This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json) Hash identifier: Nhwa3xul2hJ8jOh6rVSDO7HGxuDHuguIGYc+1QD5mqY= Subject key identifier: 91:52:9E:54:1B:64:63:A1:37:EF:DE:57:18:21:0C:17:A7:58:05:33 Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Certificate serial: 019B7523A43C42092DFD1B5197BC248AF6BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft Manifest number: 1521 Signing time: Wed 31 Dec 2025 16:00:28 +0000 Manifest this update: Wed 31 Dec 2025 16:00:28 +0000 Manifest next update: Thu 01 Jan 2026 16:00:28 +0000 Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: DZzMabIUmCFh6EGuOWiJgHRalWl7XDvcZtEMi7smSqQ=) 2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:a4:3c:42:09:2d:fd:1b:51:97:bc:24:8a:f6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Validity Not Before: Dec 31 16:00:28 2025 GMT Not After : Jan 1 16:00:28 2026 GMT Subject: CN=91529e541b6463a137efde5718210c17a7580533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:24:61:d1:af:03:9e:6b:eb:a5:ad:b6:36: cb:4b:a1:74:5d:96:cd:3d:9b:10:b0:01:08:e8:6e: 42:50:79:bf:a4:ec:f5:ee:df:ad:ea:aa:12:09:df: b4:a7:3f:1c:9c:c8:62:36:e3:25:3f:e4:46:10:b5: ac:4c:7d:58:41:a1:cc:50:32:79:36:df:aa:0d:6f: 5d:dc:01:2b:6e:9c:1a:af:d0:9e:00:60:65:1b:5f: 8f:a8:56:cc:fc:d8:5a:97:0d:c8:eb:33:19:3d:01: b8:5f:7b:f6:f2:ce:2c:0a:85:8d:97:fa:8b:ff:fc: 60:fd:52:d2:cf:60:cf:45:da:fe:bb:39:82:bf:e8: 8e:9d:d3:25:bd:03:3e:3c:4a:01:51:c2:36:5f:96: ac:58:4f:22:60:e9:f2:39:8a:01:1a:21:95:ce:fb: 88:aa:5b:be:39:ea:09:ec:a9:15:59:3f:c5:1f:6f: 87:dd:2a:4d:2c:7b:98:0f:9b:68:81:24:e0:23:1b: 63:2d:45:3a:70:b4:f6:d6:af:11:84:c0:a5:5b:86: 80:b6:cc:da:00:41:98:9a:a3:54:46:fe:ff:23:4e: ad:17:3e:02:f1:de:01:e3:30:40:3b:14:34:42:4c: 80:1a:c8:9a:49:99:03:43:d7:7c:93:64:b6:e4:c3: 81:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:9E:54:1B:64:63:A1:37:EF:DE:57:18:21:0C:17:A7:58:05:33 X509v3 Authority Key Identifier: keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f0:8a:c5:13:e8:56:5b:91:78:16:20:e1:1c:40:a3:55:e9: 88:8f:89:d3:e0:51:ed:15:e1:b0:19:58:97:d5:f7:94:17:2b: e7:ec:e5:28:a3:af:a2:53:69:da:a5:df:0e:84:86:4d:11:8b: f4:c7:85:e1:37:da:94:b4:6c:c7:ca:f3:5c:6e:10:c7:64:3c: a1:8c:ff:17:b1:16:6b:90:d5:2b:64:50:86:d0:42:5a:e4:72: 50:10:0d:dd:3e:8d:bc:a9:b2:35:60:7d:3b:62:33:fc:eb:a2: 07:a5:a2:a6:df:e0:71:84:80:da:71:21:7a:47:c0:f2:8e:08: 8c:35:ee:54:1d:d2:4e:77:53:34:2b:7d:26:d5:34:1f:a4:69: 54:c6:32:eb:90:2e:1c:a9:08:65:a9:1a:3f:6f:78:59:b6:b7: 7d:13:9f:a3:98:d2:0e:ac:f7:34:cc:9e:f3:ce:b9:36:ea:e1: 8a:4b:5b:d4:65:aa:0b:7d:69:f2:4d:89:41:d2:da:6b:25:6f: 46:44:60:fc:79:69:17:23:ee:c3:c0:b8:96:5b:f3:28:26:5b: 3a:74:6e:0d:18:65:1f:b4:9e:05:cd:5d:ba:81:7e:35:47:00: e5:76:c0:74:af:93:00:20:ab:f3:2c:57:f7:c0:be:2d:fe:f0: 54:87:ff:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I6Q8Qgkt/RtRl7wkiva+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzM0MWQzMDU3NTE0NGJlMzJjZDdjOGUzZWJkNGM2MzI5 YTMxNDEwHhcNMjUxMjMxMTYwMDI4WhcNMjYwMTAxMTYwMDI4WjAzMTEwLwYDVQQD Eyg5MTUyOWU1NDFiNjQ2M2ExMzdlZmRlNTcxODIxMGMxN2E3NTgwNTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9EkYdGvA55r66WttjbLS6F0XZbN PZsQsAEI6G5CUHm/pOz17t+t6qoSCd+0pz8cnMhiNuMlP+RGELWsTH1YQaHMUDJ5 Nt+qDW9d3AErbpwar9CeAGBlG1+PqFbM/Nhalw3I6zMZPQG4X3v28s4sCoWNl/qL //xg/VLSz2DPRdr+uzmCv+iOndMlvQM+PEoBUcI2X5asWE8iYOnyOYoBGiGVzvuI qlu+OeoJ7KkVWT/FH2+H3SpNLHuYD5togSTgIxtjLUU6cLT21q8RhMClW4aAtsza AEGYmqNURv7/I06tFz4C8d4B4zBAOxQ0QkyAGsiaSZkDQ9d8k2S25MOBwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFSnlQbZGOhN+/eVxghDBenWAUzMB8GA1UdIwQY MBaAFBRzQdMFdRRL4yzXyOPr1MYymjFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2Yt YTJiN2IwMzk2YmQ2LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2YtYTJiN2IwMzk2YmQ2 LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPCKxRPo VluReBYg4RxAo1XpiI+J0+BR7RXhsBlYl9X3lBcr5+zlKKOvolNp2qXfDoSGTRGL 9MeF4TfalLRsx8rzXG4Qx2Q8oYz/F7EWa5DVK2RQhtBCWuRyUBAN3T6NvKmyNWB9 O2Iz/OuiB6Wipt/gcYSA2nEhekfA8o4IjDXuVB3STndTNCt9JtU0H6RpVMYy65Au HKkIZakaP294Wba3fROfo5jSDqz3NMye8865Nurhiktb1GWqC31p8k2JQdLaayVv RkRg/HlpFyPuw8C4llvzKCZbOnRuDRhlH7SeBc1duoF+NUcA5XbAdK+TACCr8yxX 98C+Lf7wVIf/yQ== -----END CERTIFICATE-----Generated at Thu Jan 1 01:02:24 2026 by rpki-client