This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json) Hash identifier: BA3KPl+HQBzlDWtPlIRvkEyjyctAwo5ogQ9d0eCsVu8= Subject key identifier: D3:6E:86:9E:79:29:28:5C:2F:D7:4A:A3:6C:F9:EF:8D:E4:9D:66:1F Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf Certificate serial: 019B38A2CF2AC32EC9D553EED4DED857FE60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft Manifest number: 0EE9 Signing time: Fri 19 Dec 2025 22:02:32 +0000 Manifest this update: Fri 19 Dec 2025 22:02:32 +0000 Manifest next update: Sat 20 Dec 2025 22:02:32 +0000 Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: nBTkfzJca3umuc1ElwaRR1IMgGra1hmY1Iu9VtWYY9I=) 2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=) 3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:cf:2a:c3:2e:c9:d5:53:ee:d4:de:d8:57:fe:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf Validity Not Before: Dec 19 22:02:32 2025 GMT Not After : Dec 20 22:02:32 2025 GMT Subject: CN=d36e869e7929285c2fd74aa36cf9ef8de49d661f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:db:ee:e5:b3:c4:10:c0:2b:6d:8e:72:1f:d3: 6e:5b:35:f1:5f:45:4f:56:55:3f:9a:b3:a1:6f:22: fe:8e:9d:50:9e:ab:c2:83:97:39:b3:4c:da:40:78: a8:c3:fb:1a:50:30:97:41:4f:95:5d:2b:3d:ab:53: ec:e1:07:f6:f3:d1:53:58:45:cf:b1:a9:af:23:52: 47:1c:f2:07:23:22:f6:2c:1a:19:06:1a:92:b0:a2: 6b:59:10:43:9c:58:c1:3e:6d:90:97:cf:3c:02:ed: a0:69:ac:0d:10:4c:c9:bb:d6:ff:4c:86:c1:db:de: 66:38:5e:45:87:83:b6:8e:06:a6:45:48:3b:c3:ee: 05:fa:ed:8c:e9:1a:ac:f5:3f:dc:e1:34:af:82:7c: 58:56:13:66:66:fb:53:08:b2:c4:a8:6a:a4:95:e3: 56:5c:44:0e:0e:dd:57:f2:ec:30:31:af:4a:d3:53: 7e:a1:38:2c:6b:69:99:40:8b:6e:37:2a:86:74:6b: f8:b1:af:42:ad:3d:73:fa:57:12:0c:4a:92:05:a5: a2:5e:9d:c0:b4:58:4c:9a:f1:b7:cf:85:66:e4:d3: 30:87:6c:ba:f2:8b:c1:93:d9:a0:3e:6a:d6:27:81: c7:8d:34:34:72:b4:e3:49:f4:87:fb:5f:41:da:40: 18:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6E:86:9E:79:29:28:5C:2F:D7:4A:A3:6C:F9:EF:8D:E4:9D:66:1F X509v3 Authority Key Identifier: keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:31:c5:8f:59:0a:cc:46:d3:98:42:fd:15:ba:d2:3b:a6:af: 03:a4:08:02:ea:46:73:0c:1a:95:22:75:82:76:e8:50:86:cb: b1:7e:b1:ed:cb:6d:12:1a:6d:9e:cf:ff:91:f2:e7:c5:90:81: 38:e0:39:8e:e3:1a:93:fe:f3:73:61:4f:81:9a:63:15:03:58: 32:e9:e4:5b:bf:35:50:a7:ae:94:c5:9f:d6:44:e1:3f:7e:5a: 5d:89:57:c5:46:c8:55:fa:74:be:56:e0:be:b0:9d:52:b0:bf: 46:fa:de:14:ab:5e:34:18:37:71:88:a1:15:4e:28:1b:fb:0a: 6f:19:eb:4c:00:8f:3b:59:f4:15:f3:c9:2d:e9:33:a1:f5:68: 22:8e:a3:00:81:d8:9c:1e:8c:c9:8a:36:aa:04:2d:b1:a3:e7: da:73:73:bf:cd:03:91:0f:59:49:f2:d6:37:58:3f:8e:05:c7: 03:3f:8b:23:67:52:49:1c:04:f1:ea:b6:09:4c:92:48:d7:89: c6:81:04:44:2c:64:b6:12:d1:8c:ce:5b:78:da:d4:a1:7c:18: 40:aa:77:c4:5b:58:89:97:fe:69:a8:3b:81:2d:d6:6e:c0:43: 21:4c:47:c9:f3:87:71:82:fc:71:80:cf:9f:fb:52:76:31:c0: ff:04:58:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4os8qwy7J1VPu1N7YV/5gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3 YWRjYWYwHhcNMjUxMjE5MjIwMjMyWhcNMjUxMjIwMjIwMjMyWjAzMTEwLwYDVQQD EyhkMzZlODY5ZTc5MjkyODVjMmZkNzRhYTM2Y2Y5ZWY4ZGU0OWQ2NjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9vu5bPEEMArbY5yH9NuWzXxX0VP VlU/mrOhbyL+jp1QnqvCg5c5s0zaQHiow/saUDCXQU+VXSs9q1Ps4Qf289FTWEXP samvI1JHHPIHIyL2LBoZBhqSsKJrWRBDnFjBPm2Ql888Au2gaawNEEzJu9b/TIbB 295mOF5Fh4O2jgamRUg7w+4F+u2M6Rqs9T/c4TSvgnxYVhNmZvtTCLLEqGqkleNW XEQODt1X8uwwMa9K01N+oTgsa2mZQItuNyqGdGv4sa9CrT1z+lcSDEqSBaWiXp3A tFhMmvG3z4Vm5NMwh2y68ovBk9mgPmrWJ4HHjTQ0crTjSfSH+19B2kAYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNuhp55KShcL9dKo2z5743knWYfMB8GA1UdIwQY MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOjHFj1kK zEbTmEL9FbrSO6avA6QIAupGcwwalSJ1gnboUIbLsX6x7cttEhptns//kfLnxZCB OOA5juMak/7zc2FPgZpjFQNYMunkW781UKeulMWf1kThP35aXYlXxUbIVfp0vlbg vrCdUrC/RvreFKteNBg3cYihFU4oG/sKbxnrTACPO1n0FfPJLekzofVoIo6jAIHY nB6MyYo2qgQtsaPn2nNzv80DkQ9ZSfLWN1g/jgXHAz+LI2dSSRwE8eq2CUySSNeJ xoEERCxkthLRjM5beNrUoXwYQKp3xFtYiZf+aag7gS3WbsBDIUxHyfOHcYL8cYDP n/tSdjHA/wRYVg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:34:59 2025 by rpki-client