This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: itmj4BF+9cJC0fy2YctbtPkX6PCoX1xPV/rSEJyNsU0= Subject key identifier: F4:E2:8B:28:F4:77:69:3A:40:3B:10:97:01:1B:1A:71:8B:E3:23:02 Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019ABAAC42F93F9A0AE7A9113D5A1449363E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 08C8 Signing time: Tue 25 Nov 2025 11:00:42 +0000 Manifest this update: Tue 25 Nov 2025 11:00:42 +0000 Manifest next update: Wed 26 Nov 2025 11:00:42 +0000 Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: 4Fr1A5dRe1ZMhdxNrc5OBspX2zTxxpNJCGFZp8XZ3e4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:ac:42:f9:3f:9a:0a:e7:a9:11:3d:5a:14:49:36:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Nov 25 11:00:42 2025 GMT Not After : Nov 26 11:00:42 2025 GMT Subject: CN=f4e28b28f477693a403b1097011b1a718be32302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1d:35:56:49:91:16:64:e2:7b:89:83:56:e2: 5f:20:c4:0f:60:a2:cc:73:74:c7:38:07:b7:6c:c2: ad:a3:b5:c9:a4:3e:c4:8c:19:86:9d:2e:50:e1:5a: d5:ff:ca:1a:ec:c3:8e:0c:55:f2:66:34:20:72:ee: de:c6:e9:91:b8:4c:63:a6:9c:50:5e:76:79:78:02: bf:d1:98:8b:bf:15:31:fe:a7:c3:0a:74:f1:ea:39: 36:91:9f:a4:cc:42:45:70:2f:57:f6:a7:15:2b:a2: 5c:c3:de:69:9f:e4:4b:a4:22:d4:80:66:77:f0:fc: b4:15:17:3c:72:8c:53:58:01:9b:b1:bb:d3:a7:35: 72:7f:43:da:4a:1a:a5:a7:fe:c9:c0:7b:14:d8:e7: e9:d8:26:67:d5:a1:3a:d6:77:73:ec:8e:08:6f:68: cf:9a:d2:e1:46:7b:5c:fb:d5:3d:67:1a:ac:d0:18: 3f:d6:ee:b2:a2:2e:c9:06:5b:be:f3:a4:b0:1f:3e: e8:91:21:cc:f2:c7:23:a7:11:e8:c4:3a:1d:ef:be: 2c:24:df:d1:d9:84:9b:f6:7c:6c:bf:c6:de:17:fa: 19:bd:70:be:9a:7a:59:a7:f4:41:6d:ab:34:45:92: a1:75:26:33:04:51:b2:04:12:f2:40:e0:6e:99:81: a3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:E2:8B:28:F4:77:69:3A:40:3B:10:97:01:1B:1A:71:8B:E3:23:02 X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c1:65:40:16:11:c3:7b:c0:f8:bd:77:b3:22:d1:51:a9:b4: fb:9e:9f:fe:28:82:ee:52:6e:63:b3:17:49:2c:62:89:72:b9: d4:b3:13:8f:6d:c3:94:52:bd:62:ca:db:22:1d:f7:19:02:33: 92:c5:c1:0a:94:24:8b:f9:5f:c2:d2:0b:69:21:e6:f1:45:99: 75:a8:f5:85:3f:5c:0e:d4:0c:13:43:b3:60:6e:3e:08:16:44: 24:91:44:9a:34:42:c4:89:1b:c0:fe:a2:ab:28:65:fc:a2:69: 83:ca:a2:22:6a:83:86:6e:2c:f9:05:d6:07:a5:f7:80:a7:b1: dd:f5:58:ca:25:15:a1:d4:a0:7b:28:13:50:d0:6e:a6:02:6d: 71:75:74:f8:1b:eb:80:d2:55:b8:32:dc:2c:54:a1:b6:3c:92: a2:c1:f3:66:ab:03:c2:af:9e:b8:91:d9:82:61:25:63:f1:2a: 3f:0f:90:7c:00:09:4c:90:18:79:eb:6f:a9:a3:03:e6:09:98: 2a:ac:46:37:16:7b:82:11:0f:86:56:e6:bf:8e:59:5e:ef:34: f6:b3:14:62:b2:96:7f:cc:d2:5d:47:8d:6e:c5:82:78:a3:c6: 2b:20:e9:ec:e2:bf:a9:40:c8:34:fc:64:5e:9e:2b:58:53:77: cb:4a:63:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6rEL5P5oK56kRPVoUSTY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjUxMTI1MTEwMDQyWhcNMjUxMTI2MTEwMDQyWjAzMTEwLwYDVQQD EyhmNGUyOGIyOGY0Nzc2OTNhNDAzYjEwOTcwMTFiMWE3MThiZTMyMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR01VkmRFmTie4mDVuJfIMQPYKLM c3THOAe3bMKto7XJpD7EjBmGnS5Q4VrV/8oa7MOODFXyZjQgcu7exumRuExjppxQ XnZ5eAK/0ZiLvxUx/qfDCnTx6jk2kZ+kzEJFcC9X9qcVK6Jcw95pn+RLpCLUgGZ3 8Py0FRc8coxTWAGbsbvTpzVyf0PaShqlp/7JwHsU2Ofp2CZn1aE61ndz7I4Ib2jP mtLhRntc+9U9Zxqs0Bg/1u6yoi7JBlu+86SwHz7okSHM8scjpxHoxDod774sJN/R 2YSb9nxsv8beF/oZvXC+mnpZp/RBbas0RZKhdSYzBFGyBBLyQOBumYGjbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTiiyj0d2k6QDsQlwEbGnGL4yMCMB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8FlQBYR w3vA+L13syLRUam0+56f/iiC7lJuY7MXSSxiiXK51LMTj23DlFK9YsrbIh33GQIz ksXBCpQki/lfwtILaSHm8UWZdaj1hT9cDtQME0OzYG4+CBZEJJFEmjRCxIkbwP6i qyhl/KJpg8qiImqDhm4s+QXWB6X3gKex3fVYyiUVodSgeygTUNBupgJtcXV0+Bvr gNJVuDLcLFShtjySosHzZqsDwq+euJHZgmElY/EqPw+QfAAJTJAYeetvqaMD5gmY KqxGNxZ7ghEPhlbmv45ZXu809rMUYrKWf8zSXUeNbsWCeKPGKyDp7OK/qUDINPxk Xp4rWFN3y0pjvQ== -----END CERTIFICATE-----Generated at Tue Nov 25 14:33:14 2025 by rpki-client