c3:65:b4:a7:60:77:60: 29:6c:39:a3:44:87:1d:f6:aa:1f:31:81:11:a2:2d: 83:77:0f:ad:89:b1:31:25:28:e2:1a:ce:f6:6b:05: 69:54:a7:41:cf:a3:64:4f:c3:9c:9b:7a:85:af:bc: 96:12:29:45:8d:fd:4a:02:52:18:f7:aa:63:84:9f: f8:ea:d9:ad:fc:d6:78:ee:e6:a4:26:8a:ce:22:ca: 21:90:89:ff:0b:59:7a:12:10:d6:8c:7d:8e:2b:a3: 85:ce:36:5c:15:a9:21:c8:73:1e:4f:85:f5:45:00: a5:15:59:9d:69:98:41:3a:4c:9f:50:8f:75:00:25: 1e:a8:10:f1:f8:9c:09:9a:0c:16:2d:0a:e7:18:17: 92:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:83:5E:C5:8A:08:61:23:FA:39:12:71:A7:36:82:D3:58:8F:05 X509v3 Authority Key Identifier: keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:cf:91:a6:15:a9:bc:d3:9d:f7:25:0c:fe:18:67:ba:b6:a9: 46:f9:91:f1:76:ba:e8:29:95:4d:54:fa:90:25:4a:b0:33:e8: 8e:6f:67:dd:7e:9e:68:c2:25:38:e8:2f:4e:72:f1:54:1d:bb: 65:3a:6a:4c:d9:d4:75:a6:a0:e4:ce:68:33:8d:b2:9d:80:8c: 6d:01:b7:2a:39:dc:1a:ef:28:ce:26:49:fe:a5:89:68:1b:3d: 73:dd:6d:99:32:b7:ed:82:4b:86:90:5b:a2:84:74:b9:9d:bb: 8d:55:28:eb:cb:fc:ed:2a:2a:7b:b8:e1:0d:b3:dd:5e:23:66: 69:71:8f:7d:19:3b:15:67:59:91:0b:14:b1:9b:b9:51:8f:b3: 74:22:a7:03:94:cd:30:a2:b8:3c:61:c9:1e:ad:d4:ed:4b:70: 69:33:bb:b2:7b:b7:79:48:99:f6:c4:c6:a4:f6:f1:77:0d:31: 2e:72:c7:4c:ee:be:f7:ed:43:f2:7c:e6:e5:5f:d2:85:d8:66: 90:4f:db:98:64:39:ef:23:cf:35:82:71:01:24:63:7f:cb:55: 58:ba:16:4c:79:1f:ed:9d:c1:2f:54:af:27:2e:33:51:75:10: 66:7f:cc:e8:fc:43:12:6c:0b:92:8b:38:73:80:40:5c:e9:2b: b3:4f:2d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJt9QZS3cVjJrPc7nsTsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1 M2FiY2UwHhcNMjUxMjExMTYwMzA3WhcNMjUxMjEyMTYwMzA3WjAzMTEwLwYDVQQD EyhkNjI3ODM1ZWM1OGEwODYxMjNmYTM5MTI3MWE3MzY4MmQzNTg4ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB70lmRwcIxietv5N7DWwNVRiKWF j6lgjWAun2u+1AQRjl9EMXdB5bVNxST5DpzTnE+avry5IskGs7A35U79Xu8cEHeN ae65fgz5xh7X5ExpsohVvE2KcvY19nQBCnvyl5685szTiW1T833qkshn8sNltKdg d2ApbDmjRIcd9qofMYERoi2Ddw+tibExJSjiGs72awVpVKdBz6NkT8Ocm3qFr7yW EilFjf1KAlIY96pjhJ/46tmt/NZ47uakJorOIsohkIn/C1l6EhDWjH2OK6OFzjZc FakhyHMeT4X1RQClFVmdaZhBOkyfUI91ACUeqBDx+JwJmgwWLQrnGBeStwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYng17FighhI/o5EnGnNoLTWI8FMB8GA1UdIwQY MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt Zjk1NDAwMmY1MjQ1LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1 LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM+RphWp vNOd9yUM/hhnurapRvmR8Xa66CmVTVT6kCVKsDPojm9n3X6eaMIlOOgvTnLxVB27 ZTpqTNnUdaag5M5oM42ynYCMbQG3KjncGu8oziZJ/qWJaBs9c91tmTK37YJLhpBb ooR0uZ27jVUo68v87Soqe7jhDbPdXiNmaXGPfRk7FWdZkQsUsZu5UY+zdCKnA5TN MKK4PGHJHq3U7UtwaTO7snu3eUiZ9sTGpPbxdw0xLnLHTO6+9+1D8nzm5V/Shdhm kE/bmGQ57yPPNYJxASRjf8tVWLoWTHkf7Z3BL1SvJy4zUXUQZn/M6PxDEmwLkos4 c4BAXOkrs08tnA== -----END CERTIFICATE-----Generated at Thu Dec 11 18:26:26 2025 by rpki-client