This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json) Hash identifier: biBZUo9m0kMJYMDr1TeRQHHoAG+tuwR45F92VYi9KYU= Subject key identifier: E2:13:3C:FC:E3:70:BD:81:01:A3:DC:80:1E:DC:BB:54:B3:5F:04:0A Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a Certificate serial: 019B6731ABC264BE30D0D6FEB8C3D1741B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 23:01:06 +0000 Manifest this update: Sun 28 Dec 2025 23:01:06 +0000 Manifest next update: Mon 29 Dec 2025 23:01:06 +0000 Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: oY/pVOZ0DIJXmHz/DS5HqMEvfYS8LcWCQLYdDNxFOLo=) 2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:ab:c2:64:be:30:d0:d6:fe:b8:c3:d1:74:1b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a Validity Not Before: Dec 28 23:01:06 2025 GMT Not After : Dec 29 23:01:06 2025 GMT Subject: CN=e2133cfce370bd8101a3dc801edcbb54b35f040a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:74:3c:52:20:7c:2a:75:e4:c8:82:10:76: 2a:57:aa:4d:17:f2:bb:f2:35:d5:fd:3c:74:4d:fb: ed:f8:05:7f:f5:ca:28:62:ee:23:80:02:19:e3:32: 8f:b9:70:d2:32:63:82:72:38:66:53:30:e9:71:75: a8:1d:7e:13:65:81:13:0e:2c:64:b0:8a:6a:3a:75: a3:a0:a4:18:d0:f9:ca:bb:92:65:27:24:16:6e:f8: 9d:18:3f:30:28:86:76:ca:d8:4f:53:56:5d:bf:29: e0:57:9d:db:29:05:88:2f:6b:fc:b0:2f:fe:3f:b1: 9e:3b:72:98:71:db:46:a7:ea:bb:ab:9c:7a:da:ca: 0c:b3:a9:95:69:2f:a2:74:44:a5:08:c3:85:25:6a: f0:70:a6:6d:93:bf:88:5b:cc:d4:d4:41:69:8d:fe: f4:41:7e:f8:5c:5f:31:41:22:44:2d:c8:db:bf:5d: d5:0a:f8:f7:0a:9e:0a:52:81:bf:5d:46:be:71:80: 81:34:d8:42:8c:4f:5c:53:ba:41:8b:78:58:97:11: 1c:73:68:a0:84:ee:a6:30:06:5e:c5:e3:5c:77:19: d8:1a:ae:52:02:f3:ee:3e:9e:be:e4:57:2d:55:c1: 3e:e3:4d:c6:b3:36:17:14:91:32:01:f4:0c:c2:c3: 0c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:3C:FC:E3:70:BD:81:01:A3:DC:80:1E:DC:BB:54:B3:5F:04:0A X509v3 Authority Key Identifier: keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d5:2b:12:f3:45:76:50:fd:9b:0c:d7:04:de:13:d7:80:c1: 67:47:c8:63:7c:4a:fb:79:bf:5b:ba:e6:8a:38:13:d9:14:cb: 49:a5:24:11:6b:bf:62:58:6e:1a:46:56:63:18:c9:31:3c:52: 68:3d:6a:89:7a:83:bf:14:26:85:c5:54:8f:9e:52:8c:cb:01: a2:53:d6:1b:c7:2e:3e:f0:91:12:2f:19:af:dc:79:52:f9:f9: c9:20:84:c3:13:d1:70:c2:46:b5:46:23:91:35:ca:c5:6d:d5: 55:4b:ec:e6:5a:f2:88:3e:3d:0a:d2:dc:65:1f:fa:dc:35:2a: ed:75:39:4a:3b:06:98:b8:d4:d0:bb:9e:91:e9:9a:45:63:73: 65:bc:5e:a2:23:49:58:49:7d:f0:bb:4a:6d:54:eb:bb:59:01: 1e:db:e3:1f:24:05:2e:74:fc:fc:86:e5:e3:80:3b:9b:07:51: 3d:f5:b6:67:ff:9d:ab:81:a6:ec:77:47:0f:c1:4e:62:1a:81: 8c:f6:76:62:90:cc:e0:15:87:db:7b:77:cb:ee:53:4f:72:9d: 2a:94:27:de:42:3f:1b:5c:16:3f:54:8f:79:11:3c:6b:2e:c7: f4:88:a8:1a:ff:ed:02:be:ff:0b:1b:92:e3:90:63:7a:dd:3f: 82:49:24:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMavCZL4w0Nb+uMPRdBslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3 NDhlM2EwHhcNMjUxMjI4MjMwMTA2WhcNMjUxMjI5MjMwMTA2WjAzMTEwLwYDVQQD EyhlMjEzM2NmY2UzNzBiZDgxMDFhM2RjODAxZWRjYmI1NGIzNWYwNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOx0PFIgfCp15MiCEHYqV6pNF/K7 8jXV/Tx0Tfvt+AV/9cooYu4jgAIZ4zKPuXDSMmOCcjhmUzDpcXWoHX4TZYETDixk sIpqOnWjoKQY0PnKu5JlJyQWbvidGD8wKIZ2ythPU1ZdvyngV53bKQWIL2v8sC/+ P7GeO3KYcdtGp+q7q5x62soMs6mVaS+idESlCMOFJWrwcKZtk7+IW8zU1EFpjf70 QX74XF8xQSJELcjbv13VCvj3Cp4KUoG/XUa+cYCBNNhCjE9cU7pBi3hYlxEcc2ig hO6mMAZexeNcdxnYGq5SAvPuPp6+5FctVcE+403GszYXFJEyAfQMwsMMRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOITPPzjcL2BAaPcgB7cu1SzXwQKMB8GA1UdIwQY MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5 LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9UrEvNF dlD9mwzXBN4T14DBZ0fIY3xK+3m/W7rmijgT2RTLSaUkEWu/YlhuGkZWYxjJMTxS aD1qiXqDvxQmhcVUj55SjMsBolPWG8cuPvCREi8Zr9x5Uvn5ySCEwxPRcMJGtUYj kTXKxW3VVUvs5lryiD49CtLcZR/63DUq7XU5SjsGmLjU0LuekemaRWNzZbxeoiNJ WEl98LtKbVTru1kBHtvjHyQFLnT8/Ibl44A7mwdRPfW2Z/+dq4Gm7HdHD8FOYhqB jPZ2YpDM4BWH23t3y+5TT3KdKpQn3kI/G1wWP1SPeRE8ay7H9IioGv/tAr7/CxuS 45Bjet0/gkkkqw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:32 2025 by rpki-client