This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json) Hash identifier: djq5fiX7btgvXCgnG4HxtGKrSE3GMj1jPDchBQLkcjM= Subject key identifier: C0:68:1D:56:85:1C:41:47:EF:38:2F:90:62:C0:DD:8D:8B:06:DE:47 Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Certificate serial: 019B6AD73B2D6241554959EB6A0D3DCE5576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft Manifest number: 046B Signing time: Mon 29 Dec 2025 16:00:48 +0000 Manifest this update: Mon 29 Dec 2025 16:00:48 +0000 Manifest next update: Tue 30 Dec 2025 16:00:48 +0000 Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: ea2UKwseeOvgrsGAlw0TAVsmecCazgSBtoikELMnoME=) 2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:3b:2d:62:41:55:49:59:eb:6a:0d:3d:ce:55:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Validity Not Before: Dec 29 16:00:48 2025 GMT Not After : Dec 30 16:00:48 2025 GMT Subject: CN=c0681d56851c4147ef382f9062c0dd8d8b06de47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f4:0a:5d:02:52:6d:88:bd:aa:d7:93:e1:6e: b7:c4:96:f6:ad:ad:6b:2d:a2:7b:ab:cc:3d:c9:9f: 8f:fe:2d:0c:ec:58:c8:2c:cf:23:9b:5c:a4:fd:8d: af:cf:1d:5e:98:67:52:20:18:65:92:f7:21:d1:10: 3c:db:aa:5b:e6:f2:4e:34:2f:43:7d:f3:2f:32:48: d4:60:89:7b:21:f9:cb:1c:ef:eb:81:e4:8d:ce:36: 27:fa:8c:09:ba:50:e5:73:8e:09:60:d5:36:ed:cb: 29:4d:7c:f3:f0:a1:a2:d1:3b:8e:b0:f0:92:5f:2c: d3:91:10:15:d3:da:68:80:40:d6:b0:6e:fe:03:06: 8e:a7:4d:03:85:97:38:6c:5c:f7:73:8e:50:ba:12: a8:62:8f:4a:70:37:c2:c3:1a:4a:84:08:5e:2b:06: 9f:9e:20:41:3b:00:fd:af:ac:5d:04:cc:99:a2:c2: 63:47:0e:b9:08:90:3d:e8:86:c8:99:ee:80:7b:06: d7:5d:24:5a:64:51:04:de:a8:12:1a:fa:ce:47:09: a6:39:2a:cd:97:58:60:d3:8e:90:05:9a:b7:6c:dd: 4a:3d:c3:e2:b7:bb:80:dd:af:8d:7d:bb:3d:bd:13: 50:f0:75:69:80:f2:b4:70:e0:49:b8:3a:fa:9a:61: 1b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:68:1D:56:85:1C:41:47:EF:38:2F:90:62:C0:DD:8D:8B:06:DE:47 X509v3 Authority Key Identifier: keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:82:f9:62:85:a5:5c:ab:0f:9a:6a:9d:44:8d:3d:b2:0e:52: 25:08:ce:09:a3:31:a2:6f:31:d0:51:3b:76:38:22:d7:39:5a: d2:37:a5:29:9c:a7:c0:44:f3:f5:90:84:1c:ee:7f:0e:f0:ca: 78:e7:70:87:c2:48:4f:4f:3e:33:00:a0:25:24:8c:12:2b:75: d2:cd:02:96:9d:2a:4b:a9:36:d0:05:51:bb:09:38:b7:4f:29: c4:57:eb:de:84:ef:b8:44:ab:4f:8e:ed:e1:89:a9:a8:69:86: 24:91:b1:0f:f5:6c:22:2e:50:0a:ac:15:be:8a:8e:6f:1e:6a: ef:af:fd:15:a5:64:70:44:2b:5d:e4:d1:5e:b6:95:be:9f:77: 38:bd:ef:30:d6:49:a8:9c:80:40:41:6b:f1:c1:58:0e:6a:03: 78:3e:5e:0a:48:dc:46:d7:41:aa:13:50:5b:82:70:cd:b6:2d: c6:da:d2:2a:09:67:3d:dd:c8:7b:f4:b9:d9:9a:9b:05:06:cb: 2b:d0:0e:39:04:c1:6d:cb:30:ee:a4:11:30:8a:34:f3:d3:71: 26:a3:61:fc:af:04:e5:5e:c9:8c:a9:85:7a:4b:e1:dd:05:27: 45:d4:85:6e:5f:18:95:95:a9:74:cc:47:3e:a4:03:2c:ad:19: 2b:80:f3:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1zstYkFVSVnrag09zlV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2FiYzRmMzE2NWM2ZmExZWVjZmRkMDA0ZjQ1ZTUyZTAw YTUwMGUwHhcNMjUxMjI5MTYwMDQ4WhcNMjUxMjMwMTYwMDQ4WjAzMTEwLwYDVQQD EyhjMDY4MWQ1Njg1MWM0MTQ3ZWYzODJmOTA2MmMwZGQ4ZDhiMDZkZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvQKXQJSbYi9qteT4W63xJb2ra1r LaJ7q8w9yZ+P/i0M7FjILM8jm1yk/Y2vzx1emGdSIBhlkvch0RA826pb5vJONC9D ffMvMkjUYIl7IfnLHO/rgeSNzjYn+owJulDlc44JYNU27cspTXzz8KGi0TuOsPCS XyzTkRAV09pogEDWsG7+AwaOp00DhZc4bFz3c45QuhKoYo9KcDfCwxpKhAheKwaf niBBOwD9r6xdBMyZosJjRw65CJA96IbIme6AewbXXSRaZFEE3qgSGvrORwmmOSrN l1hg046QBZq3bN1KPcPit7uA3a+Nfbs9vRNQ8HVpgPK0cOBJuDr6mmEbywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBoHVaFHEFH7zgvkGLA3Y2LBt5HMB8GA1UdIwQY MBaAFBY6vE8xZcb6Huz90AT0XlLgClAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYt MjcxMmY3MWJjNjc0LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYtMjcxMmY3MWJjNjc0 LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIL5YoWl XKsPmmqdRI09sg5SJQjOCaMxom8x0FE7djgi1zla0jelKZynwETz9ZCEHO5/DvDK eOdwh8JIT08+MwCgJSSMEit10s0Clp0qS6k20AVRuwk4t08pxFfr3oTvuESrT47t 4YmpqGmGJJGxD/VsIi5QCqwVvoqObx5q76/9FaVkcEQrXeTRXraVvp93OL3vMNZJ qJyAQEFr8cFYDmoDeD5eCkjcRtdBqhNQW4JwzbYtxtrSKglnPd3Ie/S52ZqbBQbL K9AOOQTBbcsw7qQRMIo089NxJqNh/K8E5V7JjKmFekvh3QUnRdSFbl8YlZWpdMxH PqQDLK0ZK4DzyA== -----END CERTIFICATE-----Generated at Mon Dec 29 22:42:14 2025 by rpki-client