This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json) Hash identifier: EQ3dCoS8ZgUPxPYbuS/bbprBPFNqFZQikAH7uX12+Iw= Subject key identifier: 02:E0:A9:3E:2F:1A:EC:4B:02:3F:87:53:F6:4B:87:04:BC:EC:0B:49 Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Certificate serial: 019B4A02D87D3D9AED4FCC07597C7E254496 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft Manifest number: 1723 Signing time: Tue 23 Dec 2025 07:00:58 +0000 Manifest this update: Tue 23 Dec 2025 07:00:58 +0000 Manifest next update: Wed 24 Dec 2025 07:00:58 +0000 Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: WP3XnIJq4gdBL4MOfpEX8My8urPnSllRpVp93BwinMY=) 2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:02:d8:7d:3d:9a:ed:4f:cc:07:59:7c:7e:25:44:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Validity Not Before: Dec 23 07:00:58 2025 GMT Not After : Dec 24 07:00:58 2025 GMT Subject: CN=02e0a93e2f1aec4b023f8753f64b8704bcec0b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:16:d8:fd:21:e3:d3:da:15:04:fa:ca:04: 2f:90:c6:9b:0a:0d:b2:4b:18:a3:6c:b4:b1:0e:68: 97:79:5f:3d:1f:83:e2:f1:e7:62:ee:70:55:db:ee: 41:c1:51:42:51:af:9e:cf:2f:84:fd:5d:e0:2c:b5: 91:a5:7d:02:e1:44:b2:41:e3:f2:ae:58:45:83:2f: 80:4d:f6:2d:26:e6:7a:50:a8:b9:ce:96:e2:63:33: 8c:19:5c:d9:39:0a:cf:9d:23:0b:76:f8:a3:f9:2b: 96:f2:2e:14:07:d6:42:8e:ca:07:09:2a:b3:5f:9b: 45:61:09:b9:7b:d9:e5:4e:4d:0d:e6:95:ac:e3:b5: e6:4a:c7:b0:d9:e7:4c:9a:c4:8b:3e:56:93:db:d3: 9e:53:03:61:d5:6b:b5:94:a0:2f:48:66:8a:02:97: 38:f3:65:2a:d7:92:2f:74:08:17:da:de:2b:9c:c7: 3e:38:ed:9d:78:8f:6f:33:0a:af:56:a8:da:55:6e: 7e:fb:cf:99:9c:75:1b:00:45:71:18:83:0d:34:66: 60:6a:f5:3d:5e:57:81:36:b8:0c:0c:e4:56:88:8d: bf:73:b6:67:70:dc:c0:f3:c0:ca:25:ed:56:fe:90: c2:b3:fd:36:a7:9c:74:9c:f6:48:f4:3b:28:74:a4: bc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:A9:3E:2F:1A:EC:4B:02:3F:87:53:F6:4B:87:04:BC:EC:0B:49 X509v3 Authority Key Identifier: keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bb:33:94:b0:62:e1:78:47:76:1f:dd:3a:2b:a3:0b:88:84: 9b:9b:7a:be:41:b8:89:62:7e:12:84:31:3a:b5:77:d5:9e:3e: 07:ca:91:8b:b1:c6:ec:bb:dc:5e:b1:60:97:68:d1:e9:3d:d1: c8:50:b2:16:cd:2f:0e:56:75:4a:0a:f2:7f:d3:80:18:93:75: d1:95:99:ff:57:31:09:75:24:e1:7d:49:88:a9:bb:b6:ad:26: 7d:41:fd:85:75:4c:fc:45:bd:73:71:c9:35:5e:12:18:a0:7e: fd:bc:5e:ac:30:56:1a:b8:95:03:80:66:4a:d6:84:35:07:a1: 22:3c:a5:cb:f0:50:1f:4d:47:8d:74:b6:49:a2:ad:e7:8d:b4: 22:8d:57:72:54:43:46:64:a4:a6:9a:1f:ee:79:07:62:29:3a: 25:6a:96:9d:a2:f2:79:ff:9d:84:65:f0:84:59:9d:05:1d:09: 68:ad:1f:bd:79:04:13:56:d6:b6:e6:89:f4:86:87:86:9e:b6: c8:8c:02:26:ff:22:2e:3e:d1:de:7e:8a:5e:d3:c3:b5:15:b9: b0:72:d3:fc:40:34:e4:3e:58:2b:ba:b6:03:9a:3c:27:65:1a: ec:40:4f:85:40:99:e6:ff:db:3f:26:99:e9:2a:2e:97:5f:2d: 8e:cf:05:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAth9PZrtT8wHWXx+JUSWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk NzkwYzkwHhcNMjUxMjIzMDcwMDU4WhcNMjUxMjI0MDcwMDU4WjAzMTEwLwYDVQQD EygwMmUwYTkzZTJmMWFlYzRiMDIzZjg3NTNmNjRiODcwNGJjZWMwYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/YW2P0h49PaFQT6ygQvkMabCg2y SxijbLSxDmiXeV89H4Pi8edi7nBV2+5BwVFCUa+ezy+E/V3gLLWRpX0C4USyQePy rlhFgy+ATfYtJuZ6UKi5zpbiYzOMGVzZOQrPnSMLdvij+SuW8i4UB9ZCjsoHCSqz X5tFYQm5e9nlTk0N5pWs47XmSsew2edMmsSLPlaT29OeUwNh1Wu1lKAvSGaKApc4 82Uq15IvdAgX2t4rnMc+OO2deI9vMwqvVqjaVW5++8+ZnHUbAEVxGIMNNGZgavU9 XleBNrgMDORWiI2/c7ZncNzA88DKJe1W/pDCs/02p5x0nPZI9DsodKS8OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALgqT4vGuxLAj+HU/ZLhwS87AtJMB8GA1UdIwQY MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2 LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7szlLBi 4XhHdh/dOiujC4iEm5t6vkG4iWJ+EoQxOrV31Z4+B8qRi7HG7LvcXrFgl2jR6T3R yFCyFs0vDlZ1Sgryf9OAGJN10ZWZ/1cxCXUk4X1JiKm7tq0mfUH9hXVM/EW9c3HJ NV4SGKB+/bxerDBWGriVA4BmStaENQehIjyly/BQH01HjXS2SaKt5420Io1XclRD RmSkppof7nkHYik6JWqWnaLyef+dhGXwhFmdBR0JaK0fvXkEE1bWtuaJ9IaHhp62 yIwCJv8iLj7R3n6KXtPDtRW5sHLT/EA05D5YK7q2A5o8J2Ua7EBPhUCZ5v/bPyaZ 6Soul18tjs8FMQ== -----END CERTIFICATE-----Generated at Tue Dec 23 15:50:02 2025 by rpki-client