This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json) Hash identifier: mMs/l0JEBJ4CxCVe76B3cR6uN8z8cy06LxeRDkcK/6E= Subject key identifier: C5:E0:CA:25:71:5F:F7:40:83:C9:D0:17:6B:4F:D2:68:92:19:55:0F Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Certificate serial: 019B4C95C6FC3A157088A1500C379E3EEABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft Manifest number: 14A4 Signing time: Tue 23 Dec 2025 19:00:42 +0000 Manifest this update: Tue 23 Dec 2025 19:00:42 +0000 Manifest next update: Wed 24 Dec 2025 19:00:42 +0000 Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: PAiIkidvwS6qfgmFlpqTtKHkMiRa24UHnpcXsJjC2C0=) 2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:c6:fc:3a:15:70:88:a1:50:0c:37:9e:3e:ea:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Validity Not Before: Dec 23 19:00:42 2025 GMT Not After : Dec 24 19:00:42 2025 GMT Subject: CN=c5e0ca25715ff74083c9d0176b4fd2689219550f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:bb:07:34:05:af:db:df:63:ae:c4:4b:37: 08:bc:ff:93:de:ab:0a:0c:2b:21:ec:2d:96:aa:95: 15:3d:80:a3:a2:c6:28:2e:4c:8d:e0:1b:a4:37:28: df:21:18:7f:51:a2:d8:0c:0f:27:f7:f6:82:b0:24: 7d:6c:15:e6:a7:08:c8:3d:37:54:92:b2:94:73:34: 95:9e:5b:ec:bf:de:41:cc:f6:a5:b4:bb:90:28:dc: 18:aa:25:0e:e1:de:e2:75:01:ee:c2:2d:57:f4:40: 97:dd:e0:92:39:50:4d:6b:89:e1:b6:3d:ce:e1:f4: 33:47:5a:54:43:de:85:85:11:34:59:6d:ad:b2:9a: 7b:bb:0b:3e:a0:ab:6b:2e:12:20:ce:95:8a:9f:33: ff:e9:36:6c:e7:dc:81:06:8d:de:dd:49:a6:c4:3f: 64:de:07:a0:84:08:ff:30:3c:5c:46:07:54:50:55: d8:e7:99:4a:f0:be:59:c1:45:c9:b3:74:ff:b2:2d: 17:6d:93:82:cf:a1:20:6e:7d:79:2a:4d:8c:70:fa: b6:0a:e4:90:4c:3a:34:0d:ac:40:3f:46:e8:fe:c1: 06:32:71:39:bc:1e:10:54:e1:92:af:bb:a4:d5:be: 43:6e:b1:30:2f:1b:30:85:0e:24:95:1d:5e:17:08: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E0:CA:25:71:5F:F7:40:83:C9:D0:17:6B:4F:D2:68:92:19:55:0F X509v3 Authority Key Identifier: keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:41:1c:0c:54:33:d3:67:da:ee:1a:e6:23:c6:34:b7:10:57: 11:c1:b8:80:0f:11:c5:24:71:90:4f:30:c4:18:1b:43:49:33: 9e:26:d6:4b:4f:99:3a:86:99:5e:e3:a0:50:ab:5b:9d:92:78: 4a:e2:4d:9e:bf:28:62:10:0a:74:26:29:fc:90:f8:d0:03:5b: 96:08:c5:c1:be:94:9c:28:81:df:a8:48:39:72:ca:8b:a0:8d: 51:7d:90:31:e3:b2:45:d2:dc:d2:de:f6:d1:27:44:e0:2a:86: 00:93:11:a5:3e:54:ea:3e:8b:e4:c3:03:fb:cc:14:53:5b:4a: a1:e6:4d:81:2c:bf:e9:14:57:e7:34:41:45:04:ec:a0:17:36: 6c:84:6b:c4:4b:03:4e:e8:9b:4b:2b:93:24:b4:55:11:af:2a: 02:f2:09:c5:74:fe:e9:c3:fa:6d:36:86:e8:c5:1d:f0:89:7b: 5f:e3:4e:69:1e:e8:8b:b6:88:b0:0f:70:79:35:48:47:d1:c6: 1e:31:60:a6:46:4c:a9:53:db:d1:01:01:d4:6b:7a:ae:92:93: 31:a4:b5:01:b2:7f:ce:fa:d9:ed:64:8b:ad:ed:49:75:b0:f4: 76:ba:b1:86:1d:31:7a:e2:84:a0:a4:f3:8c:25:fd:c8:f7:f4: 58:4c:92:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlcb8OhVwiKFQDDeePuq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5 ZDY2YTIwHhcNMjUxMjIzMTkwMDQyWhcNMjUxMjI0MTkwMDQyWjAzMTEwLwYDVQQD EyhjNWUwY2EyNTcxNWZmNzQwODNjOWQwMTc2YjRmZDI2ODkyMTk1NTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz+7BzQFr9vfY67ESzcIvP+T3qsK DCsh7C2WqpUVPYCjosYoLkyN4BukNyjfIRh/UaLYDA8n9/aCsCR9bBXmpwjIPTdU krKUczSVnlvsv95BzPaltLuQKNwYqiUO4d7idQHuwi1X9ECX3eCSOVBNa4nhtj3O 4fQzR1pUQ96FhRE0WW2tspp7uws+oKtrLhIgzpWKnzP/6TZs59yBBo3e3UmmxD9k 3geghAj/MDxcRgdUUFXY55lK8L5ZwUXJs3T/si0XbZOCz6Egbn15Kk2McPq2CuSQ TDo0DaxAP0bo/sEGMnE5vB4QVOGSr7uk1b5DbrEwLxswhQ4klR1eFwgZMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXgyiVxX/dAg8nQF2tP0miSGVUPMB8GA1UdIwQY MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0EcDFQz 02fa7hrmI8Y0txBXEcG4gA8RxSRxkE8wxBgbQ0kznibWS0+ZOoaZXuOgUKtbnZJ4 SuJNnr8oYhAKdCYp/JD40ANblgjFwb6UnCiB36hIOXLKi6CNUX2QMeOyRdLc0t72 0SdE4CqGAJMRpT5U6j6L5MMD+8wUU1tKoeZNgSy/6RRX5zRBRQTsoBc2bIRrxEsD TuibSyuTJLRVEa8qAvIJxXT+6cP6bTaG6MUd8Il7X+NOaR7oi7aIsA9weTVIR9HG HjFgpkZMqVPb0QEB1Gt6rpKTMaS1AbJ/zvrZ7WSLre1JdbD0drqxhh0xeuKEoKTz jCX9yPf0WEySpQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:36:55 2025 by rpki-client