This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json) Hash identifier: pOgvsop4pVwGuwZNVTRxDQsnwjEyqWwLgoYBYEXql98= Subject key identifier: 39:F2:5A:A6:0A:8E:1D:79:A8:81:AE:68:2B:F3:AF:D7:67:E2:9F:C3 Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a Certificate serial: 019B1193A08C2254FCF0C6A884A2591FF8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 08:00:46 +0000 Manifest this update: Fri 12 Dec 2025 08:00:46 +0000 Manifest next update: Sat 13 Dec 2025 08:00:46 +0000 Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=) 2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: IWHvpuH846b15WjXB0Ww6b6J3+c5iCiNRSoeik2LKj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:a0:8c:22:54:fc:f0:c6:a8:84:a2:59:1f:f8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a Validity Not Before: Dec 12 08:00:46 2025 GMT Not After : Dec 13 08:00:46 2025 GMT Subject: CN=39f25aa60a8e1d79a881ae682bf3afd767e29fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:0e:29:e5:15:36:06:ba:ce:30:ab:aa:bc: d2:41:9b:31:eb:bd:af:d1:64:f6:66:a7:bf:8a:3c: 39:11:e8:2e:e2:4e:b6:1f:af:5c:15:e9:a1:4b:36: 9c:90:21:45:68:3e:d5:dc:68:e4:0e:5d:ee:6e:06: 4c:f1:cb:ca:89:b3:f6:4b:0d:1a:d4:d6:5d:9d:4a: 29:4b:be:4a:43:f9:01:5c:09:d4:c2:54:1d:0e:8a: ca:47:60:43:a6:16:e9:9f:99:ef:01:20:d1:b2:0d: 92:38:df:f6:f2:e3:06:e6:24:c6:4d:8d:86:d6:1f: ba:54:58:c0:48:27:a0:e7:35:44:02:4e:94:ab:d4: 24:15:b7:0d:a6:2e:15:8b:47:3c:f8:e0:5c:0c:c9: 68:04:b9:98:bd:ee:4f:72:0e:ab:0b:4d:83:2e:45: 87:15:f4:aa:82:49:20:95:0c:38:ea:f9:30:e4:8f: bb:5c:30:c0:fc:39:aa:96:2f:fb:e1:4d:5c:4b:6f: cb:c3:bd:dd:cb:58:88:fd:a2:30:4c:4e:85:a1:3f: b8:98:e7:8d:88:50:dd:cc:6a:fe:83:8b:e2:59:0a: 0b:c0:f5:70:6a:b2:04:16:16:4f:59:f3:40:eb:6e: 04:f8:43:c0:d6:05:5e:7c:b1:60:3d:61:0a:92:7f: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F2:5A:A6:0A:8E:1D:79:A8:81:AE:68:2B:F3:AF:D7:67:E2:9F:C3 X509v3 Authority Key Identifier: keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:8f:52:50:c9:50:b4:01:6f:ec:c9:69:7c:93:53:80:69: 00:81:6e:ce:c7:6c:4f:8e:63:f9:b1:ad:be:c5:36:02:1e:2d: b6:22:dc:fd:23:57:94:9b:6e:10:28:f7:19:85:a1:12:17:f7: 8f:28:fa:e4:66:24:81:17:ab:d7:50:9f:d2:9b:9a:08:ec:19: 4d:44:77:4a:92:33:da:35:7f:a6:f9:38:08:d3:8d:2a:b9:51: be:4d:f7:c2:b4:d0:6a:a9:c7:14:e6:c8:a4:1b:65:da:4a:6a: 55:ec:cf:78:b7:a2:b8:da:c5:4d:88:ef:cd:3b:66:cf:79:3d: b7:e1:b4:34:9b:26:0b:22:4f:b6:e3:33:ba:4f:a6:23:52:f6: 8c:b0:16:7d:24:64:e0:c7:95:8f:5b:c1:b5:f3:ca:5c:2b:72: 26:44:cd:bb:98:4f:2e:0d:af:46:95:09:35:51:f9:fe:73:17: 48:dc:9b:c2:d7:61:70:44:47:02:dc:b5:db:57:75:da:1d:9a: e7:94:0d:da:9b:11:1e:fc:b9:e6:89:c1:5a:07:78:10:71:f9: 40:f5:a5:0b:13:97:91:09:7e:6d:5c:90:60:6f:2a:62:ce:48: f4:50:5d:e8:48:22:7e:57:d1:02:cc:b8:99:72:49:dd:88:a1: e5:ca:7a:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk6CMIlT88MaohKJZH/itMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NmYwNGZjNWNhODc1MzE1YWIwYjg1NGI2NDUwNmIwOWM5 OThlOWEwHhcNMjUxMjEyMDgwMDQ2WhcNMjUxMjEzMDgwMDQ2WjAzMTEwLwYDVQQD EygzOWYyNWFhNjBhOGUxZDc5YTg4MWFlNjgyYmYzYWZkNzY3ZTI5ZmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY0OKeUVNga6zjCrqrzSQZsx672v 0WT2Zqe/ijw5Eegu4k62H69cFemhSzackCFFaD7V3GjkDl3ubgZM8cvKibP2Sw0a 1NZdnUopS75KQ/kBXAnUwlQdDorKR2BDphbpn5nvASDRsg2SON/28uMG5iTGTY2G 1h+6VFjASCeg5zVEAk6Uq9QkFbcNpi4Vi0c8+OBcDMloBLmYve5Pcg6rC02DLkWH FfSqgkkglQw46vkw5I+7XDDA/Dmqli/74U1cS2/Lw73dy1iI/aIwTE6FoT+4mOeN iFDdzGr+g4viWQoLwPVwarIEFhZPWfNA624E+EPA1gVefLFgPWEKkn/t5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnyWqYKjh15qIGuaCvzr9dn4p/DMB8GA1UdIwQY MBaAFBVvBPxcqHUxWrC4VLZFBrCcmY6aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAt YWE5NDI5OTRmYzYwLzEvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAtYWE5NDI5OTRmYzYw LzEvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQqPUlDJ ULQBb+zJaXyTU4BpAIFuzsdsT45j+bGtvsU2Ah4ttiLc/SNXlJtuECj3GYWhEhf3 jyj65GYkgRer11Cf0puaCOwZTUR3SpIz2jV/pvk4CNONKrlRvk33wrTQaqnHFObI pBtl2kpqVezPeLeiuNrFTYjvzTtmz3k9t+G0NJsmCyJPtuMzuk+mI1L2jLAWfSRk 4MeVj1vBtfPKXCtyJkTNu5hPLg2vRpUJNVH5/nMXSNybwtdhcERHAty121d12h2a 55QN2psRHvy55onBWgd4EHH5QPWlCxOXkQl+bVyQYG8qYs5I9FBd6EgiflfRAsy4 mXJJ3Yih5cp6aA== -----END CERTIFICATE-----Generated at Fri Dec 12 14:23:01 2025 by rpki-client