This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json) Hash identifier: onPBAZZGCRTDVPDydaTr6H97KS3z4tpn2YoiBJNM06E= Subject key identifier: 4B:F0:8E:20:1F:F9:CB:77:BC:69:52:A3:3E:0B:68:A3:A9:46:FD:77 Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Certificate serial: 019B4E4D681B35F1BD5499C6938A449EEA51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft Manifest number: 1297 Signing time: Wed 24 Dec 2025 03:00:54 +0000 Manifest this update: Wed 24 Dec 2025 03:00:54 +0000 Manifest next update: Thu 25 Dec 2025 03:00:54 +0000 Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: 4nh6Q/KVjAp2z8ubRv+v9db0ParG0YNsk5xjiW/3X+o=) 2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:68:1b:35:f1:bd:54:99:c6:93:8a:44:9e:ea:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Validity Not Before: Dec 24 03:00:54 2025 GMT Not After : Dec 25 03:00:54 2025 GMT Subject: CN=4bf08e201ff9cb77bc6952a33e0b68a3a946fd77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:b6:30:b7:60:1a:d2:fa:7b:ee:bc:20:d6: 22:fc:92:32:de:ad:b5:01:f5:92:c8:a7:0d:1c:8e: 19:ee:c2:8f:ed:28:69:a4:65:0f:a1:44:57:3e:9c: 09:aa:7b:fb:e0:2a:ec:d2:93:6a:10:5b:9f:9d:da: cd:a0:14:bd:7f:ba:ef:18:17:44:c0:b8:62:2f:1f: 9d:c0:c8:fd:80:25:f7:cc:54:3b:21:75:73:67:72: 3c:dd:95:ca:64:92:fb:ae:e4:71:3f:4e:79:4b:0e: b6:de:cf:17:11:46:eb:e0:15:fe:d9:d5:11:53:97: a9:02:de:5f:d4:de:ce:63:2e:98:a0:78:ac:55:ba: e1:e9:a8:ba:52:55:96:15:38:a5:89:86:c3:8f:a7: 57:10:d4:6a:aa:02:9c:dc:7d:db:02:95:30:33:e7: 49:32:da:38:5b:8a:e2:e2:1f:43:79:2e:ad:2f:35: 21:11:b8:0c:28:e8:e4:6f:b2:a6:fd:9e:bd:8a:e4: 65:b7:89:62:91:e6:ba:6a:8e:09:9c:e7:81:62:73: f7:0b:81:3a:de:3a:3d:7b:20:bd:68:92:40:5b:66: 3e:e2:bc:91:bf:b3:10:0c:be:a3:fe:9e:37:dd:7c: 48:56:d8:79:90:7e:65:61:05:29:bf:69:b3:7f:e1: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F0:8E:20:1F:F9:CB:77:BC:69:52:A3:3E:0B:68:A3:A9:46:FD:77 X509v3 Authority Key Identifier: keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c0:36:b7:29:19:2f:10:6f:78:c4:60:47:c4:3f:2f:ca:8a: 0b:af:48:5a:c3:77:1b:4e:af:db:43:99:5e:e9:eb:52:c3:8b: 7f:0f:7f:b7:89:55:b4:32:9a:5a:bf:5b:35:0c:a3:b5:0a:1f: f9:c7:8d:d4:15:d6:20:89:af:b7:16:cf:49:c4:de:c0:fd:e9: 32:ce:26:53:e4:ce:2d:22:7f:a4:78:ad:50:13:b9:f2:0f:69: 06:b0:56:0c:eb:25:e5:b9:65:ba:0a:fe:c6:61:b9:45:3b:89: 11:a4:78:b3:65:b2:a7:97:b6:54:9d:7a:e6:d1:5a:37:db:3f: a4:52:87:1f:d1:58:68:92:aa:da:5a:43:75:9d:35:fd:f9:a4: d0:f3:11:4e:03:47:13:d9:f7:23:09:be:1d:a6:c5:4d:bc:2a: 2b:82:fa:a6:b1:21:0a:eb:fc:f4:56:de:db:26:6e:bf:67:35: 6f:e9:90:da:95:06:92:90:64:94:53:f6:3f:70:5e:0c:64:ed: 74:90:d5:36:c6:5d:06:f1:51:13:bb:b1:1b:ee:31:e4:67:a6: e9:b7:53:6e:01:81:34:e3:b9:3e:3c:64:18:38:4e:51:b8:1f: d8:94:8a:9f:ed:6e:78:02:c2:84:08:06:26:28:fe:17:a4:ca: 32:4b:92:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTWgbNfG9VJnGk4pEnupRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGMxMWVkMWE5ZDllZDU2YmYxOWRhN2YyMTc4MzBhODA5 OWM0MjkwHhcNMjUxMjI0MDMwMDU0WhcNMjUxMjI1MDMwMDU0WjAzMTEwLwYDVQQD Eyg0YmYwOGUyMDFmZjljYjc3YmM2OTUyYTMzZTBiNjhhM2E5NDZmZDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS62MLdgGtL6e+68INYi/JIy3q21 AfWSyKcNHI4Z7sKP7ShppGUPoURXPpwJqnv74Crs0pNqEFufndrNoBS9f7rvGBdE wLhiLx+dwMj9gCX3zFQ7IXVzZ3I83ZXKZJL7ruRxP055Sw623s8XEUbr4BX+2dUR U5epAt5f1N7OYy6YoHisVbrh6ai6UlWWFTiliYbDj6dXENRqqgKc3H3bApUwM+dJ Mto4W4ri4h9DeS6tLzUhEbgMKOjkb7Km/Z69iuRlt4likea6ao4JnOeBYnP3C4E6 3jo9eyC9aJJAW2Y+4ryRv7MQDL6j/p433XxIVth5kH5lYQUpv2mzf+GYpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvwjiAf+ct3vGlSoz4LaKOpRv13MB8GA1UdIwQY MBaAFBTcEe0anZ7Va/Gdp/IXgwqAmcQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUt YzcxZGI3MTg5NzBlLzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUtYzcxZGI3MTg5NzBl LzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8A2tykZ LxBveMRgR8Q/L8qKC69IWsN3G06v20OZXunrUsOLfw9/t4lVtDKaWr9bNQyjtQof +ceN1BXWIImvtxbPScTewP3pMs4mU+TOLSJ/pHitUBO58g9pBrBWDOsl5bllugr+ xmG5RTuJEaR4s2Wyp5e2VJ165tFaN9s/pFKHH9FYaJKq2lpDdZ01/fmk0PMRTgNH E9n3Iwm+HabFTbwqK4L6prEhCuv89Fbe2yZuv2c1b+mQ2pUGkpBklFP2P3BeDGTt dJDVNsZdBvFRE7uxG+4x5Gem6bdTbgGBNOO5PjxkGDhOUbgf2JSKn+1ueALChAgG Jij+F6TKMkuSiA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:07 2025 by rpki-client