This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json) Hash identifier: wW9NToq0JwvYbytVPtYbtCHT4gesA1YheauHcnAtvvc= Subject key identifier: 15:5E:A6:68:CE:31:BC:81:AC:79:D5:E8:2C:E5:48:78:A1:9F:AD:8E Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019B484B41A9A94041CDF20BC3F47E3766D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft Manifest number: 16CD Signing time: Mon 22 Dec 2025 23:00:50 +0000 Manifest this update: Mon 22 Dec 2025 23:00:50 +0000 Manifest next update: Tue 23 Dec 2025 23:00:50 +0000 Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=) 2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: cswZyTfuYclxU++NQHF++cot411HPL8YNHVGVyIXuHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:41:a9:a9:40:41:cd:f2:0b:c3:f4:7e:37:66:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Dec 22 23:00:50 2025 GMT Not After : Dec 23 23:00:50 2025 GMT Subject: CN=155ea668ce31bc81ac79d5e82ce54878a19fad8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b5:13:56:a3:92:62:fb:a6:32:c5:bc:6b:50: 76:99:e3:e0:48:3d:0f:f6:96:c9:9a:88:d8:39:a5: 4e:54:5c:cf:54:e5:36:6d:f8:46:b6:65:d9:c1:1b: 0f:50:b9:bb:f6:e3:f7:ab:bf:02:74:6d:be:85:33: 03:95:2a:6c:42:9e:c4:3c:87:be:c9:f4:40:0e:df: e1:4c:5a:c9:79:a7:44:51:3b:c9:12:d2:2f:51:f3: dc:d2:2c:a7:d4:59:14:8c:d4:f0:af:7b:65:f7:59: 5e:26:c1:78:8f:e4:e0:b5:ee:b3:e0:d0:dc:0a:f3: fd:10:c8:78:29:3b:28:de:91:a7:7f:d8:d5:ac:3e: ca:66:29:b8:ea:ae:36:10:6e:3f:b4:d1:65:03:58: e4:0a:a9:8d:33:ed:54:94:55:a6:c4:b0:67:80:49: 70:99:98:33:f4:f1:69:e7:ed:4f:60:3a:92:f6:ff: 57:ae:b7:10:eb:78:f1:7c:99:b9:f1:8e:da:29:e6: 79:2e:4f:d5:1a:e5:4f:ee:58:d8:a4:f3:61:65:c2: c2:4c:0e:d7:84:78:ce:ef:6b:18:28:63:4f:db:58: f1:fa:86:b5:9e:e0:fb:80:78:10:34:f7:51:ac:5a: b5:1d:80:6d:fb:0b:4e:57:8c:d5:42:53:93:37:4c: a7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:A6:68:CE:31:BC:81:AC:79:D5:E8:2C:E5:48:78:A1:9F:AD:8E X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:4b:e6:07:b9:2c:b0:03:71:42:97:13:8a:0e:30:b4:ea:5f: e5:d0:33:8e:a9:d0:c0:06:32:06:ad:70:48:61:3d:b1:5b:f7: 49:72:3e:49:d6:71:05:67:62:1e:b6:0b:29:4e:27:61:ea:cb: 3e:e2:40:ea:52:32:37:3f:cd:ce:b7:7a:ef:af:ae:80:34:bf: 42:d2:76:db:0e:af:70:1d:d8:d3:aa:c2:3d:7c:0d:b4:71:3a: 5a:9d:a1:48:d4:59:19:25:ea:1e:d4:91:35:df:a7:55:32:96: 37:71:b9:d4:b8:24:d1:25:db:43:ae:58:cf:19:bc:16:f8:bd: 0b:8d:04:af:93:cb:dc:49:b1:d4:12:42:08:00:6a:16:dc:91: 96:3b:49:1c:f5:68:8c:8a:57:8b:3d:d7:4c:6e:b4:1c:70:c7: f8:d1:c9:bc:09:20:84:53:6c:42:bc:74:47:f6:d2:c6:42:36: 26:8c:87:f0:2f:18:ed:3d:4e:10:54:3a:ab:10:78:56:3a:13: 24:22:fa:05:a1:b1:0f:65:cc:6d:68:43:d1:8d:3a:77:88:e7: ff:30:cf:80:15:18:d4:f1:e0:15:b3:ff:1b:87:cb:04:20:0c: 2a:b4:23:71:25:df:a0:ea:06:21:6b:29:48:5d:ec:13:1f:98: 8e:be:7c:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS0GpqUBBzfILw/R+N2bUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjUxMjIyMjMwMDUwWhcNMjUxMjIzMjMwMDUwWjAzMTEwLwYDVQQD EygxNTVlYTY2OGNlMzFiYzgxYWM3OWQ1ZTgyY2U1NDg3OGExOWZhZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7UTVqOSYvumMsW8a1B2mePgSD0P 9pbJmojYOaVOVFzPVOU2bfhGtmXZwRsPULm79uP3q78CdG2+hTMDlSpsQp7EPIe+ yfRADt/hTFrJeadEUTvJEtIvUfPc0iyn1FkUjNTwr3tl91leJsF4j+Tgte6z4NDc CvP9EMh4KTso3pGnf9jVrD7KZim46q42EG4/tNFlA1jkCqmNM+1UlFWmxLBngElw mZgz9PFp5+1PYDqS9v9XrrcQ63jxfJm58Y7aKeZ5Lk/VGuVP7ljYpPNhZcLCTA7X hHjO72sYKGNP21jx+oa1nuD7gHgQNPdRrFq1HYBt+wtOV4zVQlOTN0yn6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVepmjOMbyBrHnV6CzlSHihn62OMB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEvmB7ks sANxQpcTig4wtOpf5dAzjqnQwAYyBq1wSGE9sVv3SXI+SdZxBWdiHrYLKU4nYerL PuJA6lIyNz/Nzrd676+ugDS/QtJ22w6vcB3Y06rCPXwNtHE6Wp2hSNRZGSXqHtSR Nd+nVTKWN3G51Lgk0SXbQ65Yzxm8Fvi9C40Er5PL3Emx1BJCCABqFtyRljtJHPVo jIpXiz3XTG60HHDH+NHJvAkghFNsQrx0R/bSxkI2JoyH8C8Y7T1OEFQ6qxB4VjoT JCL6BaGxD2XMbWhD0Y06d4jn/zDPgBUY1PHgFbP/G4fLBCAMKrQjcSXfoOoGIWsp SF3sEx+Yjr58gw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:18:46 2025 by rpki-client