This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json) Hash identifier: gJQpnJ95E4mQYYmSORuopi++2Qw06zLXCMEChKjHoYI= Subject key identifier: 0A:40:4E:F7:A7:BD:BC:3D:3B:98:3E:5E:4F:8D:85:65:7B:8B:EF:92 Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Certificate serial: 019B194DCFDBBBCF5EDE2534BE4CF38649FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft Manifest number: 1779 Signing time: Sat 13 Dec 2025 20:01:28 +0000 Manifest this update: Sat 13 Dec 2025 20:01:28 +0000 Manifest next update: Sun 14 Dec 2025 20:01:28 +0000 Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=) 2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: cagnz4aOSFZFeSOp+wqo3/3wXLQjEPiVDWVW/w9eEAw=) 3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:cf:db:bb:cf:5e:de:25:34:be:4c:f3:86:49:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Validity Not Before: Dec 13 20:01:28 2025 GMT Not After : Dec 14 20:01:28 2025 GMT Subject: CN=0a404ef7a7bdbc3d3b983e5e4f8d85657b8bef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:46:b9:bc:90:d0:c9:66:c8:d3:80:80:b8: 74:64:11:b1:3b:ab:88:e7:ec:e8:73:df:93:e4:bf: 4d:dd:78:c7:ef:05:d0:a2:70:c8:ce:75:68:a8:19: 44:2c:ab:a1:97:7e:c6:fb:85:b9:5d:4f:3a:ad:51: 6f:a0:ea:86:d9:99:ab:c7:9e:16:f2:2f:4a:e6:c4: 07:af:d8:9f:48:b3:ae:a1:bd:8a:79:cc:85:06:20: 61:76:a1:b1:3a:46:e2:8e:97:f3:6c:fc:07:89:18: 38:dd:0a:30:3e:d2:01:25:ee:de:4b:f0:24:be:54: 2d:1d:d9:8d:1a:0d:b8:ce:d6:50:b7:8d:0a:5b:e8: 85:01:9d:67:8a:58:07:a5:df:66:db:81:c3:6a:bd: dd:8f:31:57:7e:a8:86:fe:b8:0d:af:9c:c0:37:60: 3d:ce:d9:41:3b:45:73:87:41:78:fd:27:0a:9c:f0: 15:53:e5:67:45:72:a5:a8:bc:83:90:ff:ee:e7:4f: e2:08:cc:da:7e:f1:4f:e0:95:77:47:93:fb:e5:a0: 21:28:93:df:3c:f8:34:14:df:94:ac:42:d1:ff:78: 6a:7c:96:d3:40:ef:5e:b0:60:88:1b:dc:0a:b2:ae: 80:31:2d:7b:b1:22:e2:1c:0a:87:cc:73:cb:e5:ef: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:40:4E:F7:A7:BD:BC:3D:3B:98:3E:5E:4F:8D:85:65:7B:8B:EF:92 X509v3 Authority Key Identifier: keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:90:d4:13:34:d7:0e:20:ac:42:8e:cc:9e:5c:cb:dd:f6:a3: 3c:20:18:50:73:c3:2f:66:41:a7:1d:78:36:66:7e:36:27:65: 0e:e4:29:54:e4:96:59:e0:4a:53:ee:3d:41:c2:f8:b9:e6:08: d8:25:be:54:be:83:70:c8:91:0a:7b:7c:c9:59:b0:6e:53:70: c2:cb:3d:c3:3b:86:b8:0b:81:a4:6e:d5:45:5d:8b:90:53:ea: 0c:bc:72:6b:9b:f5:22:c4:29:36:93:4d:e1:5e:5b:40:b6:5d: 42:f3:04:f8:49:b7:74:fd:0b:72:1b:32:5d:ee:6b:15:10:db: 8a:34:b2:76:6e:0f:ae:0c:cd:6e:49:b0:5c:a0:81:f1:d8:bb: 57:4e:fa:1e:e7:78:8f:64:13:40:f8:cc:ce:2e:44:91:e1:3e: a9:e6:6f:a9:53:0e:5a:7a:b5:cb:65:f1:18:73:dc:86:94:29: 6d:16:30:9e:e5:28:77:52:e7:d6:a0:02:58:53:f6:cf:68:c0: 96:27:f6:0d:2a:87:33:ab:88:c0:01:25:23:ef:f9:c5:b0:66: 05:5e:1b:d8:d9:7e:bc:bc:2a:27:b0:cf:f3:ed:8c:41:ba:e1: fc:2b:b5:67:f1:51:da:ba:e8:8b:1f:a3:a9:1c:e7:23:56:bc: 7c:ce:e9:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTc/bu89e3iU0vkzzhkn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw ZmUwMDkwHhcNMjUxMjEzMjAwMTI4WhcNMjUxMjE0MjAwMTI4WjAzMTEwLwYDVQQD EygwYTQwNGVmN2E3YmRiYzNkM2I5ODNlNWU0ZjhkODU2NTdiOGJlZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/dGubyQ0MlmyNOAgLh0ZBGxO6uI 5+zoc9+T5L9N3XjH7wXQonDIznVoqBlELKuhl37G+4W5XU86rVFvoOqG2Zmrx54W 8i9K5sQHr9ifSLOuob2KecyFBiBhdqGxOkbijpfzbPwHiRg43QowPtIBJe7eS/Ak vlQtHdmNGg24ztZQt40KW+iFAZ1nilgHpd9m24HDar3djzFXfqiG/rgNr5zAN2A9 ztlBO0Vzh0F4/ScKnPAVU+VnRXKlqLyDkP/u50/iCMzafvFP4JV3R5P75aAhKJPf PPg0FN+UrELR/3hqfJbTQO9esGCIG9wKsq6AMS17sSLiHAqHzHPL5e85OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApATvenvbw9O5g+Xk+NhWV7i++SMB8GA1UdIwQY MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3 LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpDUEzTX DiCsQo7MnlzL3fajPCAYUHPDL2ZBpx14NmZ+NidlDuQpVOSWWeBKU+49QcL4ueYI 2CW+VL6DcMiRCnt8yVmwblNwwss9wzuGuAuBpG7VRV2LkFPqDLxya5v1IsQpNpNN 4V5bQLZdQvME+Em3dP0LchsyXe5rFRDbijSydm4PrgzNbkmwXKCB8di7V076Hud4 j2QTQPjMzi5EkeE+qeZvqVMOWnq1y2XxGHPchpQpbRYwnuUod1Ln1qACWFP2z2jA lif2DSqHM6uIwAElI+/5xbBmBV4b2Nl+vLwqJ7DP8+2MQbrh/Cu1Z/FR2rroix+j qRznI1a8fM7psA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:29 2025 by rpki-client