This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json) Hash identifier: Y/ix51wrptdqZFHEnTRUq2u9DCmKjoyO6gAqIqVPL1o= Subject key identifier: 46:6F:4A:03:F0:D1:54:14:96:0F:AB:86:81:59:0D:DF:12:B2:67:29 Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Certificate serial: 019B40C8C7EFB463621CC668369526C781FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft Manifest number: 152E Signing time: Sun 21 Dec 2025 12:00:58 +0000 Manifest this update: Sun 21 Dec 2025 12:00:58 +0000 Manifest next update: Mon 22 Dec 2025 12:00:58 +0000 Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: Swa/v5FS+b1VrCkNtA+vd7vJLL5uQlDxZ1DSiVTGzaM=) 2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:c7:ef:b4:63:62:1c:c6:68:36:95:26:c7:81:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Validity Not Before: Dec 21 12:00:58 2025 GMT Not After : Dec 22 12:00:58 2025 GMT Subject: CN=466f4a03f0d15414960fab8681590ddf12b26729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5f:35:f1:a2:7e:d1:c4:40:70:d8:41:c6:81: 88:68:6a:f0:cd:40:87:6c:25:82:6c:7d:47:88:d6: d6:53:f9:9e:2e:61:c2:1f:e7:9b:47:cc:37:b1:e1: a6:62:21:d9:b0:57:bd:3f:21:69:73:d7:c5:a3:61: 6b:3d:ad:d1:a2:a0:2f:7d:92:75:cb:a0:f5:60:60: 7c:e9:4c:78:14:d1:ac:95:b4:a9:c7:a5:94:8f:d6: 00:74:84:75:d0:89:44:30:27:f0:10:b6:03:7a:af: 2b:e7:e4:1d:8b:71:ad:05:30:11:14:cf:a6:36:6d: ef:d7:db:0a:ec:dc:e0:e6:12:f0:da:ff:8d:37:93: e1:ae:81:da:35:a5:43:59:7f:f4:2e:d6:92:a3:b8: 2c:48:3b:47:20:25:42:3e:d4:27:13:e8:0b:2f:0c: 7c:f6:4a:8a:a5:c5:c0:86:02:e0:eb:f8:d5:a9:79: 00:f1:43:0e:df:9f:c7:45:ea:46:22:ad:e3:5b:f8: 4b:b2:5d:b9:9a:9f:39:ec:aa:d6:83:b9:ab:db:ad: 37:64:42:a1:cc:37:e4:bb:cd:d2:31:20:d0:be:98: 91:21:15:7d:42:4b:69:1c:ca:81:00:a3:99:88:c6: b0:c7:5d:4a:3d:16:4d:fc:7a:6b:4f:83:c8:3f:66: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6F:4A:03:F0:D1:54:14:96:0F:AB:86:81:59:0D:DF:12:B2:67:29 X509v3 Authority Key Identifier: keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:46:6c:4b:6e:21:4e:13:bd:94:66:69:32:47:9e:14:bb:2a: 05:9d:4a:e2:dd:af:42:6a:5c:52:3f:7c:50:43:28:03:64:ae: 11:cf:86:35:e2:75:e7:41:72:a4:78:40:f0:5b:a2:9e:99:19: f9:70:70:f5:05:e3:ea:d0:2b:d7:19:cb:05:01:0e:ce:77:13: 43:c8:4b:61:13:91:b8:f0:40:4e:38:1e:80:36:95:44:0c:af: af:54:e6:cf:f8:60:79:7c:c9:ed:79:4c:65:10:24:69:cc:32: 63:6a:3d:02:63:fe:fd:b9:7a:c8:43:dd:af:fa:cf:7b:36:d1: 48:a2:6f:c2:c5:5c:be:e2:5b:9f:fc:26:ed:91:f4:11:88:7b: a3:e2:c6:a2:42:ee:0f:ad:f9:b1:06:d0:f9:b5:a9:be:2b:9b: c0:09:7e:85:87:68:74:9a:81:f1:3f:47:98:0c:48:1e:1e:e7: 53:d3:02:d8:08:a5:8c:b6:d3:1a:76:f9:c7:95:d4:c0:7e:5b: ae:79:08:f1:e1:e9:8b:8d:24:60:fe:5d:d6:12:34:31:9e:22: 53:61:fc:67:12:6d:f5:b0:1a:6c:c6:76:3d:48:6b:cb:6f:5c: aa:97:bf:53:85:bb:0d:03:db:3c:79:c6:f5:bf:cf:f9:67:c6: 1f:33:55:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyMfvtGNiHMZoNpUmx4H9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj ZTFjZDcwHhcNMjUxMjIxMTIwMDU4WhcNMjUxMjIyMTIwMDU4WjAzMTEwLwYDVQQD Eyg0NjZmNGEwM2YwZDE1NDE0OTYwZmFiODY4MTU5MGRkZjEyYjI2NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV818aJ+0cRAcNhBxoGIaGrwzUCH bCWCbH1HiNbWU/meLmHCH+ebR8w3seGmYiHZsFe9PyFpc9fFo2FrPa3RoqAvfZJ1 y6D1YGB86Ux4FNGslbSpx6WUj9YAdIR10IlEMCfwELYDeq8r5+Qdi3GtBTARFM+m Nm3v19sK7Nzg5hLw2v+NN5PhroHaNaVDWX/0LtaSo7gsSDtHICVCPtQnE+gLLwx8 9kqKpcXAhgLg6/jVqXkA8UMO35/HRepGIq3jW/hLsl25mp857KrWg7mr2603ZEKh zDfku83SMSDQvpiRIRV9QktpHMqBAKOZiMawx11KPRZN/HprT4PIP2Y5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZvSgPw0VQUlg+rhoFZDd8SsmcpMB8GA1UdIwQY MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt ZWFmOTI0NzMxMjE4LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4 LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ0ZsS24h ThO9lGZpMkeeFLsqBZ1K4t2vQmpcUj98UEMoA2SuEc+GNeJ150FypHhA8FuinpkZ +XBw9QXj6tAr1xnLBQEOzncTQ8hLYRORuPBATjgegDaVRAyvr1Tmz/hgeXzJ7XlM ZRAkacwyY2o9AmP+/bl6yEPdr/rPezbRSKJvwsVcvuJbn/wm7ZH0EYh7o+LGokLu D635sQbQ+bWpviubwAl+hYdodJqB8T9HmAxIHh7nU9MC2AiljLbTGnb5x5XUwH5b rnkI8eHpi40kYP5d1hI0MZ4iU2H8ZxJt9bAabMZ2PUhry29cqpe/U4W7DQPbPHnG 9b/P+WfGHzNVDw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:14:42 2025 by rpki-client