This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json) Hash identifier: 3cfxOgbzE36GKy4Vluw6Woat8sV0bL5rlTTtvdSYLhs= Subject key identifier: 73:FD:42:12:CB:A6:CA:67:71:3A:B4:C1:EA:4D:32:D6:BC:EC:12:0E Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c Certificate serial: 019B0F6E1F48D9D6BD7B076B3BB96298D168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft Manifest number: 16DC Signing time: Thu 11 Dec 2025 22:00:33 +0000 Manifest this update: Thu 11 Dec 2025 22:00:33 +0000 Manifest next update: Fri 12 Dec 2025 22:00:33 +0000 Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: SPQM8oDijM7h7O7qBpYvFz5H6XL0tZSKWkv/BDyUXh0=) 2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:1f:48:d9:d6:bd:7b:07:6b:3b:b9:62:98:d1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c Validity Not Before: Dec 11 22:00:33 2025 GMT Not After : Dec 12 22:00:33 2025 GMT Subject: CN=73fd4212cba6ca67713ab4c1ea4d32d6bcec120e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:39:c7:91:7d:01:0f:35:15:41:51:80:23: f4:71:95:3c:ae:c7:b6:5b:6d:05:cc:41:0f:f3:14: 32:5b:9f:4f:c1:2d:a1:cd:22:28:d4:34:56:db:ac: 8f:da:d3:3f:44:6e:2b:0e:ec:be:81:31:82:33:1c: d2:31:54:4b:5b:bb:c6:7d:f5:7a:05:79:70:17:ec: 89:5b:13:26:c7:1c:f0:fc:83:0b:7d:ff:99:a7:0d: 7b:f0:56:a5:10:60:da:3b:a5:fa:d6:ab:9a:fc:49: 7b:96:1f:f6:8f:0b:a0:21:4d:c8:e7:25:ce:4a:f0: ce:da:a5:a6:04:82:c3:ed:9e:04:0e:a5:a7:13:ae: 1c:67:c8:5b:63:f2:79:26:6a:41:1e:fe:1d:36:8d: 86:e0:29:2b:3a:38:c1:d4:93:f2:02:3c:d7:38:09: 70:f0:07:1e:e0:47:6e:6f:f9:6f:f8:cb:b8:7a:c9: db:8b:93:85:45:67:d9:cc:80:89:29:4d:ee:36:53: 49:8e:b6:b3:d9:6c:d4:79:f2:3d:9d:00:10:e5:14: ac:ab:80:53:97:78:f1:1a:10:f1:5a:16:cb:31:58: 62:c1:cb:d0:2e:1c:55:83:b8:bb:ed:76:19:68:a8: bd:65:59:81:14:20:b9:9d:16:26:c6:1a:a6:28:7d: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FD:42:12:CB:A6:CA:67:71:3A:B4:C1:EA:4D:32:D6:BC:EC:12:0E X509v3 Authority Key Identifier: keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:fd:ab:d8:34:c6:12:59:9d:4c:e7:cf:92:1e:5c:f4:e0: 39:da:37:ad:06:46:c9:b7:96:9b:c9:02:0d:c4:bc:3b:af:07: 9a:bc:39:b5:53:e2:ad:07:11:77:13:2b:76:99:37:d4:ca:2f: 39:49:84:1d:c7:66:65:90:cb:99:73:46:5b:36:42:f8:21:d4: c2:9c:01:da:b8:ae:2b:3a:ad:79:e7:e2:54:16:3c:ef:5e:fb: 35:23:96:8b:c0:e7:62:ee:25:d4:55:cc:a7:ea:40:f1:23:ac: bc:49:39:28:91:f7:70:3f:f4:62:79:04:57:ce:48:9c:ed:90: 4b:32:a8:db:77:2c:3a:66:67:26:9c:36:ed:59:b6:69:5b:20: 77:68:57:52:59:3d:39:5e:37:19:46:40:7a:3f:06:f1:db:a7: 0d:d9:62:88:52:94:52:18:05:0b:4a:ef:9d:6d:65:f1:f3:b2: a3:3f:4a:4a:5f:9a:56:94:90:81:56:66:a8:0c:c4:b7:26:67: 29:42:b5:60:95:4e:a1:d0:13:3f:ec:07:97:19:ad:b7:88:95: af:f7:10:d6:ad:3c:c7:c6:76:7a:d5:30:31:d8:43:ee:70:d9: aa:c7:8a:ee:dd:d8:c2:b5:06:38:33:0d:ae:d0:9c:d2:06:36: 75:89:47:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbh9I2da9ewdrO7limNFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5 NGU0OWMwHhcNMjUxMjExMjIwMDMzWhcNMjUxMjEyMjIwMDMzWjAzMTEwLwYDVQQD Eyg3M2ZkNDIxMmNiYTZjYTY3NzEzYWI0YzFlYTRkMzJkNmJjZWMxMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lA5x5F9AQ81FUFRgCP0cZU8rse2 W20FzEEP8xQyW59PwS2hzSIo1DRW26yP2tM/RG4rDuy+gTGCMxzSMVRLW7vGffV6 BXlwF+yJWxMmxxzw/IMLff+Zpw178FalEGDaO6X61qua/El7lh/2jwugIU3I5yXO SvDO2qWmBILD7Z4EDqWnE64cZ8hbY/J5JmpBHv4dNo2G4CkrOjjB1JPyAjzXOAlw 8Ace4Edub/lv+Mu4esnbi5OFRWfZzICJKU3uNlNJjraz2WzUefI9nQAQ5RSsq4BT l3jxGhDxWhbLMVhiwcvQLhxVg7i77XYZaKi9ZVmBFCC5nRYmxhqmKH2UaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHP9QhLLpspncTq0wepNMta87BIOMB8GA1UdIwQY MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPr9q9g0 xhJZnUznz5IeXPTgOdo3rQZGybeWm8kCDcS8O68Hmrw5tVPirQcRdxMrdpk31Mov OUmEHcdmZZDLmXNGWzZC+CHUwpwB2riuKzqteefiVBY87177NSOWi8DnYu4l1FXM p+pA8SOsvEk5KJH3cD/0YnkEV85InO2QSzKo23csOmZnJpw27Vm2aVsgd2hXUlk9 OV43GUZAej8G8dunDdliiFKUUhgFC0rvnW1l8fOyoz9KSl+aVpSQgVZmqAzEtyZn KUK1YJVOodATP+wHlxmtt4iVr/cQ1q08x8Z2etUwMdhD7nDZqseK7t3YwrUGODMN rtCc0gY2dYlHNA== -----END CERTIFICATE-----Generated at Fri Dec 12 02:29:07 2025 by rpki-client