This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json) Hash identifier: 9gxQVH5FZcu5zjv60jJ1bNoM3+m29NLSR3UAWpgpICo= Subject key identifier: A6:1A:2A:9D:D0:5C:70:4A:E5:B9:99:31:5D:87:83:57:37:7A:AD:D1 Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Certificate serial: 019B5CAE47D3E59C8966545E05CD870C5189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft Manifest number: 095E Signing time: Fri 26 Dec 2025 22:01:24 +0000 Manifest this update: Fri 26 Dec 2025 22:01:24 +0000 Manifest next update: Sat 27 Dec 2025 22:01:24 +0000 Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=) 2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: ZPpCP2C29oVkE5qLWcZGu4ty1IgqEBZI89XIdrnxKZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:47:d3:e5:9c:89:66:54:5e:05:cd:87:0c:51:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Validity Not Before: Dec 26 22:01:24 2025 GMT Not After : Dec 27 22:01:24 2025 GMT Subject: CN=a61a2a9dd05c704ae5b999315d878357377aadd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:3e:5b:66:d1:b8:1f:2c:f5:ef:fd:ee:87:db: 42:82:c0:86:78:42:98:69:1b:00:11:0d:1e:dc:0a: 77:b4:3c:35:a0:c4:f4:ad:7d:dd:fa:44:60:2c:02: 40:b2:fb:de:2d:3f:f7:19:d4:a8:a5:a1:8a:97:f6: c0:bb:9a:ce:a1:94:01:8b:75:75:99:e3:d3:a3:1e: cc:98:ec:cf:49:cb:25:03:ff:05:8f:40:c8:c3:ec: 59:d8:1f:a3:fb:d8:3b:59:24:40:ec:75:08:a7:9f: 0a:0c:ec:6c:49:25:8f:4b:8d:04:b9:44:d4:68:53: f7:a8:e1:75:35:fb:a8:3a:d1:4b:5f:4b:ac:5e:a2: 42:0f:03:cd:cd:98:70:90:c8:3f:76:37:82:f8:c7: e6:43:de:7a:9c:7e:3c:50:93:5e:51:20:8a:85:3b: 06:36:c7:f8:e0:e0:67:b3:5b:df:c5:23:9a:6b:d4: f4:3e:a2:87:4c:b5:1b:f2:2e:8e:39:ee:ae:3c:a4: 73:50:0d:cc:4d:26:14:58:1d:bb:91:21:de:b4:3b: 0f:7e:cd:bc:38:18:b3:58:36:1f:21:64:da:77:ac: 90:06:28:bb:6b:e8:05:90:57:83:0e:c6:23:53:bc: 4a:7d:b5:9a:90:28:83:12:69:83:71:ff:3e:58:e8: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1A:2A:9D:D0:5C:70:4A:E5:B9:99:31:5D:87:83:57:37:7A:AD:D1 X509v3 Authority Key Identifier: keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:30:f7:01:42:b7:b2:35:28:af:1e:1b:d8:e9:38:20:19:de: 8f:77:a2:85:07:a1:09:da:61:22:52:c2:67:8b:df:59:5f:2b: 4d:9b:6b:1f:38:4e:b8:c1:12:e1:b4:8a:a5:05:21:d9:5e:44: 93:db:19:d5:44:71:b7:64:64:e0:02:ed:cc:f9:62:cb:1f:b9: 0c:79:cc:2d:5a:8a:29:2c:7e:bf:07:28:9c:0f:ff:e0:f8:43: a2:e7:46:ab:ea:23:0e:09:ac:c5:14:fe:55:e5:65:6d:c0:5d: a0:27:c7:3c:11:53:fb:be:98:35:68:b7:30:d0:ad:21:b8:19: 56:d4:1a:e4:d0:39:b4:98:fe:f7:1f:86:e5:76:29:d4:c3:82: c3:8b:e2:4b:08:fb:a6:55:f2:f8:2d:aa:f8:76:a8:be:05:49: 05:89:1f:05:d6:1a:12:f2:f8:79:bd:00:9f:1f:b9:7a:6d:bc: f9:cc:fc:04:ea:c8:72:6b:1e:3c:09:a1:2f:9e:64:c0:d1:ff: 18:59:75:a9:93:cc:80:a6:06:30:46:8e:27:b1:b3:91:01:bd: 24:a8:8e:28:d6:c4:b0:9e:d2:8c:23:71:a2:2f:52:91:ea:21: 51:3f:8e:d9:29:bf:80:4c:60:2d:55:73:88:35:38:bd:04:20: f6:41:d3:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrkfT5ZyJZlReBc2HDFGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4 MmY5NTkwHhcNMjUxMjI2MjIwMTI0WhcNMjUxMjI3MjIwMTI0WjAzMTEwLwYDVQQD EyhhNjFhMmE5ZGQwNWM3MDRhZTViOTk5MzE1ZDg3ODM1NzM3N2FhZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D5bZtG4Hyz17/3uh9tCgsCGeEKY aRsAEQ0e3Ap3tDw1oMT0rX3d+kRgLAJAsvveLT/3GdSopaGKl/bAu5rOoZQBi3V1 mePTox7MmOzPScslA/8Fj0DIw+xZ2B+j+9g7WSRA7HUIp58KDOxsSSWPS40EuUTU aFP3qOF1NfuoOtFLX0usXqJCDwPNzZhwkMg/djeC+MfmQ956nH48UJNeUSCKhTsG Nsf44OBns1vfxSOaa9T0PqKHTLUb8i6OOe6uPKRzUA3MTSYUWB27kSHetDsPfs28 OBizWDYfIWTad6yQBii7a+gFkFeDDsYjU7xKfbWakCiDEmmDcf8+WOjniQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYaKp3QXHBK5bmZMV2Hg1c3eq3RMB8GA1UdIwQY MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDD3AUK3 sjUorx4b2Ok4IBnej3eihQehCdphIlLCZ4vfWV8rTZtrHzhOuMES4bSKpQUh2V5E k9sZ1URxt2Rk4ALtzPliyx+5DHnMLVqKKSx+vwconA//4PhDoudGq+ojDgmsxRT+ VeVlbcBdoCfHPBFT+76YNWi3MNCtIbgZVtQa5NA5tJj+9x+G5XYp1MOCw4viSwj7 plXy+C2q+HaovgVJBYkfBdYaEvL4eb0Anx+5em28+cz8BOrIcmsePAmhL55kwNH/ GFl1qZPMgKYGMEaOJ7GzkQG9JKiOKNbEsJ7SjCNxoi9SkeohUT+O2Sm/gExgLVVz iDU4vQQg9kHTdg== -----END CERTIFICATE-----Generated at Sat Dec 27 02:50:18 2025 by rpki-client