This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft File: FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft (raw, json) Hash identifier: YgMm+YsXVQcuo9RPmFpKhsN1b7/cyccAO5zAksRFcBE= Subject key identifier: B9:83:45:07:06:D0:34:F7:DF:2C:4C:99:13:C9:C9:7C:B8:22:54:3E Authority key identifier: 14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 Certificate issuer: /CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Certificate serial: 019B59E3D46FDBAE3EDCD00235FCCFFCAA6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft Manifest number: 05CC Signing time: Fri 26 Dec 2025 09:01:01 +0000 Manifest this update: Fri 26 Dec 2025 09:01:01 +0000 Manifest next update: Sat 27 Dec 2025 09:01:01 +0000 Files and hashes: 1: 5wZ-uBzQ29mM_QfzDccMNqqdNYo.roa (hash: 2S+nSZvpWE37VjSR3BnNzUoM6C8tVAdRbE/bGKNExEc=) 2: FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl (hash: ma+/bDkV1+lFuyYpFBXSDQC7BwIWGSRrLRQLZOtmwFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d4:6f:db:ae:3e:dc:d0:02:35:fc:cf:fc:aa:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=149fa6d4fe0ed0e012eb3bcffdf2bf9e1f747972 Validity Not Before: Dec 26 09:01:01 2025 GMT Not After : Dec 27 09:01:01 2025 GMT Subject: CN=b983450706d034f7df2c4c9913c9c97cb822543e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d0:4f:c1:f0:5d:3a:c7:f4:0e:9e:32:0a:11: 22:89:21:45:fb:27:a0:91:c6:a5:81:96:4e:a5:ae: 15:8b:76:d3:a9:82:7d:96:06:48:ea:00:2a:c2:06: e6:72:95:de:a9:f4:9a:3c:c5:de:39:2e:7e:bc:a5: 97:c3:2f:64:cd:ce:98:94:e2:96:a6:99:1b:94:1c: 09:a3:6a:a9:cb:b1:37:6a:70:d7:f9:9a:48:d3:00: ce:e1:d5:91:c1:77:21:0a:91:30:47:e9:47:cb:d6: 19:84:65:d7:51:7d:1a:3f:08:4d:44:9b:b7:a8:28: 45:ce:22:88:8c:41:19:78:9d:bd:0e:ff:0a:fb:c4: 84:e6:96:91:e9:29:21:15:2d:df:a4:b1:1b:dc:69: ac:84:a6:15:95:31:91:a4:ec:f3:05:65:14:24:82: 68:00:fa:f8:6f:3e:ce:b2:57:c6:e7:ab:dd:1b:90: eb:a9:11:93:86:3f:70:fe:7f:18:0c:8e:ed:21:45: d8:ab:90:d2:eb:91:f0:9b:03:ab:1d:f6:e3:41:0c: e3:f4:b0:75:dc:6a:7c:55:cd:40:c0:61:bc:f8:4b: 35:54:64:29:67:8f:b9:6b:61:2d:8c:d1:92:cc:50: 50:e2:23:ca:af:52:82:54:1b:db:ce:b9:3f:6a:36: 95:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:83:45:07:06:D0:34:F7:DF:2C:4C:99:13:C9:C9:7C:B8:22:54:3E X509v3 Authority Key Identifier: