This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json) Hash identifier: MDv2AhXWCOfTJ2jMNgzmk9SsSc4e/UGA6LKE/Fi060g= Subject key identifier: 1D:27:0B:2E:AA:83:DA:1A:B0:FF:43:BD:24:18:8C:79:C3:74:6C:E1 Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Certificate serial: 019B6D33690AF70A293ABE6A2A7263987208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft Manifest number: 111F Signing time: Tue 30 Dec 2025 03:00:44 +0000 Manifest this update: Tue 30 Dec 2025 03:00:44 +0000 Manifest next update: Wed 31 Dec 2025 03:00:44 +0000 Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: zwRZyvXGwITqu/3f6mSVK9gauiZsGeY7iKsx05DNPgg=) 2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:69:0a:f7:0a:29:3a:be:6a:2a:72:63:98:72:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Validity Not Before: Dec 30 03:00:44 2025 GMT Not After : Dec 31 03:00:44 2025 GMT Subject: CN=1d270b2eaa83da1ab0ff43bd24188c79c3746ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1e:68:c2:c7:f3:06:9e:06:b0:fd:ff:f4:f0: 81:f6:29:dd:bb:b3:52:8a:fc:30:81:ca:c7:eb:60: 20:b6:cf:15:fa:d2:61:c3:d0:f2:73:a9:94:a7:75: b3:6e:00:7b:31:94:96:ae:50:7f:3c:17:8d:64:34: 2d:8b:63:70:fa:b7:05:78:2c:f3:34:d5:20:4e:96: 42:ba:01:01:a1:48:9e:ba:4f:0a:d9:67:11:45:76: 59:c3:b5:8c:74:fa:b3:33:ff:4a:9e:ac:25:96:85: af:32:6f:4f:0f:11:d0:d4:7f:54:2f:cc:b4:24:43: a1:63:4a:ce:8e:3d:ca:17:2f:7e:e7:3b:fb:93:b9: 03:46:a4:98:c0:7b:e3:5c:03:e3:cb:d4:20:91:f4: 58:f8:25:b7:6e:12:45:4e:75:00:47:9d:54:86:09: fb:69:e8:5b:4a:0f:58:9e:65:48:6a:5a:ec:f2:7e: 65:fd:59:f6:bf:49:da:1b:4d:39:e4:7b:c7:58:05: 09:1f:38:2f:1f:24:c3:34:f4:9d:26:2f:31:69:22: 28:99:c6:2e:28:61:07:06:a3:49:27:12:a0:04:21: 68:30:21:65:57:a3:c0:ed:af:b6:b9:a6:d1:ce:ca: bb:54:c2:ef:22:9f:ef:cd:67:5f:37:40:6d:30:3b: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:27:0B:2E:AA:83:DA:1A:B0:FF:43:BD:24:18:8C:79:C3:74:6C:E1 X509v3 Authority Key Identifier: keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e7:5f:e5:03:4e:8e:26:fd:8f:89:bb:91:a5:17:14:ac:df: c5:51:cb:53:63:df:19:ae:e4:3a:c2:59:e3:96:48:24:17:bd: ed:59:1c:d8:1d:a9:5f:65:f2:b6:dc:a4:f5:31:00:64:31:fe: 00:cb:b1:24:38:6e:12:e0:23:31:22:f9:f7:2e:08:44:97:7e: dc:f9:fc:99:ae:02:e6:69:b1:c6:ed:5d:a5:ed:8e:3f:65:97: 81:25:64:93:4b:01:e2:98:de:98:9f:6a:3a:fe:91:cb:b3:7c: ab:1a:8f:a5:2b:cd:1a:89:f4:91:08:9e:ff:45:cd:44:09:01: 50:81:4f:63:d1:dd:07:cb:8a:c0:e5:6e:b0:f6:99:50:8a:37: cb:03:eb:e8:5c:3a:ae:bb:75:29:34:08:1d:c7:a2:a1:d9:d1: 6d:8c:ec:fd:0f:cb:20:fd:e1:ec:fa:7a:f8:a9:70:f2:c1:dd: b9:90:ce:6b:6d:e5:85:7c:4e:c6:f0:d8:7f:42:c2:a2:77:df: 6d:88:4d:bb:c2:04:3a:14:a1:18:84:7c:15:a2:02:54:98:b0: 46:ee:5d:a2:4a:b8:9b:2c:5e:70:55:d5:26:72:c3:85:eb:62: e0:31:34:77:c4:b3:7f:8a:70:e3:9b:06:b9:29:ee:43:d5:41: de:11:05:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM2kK9wopOr5qKnJjmHIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzBlMWJjNTg2OWM2MDJiNjQyNDQ5MDMxZDRiNzExNmM5 ZGZhMjYwHhcNMjUxMjMwMDMwMDQ0WhcNMjUxMjMxMDMwMDQ0WjAzMTEwLwYDVQQD EygxZDI3MGIyZWFhODNkYTFhYjBmZjQzYmQyNDE4OGM3OWMzNzQ2Y2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x5owsfzBp4GsP3/9PCB9indu7NS ivwwgcrH62Agts8V+tJhw9Dyc6mUp3WzbgB7MZSWrlB/PBeNZDQti2Nw+rcFeCzz NNUgTpZCugEBoUieuk8K2WcRRXZZw7WMdPqzM/9KnqwlloWvMm9PDxHQ1H9UL8y0 JEOhY0rOjj3KFy9+5zv7k7kDRqSYwHvjXAPjy9QgkfRY+CW3bhJFTnUAR51Uhgn7 aehbSg9YnmVIalrs8n5l/Vn2v0naG0055HvHWAUJHzgvHyTDNPSdJi8xaSIomcYu KGEHBqNJJxKgBCFoMCFlV6PA7a+2uabRzsq7VMLvIp/vzWdfN0BtMDusvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0nCy6qg9oasP9DvSQYjHnDdGzhMB8GA1UdIwQY MBaAFBZw4bxYacYCtkJEkDHUtxFsnfomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQt YzBlYTI4YWMzNjdhLzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQtYzBlYTI4YWMzNjdh LzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOdf5QNO jib9j4m7kaUXFKzfxVHLU2PfGa7kOsJZ45ZIJBe97Vkc2B2pX2Xyttyk9TEAZDH+ AMuxJDhuEuAjMSL59y4IRJd+3Pn8ma4C5mmxxu1dpe2OP2WXgSVkk0sB4pjemJ9q Ov6Ry7N8qxqPpSvNGon0kQie/0XNRAkBUIFPY9HdB8uKwOVusPaZUIo3ywPr6Fw6 rrt1KTQIHceiodnRbYzs/Q/LIP3h7Pp6+Klw8sHduZDOa23lhXxOxvDYf0LConff bYhNu8IEOhShGIR8FaICVJiwRu5dokq4myxecFXVJnLDheti4DE0d8Szf4pw45sG uSnuQ9VB3hEFfw== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:57 2025 by rpki-client