This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft File: FPt8Mzas1BidP6xjmigNmwAg8pg.mft (raw, json) Hash identifier: T2M2f0OFRJPckhcgUVUHdubZMuuXPtCCgLjd/XdPesU= Subject key identifier: 4E:B7:7F:F6:62:BC:5B:4C:4B:E6:39:A1:F2:00:DF:F5:B9:9A:E1:C6 Authority key identifier: 14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 Certificate issuer: /CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Certificate serial: 019B45B869C3F414D8BBC0B2515CF87180EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft Manifest number: 16D1 Signing time: Mon 22 Dec 2025 11:01:12 +0000 Manifest this update: Mon 22 Dec 2025 11:01:12 +0000 Manifest next update: Tue 23 Dec 2025 11:01:12 +0000 Files and hashes: 1: FPt8Mzas1BidP6xjmigNmwAg8pg.crl (hash: 2HZ1cK22muhmv9xFrnmKj2YlM4ybFWh22l27CYlIwRc=) 2: Jan-36Lo7cls_qlYXAYwCHL-IM0.roa (hash: 9QKHqIJMi/8WyyfdqnXT2xQCCgDbraKMeYqVzfnxL6A=) 3: rrdEpfsB8Gg5zdzJ-FXk4BiB3TE.roa (hash: 4ZmwtT19+5Iz0mku0LqIMr+TT72kqcPqLFHR2qlNxGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:69:c3:f4:14:d8:bb:c0:b2:51:5c:f8:71:80:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fb7c3336acd4189d3fac639a280d9b0020f298 Validity Not Before: Dec 22 11:01:12 2025 GMT Not After : Dec 23 11:01:12 2025 GMT Subject: CN=4eb77ff662bc5b4c4be639a1f200dff5b99ae1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2c:4d:dc:01:22:62:5e:d8:af:33:bb:e6:f1: 29:e7:27:df:96:2e:a4:cf:bc:f5:47:b5:31:25:4a: 95:76:a2:23:23:2f:38:f0:27:56:2a:b8:6e:72:d3: 35:82:9e:55:5c:fc:51:04:b0:ed:7b:e7:78:4f:34: cf:e9:2d:59:b3:27:2e:70:76:42:d7:e6:c9:80:75: 16:9c:a4:90:7d:63:89:91:b7:cc:28:ea:e4:7e:d0: 92:c6:71:e3:99:3d:d6:9f:31:9c:60:0f:b2:81:6b: 98:a0:95:84:9b:4d:6b:b4:a3:74:23:e4:e3:b2:b5: d6:97:2b:0a:74:10:fc:08:c7:0a:d1:92:92:62:63: cd:f4:05:d5:eb:2f:8c:ba:00:c1:4c:21:c9:21:89: e7:73:24:6a:3a:49:7f:00:99:fa:6b:14:21:26:6c: 16:62:ca:81:e9:b5:18:a4:53:d3:78:69:ef:24:8f: 5c:f2:b0:4c:bb:58:82:e5:d1:4f:fd:8c:38:49:65: 1e:db:08:75:28:e1:97:ed:2e:3a:f0:ed:04:19:47: 9a:f6:1a:af:98:26:67:9c:cf:b7:c4:f9:23:d5:be: be:17:2d:89:0c:71:46:28:17:52:1b:b4:af:1f:e0: 39:1c:c0:bc:db:c2:8d:78:2d:21:aa:da:35:fb:f0: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:7F:F6:62:BC:5B:4C:4B:E6:39:A1:F2:00:DF:F5:B9:9A:E1:C6 X509v3 Authority Key Identifier: