This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json) Hash identifier: qy1smC1E6ezr81yJeXYZnhLVO8ZQkXMTm11+b2dZUmU= Subject key identifier: C6:8A:10:97:6E:CE:7B:70:E6:54:F7:A3:81:5E:78:0E:10:FB:67:56 Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Certificate serial: 019B6F21C6EA037AE557B4BCA248D6BE85C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft Manifest number: 16BE Signing time: Tue 30 Dec 2025 12:00:43 +0000 Manifest this update: Tue 30 Dec 2025 12:00:43 +0000 Manifest next update: Wed 31 Dec 2025 12:00:43 +0000 Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=) 2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: Mbct+AY06ku60bBCkr1SaersiN1mM0ZXCjQKjIO0UcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:c6:ea:03:7a:e5:57:b4:bc:a2:48:d6:be:85:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Validity Not Before: Dec 30 12:00:43 2025 GMT Not After : Dec 31 12:00:43 2025 GMT Subject: CN=c68a10976ece7b70e654f7a3815e780e10fb6756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:71:64:08:3c:67:de:18:bf:7c:36:1e:fc:31: b6:32:81:eb:3b:1d:3a:3e:a8:63:36:7a:bf:03:f8: 87:ab:b2:90:b3:92:dd:cb:0f:75:0e:7d:39:08:8f: 43:47:89:a8:be:2f:19:99:d8:39:d6:96:81:1e:9c: 94:53:c9:a2:68:fd:27:0d:83:27:23:c5:06:50:4c: bd:a9:67:06:4c:1a:9f:f6:85:d7:cf:45:a0:f3:a6: c8:0f:97:87:05:56:05:a7:37:74:6f:2c:84:f7:f1: 62:72:47:84:43:d8:84:cf:7f:09:4f:cb:f6:eb:db: ea:3e:69:d2:c4:02:fa:52:e3:47:2e:3a:b3:70:bb: 60:ef:33:63:6e:37:e3:46:ef:d3:a5:a2:4a:a4:ab: 24:cb:b7:97:af:40:be:74:88:9b:21:3c:5d:bf:dc: 1a:ab:b3:a3:0e:80:e1:ab:fb:f9:03:21:65:ac:86: 75:74:39:ac:7c:2a:d1:9a:29:e4:0e:37:b5:8d:87: 0f:e8:e5:a9:a4:33:7d:cd:fe:b4:ef:b2:1d:e0:62: 8e:f2:99:3a:ba:11:19:ae:54:2b:f2:b2:c3:d6:e4: e9:ef:3f:55:37:b1:2a:32:53:8c:6e:c3:f2:30:00: a0:c7:ce:fd:79:39:d6:18:c9:ec:1f:42:3c:b7:3d: 07:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8A:10:97:6E:CE:7B:70:E6:54:F7:A3:81:5E:78:0E:10:FB:67:56 X509v3 Authority Key Identifier: keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:f2:86:b8:18:1c:22:0a:53:25:49:51:c2:e2:40:03:59: dd:bb:9a:3b:19:fe:93:d8:4e:e2:cc:71:28:3f:39:7d:23:9c: 55:0a:89:b1:61:21:ce:22:d1:f4:b1:bb:64:c1:c5:a5:d1:9d: c4:7b:99:52:ad:e6:5c:7e:06:f3:61:94:7a:c5:7b:56:67:12: 33:f8:fb:79:95:b9:2b:1a:45:1e:ef:1d:91:70:07:70:ed:12: da:03:56:7d:97:e0:ae:b4:7f:65:2b:8b:5d:9d:67:39:aa:99: 65:51:dc:74:fc:b6:91:eb:7c:bc:f8:0f:46:7e:e6:82:41:21: a0:56:2c:97:7f:ba:64:ec:c8:86:63:c7:c6:8f:e2:68:df:ea: 97:01:f4:61:78:45:4e:89:54:88:ed:c2:1a:3d:3a:8a:ac:ce: 91:0d:2b:30:a6:8b:07:0c:a6:7e:20:c2:6d:35:09:9b:8c:56: f3:65:94:32:4b:46:62:29:c7:57:77:67:72:08:25:1d:39:02: ad:db:88:8c:cd:48:9d:9d:2f:ca:fb:8b:d9:e0:0d:4d:02:0f: d6:59:45:f5:aa:f6:43:68:e2:6d:a5:f0:03:89:e6:17:1d:9e: 1b:0a:dd:ad:ee:50:93:18:56:e4:86:b2:24:2a:d0:fa:32:2f: 15:3c:07:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIcbqA3rlV7S8okjWvoXHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz ZGNlYmYwHhcNMjUxMjMwMTIwMDQzWhcNMjUxMjMxMTIwMDQzWjAzMTEwLwYDVQQD EyhjNjhhMTA5NzZlY2U3YjcwZTY1NGY3YTM4MTVlNzgwZTEwZmI2NzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXFkCDxn3hi/fDYe/DG2MoHrOx06 PqhjNnq/A/iHq7KQs5Ldyw91Dn05CI9DR4movi8Zmdg51paBHpyUU8miaP0nDYMn I8UGUEy9qWcGTBqf9oXXz0Wg86bID5eHBVYFpzd0byyE9/FickeEQ9iEz38JT8v2 69vqPmnSxAL6UuNHLjqzcLtg7zNjbjfjRu/TpaJKpKsky7eXr0C+dIibITxdv9wa q7OjDoDhq/v5AyFlrIZ1dDmsfCrRminkDje1jYcP6OWppDN9zf6077Id4GKO8pk6 uhEZrlQr8rLD1uTp7z9VN7EqMlOMbsPyMACgx879eTnWGMnsH0I8tz0H3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaKEJduzntw5lT3o4FeeA4Q+2dWMB8GA1UdIwQY MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzryhrgY HCIKUyVJUcLiQANZ3buaOxn+k9hO4sxxKD85fSOcVQqJsWEhziLR9LG7ZMHFpdGd xHuZUq3mXH4G82GUesV7VmcSM/j7eZW5KxpFHu8dkXAHcO0S2gNWfZfgrrR/ZSuL XZ1nOaqZZVHcdPy2ket8vPgPRn7mgkEhoFYsl3+6ZOzIhmPHxo/iaN/qlwH0YXhF TolUiO3CGj06iqzOkQ0rMKaLBwymfiDCbTUJm4xW82WUMktGYinHV3dncgglHTkC rduIjM1InZ0vyvuL2eANTQIP1llF9ar2Q2jibaXwA4nmFx2eGwrdre5QkxhW5Iay JCrQ+jIvFTwHng== -----END CERTIFICATE-----Generated at Tue Dec 30 13:56:44 2025 by rpki-client