This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json) Hash identifier: qJikCanSVA1FdZLNQ95l//q1ggGkMpTOZ+zaNGtOQ9o= Subject key identifier: 85:61:5F:0D:61:B8:18:CA:E2:D1:E3:75:34:BA:A4:C9:33:1F:C9:66 Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Certificate serial: 019B22BE317ED044DEC5FE64FD4BAFCFF767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft Manifest number: 01A0 Signing time: Mon 15 Dec 2025 16:00:48 +0000 Manifest this update: Mon 15 Dec 2025 16:00:48 +0000 Manifest next update: Tue 16 Dec 2025 16:00:48 +0000 Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=) 2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: USKSuuiAeQ4QSJb/hcx99KPNrWGqqCvIiGfufHXh9YE=) 3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:31:7e:d0:44:de:c5:fe:64:fd:4b:af:cf:f7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Validity Not Before: Dec 15 16:00:48 2025 GMT Not After : Dec 16 16:00:48 2025 GMT Subject: CN=85615f0d61b818cae2d1e37534baa4c9331fc966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:47:68:8f:20:e6:28:44:ac:b4:cd:a6:cc: 94:e0:f1:d4:32:71:8b:e1:53:41:b9:15:5b:0f:d9: a5:21:e7:45:a3:40:fb:cb:ed:64:21:9e:34:6c:73: 2b:f1:80:df:4d:a7:d7:78:79:bd:cd:6e:cb:27:f9: 9b:2c:73:b2:38:4e:fd:f6:21:c3:3c:1f:4e:6f:22: 54:2e:89:92:6f:cc:6b:36:69:21:1a:4a:e3:d0:ee: 35:6f:ba:0b:ef:43:05:02:4b:f8:d4:ae:04:60:7f: eb:99:45:65:d0:4f:18:c6:da:42:5f:d9:cf:09:c8: 55:46:2d:76:ae:f8:73:b9:4f:36:5d:ef:43:6a:82: 5b:5f:3d:92:91:ed:75:4c:63:2c:99:d5:c0:e6:35: 6f:26:cd:76:e7:2b:a8:d8:5b:50:14:f2:8c:6b:4d: 0e:b1:05:1e:b2:65:e2:34:3e:23:4d:24:80:96:67: b8:26:c1:fd:de:a7:b7:c8:a3:91:bb:5a:38:cf:13: 69:d7:f1:1f:4b:1b:86:77:12:0d:31:41:a3:1e:8a: 5c:79:4d:c4:eb:2c:d7:e6:9f:97:79:9a:ae:d3:cd: c2:fe:a6:5f:b3:2a:8a:20:f5:ed:fd:30:30:9f:84: 40:21:22:d6:eb:b7:f6:3e:72:68:75:03:92:1f:c9: 12:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:61:5F:0D:61:B8:18:CA:E2:D1:E3:75:34:BA:A4:C9:33:1F:C9:66 X509v3 Authority Key Identifier: keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ce:2e:69:62:75:4a:19:af:d1:21:e5:62:c0:b5:aa:f0:cd: 8f:b2:25:bd:e7:65:ea:86:ca:0a:12:88:62:ec:b3:de:b5:fd: 61:2b:51:ce:45:4e:7f:17:9f:28:e4:36:89:87:3d:a6:63:79: d0:28:4a:8f:f4:cd:35:3c:49:f6:46:23:91:47:91:19:e2:7b: 2d:7e:00:eb:36:ae:d9:08:55:6e:d5:cd:62:1e:20:f7:55:ae: ef:85:99:b3:32:7d:ac:fa:bf:0b:10:57:60:0c:69:60:ac:05: 57:b3:42:42:4b:63:54:98:aa:40:4a:eb:0d:46:d9:b4:f3:72: e9:c9:f5:eb:a1:b0:2a:a5:f2:19:6a:2e:1c:1c:4a:f6:51:bb: da:e4:63:35:b6:82:3c:b0:6e:10:82:72:a0:6b:d5:4e:16:ba: 31:8f:a1:e8:8d:36:f8:4d:01:9c:b5:54:39:07:4b:27:f9:a8: 38:ca:15:e1:87:eb:4d:26:13:cd:55:d5:13:ff:12:95:00:0e: 23:0f:0a:ad:8a:48:b5:5e:3c:d0:62:41:44:fd:3f:36:af:00: ae:71:21:67:6c:ae:c2:06:05:ce:61:ea:eb:a0:f2:ca:13:2d: 5b:4a:22:e4:15:8b:74:cc:c8:93:08:ac:5d:36:bc:7f:a0:e1: 52:b6:0d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivjF+0ETexf5k/Uuvz/dnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi ZGIzYjkwHhcNMjUxMjE1MTYwMDQ4WhcNMjUxMjE2MTYwMDQ4WjAzMTEwLwYDVQQD Eyg4NTYxNWYwZDYxYjgxOGNhZTJkMWUzNzUzNGJhYTRjOTMzMWZjOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl85HaI8g5ihErLTNpsyU4PHUMnGL 4VNBuRVbD9mlIedFo0D7y+1kIZ40bHMr8YDfTafXeHm9zW7LJ/mbLHOyOE799iHD PB9ObyJULomSb8xrNmkhGkrj0O41b7oL70MFAkv41K4EYH/rmUVl0E8YxtpCX9nP CchVRi12rvhzuU82Xe9DaoJbXz2Ske11TGMsmdXA5jVvJs125yuo2FtQFPKMa00O sQUesmXiND4jTSSAlme4JsH93qe3yKORu1o4zxNp1/EfSxuGdxINMUGjHopceU3E 6yzX5p+XeZqu083C/qZfsyqKIPXt/TAwn4RAISLW67f2PnJodQOSH8kSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVhXw1huBjK4tHjdTS6pMkzH8lmMB8GA1UdIwQY MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM4uaWJ1 Shmv0SHlYsC1qvDNj7Ilvedl6obKChKIYuyz3rX9YStRzkVOfxefKOQ2iYc9pmN5 0ChKj/TNNTxJ9kYjkUeRGeJ7LX4A6zau2QhVbtXNYh4g91Wu74WZszJ9rPq/CxBX YAxpYKwFV7NCQktjVJiqQErrDUbZtPNy6cn166GwKqXyGWouHBxK9lG72uRjNbaC PLBuEIJyoGvVTha6MY+h6I02+E0BnLVUOQdLJ/moOMoV4YfrTSYTzVXVE/8SlQAO Iw8KrYpItV480GJBRP0/Nq8ArnEhZ2yuwgYFzmHq66DyyhMtW0oi5BWLdMzIkwis XTa8f6DhUrYNbA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:42:13 2025 by rpki-client