keyid:14:9F:A6:D4:FE:0E:D0:E0:12:EB:3B:CF:FD:F2:BF:9E:1F:74:79:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ-m1P4O0OAS6zvP_fK_nh90eXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/56856a-be88-4a7d-9e01-737840e27ea6/1/FJ-m1P4O0OAS6zvP_fK_nh90eXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:81:cb:7a:70:1e:ef:2b:34:54:66:9a:39:37:3d:8e:1f:33: 98:da:b5:d1:87:df:2e:f9:d9:5f:26:13:1b:e7:c1:82:80:a0: 3b:ca:d2:ca:aa:d7:d3:56:83:7b:5d:39:30:39:95:ce:89:73: 9f:b0:5f:15:e7:73:65:a8:62:41:d5:0c:2d:c3:4f:fd:2b:09: 60:50:1c:5e:a4:d5:4a:4a:0a:7f:d6:6a:9d:74:38:09:ba:d0: 57:d4:58:6e:0c:58:4e:19:53:ba:77:55:b1:45:61:15:ec:50: a9:b6:1a:3f:81:fa:0d:2d:a2:9e:73:bd:22:8a:49:c8:90:2c: b9:b1:ce:12:16:cf:8b:b5:cc:b8:ae:f9:62:82:30:ba:fa:65: f1:80:4a:f5:6d:51:2a:78:db:33:4f:b9:90:df:09:c3:43:78: c8:c6:a9:05:6c:ac:89:56:fd:ac:07:53:6f:e0:d7:39:bc:45: e8:ed:c5:73:d9:41:42:09:0d:7e:f0:e7:28:82:fa:81:37:85: 88:e1:10:72:63:24:55:2b:bf:f0:cc:8d:19:e0:7c:f8:7d:6b: 22:fc:b6:be:3e:e1:ce:b9:c4:12:d3:1b:4b:db:4b:25:d4:6d: 52:d8:c8:60:a7:9b:ba:a7:6d:a9:85:23:af:32:3f:a4:74:8a: 3a:82:9f:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49Rv264+3NACNfzP/KptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OWZhNmQ0ZmUwZWQwZTAxMmViM2JjZmZkZjJiZjllMWY3 NDc5NzIwHhcNMjUxMjI2MDkwMTAxWhcNMjUxMjI3MDkwMTAxWjAzMTEwLwYDVQQD EyhiOTgzNDUwNzA2ZDAzNGY3ZGYyYzRjOTkxM2M5Yzk3Y2I4MjI1NDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNBPwfBdOsf0Dp4yChEiiSFF+yeg kcalgZZOpa4Vi3bTqYJ9lgZI6gAqwgbmcpXeqfSaPMXeOS5+vKWXwy9kzc6YlOKW ppkblBwJo2qpy7E3anDX+ZpI0wDO4dWRwXchCpEwR+lHy9YZhGXXUX0aPwhNRJu3 qChFziKIjEEZeJ29Dv8K+8SE5paR6SkhFS3fpLEb3GmshKYVlTGRpOzzBWUUJIJo APr4bz7OslfG56vdG5DrqRGThj9w/n8YDI7tIUXYq5DS65HwmwOrHfbjQQzj9LB1 3Gp8Vc1AwGG8+Es1VGQpZ4+5a2EtjNGSzFBQ4iPKr1KCVBvbzrk/ajaVzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmDRQcG0DT33yxMmRPJyXy4IlQ+MB8GA1UdIwQY MBaAFBSfptT+DtDgEus7z/3yv54fdHlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEt NzM3ODQwZTI3ZWE2LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS81Njg1NmEtYmU4OC00YTdkLTllMDEtNzM3ODQwZTI3ZWE2 LzEvRkotbTFQNE8wT0FTNnp2UF9mS19uaDkwZVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIHLenAe 7ys0VGaaOTc9jh8zmNq10YffLvnZXyYTG+fBgoCgO8rSyqrX01aDe105MDmVzolz n7BfFedzZahiQdUMLcNP/SsJYFAcXqTVSkoKf9ZqnXQ4CbrQV9RYbgxYThlTundV sUVhFexQqbYaP4H6DS2innO9IopJyJAsubHOEhbPi7XMuK75YoIwuvpl8YBK9W1R KnjbM0+5kN8Jw0N4yMapBWysiVb9rAdTb+DXObxF6O3Fc9lBQgkNfvDnKIL6gTeF iOEQcmMkVSu/8MyNGeB8+H1rIvy2vj7hzrnEEtMbS9tLJdRtUtjIYKebuqdtqYUj rzI/pHSKOoKf8w== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client