This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json) Hash identifier: RcvG5+OnEYtR8C+TLzLHOpGgdse6QOCtqDkdrT7SHCA= Subject key identifier: AC:1F:D0:51:96:7C:83:3D:05:ED:88:E4:D2:DB:F8:51:8E:2C:EF:96 Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Certificate serial: 019B0DB716847D10AAD9A12DD00814851C83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 14:01:01 +0000 Manifest this update: Thu 11 Dec 2025 14:01:01 +0000 Manifest next update: Fri 12 Dec 2025 14:01:01 +0000 Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=) 2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: coUqQcdd+A3rjyQQDWDaQOXzhicNedr0SraNBxETIKA=) 3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:16:84:7d:10:aa:d9:a1:2d:d0:08:14:85:1c:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Validity Not Before: Dec 11 14:01:01 2025 GMT Not After : Dec 12 14:01:01 2025 GMT Subject: CN=ac1fd051967c833d05ed88e4d2dbf8518e2cef96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c4:ab:8a:94:f1:7f:3e:d1:a4:2d:62:a4:f2: 17:d4:6a:2b:8d:22:93:37:22:fc:f2:63:f9:e8:17: 54:3d:58:a6:43:93:5b:ae:47:c6:fc:b4:9b:c5:82: d4:fc:8b:db:85:4b:41:e4:27:b6:bf:56:c6:0f:6f: c2:8e:60:05:05:9b:15:60:31:51:b9:95:ec:3a:5c: 3f:e8:d3:44:a7:41:01:7c:06:b4:ae:de:ca:fe:1d: c6:ea:ae:cd:b7:31:54:82:84:3c:e7:f1:cb:43:a9: e0:0b:a9:a3:20:c7:db:4a:75:e5:f1:9e:b4:c3:50: f5:11:c9:e7:80:5a:22:d9:96:8b:32:38:cf:ee:7d: d3:9e:b8:02:92:1a:08:fe:75:25:c2:e4:dd:63:50: 84:48:4e:72:45:8c:51:75:79:9a:01:a8:ba:d7:2c: 77:54:cb:00:db:4e:d7:b5:0a:6c:dd:e2:2c:e5:2c: 6e:c0:fd:18:28:12:82:07:ec:32:bf:d2:a3:94:5d: 1c:3a:5a:63:53:06:70:d7:89:ec:63:3b:51:fb:90: 82:2a:46:8e:f8:6d:52:cf:e5:69:f5:fc:43:53:af: b3:d5:01:0f:31:48:48:c7:c9:2e:18:4a:e7:b6:32: 87:f6:22:66:cf:a2:df:a8:49:b8:64:14:d3:ea:c1: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1F:D0:51:96:7C:83:3D:05:ED:88:E4:D2:DB:F8:51:8E:2C:EF:96 X509v3 Authority Key Identifier: keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:7f:1d:2f:4e:19:e5:ae:96:26:59:17:a0:0d:10:d9:a5:3f: cf:66:7f:05:04:08:c1:3a:7f:d6:38:5e:9e:12:01:cb:c6:f7: 1b:48:8a:ca:18:2f:3b:fb:01:85:14:4c:65:5e:2c:ae:14:56: ed:38:cb:e2:d4:3f:6c:0e:5a:ba:54:9f:19:42:05:7b:a7:11: ba:fe:cc:98:05:97:b4:9c:56:e6:56:9c:fe:c9:b4:6c:45:ab: 80:c3:c5:9e:91:97:e1:f9:c4:6a:ab:e5:97:8f:b5:83:28:cf: fa:23:26:0d:8d:f5:ed:3f:b4:9b:19:17:f8:72:5c:bb:5f:ac: 1e:51:17:fc:19:9c:b1:8f:bd:82:f2:16:92:47:ae:46:56:2b: 25:e3:d7:96:54:64:d8:0d:2b:10:0f:3f:24:14:f2:90:02:fe: c9:ba:97:44:79:f7:77:77:1f:b3:21:8f:3a:81:64:b7:49:8c: d7:8a:68:f0:dd:8c:13:f1:e4:e7:e8:29:92:f7:a1:b1:b3:85: 73:13:cd:76:86:f3:08:cd:4c:3a:55:99:00:99:35:83:2e:04: 5e:aa:4f:f5:24:52:e5:06:92:6f:c8:58:62:13:49:6b:54:60: 93:96:4d:a0:7d:74:f1:60:72:38:2d:ba:26:74:88:49:af:ba: 1c:5a:01:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtxaEfRCq2aEt0AgUhRyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw ZmUwMDkwHhcNMjUxMjExMTQwMTAxWhcNMjUxMjEyMTQwMTAxWjAzMTEwLwYDVQQD EyhhYzFmZDA1MTk2N2M4MzNkMDVlZDg4ZTRkMmRiZjg1MThlMmNlZjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8SripTxfz7RpC1ipPIX1GorjSKT NyL88mP56BdUPVimQ5NbrkfG/LSbxYLU/IvbhUtB5Ce2v1bGD2/CjmAFBZsVYDFR uZXsOlw/6NNEp0EBfAa0rt7K/h3G6q7NtzFUgoQ85/HLQ6ngC6mjIMfbSnXl8Z60 w1D1EcnngFoi2ZaLMjjP7n3TnrgCkhoI/nUlwuTdY1CESE5yRYxRdXmaAai61yx3 VMsA207XtQps3eIs5SxuwP0YKBKCB+wyv9KjlF0cOlpjUwZw14nsYztR+5CCKkaO +G1Sz+Vp9fxDU6+z1QEPMUhIx8kuGErntjKH9iJmz6LfqEm4ZBTT6sH+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwf0FGWfIM9Be2I5NLb+FGOLO+WMB8GA1UdIwQY MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3 LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYn8dL04Z 5a6WJlkXoA0Q2aU/z2Z/BQQIwTp/1jhenhIBy8b3G0iKyhgvO/sBhRRMZV4srhRW 7TjL4tQ/bA5aulSfGUIFe6cRuv7MmAWXtJxW5lac/sm0bEWrgMPFnpGX4fnEaqvl l4+1gyjP+iMmDY317T+0mxkX+HJcu1+sHlEX/BmcsY+9gvIWkkeuRlYrJePXllRk 2A0rEA8/JBTykAL+ybqXRHn3d3cfsyGPOoFkt0mM14po8N2ME/Hk5+gpkvehsbOF cxPNdobzCM1MOlWZAJk1gy4EXqpP9SRS5QaSb8hYYhNJa1Rgk5ZNoH108WByOC26 JnSISa+6HFoBzg== -----END CERTIFICATE-----Generated at Thu Dec 11 21:24:17 2025 by rpki-client