This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json) Hash identifier: kMKvQul6rSGW5q6uwLti2B9eg32fsgt3Q/xgiisSRws= Subject key identifier: 5A:8D:25:A4:53:F0:30:6E:D2:53:72:27:9F:C6:DC:23:AE:F9:94:7E Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Certificate serial: 019B12038047EF64E2368A20AF6F6AB3CDBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft Manifest number: 47 Signing time: Fri 12 Dec 2025 10:02:57 +0000 Manifest this update: Fri 12 Dec 2025 10:02:57 +0000 Manifest next update: Sat 13 Dec 2025 10:02:57 +0000 Files and hashes: 1: 9TfeR_30HdflGM3xsr3vdtt0wxc.roa (hash: I0ktpU2S4wkVyCed3envFEYM53nS3HQyZq29EYOjDpg=) 2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: GtaEOki9bkaY7lHuAHbkYu/s31wlCruZ+1YlFSI30yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:03:80:47:ef:64:e2:36:8a:20:af:6f:6a:b3:cd:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Validity Not Before: Dec 12 10:02:57 2025 GMT Not After : Dec 13 10:02:57 2025 GMT Subject: CN=5a8d25a453f0306ed25372279fc6dc23aef9947e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f5:81:9c:78:ef:6d:bb:e3:79:c0:95:7a:0f: b3:10:ce:cb:14:58:79:3a:52:e4:e5:e8:2d:17:3f: 71:24:c3:2f:36:82:35:a1:8d:28:cf:04:7c:aa:b0: 1b:8b:9d:0a:78:66:92:f3:a9:18:c9:42:e1:0c:c0: 97:3b:27:ee:17:61:74:34:d1:0f:10:16:34:22:3d: 68:d7:65:79:43:9b:2d:a8:bd:b5:d8:6f:c4:e9:67: 83:59:0d:6c:db:b6:02:17:33:6c:59:a4:b7:9e:ba: 03:af:c4:ce:f8:d2:c4:9b:5c:0a:40:0f:de:27:f3: d0:68:dc:e7:b6:f1:4b:d3:ab:16:88:ee:ff:a9:f5: c1:96:af:e7:1c:8d:1e:a5:04:a1:32:32:36:11:9d: 30:4d:2f:02:14:52:13:31:2b:80:7c:a7:01:5c:27: 02:94:58:ab:a7:86:97:57:30:4b:64:9d:55:e6:ce: 3d:d4:b4:85:cf:af:06:a7:d4:3f:d9:5e:e5:3d:85: d8:2b:0d:d0:e1:67:88:73:ed:49:71:12:63:58:b3: 02:63:b1:83:de:83:8f:a2:78:84:6e:52:74:16:23: 77:a2:57:64:b6:dc:6b:87:76:7a:fd:15:88:4b:fa: 1c:e0:4e:4b:91:82:6a:7b:de:43:e8:d4:59:65:a8: ff:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8D:25:A4:53:F0:30:6E:D2:53:72:27:9F:C6:DC:23:AE:F9:94:7E X509v3 Authority Key Identifier: keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0a:72:fe:77:44:9f:de:15:4b:d8:7a:a8:13:aa:9a:fc:1e: 7b:bc:49:0b:d9:bf:2e:d5:93:11:0e:91:20:8e:c9:46:d3:33: 76:59:aa:e6:29:06:fa:cf:9b:b1:49:70:f3:f3:d8:8f:cd:c1: a2:4d:94:ce:4e:7a:d7:26:93:37:9b:f8:5d:fb:da:16:6b:49: aa:ee:94:f2:a6:e7:61:09:a6:0e:8c:b6:a3:1f:a8:a9:d1:e8: 88:94:54:2d:f8:5f:53:6b:ca:50:f1:8f:96:81:e3:34:09:e0: c3:26:54:c9:7f:e0:44:88:34:e6:91:6b:cc:bb:42:ce:61:a1: 1d:de:b2:e1:7e:ea:70:fe:ad:b0:83:94:b9:7c:1a:68:c0:92: 53:d4:e2:51:c4:ea:c2:dc:29:c0:43:fa:e4:68:5e:3e:1c:41: 5d:40:81:3d:81:b5:7b:c0:53:70:5b:6c:81:83:4a:76:ec:21: 3e:61:94:c0:2d:0e:df:dd:73:a9:15:5f:57:33:c4:ba:17:1a: b5:c5:31:a0:f3:dc:0e:c9:8c:b3:78:92:ed:5a:24:03:06:4e: ba:80:3a:0d:b5:83:17:f8:5c:47:7c:aa:f8:10:71:8a:97:3a: a6:02:31:e3:20:92:c3:df:b2:13:88:ae:12:70:fd:4f:22:f3: 0f:10:8b:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSA4BH72TiNoogr29qs82/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0 YjYyYjQwHhcNMjUxMjEyMTAwMjU3WhcNMjUxMjEzMTAwMjU3WjAzMTEwLwYDVQQD Eyg1YThkMjVhNDUzZjAzMDZlZDI1MzcyMjc5ZmM2ZGMyM2FlZjk5NDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/WBnHjvbbvjecCVeg+zEM7LFFh5 OlLk5egtFz9xJMMvNoI1oY0ozwR8qrAbi50KeGaS86kYyULhDMCXOyfuF2F0NNEP EBY0Ij1o12V5Q5stqL212G/E6WeDWQ1s27YCFzNsWaS3nroDr8TO+NLEm1wKQA/e J/PQaNzntvFL06sWiO7/qfXBlq/nHI0epQShMjI2EZ0wTS8CFFITMSuAfKcBXCcC lFirp4aXVzBLZJ1V5s491LSFz68Gp9Q/2V7lPYXYKw3Q4WeIc+1JcRJjWLMCY7GD 3oOPoniEblJ0FiN3oldkttxrh3Z6/RWIS/oc4E5LkYJqe95D6NRZZaj/fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqNJaRT8DBu0lNyJ5/G3COu+ZR+MB8GA1UdIwQY MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt NTYyNDk4YzY4YTc4LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4 LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgpy/ndE n94VS9h6qBOqmvwee7xJC9m/LtWTEQ6RII7JRtMzdlmq5ikG+s+bsUlw8/PYj83B ok2Uzk561yaTN5v4XfvaFmtJqu6U8qbnYQmmDoy2ox+oqdHoiJRULfhfU2vKUPGP loHjNAngwyZUyX/gRIg05pFrzLtCzmGhHd6y4X7qcP6tsIOUuXwaaMCSU9TiUcTq wtwpwEP65GhePhxBXUCBPYG1e8BTcFtsgYNKduwhPmGUwC0O391zqRVfVzPEuhca tcUxoPPcDsmMs3iS7VokAwZOuoA6DbWDF/hcR3yq+BBxipc6pgIx4yCSw9+yE4iu EnD9TyLzDxCLeQ== -----END CERTIFICATE-----Generated at Fri Dec 12 13:00:47 2025 by rpki-client