This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json) Hash identifier: w3UQbcmCmbtEW6M82elPkkocq83NNYTejQWxG7MYoK8= Subject key identifier: 1C:B2:CC:BA:DD:62:E7:1D:77:CD:4E:E4:DD:41:5D:D4:10:E0:57:38 Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Certificate serial: 019B4F2923B6DE26EE5ACEBFC4BBC2B5524E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft Manifest number: 10B5 Signing time: Wed 24 Dec 2025 07:00:54 +0000 Manifest this update: Wed 24 Dec 2025 07:00:54 +0000 Manifest next update: Thu 25 Dec 2025 07:00:54 +0000 Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=) 2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: f5kN76j8Y2OJuEhgT7nnD/bcsNwf9PeCbNrAA3tiyJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:23:b6:de:26:ee:5a:ce:bf:c4:bb:c2:b5:52:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Validity Not Before: Dec 24 07:00:54 2025 GMT Not After : Dec 25 07:00:54 2025 GMT Subject: CN=1cb2ccbadd62e71d77cd4ee4dd415dd410e05738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:eb:dc:21:ac:0a:3b:8e:7e:d0:72:54:8e:dd: 63:43:c5:6d:a7:a6:59:34:12:b5:ef:21:fe:33:93: a8:c0:b6:09:ae:14:18:ff:80:e3:34:c6:32:cd:2d: 42:f2:4b:94:38:c2:ce:81:8c:b3:6c:2c:18:bc:71: 6e:a6:9c:14:d7:24:a8:e6:03:32:77:fc:b2:1b:14: 92:b1:81:60:69:55:13:ba:c2:13:a9:38:94:b6:13: e8:34:6c:b9:05:1b:54:a8:d7:4d:ea:93:45:01:bd: 80:83:40:b0:fd:d0:29:9e:8e:2a:85:2d:fb:90:b8: 7d:f7:96:80:7b:4a:62:93:04:9e:6d:e4:6e:fb:55: 23:20:01:0c:6b:b2:f8:48:2d:bf:36:43:2e:08:fd: 56:ca:69:97:f5:f3:f4:15:a5:ab:ba:e7:14:92:22: 99:c5:ad:02:ba:be:e6:e7:c9:62:ab:52:a4:a0:6c: 01:1b:fd:74:9e:b9:1e:be:c1:55:09:ed:36:07:78: aa:66:ad:1e:b6:34:9a:14:a8:b5:a3:86:27:6f:8c: c4:c2:13:ff:66:71:0b:dc:b2:9b:95:96:a3:0d:d9: 7d:c2:4f:68:98:71:3d:f2:79:21:65:87:3a:34:99: 99:e7:d4:e8:e2:b6:e0:22:23:ca:7d:01:35:ca:5e: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B2:CC:BA:DD:62:E7:1D:77:CD:4E:E4:DD:41:5D:D4:10:E0:57:38 X509v3 Authority Key Identifier: keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a2:bd:b0:20:93:e3:fa:85:9b:09:87:ac:29:4d:78:26:2e: 21:06:87:79:9e:3d:2c:10:cb:07:d4:84:14:df:d4:b6:fb:6a: 0d:6d:19:59:da:9c:64:7d:7b:06:aa:b1:2a:20:83:e7:cf:3f: ef:c7:23:d9:08:a7:b1:59:37:19:e5:fa:78:66:5e:1c:3f:5b: 97:46:38:68:0b:f9:b0:57:0f:c3:aa:43:12:98:a9:62:85:ba: 6b:33:08:da:3d:bf:47:6c:32:ac:49:69:d8:ac:02:86:92:e6: 28:eb:03:d0:d6:e2:4d:60:dc:f3:e6:f4:04:62:02:03:58:f9: d2:fd:9a:9e:31:31:08:48:bb:6a:8a:a8:b5:50:93:bf:7a:6f: 02:61:11:05:c7:91:39:df:b3:53:34:b1:9b:c1:79:d0:d5:44: 9c:87:5f:8d:c7:2b:e4:4c:8a:b9:98:20:23:d5:d0:07:0e:97: f2:cb:31:68:5d:87:c8:2a:a5:87:7b:1f:fd:a6:64:0b:af:d7: cd:21:fb:7c:74:db:c2:91:86:f3:f2:5f:fe:b2:af:c1:8a:cb: 28:65:5f:99:12:8e:6d:bd:3f:44:62:8e:f4:df:8e:02:e4:e9: 99:88:5e:b5:98:28:be:f5:6a:8a:35:b4:e6:38:c1:41:6c:17: e3:46:4b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKSO23ibuWs6/xLvCtVJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj M2RjYWMwHhcNMjUxMjI0MDcwMDU0WhcNMjUxMjI1MDcwMDU0WjAzMTEwLwYDVQQD EygxY2IyY2NiYWRkNjJlNzFkNzdjZDRlZTRkZDQxNWRkNDEwZTA1NzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+vcIawKO45+0HJUjt1jQ8Vtp6ZZ NBK17yH+M5OowLYJrhQY/4DjNMYyzS1C8kuUOMLOgYyzbCwYvHFuppwU1ySo5gMy d/yyGxSSsYFgaVUTusITqTiUthPoNGy5BRtUqNdN6pNFAb2Ag0Cw/dApno4qhS37 kLh995aAe0pikwSebeRu+1UjIAEMa7L4SC2/NkMuCP1WymmX9fP0FaWruucUkiKZ xa0Cur7m58liq1KkoGwBG/10nrkevsFVCe02B3iqZq0etjSaFKi1o4Ynb4zEwhP/ ZnEL3LKblZajDdl9wk9omHE98nkhZYc6NJmZ59To4rbgIiPKfQE1yl5GxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByyzLrdYucdd81O5N1BXdQQ4Fc4MB8GA1UdIwQY MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKK9sCCT 4/qFmwmHrClNeCYuIQaHeZ49LBDLB9SEFN/UtvtqDW0ZWdqcZH17BqqxKiCD588/ 78cj2QinsVk3GeX6eGZeHD9bl0Y4aAv5sFcPw6pDEpipYoW6azMI2j2/R2wyrElp 2KwChpLmKOsD0NbiTWDc8+b0BGICA1j50v2anjExCEi7aoqotVCTv3pvAmERBceR Od+zUzSxm8F50NVEnIdfjccr5EyKuZggI9XQBw6X8ssxaF2HyCqlh3sf/aZkC6/X zSH7fHTbwpGG8/Jf/rKvwYrLKGVfmRKObb0/RGKO9N+OAuTpmYhetZgovvVqijW0 5jjBQWwX40ZLqQ== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:09 2025 by rpki-client