This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft File: FpedN9oBar0TJ5JwulXWs8KWBXg.mft (raw, json) Hash identifier: yJE8OcVFDJrq+Ca8ZLRfMs6GsYUHW7QssXMsThxs8vk= Subject key identifier: D4:B0:C6:D0:95:52:51:67:B2:9E:8C:3B:A7:32:BC:DB:3D:49:7D:96 Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78 Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578 Certificate serial: 019B0E269AA5641FA588D92F7ADC576AB66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft Manifest number: 164B Signing time: Thu 11 Dec 2025 16:02:49 +0000 Manifest this update: Thu 11 Dec 2025 16:02:49 +0000 Manifest next update: Fri 12 Dec 2025 16:02:49 +0000 Files and hashes: 1: FpedN9oBar0TJ5JwulXWs8KWBXg.crl (hash: zrW3Tbi5/4cuNbPyclZxbVxq4WTQUp92I9tEV12OQ0s=) 2: PPUYZlg6H0XwL9T7p9j25_C1QJ0.roa (hash: ocscl0Gbeg5aCVZzJomKYL7Dzdpg0U688ymNmvZ0gWI=) 3: b62zrr5wzYN2MOAEsHfWSMG7FHQ.roa (hash: QoQnJbFutWiN0bVjBSQujyBlpWiG4wn++jIZ23iyHu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:9a:a5:64:1f:a5:88:d9:2f:7a:dc:57:6a:b6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578 Validity Not Before: Dec 11 16:02:49 2025 GMT Not After : Dec 12 16:02:49 2025 GMT Subject: CN=d4b0c6d095525167b29e8c3ba732bcdb3d497d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:0f:06:52:99:f5:1a:29:f3:05:5d:21:b3: b2:d0:a2:77:cd:2f:32:3b:1a:a6:45:20:dc:22:34: 39:d3:a4:bf:f8:f8:29:8f:d8:7a:74:c1:80:7b:98: f4:6e:20:c5:58:06:8d:b5:ec:39:58:08:92:4b:87: a5:f2:5d:dd:72:30:94:ed:ed:f2:f3:b0:38:e3:4a: 10:83:10:f5:0d:d3:50:7c:e1:46:e2:48:a0:dc:34: f6:9d:9b:72:06:68:04:4e:29:55:1d:af:ba:fc:ca: 3e:35:3e:58:07:53:76:de:c0:2d:70:9a:ff:41:20: c8:b3:99:96:ac:4d:52:95:9f:bc:2b:61:8c:60:ff: 0a:d9:24:03:42:6a:6f:17:a6:fc:7a:06:5b:34:0d: 91:75:f6:97:a2:59:ff:67:4c:cf:33:6e:fa:d1:5a: 58:e9:9a:b3:09:d3:62:1b:87:c2:d8:7d:1f:50:00: 12:54:65:f4:05:d2:8e:52:9b:e8:df:66:1d:4a:16: 55:96:f6:5e:df:b6:61:97:02:d3:fe:37:88:84:78: 04:c3:28:a8:76:14:2b:dd:49:ea:fa:12:6f:42:17: 7d:65:75:2a:ca:8e:11:2f:ed:0a:46:d0:fc:c7:b0: 62:b9:87:65:93:ab:19:bc:df:60:6d:ec:3e:2a:19: 4d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B0:C6:D0:95:52:51:67:B2:9E:8C:3B:A7:32:BC:DB:3D:49:7D:96 X509v3 Authority Key Identifier: keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:0d:4a:c1:0d:4c:8c:df:9b:3c:27:5a:97:61:a9:0a:36:1a: 29:30:ae:9b:4e:54:2e:4c:4f:74:a6:f0:77:10:ce:ab:37:12: e8:cf:e2:77:a1:5d:5a:f4:a9:f2:55:88:25:75:7d:11:38:66: e3:88:58:b4:93:a7:0c:08:1e:04:d9:58:68:39:c5:50:88:4b: a3:7b:7d:7a:49:43:0d:83:b9:eb:ed:1b:f5:38:d6:e5:be:4f: 89:52:76:18:95:84:6f:4b:bf:43:9e:f0:cd:b9:de:da:66:0b: fb:f1:0e:f0:e7:cb:f1:bf:d8:47:1e:a7:37:8f:ec:5e:d5:03: d4:a2:a0:47:01:f3:db:ca:54:24:b1:93:59:98:92:30:44:4c: 9f:3e:21:1e:d8:1a:17:e5:bf:58:0a:be:9d:db:40:9a:dd:c7: cb:8f:52:d8:9a:4f:d2:8c:94:5a:3c:0a:bb:b7:1e:9d:37:9c: e0:23:f0:97:93:02:7e:ef:40:54:df:f0:05:85:f6:d1:c2:77: 96:f5:82:e6:d9:32:01:e1:86:0b:ab:53:eb:4a:11:25:8b:a1: e3:6f:30:32:0a:e7:41:43:ec:dc:d9:45:75:79:48:63:56:f0: 74:77:4e:66:30:72:a2:2c:88:6c:70:5f:92:68:11:e2:f5:41: 24:ae:14:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJpqlZB+liNkvetxXarZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5 NjA1NzgwHhcNMjUxMjExMTYwMjQ5WhcNMjUxMjEyMTYwMjQ5WjAzMTEwLwYDVQQD EyhkNGIwYzZkMDk1NTI1MTY3YjI5ZThjM2JhNzMyYmNkYjNkNDk3ZDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLoPBlKZ9Rop8wVdIbOy0KJ3zS8y OxqmRSDcIjQ506S/+Pgpj9h6dMGAe5j0biDFWAaNtew5WAiSS4el8l3dcjCU7e3y 87A440oQgxD1DdNQfOFG4kig3DT2nZtyBmgETilVHa+6/Mo+NT5YB1N23sAtcJr/ QSDIs5mWrE1SlZ+8K2GMYP8K2SQDQmpvF6b8egZbNA2RdfaXoln/Z0zPM2760VpY 6ZqzCdNiG4fC2H0fUAASVGX0BdKOUpvo32YdShZVlvZe37ZhlwLT/jeIhHgEwyio dhQr3Unq+hJvQhd9ZXUqyo4RL+0KRtD8x7BiuYdlk6sZvN9gbew+KhlNzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSwxtCVUlFnsp6MO6cyvNs9SX2WMB8GA1UdIwQY MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt YjlkYmRjOGI0MzljLzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmA1KwQ1M jN+bPCdal2GpCjYaKTCum05ULkxPdKbwdxDOqzcS6M/id6FdWvSp8lWIJXV9EThm 44hYtJOnDAgeBNlYaDnFUIhLo3t9eklDDYO56+0b9TjW5b5PiVJ2GJWEb0u/Q57w zbne2mYL+/EO8OfL8b/YRx6nN4/sXtUD1KKgRwHz28pUJLGTWZiSMERMnz4hHtga F+W/WAq+ndtAmt3Hy49S2JpP0oyUWjwKu7cenTec4CPwl5MCfu9AVN/wBYX20cJ3 lvWC5tkyAeGGC6tT60oRJYuh428wMgrnQUPs3NlFdXlIY1bwdHdOZjByoiyIbHBf kmgR4vVBJK4UGA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:00:52 2025 by rpki-client