This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft File: FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json) Hash identifier: X8ATisad5D6VN+eFbMB/1XNsQD7+uuAFFRjWsiVXyJY= Subject key identifier: 6D:88:2C:D2:78:81:A0:53:78:3B:4B:3F:C7:05:49:82:90:12:75:C3 Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66 Certificate issuer: /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766 Certificate serial: 019B424B0F25D710C9E0FD152D1271D547ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:53 +0000 Manifest this update: Sun 21 Dec 2025 19:02:53 +0000 Manifest next update: Mon 22 Dec 2025 19:02:53 +0000 Files and hashes: 1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: 2mOWwAAjwWz6rvHBX8CMYIoSt127y7lxz22O0sN71Vs=) 2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=) 3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4b:0f:25:d7:10:c9:e0:fd:15:2d:12:71:d5:47:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766 Validity Not Before: Dec 21 19:02:53 2025 GMT Not After : Dec 22 19:02:53 2025 GMT Subject: CN=6d882cd27881a053783b4b3fc7054982901275c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:e8:90:35:22:10:86:6a:dc:0d:2d:9d:fb: 12:59:e0:06:f5:cc:b1:5b:17:c5:e8:06:ed:b8:4a: 05:da:90:40:18:b2:b4:3e:2d:a8:3d:06:0f:05:c6: 77:05:7e:cf:8e:a2:d6:8a:05:17:ea:a1:79:00:53: 39:4b:c6:5e:5b:9e:d5:dc:7d:57:0a:76:c3:61:91: 11:db:be:08:f6:09:59:63:67:9d:78:33:f7:dc:b7: 0b:5d:74:d0:c1:d7:72:75:eb:42:9b:6e:58:58:72: d9:eb:6d:2d:45:cd:7b:fe:02:f3:e5:cb:de:7d:72: e4:43:a3:e1:49:9b:90:63:70:c2:af:76:d2:d1:64: dc:e3:87:37:d3:bc:68:bf:99:70:3c:c9:36:db:57: e6:10:70:74:08:f3:bb:ea:84:db:1e:1e:7d:9f:1d: aa:7d:6c:ce:18:3a:8b:35:72:7d:26:27:d6:57:53: 20:48:36:7b:5d:93:23:54:bb:ef:18:92:42:36:a1: 0c:ec:a8:03:a1:94:3f:b8:31:51:53:3c:34:09:a3: e1:90:b7:20:4e:21:7a:cd:7b:8e:82:9d:87:aa:15: 23:3c:b8:97:21:f5:2b:e3:ac:b0:fa:68:d6:bf:fe: 31:44:eb:38:29:bf:be:c3:45:34:13:92:6b:6b:ab: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:88:2C:D2:78:81:A0:53:78:3B:4B:3F:C7:05:49:82:90:12:75:C3 X509v3 Authority Key Identifier: keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e5:78:cb:df:8b:a9:18:41:ce:74:d5:04:5d:d6:07:7d:19: 51:61:94:0b:72:9a:15:45:7f:5a:72:e3:4c:cd:e8:21:d6:b1: 74:8d:6e:1a:98:8c:5f:39:21:7b:92:ed:c9:7e:51:85:52:0f: 35:5a:62:47:56:17:14:41:2c:39:ed:1e:dc:51:06:94:f4:18: d4:d0:ae:e4:a3:7d:24:a6:a8:a6:d3:03:48:e0:84:38:55:bf: a6:bd:51:fc:b9:e2:1d:32:53:5e:eb:e6:22:b3:00:d1:e4:0f: 82:0e:94:e9:9e:35:76:f0:46:fb:1a:4b:62:20:13:2d:9e:f5: 49:bc:57:b1:f0:ac:70:c6:8e:89:d9:9b:72:26:de:cb:9e:db: 31:05:6f:10:e4:c3:5c:61:69:e4:9d:ef:b6:9e:6e:e5:65:97: 93:ba:2b:e3:54:d4:1a:ae:4b:d2:48:7e:82:30:7f:16:2e:dd: 9a:04:74:ef:55:fe:c4:84:42:cd:e7:bc:cb:b0:7c:55:cd:d7: 5f:4b:5a:b1:b2:06:3c:a9:31:be:79:fc:0b:61:3e:61:2e:69: 65:d9:38:16:6a:0c:16:8e:cd:ff:f5:ab:93:e8:63:3f:81:a4: 11:c7:62:bb:c0:70:e1:a1:41:59:d4:1d:52:ca:fe:1d:1a:e3: e9:f6:09:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSw8l1xDJ4P0VLRJx1UftMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz ZmM3NjYwHhcNMjUxMjIxMTkwMjUzWhcNMjUxMjIyMTkwMjUzWjAzMTEwLwYDVQQD Eyg2ZDg4MmNkMjc4ODFhMDUzNzgzYjRiM2ZjNzA1NDk4MjkwMTI3NWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/okDUiEIZq3A0tnfsSWeAG9cyx WxfF6AbtuEoF2pBAGLK0Pi2oPQYPBcZ3BX7PjqLWigUX6qF5AFM5S8ZeW57V3H1X CnbDYZER274I9glZY2edeDP33LcLXXTQwddydetCm25YWHLZ620tRc17/gLz5cve fXLkQ6PhSZuQY3DCr3bS0WTc44c307xov5lwPMk221fmEHB0CPO76oTbHh59nx2q fWzOGDqLNXJ9JifWV1MgSDZ7XZMjVLvvGJJCNqEM7KgDoZQ/uDFRUzw0CaPhkLcg TiF6zXuOgp2HqhUjPLiXIfUr46yw+mjWv/4xROs4Kb++w0U0E5Jra6vl8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2ILNJ4gaBTeDtLP8cFSYKQEnXDMB8GA1UdIwQY MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeV4y9+L qRhBznTVBF3WB30ZUWGUC3KaFUV/WnLjTM3oIdaxdI1uGpiMXzkhe5LtyX5RhVIP NVpiR1YXFEEsOe0e3FEGlPQY1NCu5KN9JKaoptMDSOCEOFW/pr1R/LniHTJTXuvm IrMA0eQPgg6U6Z41dvBG+xpLYiATLZ71SbxXsfCscMaOidmbcibey57bMQVvEOTD XGFp5J3vtp5u5WWXk7or41TUGq5L0kh+gjB/Fi7dmgR071X+xIRCzee8y7B8Vc3X X0tasbIGPKkxvnn8C2E+YS5pZdk4FmoMFo7N//Wrk+hjP4GkEcdiu8Bw4aFBWdQd Usr+HRrj6fYJdw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:49 2025 by rpki-client