This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json) Hash identifier: pl6Ycj83dW02Q9k8RnjgG4ioIanXI9nE4COyBboIm9c= Subject key identifier: B9:3C:09:73:70:73:28:23:08:D6:7D:FF:26:55:D3:81:9F:9B:3B:D9 Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Certificate serial: 019B5185459BD3AA9539DDB5CF09E6C66CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft Manifest number: 1427 Signing time: Wed 24 Dec 2025 18:00:47 +0000 Manifest this update: Wed 24 Dec 2025 18:00:47 +0000 Manifest next update: Thu 25 Dec 2025 18:00:47 +0000 Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=) 2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: rgQzVTEXNOfnQbsNCb+cIJZYgM1LrsjWdacVCK7JdS0=) 3: NjP1-VxcjUYnG6zS7LVSKs7x9vY.roa (hash: SBm121KuisZ5EZTIvc68c0K3yTgGq/5rmdZ6mqu0hNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:85:45:9b:d3:aa:95:39:dd:b5:cf:09:e6:c6:6c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Validity Not Before: Dec 24 18:00:47 2025 GMT Not After : Dec 25 18:00:47 2025 GMT Subject: CN=b93c09737073282308d67dff2655d3819f9b3bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ed:d5:ff:fa:54:e1:92:52:b5:c3:c4:c3:54: 1c:63:97:50:7c:48:50:24:23:cb:fd:fd:f9:3b:2f: 1a:38:83:c6:5b:68:53:c3:0b:ff:5b:b0:a2:fa:e9: 85:75:be:26:2e:52:d0:ea:e1:ce:ae:d6:07:72:fd: c5:3d:1c:4d:b8:55:10:99:63:01:9a:9b:ef:2a:c2: 91:31:59:01:c4:c3:eb:40:7f:c8:b8:f3:43:b6:b9: 29:21:9e:73:7e:8b:1f:ea:ce:6a:ee:09:3b:e3:52: 06:a7:09:3f:de:a8:2c:cb:06:2e:14:3d:12:f3:77: fc:19:52:a2:2f:2e:80:d5:ab:a4:bc:11:f5:ae:8b: 4d:a5:64:1b:3d:73:45:f9:ef:1c:c5:0b:7a:8b:27: 59:4b:25:40:62:41:4b:75:58:81:e4:03:ea:6c:de: 2f:ba:b3:7f:a5:f5:96:4e:12:c5:86:43:d8:77:f1: bd:13:40:d8:e9:7d:27:24:e2:86:bc:86:06:0d:14: e6:b6:4d:69:02:25:4b:ee:34:ff:87:a8:b9:a3:88: bc:c3:cf:05:34:a8:d9:73:69:8c:2e:7d:ac:15:68: 5b:89:03:73:98:7c:4c:20:a1:58:2b:0a:c3:68:93: 69:27:82:7e:06:d5:63:8d:55:a0:34:81:76:12:e6: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3C:09:73:70:73:28:23:08:D6:7D:FF:26:55:D3:81:9F:9B:3B:D9 X509v3 Authority Key Identifier: keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:68:bb:97:1d:96:98:8a:ce:bf:b3:de:56:51:45:c2:e4:1f: c8:db:b2:b6:a2:4f:52:de:e8:d4:18:40:cb:81:c0:f5:43:e5: 05:c9:8e:63:2f:b7:61:d8:0a:24:f6:b1:40:b9:0f:03:46:b0: 0b:46:3b:1b:a6:f7:8c:46:be:d0:d0:75:e1:43:f7:f1:16:61: ac:8b:93:fa:bf:97:94:aa:95:f7:d2:63:20:21:a3:d6:21:20: de:6d:c3:f0:cb:ec:04:e4:bd:aa:1d:1f:b1:30:da:26:73:0f: b1:12:7e:30:92:97:b4:72:94:7b:97:12:d0:6a:92:7c:03:b0: 95:6f:a9:ae:cd:f5:64:03:e2:71:ff:64:e8:db:a2:29:88:f5: 0c:2b:f9:45:ef:20:3b:04:cb:8e:43:44:bc:9a:1f:bf:cd:83: 43:2c:ab:c2:a8:e6:63:4b:e9:fb:da:40:88:54:0c:bb:59:ef: ff:4c:5f:e2:85:4e:dd:f0:d1:a1:8e:e5:9d:84:ad:26:e1:98: 51:86:c8:0d:66:42:f1:e6:ee:86:de:9d:14:3d:a3:60:6d:cb: cb:d3:87:03:40:f0:42:53:2d:3b:53:b4:2c:0d:27:11:3c:80: 0b:24:9d:c3:01:c4:8b:53:77:6c:b3:4f:29:12:41:d0:34:12: 0d:01:31:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRhUWb06qVOd21zwnmxmzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0 NGUyYmQwHhcNMjUxMjI0MTgwMDQ3WhcNMjUxMjI1MTgwMDQ3WjAzMTEwLwYDVQQD EyhiOTNjMDk3MzcwNzMyODIzMDhkNjdkZmYyNjU1ZDM4MTlmOWIzYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e3V//pU4ZJStcPEw1QcY5dQfEhQ JCPL/f35Oy8aOIPGW2hTwwv/W7Ci+umFdb4mLlLQ6uHOrtYHcv3FPRxNuFUQmWMB mpvvKsKRMVkBxMPrQH/IuPNDtrkpIZ5zfosf6s5q7gk741IGpwk/3qgsywYuFD0S 83f8GVKiLy6A1aukvBH1rotNpWQbPXNF+e8cxQt6iydZSyVAYkFLdViB5APqbN4v urN/pfWWThLFhkPYd/G9E0DY6X0nJOKGvIYGDRTmtk1pAiVL7jT/h6i5o4i8w88F NKjZc2mMLn2sFWhbiQNzmHxMIKFYKwrDaJNpJ4J+BtVjjVWgNIF2EuZJfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk8CXNwcygjCNZ9/yZV04GfmzvZMB8GA1UdIwQY MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt ZGVlNDMxN2Y1YjE0LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0 LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2i7lx2W mIrOv7PeVlFFwuQfyNuytqJPUt7o1BhAy4HA9UPlBcmOYy+3YdgKJPaxQLkPA0aw C0Y7G6b3jEa+0NB14UP38RZhrIuT+r+XlKqV99JjICGj1iEg3m3D8MvsBOS9qh0f sTDaJnMPsRJ+MJKXtHKUe5cS0GqSfAOwlW+prs31ZAPicf9k6NuiKYj1DCv5Re8g OwTLjkNEvJofv82DQyyrwqjmY0vp+9pAiFQMu1nv/0xf4oVO3fDRoY7lnYStJuGY UYbIDWZC8ebuht6dFD2jYG3Ly9OHA0DwQlMtO1O0LA0nETyACySdwwHEi1N3bLNP KRJB0DQSDQEx3w== -----END CERTIFICATE-----Generated at Thu Dec 25 02:43:07 2025 by rpki-client