This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json) Hash identifier: +3A6B+eYIu4CmubGOPbXuV5jvzaB6667iangHEz53aQ= Subject key identifier: 8F:CA:AB:C9:84:CE:C2:F3:3F:43:5B:9D:67:E7:F9:5E:F0:C1:A3:A5 Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Certificate serial: 019B4DE06E05DBAD57522458038D247AA777 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft Manifest number: 1725 Signing time: Wed 24 Dec 2025 01:01:52 +0000 Manifest this update: Wed 24 Dec 2025 01:01:52 +0000 Manifest next update: Thu 25 Dec 2025 01:01:52 +0000 Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: OnQY9CjRCkKZ19XaJkLfLXsTqhtCJQDlv3QL1Ml8Yzo=) 2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:6e:05:db:ad:57:52:24:58:03:8d:24:7a:a7:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Validity Not Before: Dec 24 01:01:52 2025 GMT Not After : Dec 25 01:01:52 2025 GMT Subject: CN=8fcaabc984cec2f33f435b9d67e7f95ef0c1a3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0d:94:05:cc:b3:57:86:e3:f5:55:27:61:6b: 78:f3:36:21:22:51:1a:a1:c7:ba:98:b5:2c:77:7e: 4f:a4:0a:e8:fc:84:38:e0:3e:d3:cf:ab:cf:8d:c6: a2:c5:bc:4f:7e:65:c1:f2:95:7c:43:cb:73:30:37: 49:13:2b:5c:ed:6d:b6:e5:1d:92:e3:7c:3f:71:da: 63:98:7b:3f:e9:3f:d6:0d:4c:19:36:ac:c2:9b:69: bd:3e:86:1d:8a:6a:a0:66:25:22:cb:d2:e8:7d:9f: 7d:06:7c:7b:40:90:33:ab:3c:f9:db:1d:ec:2b:e6: 2b:f4:76:08:21:6f:a9:ce:d7:f0:17:eb:85:de:cd: 37:d3:20:df:d7:78:84:57:1d:2e:e9:a1:c4:6d:be: 78:14:ad:0c:e9:83:5a:03:75:fe:44:d9:11:67:5b: c6:9d:a1:28:e4:21:45:6d:63:f2:69:e9:a6:58:e9: 2d:b4:23:35:e7:bf:e9:df:c4:69:6b:4e:47:7a:b8: 2a:d1:6f:a9:cf:39:57:a8:78:a5:27:b2:b6:0c:6f: 5f:3c:2b:6d:19:16:9c:2b:c7:03:82:21:8a:17:01: e6:6a:d9:e5:45:11:34:28:89:23:7d:97:4e:57:b0: a6:65:89:b9:6f:da:35:b2:06:3f:03:54:9f:65:4c: cc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:AB:C9:84:CE:C2:F3:3F:43:5B:9D:67:E7:F9:5E:F0:C1:A3:A5 X509v3 Authority Key Identifier: keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fa:c8:ac:45:d6:29:0e:ed:a4:4b:3a:c5:78:99:24:57:69: 5a:4b:c5:60:f2:6a:a3:84:1a:03:0e:be:2c:21:22:af:4f:51: 7e:48:a9:8c:19:c0:77:d0:31:37:c4:17:1c:b6:ea:2b:74:1d: bc:16:26:56:62:6d:76:5a:70:9e:ac:f9:c2:55:77:3d:8d:ee: 62:f7:fa:4b:ff:46:25:7b:42:01:f3:6b:80:13:3f:ce:56:eb: 83:bc:19:6a:82:a5:28:de:75:c2:a6:28:d2:51:f7:e2:4e:71: 6a:ed:fc:c8:4d:4d:9a:ed:32:3d:d8:42:94:ba:61:25:8b:d8: 7e:cb:89:6e:91:3f:d9:63:04:76:81:f0:71:94:e8:73:29:3c: 2b:e5:ce:63:94:fe:0f:fa:c4:38:f2:85:a9:d2:b2:02:00:f6: cd:1b:bb:85:2d:c6:5b:31:25:30:9f:b7:67:83:60:0c:d8:9c: 65:26:10:8c:76:2e:4c:87:94:ef:37:d1:06:31:00:00:d5:7a: cb:47:b9:20:13:19:d0:48:f5:ed:bb:29:ec:13:20:c7:b6:7a: d5:1b:c3:47:18:2f:8a:01:4c:62:6f:dd:2a:45:c9:a3:ee:35: af:54:3a:ba:83:9b:99:fc:4f:cf:14:69:25:d0:d7:20:89:c4: b8:f9:57:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4G4F261XUiRYA40keqd3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk NzkwYzkwHhcNMjUxMjI0MDEwMTUyWhcNMjUxMjI1MDEwMTUyWjAzMTEwLwYDVQQD Eyg4ZmNhYWJjOTg0Y2VjMmYzM2Y0MzViOWQ2N2U3Zjk1ZWYwYzFhM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g2UBcyzV4bj9VUnYWt48zYhIlEa oce6mLUsd35PpAro/IQ44D7Tz6vPjcaixbxPfmXB8pV8Q8tzMDdJEytc7W225R2S 43w/cdpjmHs/6T/WDUwZNqzCm2m9PoYdimqgZiUiy9LofZ99Bnx7QJAzqzz52x3s K+Yr9HYIIW+pztfwF+uF3s030yDf13iEVx0u6aHEbb54FK0M6YNaA3X+RNkRZ1vG naEo5CFFbWPyaemmWOkttCM157/p38Rpa05Hergq0W+pzzlXqHilJ7K2DG9fPCtt GRacK8cDgiGKFwHmatnlRRE0KIkjfZdOV7CmZYm5b9o1sgY/A1SfZUzMVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/Kq8mEzsLzP0NbnWfn+V7wwaOlMB8GA1UdIwQY MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2 LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJfrIrEXW KQ7tpEs6xXiZJFdpWkvFYPJqo4QaAw6+LCEir09RfkipjBnAd9AxN8QXHLbqK3Qd vBYmVmJtdlpwnqz5wlV3PY3uYvf6S/9GJXtCAfNrgBM/zlbrg7wZaoKlKN51wqYo 0lH34k5xau38yE1Nmu0yPdhClLphJYvYfsuJbpE/2WMEdoHwcZTocyk8K+XOY5T+ D/rEOPKFqdKyAgD2zRu7hS3GWzElMJ+3Z4NgDNicZSYQjHYuTIeU7zfRBjEAANV6 y0e5IBMZ0Ej17bsp7BMgx7Z61RvDRxgvigFMYm/dKkXJo+41r1Q6uoObmfxPzxRp JdDXIInEuPlXng== -----END CERTIFICATE-----Generated at Wed Dec 24 10:48:23 2025 by rpki-client