keyid:14:FB:7C:33:36:AC:D4:18:9D:3F:AC:63:9A:28:0D:9B:00:20:F2:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPt8Mzas1BidP6xjmigNmwAg8pg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64df8e-4b04-4223-8467-9939df1d0d09/1/FPt8Mzas1BidP6xjmigNmwAg8pg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:9c:64:5e:db:ab:84:f8:fa:7b:52:f4:91:e9:92:49:0c:30: 75:2b:ac:3b:5d:f1:92:5c:fb:b7:a8:b8:f4:74:83:ef:b5:41: a5:97:fc:92:8e:7b:8b:bf:ab:6a:5e:7b:52:da:f7:2f:c8:2d: 9a:3e:0c:a6:04:49:d2:4d:c8:af:96:34:35:27:4e:20:ab:6d: 2a:d0:e9:cb:39:8e:4b:d9:66:76:d4:eb:e1:0b:e3:a0:87:7b: 21:c3:04:cb:62:ca:5c:86:3f:c3:cd:dc:6e:cc:e1:bc:b7:d7: ca:19:ed:8b:ea:79:1c:13:88:66:e3:24:4c:98:05:66:84:d7: 34:2d:ec:c1:6b:94:de:6b:ae:01:6c:ba:0f:24:c2:02:9a:c8: 58:1a:d0:fb:33:da:44:71:53:eb:3e:d6:6d:73:22:00:3a:51: ca:6c:e7:4d:c5:72:94:54:77:78:4f:04:05:7c:43:6a:35:54: 45:7b:83:32:fc:52:a5:ee:b8:c2:7e:56:0b:2d:8b:41:9e:53: 9a:b9:46:33:3b:e4:de:4b:61:57:12:89:c3:a9:8e:0c:e7:a2: b3:c7:57:76:bd:a0:c4:50:73:8b:92:13:95:0e:e6:57:24:c6: 3a:ce:df:cd:80:8b:fe:a2:25:63:6d:3b:66:cf:43:16:2d:be: 7e:7e:c5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuGnD9BTYu8CyUVz4cYDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmI3YzMzMzZhY2Q0MTg5ZDNmYWM2MzlhMjgwZDliMDAy MGYyOTgwHhcNMjUxMjIyMTEwMTEyWhcNMjUxMjIzMTEwMTEyWjAzMTEwLwYDVQQD Eyg0ZWI3N2ZmNjYyYmM1YjRjNGJlNjM5YTFmMjAwZGZmNWI5OWFlMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyxN3AEiYl7YrzO75vEp5yffli6k z7z1R7UxJUqVdqIjIy848CdWKrhuctM1gp5VXPxRBLDte+d4TzTP6S1ZsycucHZC 1+bJgHUWnKSQfWOJkbfMKOrkftCSxnHjmT3WnzGcYA+ygWuYoJWEm01rtKN0I+Tj srXWlysKdBD8CMcK0ZKSYmPN9AXV6y+MugDBTCHJIYnncyRqOkl/AJn6axQhJmwW YsqB6bUYpFPTeGnvJI9c8rBMu1iC5dFP/Yw4SWUe2wh1KOGX7S468O0EGUea9hqv mCZnnM+3xPkj1b6+Fy2JDHFGKBdSG7SvH+A5HMC828KNeC0hqto1+/B1cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE63f/ZivFtMS+Y5ofIA3/W5muHGMB8GA1UdIwQY MBaAFBT7fDM2rNQYnT+sY5ooDZsAIPKYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0Njct OTkzOWRmMWQwZDA5LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi82NGRmOGUtNGIwNC00MjIzLTg0NjctOTkzOWRmMWQwZDA5 LzEvRlB0OE16YXMxQmlkUDZ4am1pZ05td0FnOHBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfZxkXtur hPj6e1L0kemSSQwwdSusO13xklz7t6i49HSD77VBpZf8ko57i7+ral57Utr3L8gt mj4MpgRJ0k3Ir5Y0NSdOIKttKtDpyzmOS9lmdtTr4QvjoId7IcMEy2LKXIY/w83c bszhvLfXyhnti+p5HBOIZuMkTJgFZoTXNC3swWuU3muuAWy6DyTCAprIWBrQ+zPa RHFT6z7WbXMiADpRymznTcVylFR3eE8EBXxDajVURXuDMvxSpe64wn5WCy2LQZ5T mrlGMzvk3kthVxKJw6mODOeis8dXdr2gxFBzi5ITlQ7mVyTGOs7fzYCL/qIlY207 Zs9DFi2+fn7F6g== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:34 2025 by rpki-client