This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json) Hash identifier: kBgGBTu6JXJih2x67002W6SAXtPJX/PrUi0LqDKFiPU= Subject key identifier: 48:1E:E1:92:E2:9D:F0:05:88:FA:52:48:54:66:4F:92:A9:96:B3:7E Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Certificate serial: 019B6844811BBD79F2F01A0CB881511D8E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft Manifest number: 10C2 Signing time: Mon 29 Dec 2025 04:01:18 +0000 Manifest this update: Mon 29 Dec 2025 04:01:18 +0000 Manifest next update: Tue 30 Dec 2025 04:01:18 +0000 Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=) 2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: /pLcyP2+pPgLttbOkNQ72gjKMgyi0X+yfAadhRmfIoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:81:1b:bd:79:f2:f0:1a:0c:b8:81:51:1d:8e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Validity Not Before: Dec 29 04:01:18 2025 GMT Not After : Dec 30 04:01:18 2025 GMT Subject: CN=481ee192e29df00588fa524854664f92a996b37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:02:6c:5d:c0:19:b8:82:43:2b:52:9d:54:7c: ed:f9:6a:88:7b:62:0e:67:39:df:74:c3:2a:c1:3a: 61:24:c0:22:1f:fa:8a:10:4c:42:64:bc:10:66:65: 72:a4:ef:59:02:32:d2:07:17:f5:38:51:24:5c:47: fc:92:c2:cf:0a:58:29:cc:8d:7f:37:76:a5:6d:e9: a4:ab:fe:50:11:10:b9:6f:66:60:0c:a0:69:84:bb: 82:5a:61:bc:50:9c:32:57:25:42:6a:7c:33:eb:78: 49:4d:a4:05:d1:f6:01:9f:b6:35:a0:cd:fb:53:5b: 99:89:7a:07:db:4d:0b:79:59:b5:8d:fe:1e:1d:f1: f6:de:93:2a:8d:d0:72:f7:fa:cb:af:14:e1:21:0a: 7e:b7:ec:ca:0f:67:9a:57:22:2c:f5:6a:57:a3:eb: be:82:9c:94:3a:5d:92:f4:a0:f0:9f:1e:7d:0b:87: 58:2f:6b:dd:84:da:28:6d:29:ab:07:86:16:9f:df: a0:62:39:c0:aa:f5:eb:7e:5a:47:1e:4f:28:52:ab: f8:36:a1:da:6a:f6:3c:da:ca:2e:09:2f:41:a6:75: 1d:0f:cf:ee:1e:2e:d6:45:a3:e9:d8:b6:fb:63:43: 34:80:ac:e0:04:38:c3:0c:a8:92:e1:e5:4c:91:08: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:E1:92:E2:9D:F0:05:88:FA:52:48:54:66:4F:92:A9:96:B3:7E X509v3 Authority Key Identifier: keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:62:23:6b:5d:16:91:f4:e7:45:2a:01:1c:8f:ca:e6:f1:20: 66:36:84:4a:f4:03:b0:48:e4:41:d3:37:54:03:2f:7d:cb:ca: 56:77:a4:68:a5:63:f2:6e:72:81:84:a7:55:4b:ed:a2:5e:2e: 06:bd:94:2c:06:e9:cb:53:fd:43:01:80:4b:f8:e4:3c:23:f8: 09:2b:20:12:03:72:f9:37:7e:78:8d:d3:c5:f3:89:04:03:70: 4d:72:af:19:04:b3:d8:22:3c:3e:a4:bb:ab:7d:04:ce:db:b1: ae:ac:d4:18:9b:88:b6:bd:b8:ea:24:e3:9c:d3:4c:7d:1b:24: 0d:8c:54:b4:52:5a:c3:ba:50:d5:6a:37:cc:5c:c5:fe:b1:e6: 5f:1b:b7:05:15:0b:b8:f8:33:cc:29:85:f5:80:c8:50:80:db: 48:49:bb:07:a7:8e:7b:34:ac:93:d3:59:cb:2a:4a:e9:63:67: f5:f3:bf:c5:28:a1:f7:be:49:e4:e0:01:96:31:84:fe:84:4d: 5b:c1:59:5d:9b:53:73:87:96:da:39:cb:75:01:05:44:bc:33: ca:f7:1f:cd:c9:ca:a6:b7:03:f1:98:01:37:72:a2:7a:84:b0: 70:68:3a:be:be:97:2b:7a:bd:46:dd:9e:48:83:16:8d:e4:4f: 19:ce:40:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRIEbvXny8BoMuIFRHY6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj M2RjYWMwHhcNMjUxMjI5MDQwMTE4WhcNMjUxMjMwMDQwMTE4WjAzMTEwLwYDVQQD Eyg0ODFlZTE5MmUyOWRmMDA1ODhmYTUyNDg1NDY2NGY5MmE5OTZiMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwJsXcAZuIJDK1KdVHzt+WqIe2IO ZznfdMMqwTphJMAiH/qKEExCZLwQZmVypO9ZAjLSBxf1OFEkXEf8ksLPClgpzI1/ N3albemkq/5QERC5b2ZgDKBphLuCWmG8UJwyVyVCanwz63hJTaQF0fYBn7Y1oM37 U1uZiXoH200LeVm1jf4eHfH23pMqjdBy9/rLrxThIQp+t+zKD2eaVyIs9WpXo+u+ gpyUOl2S9KDwnx59C4dYL2vdhNoobSmrB4YWn9+gYjnAqvXrflpHHk8oUqv4NqHa avY82souCS9BpnUdD8/uHi7WRaPp2Lb7Y0M0gKzgBDjDDKiS4eVMkQirGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEge4ZLinfAFiPpSSFRmT5KplrN+MB8GA1UdIwQY MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmIja10W kfTnRSoBHI/K5vEgZjaESvQDsEjkQdM3VAMvfcvKVnekaKVj8m5ygYSnVUvtol4u Br2ULAbpy1P9QwGAS/jkPCP4CSsgEgNy+Td+eI3TxfOJBANwTXKvGQSz2CI8PqS7 q30EztuxrqzUGJuItr246iTjnNNMfRskDYxUtFJaw7pQ1Wo3zFzF/rHmXxu3BRUL uPgzzCmF9YDIUIDbSEm7B6eOezSsk9NZyypK6WNn9fO/xSih975J5OABljGE/oRN W8FZXZtTc4eW2jnLdQEFRLwzyvcfzcnKprcD8ZgBN3KieoSwcGg6vr6XK3q9Rt2e SIMWjeRPGc5AoA== -----END CERTIFICATE-----Generated at Mon Dec 29 08:28:10 2025 by rpki-client