This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json) Hash identifier: IbLfAsEYpJmTbBrGh5FwELxUgOA6nWGwBy2Yxy9zf3E= Subject key identifier: 16:32:9E:48:F9:A8:22:27:76:78:C6:DC:53:86:45:57:F8:59:63:8E Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019B24E3F2ED8F97E75DA6CD1EB945F34848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft Manifest number: 07D8 Signing time: Tue 16 Dec 2025 02:01:17 +0000 Manifest this update: Tue 16 Dec 2025 02:01:17 +0000 Manifest next update: Wed 17 Dec 2025 02:01:17 +0000 Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: FT2mVGywrFUaSrLVkVU8kvoWmYCwRV2aCm2tWJu8YKY=) 2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=) 3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=) 4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=) 5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=) 6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=) 7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:f2:ed:8f:97:e7:5d:a6:cd:1e:b9:45:f3:48:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Dec 16 02:01:17 2025 GMT Not After : Dec 17 02:01:17 2025 GMT Subject: CN=16329e48f9a822277678c6dc53864557f859638e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:dc:5d:0e:04:d3:3c:14:57:bb:d5:4a:2d:06: 33:7c:22:ea:7c:e9:7c:41:a0:3c:c0:ab:b7:00:9c: 6a:c3:c0:5d:a0:f9:43:5d:dd:95:7d:2f:bf:12:9f: 37:cc:30:d0:d1:50:a4:25:9a:e2:53:9d:5c:34:7d: 66:b0:93:22:1e:de:90:f7:49:94:f8:8e:5d:94:a1: a2:0e:bd:97:6d:73:7a:31:f1:52:13:2b:fb:51:8f: b4:f6:de:21:d5:7c:36:cd:13:47:cc:d0:ee:59:a5: d8:e3:b7:de:8a:a7:97:8f:6e:2e:2c:d9:e0:1a:2c: 41:e3:f3:87:35:e8:72:f6:ec:e6:bb:0b:fc:33:fa: 7d:0e:62:39:86:7a:13:7c:20:b6:3d:d6:cc:c9:a7: d9:dd:6c:0c:42:8e:eb:b6:9b:5c:87:a2:81:aa:cf: 6b:b1:7a:8c:5c:41:dc:d0:76:77:2c:de:3c:76:ff: 4b:44:ae:0f:c7:69:bb:ec:1a:d5:92:8d:06:1e:c4: 1f:be:77:a6:ba:3e:5d:9a:11:90:23:d7:c1:2d:81: 14:f2:43:a3:d0:91:f8:f0:cc:59:93:25:4d:0f:20: 2b:1e:0c:53:9f:04:38:33:d4:82:d7:91:e4:1a:8b: af:02:04:27:44:41:79:c6:ff:41:02:21:39:f5:f3: 6b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:32:9E:48:F9:A8:22:27:76:78:C6:DC:53:86:45:57:F8:59:63:8E X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:98:0d:fa:06:45:f6:e9:31:43:79:49:20:fb:c9:da:02:b4: f1:c7:a8:cf:99:b8:2b:71:48:a1:ae:d0:f4:c9:c8:aa:ea:bd: 84:55:6d:48:dd:47:a2:ae:4f:ec:96:69:1b:c0:91:97:56:64: 6c:06:f1:fd:ce:33:a1:bf:80:bc:ff:36:85:d7:99:d0:e0:1a: 1d:05:d1:c7:a6:80:09:05:08:8b:c1:ff:4b:1a:03:ee:f9:f1: df:41:30:0b:01:7d:9c:28:18:3a:90:a3:91:47:22:8f:34:f2: 55:c3:89:89:9c:d5:19:89:8e:a9:92:0c:14:e4:58:1f:76:2a: 3f:2c:bd:36:9d:eb:25:91:33:2e:f6:0a:e2:c5:77:44:38:f4: c1:73:63:0c:ae:e5:4c:47:d7:0d:72:e2:39:0f:3a:6a:dc:6a: 03:a1:96:85:1d:72:9f:89:f8:24:15:5e:be:24:12:f7:8e:5c: 3a:3b:18:4d:65:22:c4:ab:4b:cc:be:a9:3f:69:29:38:3f:85: 83:b8:4c:03:a1:69:f5:70:72:62:84:89:3a:32:99:65:9c:cf: 2b:82:32:88:94:14:cd:e6:5d:2f:63:be:22:c3:08:a9:5d:85: af:5d:9c:e8:5f:7d:e2:59:31:0b:e8:ae:4f:6b:7e:67:63:ee: 9d:29:b3:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4/Ltj5fnXabNHrlF80hIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjUxMjE2MDIwMTE3WhcNMjUxMjE3MDIwMTE3WjAzMTEwLwYDVQQD EygxNjMyOWU0OGY5YTgyMjI3NzY3OGM2ZGM1Mzg2NDU1N2Y4NTk2MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxdDgTTPBRXu9VKLQYzfCLqfOl8 QaA8wKu3AJxqw8BdoPlDXd2VfS+/Ep83zDDQ0VCkJZriU51cNH1msJMiHt6Q90mU +I5dlKGiDr2XbXN6MfFSEyv7UY+09t4h1Xw2zRNHzNDuWaXY47feiqeXj24uLNng GixB4/OHNehy9uzmuwv8M/p9DmI5hnoTfCC2PdbMyafZ3WwMQo7rtptch6KBqs9r sXqMXEHc0HZ3LN48dv9LRK4Px2m77BrVko0GHsQfvnemuj5dmhGQI9fBLYEU8kOj 0JH48MxZkyVNDyArHgxTnwQ4M9SC15HkGouvAgQnREF5xv9BAiE59fNrDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYynkj5qCIndnjG3FOGRVf4WWOOMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJgN+gZF 9ukxQ3lJIPvJ2gK08ceoz5m4K3FIoa7Q9MnIquq9hFVtSN1Hoq5P7JZpG8CRl1Zk bAbx/c4zob+AvP82hdeZ0OAaHQXRx6aACQUIi8H/SxoD7vnx30EwCwF9nCgYOpCj kUcijzTyVcOJiZzVGYmOqZIMFORYH3YqPyy9Np3rJZEzLvYK4sV3RDj0wXNjDK7l TEfXDXLiOQ86atxqA6GWhR1yn4n4JBVeviQS945cOjsYTWUixKtLzL6pP2kpOD+F g7hMA6Fp9XByYoSJOjKZZZzPK4IyiJQUzeZdL2O+IsMIqV2Fr12c6F994lkxC+iu T2t+Z2PunSmzSQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:03:28 2025 by rpki-client