This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft File: FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json) Hash identifier: OdGQa88rWVsrIFWSNDtsSUj6w8uNF3H0I8pZk6eUJMw= Subject key identifier: AB:D3:68:E2:64:0A:AF:A9:50:64:85:55:AF:C0:A1:F4:11:88:F5:3F Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A Certificate issuer: /CN=156f04fc5ca875315ab0b854b64506b09c998e9a Certificate serial: 019B49949B562DFA4C53268CD4E957179BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 05:00:34 +0000 Manifest this update: Tue 23 Dec 2025 05:00:34 +0000 Manifest next update: Wed 24 Dec 2025 05:00:34 +0000 Files and hashes: 1: 74FiFUUCcsV_j506QvqvuUKXA1c.roa (hash: apRm/FJ7fgKknAqYO8bdqiAphQJLpxJucgrm/glKMKk=) 2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: 5si1aFbRi+LMTprYB5rGsRqQydT2Bz4HlaKcA6Zfd9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:9b:56:2d:fa:4c:53:26:8c:d4:e9:57:17:9b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a Validity Not Before: Dec 23 05:00:34 2025 GMT Not After : Dec 24 05:00:34 2025 GMT Subject: CN=abd368e2640aafa950648555afc0a1f41188f53f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cd:89:93:b7:5d:cb:da:6e:9b:fc:7c:b9:3e: 35:0c:8d:14:34:fe:75:f6:24:bf:da:86:8e:f8:6f: 20:27:16:7b:2f:25:88:4e:64:da:5f:c1:b0:43:e2: 3f:44:b3:10:37:ab:b2:b5:47:a2:2c:6e:61:ec:1a: 64:e5:d0:da:7d:58:d1:5b:a2:45:7a:93:42:22:01: 93:1d:5d:ba:64:ac:5f:25:84:ad:41:56:ac:ff:37: c4:ea:ed:07:45:18:96:f6:34:c6:b0:bc:60:8d:53: c9:39:72:3a:25:6b:49:68:50:c5:58:9d:7f:53:98: 97:e9:cb:79:f9:04:fa:9a:66:d3:a6:e3:90:53:75: b5:32:27:65:f9:17:c7:0d:f5:e0:39:13:ad:80:de: a5:ea:ff:2f:ed:b7:e7:1d:4a:d4:e0:54:8f:b7:ea: 11:cf:0c:d8:a7:7b:b2:cb:67:ef:2c:c8:cf:4e:d4: ea:58:6d:a8:0b:96:9e:55:3e:d9:2c:05:40:07:da: 1e:6a:85:c2:10:75:73:d3:65:11:7b:26:38:5b:d3: d1:50:27:fc:65:53:39:fb:c8:2d:2c:91:0b:c5:7f: 36:43:d1:9a:6e:04:c1:b9:9f:91:89:df:76:22:73: a1:c5:a9:1d:8f:b7:28:22:8b:ee:2b:92:b5:37:dd: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:68:E2:64:0A:AF:A9:50:64:85:55:AF:C0:A1:F4:11:88:F5:3F X509v3 Authority Key Identifier: keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:0c:b5:10:64:a2:14:ad:56:4a:78:5d:49:6c:0e:1e:98:b6: c9:97:1b:f5:91:81:85:15:9d:ca:99:8d:17:91:ab:d2:f4:c0: 57:04:d7:b5:0b:4c:65:a4:30:7a:b4:de:a4:21:23:bb:45:cf: f1:02:2f:1b:5e:25:65:12:1b:bb:de:e1:f1:cf:52:3d:8e:78: e2:22:e6:af:f4:1e:fa:ee:a3:c4:79:48:25:4b:bf:9d:0b:6f: 0a:14:21:38:6d:57:fd:ad:ad:6f:43:70:ea:97:ed:ff:fb:20: 34:ca:db:df:6e:25:59:15:78:d8:5b:66:4c:6e:2e:85:db:d2: 37:5f:d3:7d:41:51:54:09:ad:29:75:da:68:d1:15:fd:06:43: 63:fa:fe:5b:e3:1e:5e:10:fb:f7:e6:e7:65:5f:00:7b:1f:8c: c3:e2:f0:94:8b:25:60:6b:74:f6:7b:83:73:fe:7a:cc:8e:fd: 03:ba:fa:52:6b:dc:d2:7c:ab:cc:e2:7c:04:38:ef:62:34:f2: f3:f6:07:a8:90:e6:e9:22:10:26:6e:55:b9:bc:28:c7:9e:6c: 2e:b3:5e:be:5e:11:5e:db:91:b2:cd:5e:f6:47:43:10:48:47: 72:96:73:00:1f:7d:fc:11:7f:97:b3:ef:e3:7b:30:d4:e0:aa: 78:ec:90:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlJtWLfpMUyaM1OlXF5v7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NmYwNGZjNWNhODc1MzE1YWIwYjg1NGI2NDUwNmIwOWM5 OThlOWEwHhcNMjUxMjIzMDUwMDM0WhcNMjUxMjI0MDUwMDM0WjAzMTEwLwYDVQQD EyhhYmQzNjhlMjY0MGFhZmE5NTA2NDg1NTVhZmMwYTFmNDExODhmNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc2Jk7ddy9pum/x8uT41DI0UNP51 9iS/2oaO+G8gJxZ7LyWITmTaX8GwQ+I/RLMQN6uytUeiLG5h7Bpk5dDafVjRW6JF epNCIgGTHV26ZKxfJYStQVas/zfE6u0HRRiW9jTGsLxgjVPJOXI6JWtJaFDFWJ1/ U5iX6ct5+QT6mmbTpuOQU3W1Midl+RfHDfXgOROtgN6l6v8v7bfnHUrU4FSPt+oR zwzYp3uyy2fvLMjPTtTqWG2oC5aeVT7ZLAVAB9oeaoXCEHVz02UReyY4W9PRUCf8 ZVM5+8gtLJELxX82Q9GabgTBuZ+Rid92InOhxakdj7coIovuK5K1N90VYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvTaOJkCq+pUGSFVa/AofQRiPU/MB8GA1UdIwQY MBaAFBVvBPxcqHUxWrC4VLZFBrCcmY6aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAt YWE5NDI5OTRmYzYwLzEvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9mNzEwY2UtNDQwZi00MDVmLWFjNTAtYWE5NDI5OTRmYzYw LzEvRlc4RV9GeW9kVEZhc0xoVXRrVUdzSnlaanBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgy1EGSi FK1WSnhdSWwOHpi2yZcb9ZGBhRWdypmNF5Gr0vTAVwTXtQtMZaQwerTepCEju0XP 8QIvG14lZRIbu97h8c9SPY544iLmr/Qe+u6jxHlIJUu/nQtvChQhOG1X/a2tb0Nw 6pft//sgNMrb324lWRV42FtmTG4uhdvSN1/TfUFRVAmtKXXaaNEV/QZDY/r+W+Me XhD79+bnZV8Aex+Mw+LwlIslYGt09nuDc/56zI79A7r6Umvc0nyrzOJ8BDjvYjTy 8/YHqJDm6SIQJm5Vubwox55sLrNevl4RXtuRss1e9kdDEEhHcpZzAB99/BF/l7Pv 43sw1OCqeOyQQQ== -----END CERTIFICATE-----Generated at Tue Dec 23 06:40:02 2025 by rpki-client