This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json) Hash identifier: EtPwp/xjCWL71Xd8QVcIHVAOhwMbmXHpPXUA5YBU5TM= Subject key identifier: A7:7E:B3:3B:D5:6B:0C:96:95:38:8C:1F:FE:D6:42:E2:AA:0E:F9:24 Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Certificate serial: 019B3D236A248E1618295AACD09E5D0BE94D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft Manifest number: 149C Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: +XCOMg7e6rHcQzXqx7dKEa4IxL6qQN2J9v+XgBiYtdo=) 2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:6a:24:8e:16:18:29:5a:ac:d0:9e:5d:0b:e9:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=a77eb33bd56b0c9695388c1ffed642e2aa0ef924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:86:37:16:44:4d:68:2b:0f:fa:4e:fd:7c: 75:c8:bb:d5:70:94:e1:04:86:d9:db:48:55:44:b5: 9b:8b:47:d3:90:f7:5c:73:f4:45:54:65:85:cc:a3: c1:71:b3:f3:0a:fc:c7:5f:a7:27:a9:3f:f6:78:07: 15:5d:7a:28:89:e4:33:2d:8f:ff:8b:fa:3b:40:0f: 48:52:90:2f:e1:9e:a6:10:f3:61:9b:21:86:18:51: 77:bb:b4:a5:1a:7d:9f:7d:79:2c:a3:dc:3e:8f:d2: c3:e0:30:0c:f5:eb:4e:04:aa:e1:60:a4:4a:8c:eb: a6:cb:6b:82:06:e3:36:04:a9:42:fb:ff:a4:c1:8d: 52:3a:8e:45:ea:f1:01:90:95:fe:3b:d6:a7:98:84: 7e:7b:20:f0:83:37:a5:70:7b:a5:55:dc:76:86:98: 53:61:11:63:04:5f:b8:52:2d:e6:35:7f:a7:33:ce: 84:9d:6d:eb:18:69:a3:bf:36:69:26:35:fa:6e:70: 03:a7:59:72:86:1b:14:8a:34:e5:e9:13:d2:9c:b6: 12:83:1b:29:d9:3f:35:a3:6f:c7:2b:75:75:50:df: 26:79:00:fc:09:39:8f:de:5d:93:8a:a7:80:d9:f8: 3b:5f:d7:b7:1a:12:fd:1d:3d:a8:9f:90:d5:a5:bc: c2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7E:B3:3B:D5:6B:0C:96:95:38:8C:1F:FE:D6:42:E2:AA:0E:F9:24 X509v3 Authority Key Identifier: keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f3:c7:ea:5e:8c:98:4c:c3:3b:7a:1b:a1:4a:49:21:16:83: 85:e5:da:3b:2d:1e:c1:4e:20:ca:0d:e0:71:12:b9:13:d6:35: bc:03:cb:db:be:13:f8:ce:d4:e9:7f:a6:da:b1:2a:57:3c:d8: c1:7d:da:3c:14:4f:0c:ec:29:d9:c8:7f:a5:b0:c1:2d:4e:ef: 26:99:25:b9:de:6d:45:2a:53:9a:af:7d:3e:3a:b0:32:f8:30: 14:d7:11:c9:3b:1f:cf:9f:99:95:49:76:68:dd:26:e9:ef:1e: 25:4f:cb:e4:7c:06:b0:1c:bc:e0:d3:4f:f0:8d:99:a9:86:13: ad:80:a1:3c:58:3d:56:62:92:4a:86:61:75:a7:4a:89:31:cc: 80:16:e9:ce:51:54:b5:db:a3:89:f4:07:5d:89:2e:01:34:25: 14:28:86:37:a0:df:74:96:a7:da:67:7c:9f:64:5c:b4:49:44: 5d:50:ee:92:76:28:88:d7:b0:16:42:58:01:74:14:86:6a:12: 82:84:0b:32:be:c2:ab:a9:66:e1:c8:be:9a:18:e0:5c:2c:f4: be:2d:71:f4:1d:10:9e:af:f9:3f:46:55:10:21:bd:b1:00:1f: ac:44:98:9f:95:c4:d9:fe:8c:50:31:50:64:0b:d6:5a:01:9b: 9d:6c:a8:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2okjhYYKVqs0J5dC+lNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5 ZDY2YTIwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD EyhhNzdlYjMzYmQ1NmIwYzk2OTUzODhjMWZmZWQ2NDJlMmFhMGVmOTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupmGNxZETWgrD/pO/Xx1yLvVcJTh BIbZ20hVRLWbi0fTkPdcc/RFVGWFzKPBcbPzCvzHX6cnqT/2eAcVXXooieQzLY// i/o7QA9IUpAv4Z6mEPNhmyGGGFF3u7SlGn2ffXkso9w+j9LD4DAM9etOBKrhYKRK jOumy2uCBuM2BKlC+/+kwY1SOo5F6vEBkJX+O9anmIR+eyDwgzelcHulVdx2hphT YRFjBF+4Ui3mNX+nM86EnW3rGGmjvzZpJjX6bnADp1lyhhsUijTl6RPSnLYSgxsp 2T81o2/HK3V1UN8meQD8CTmP3l2TiqeA2fg7X9e3GhL9HT2on5DVpbzCpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd+szvVawyWlTiMH/7WQuKqDvkkMB8GA1UdIwQY MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/PH6l6M mEzDO3oboUpJIRaDheXaOy0ewU4gyg3gcRK5E9Y1vAPL274T+M7U6X+m2rEqVzzY wX3aPBRPDOwp2ch/pbDBLU7vJpklud5tRSpTmq99PjqwMvgwFNcRyTsfz5+ZlUl2 aN0m6e8eJU/L5HwGsBy84NNP8I2ZqYYTrYChPFg9VmKSSoZhdadKiTHMgBbpzlFU tdujifQHXYkuATQlFCiGN6DfdJan2md8n2RctElEXVDuknYoiNewFkJYAXQUhmoS goQLMr7Cq6lm4ci+mhjgXCz0vi1x9B0Qnq/5P0ZVECG9sQAfrESYn5XE2f6MUDFQ ZAvWWgGbnWyoCA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:57 2025 by rpki-client