This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json) Hash identifier: RRcAHMmWsCXWqbkO+ApShYIQeA+X0nrJuh4JKdzXNR4= Subject key identifier: 87:71:20:07:65:5D:37:2B:D0:DE:DF:45:5D:14:86:8A:76:AE:53:37 Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53 Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53 Certificate serial: 019B3F483693A5484E8CB78F5D4C44FF2EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft Manifest number: 0618 Signing time: Sun 21 Dec 2025 05:00:55 +0000 Manifest this update: Sun 21 Dec 2025 05:00:55 +0000 Manifest next update: Mon 22 Dec 2025 05:00:55 +0000 Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=) 2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: ud3NlvdpNYtjqUTZdN8lQONXZLDWTF08JfXHqP67u38=) 3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:36:93:a5:48:4e:8c:b7:8f:5d:4c:44:ff:2e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53 Validity Not Before: Dec 21 05:00:55 2025 GMT Not After : Dec 22 05:00:55 2025 GMT Subject: CN=87712007655d372bd0dedf455d14868a76ae5337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0e:9f:b6:cb:ed:32:cf:ef:dc:b9:66:3c:24: 07:ee:51:42:70:3a:20:bc:7a:32:39:e4:fa:9c:98: 57:61:03:0d:68:91:42:46:5f:55:98:4d:4e:69:8b: f9:b5:45:d0:c5:a2:ff:72:5a:3f:f8:40:a1:78:0a: 69:70:f5:1d:39:b2:9a:19:b3:71:df:88:67:86:c2: a8:1c:f0:a5:c3:b9:a9:d6:7a:7c:b4:29:7f:d7:7e: 40:a1:b0:a7:c1:f8:c7:dd:90:0c:d0:e8:40:9e:03: 9b:e8:eb:a1:bd:c6:0a:a1:ef:70:07:59:6c:de:a3: 6d:76:fe:b3:8f:fd:34:a7:8d:83:2e:ab:94:4c:32: 3c:35:cd:51:32:4b:6e:86:a9:fb:3d:0d:1f:5e:b9: f8:f1:51:3a:3f:bf:74:e6:68:93:d2:98:f8:2b:bb: fa:68:29:94:8e:e4:db:f7:e5:7c:d1:43:db:13:5d: 26:93:1e:22:4f:e9:93:bd:fc:e2:36:20:fc:64:bf: 23:b8:97:be:b0:51:8c:17:3a:da:12:01:a3:c8:b0: a5:a9:57:be:b3:3f:43:fc:11:4e:96:db:3d:b4:ac: 88:7a:fb:28:a7:45:06:e8:52:42:fd:a7:25:1d:8a: 28:97:91:85:5e:10:aa:a3:78:4c:54:07:35:cc:e3: f4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:71:20:07:65:5D:37:2B:D0:DE:DF:45:5D:14:86:8A:76:AE:53:37 X509v3 Authority Key Identifier: keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:00:3c:19:e1:8d:23:fd:5f:1e:fa:36:4e:e9:3c:58:0e:3c: 6c:de:ed:db:27:3d:a5:c8:22:b1:2c:7d:b9:ab:51:38:be:b2: 62:69:13:2d:02:50:ec:ec:e9:36:46:de:95:90:ec:4b:37:08: 0d:8c:71:b8:33:ea:fc:9d:af:d1:68:0e:29:c0:60:83:ba:55: df:e7:78:56:47:df:e8:27:05:c3:e5:1d:26:21:bd:c2:fd:11: 45:d0:2a:03:2e:6b:7b:8b:b0:e9:a3:b8:a0:94:88:ef:43:9c: 82:a7:9c:e3:45:ca:65:9d:8c:77:90:4a:e4:db:4f:5b:94:b9: f3:d4:15:c2:e7:89:d4:8f:ad:3b:f4:e2:74:7d:37:89:79:61: 79:d4:8c:ce:e3:86:eb:aa:be:0c:56:b9:93:d6:40:c3:73:a2: 7f:f7:38:17:09:23:b1:8a:b5:6d:aa:ec:b3:a6:be:6e:38:7b: 55:94:d2:c6:3a:d1:06:d0:9f:8d:61:da:30:13:ee:d2:7d:0e: b1:2a:48:68:de:f4:60:8e:53:ab:bb:b9:a7:e2:51:61:af:65: 2a:9d:13:4e:e2:c7:6b:a8:a3:5a:dc:ae:bc:1c:17:d1:83:8c: 93:2e:a9:8f:bd:97:2f:c3:70:12:c5:e7:91:fe:38:0c:12:54: d3:53:4b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SDaTpUhOjLePXUxE/y62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1 NjJmNTMwHhcNMjUxMjIxMDUwMDU1WhcNMjUxMjIyMDUwMDU1WjAzMTEwLwYDVQQD Eyg4NzcxMjAwNzY1NWQzNzJiZDBkZWRmNDU1ZDE0ODY4YTc2YWU1MzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA6ftsvtMs/v3LlmPCQH7lFCcDog vHoyOeT6nJhXYQMNaJFCRl9VmE1OaYv5tUXQxaL/clo/+ECheAppcPUdObKaGbNx 34hnhsKoHPClw7mp1np8tCl/135AobCnwfjH3ZAM0OhAngOb6OuhvcYKoe9wB1ls 3qNtdv6zj/00p42DLquUTDI8Nc1RMktuhqn7PQ0fXrn48VE6P7905miT0pj4K7v6 aCmUjuTb9+V80UPbE10mkx4iT+mTvfziNiD8ZL8juJe+sFGMFzraEgGjyLClqVe+ sz9D/BFOlts9tKyIevsop0UG6FJC/aclHYool5GFXhCqo3hMVAc1zOP0AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdxIAdlXTcr0N7fRV0Uhop2rlM3MB8GA1UdIwQY MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3gA8GeGN I/1fHvo2Tuk8WA48bN7t2yc9pcgisSx9uatROL6yYmkTLQJQ7OzpNkbelZDsSzcI DYxxuDPq/J2v0WgOKcBgg7pV3+d4Vkff6CcFw+UdJiG9wv0RRdAqAy5re4uw6aO4 oJSI70Ocgqec40XKZZ2Md5BK5NtPW5S589QVwueJ1I+tO/TidH03iXlhedSMzuOG 66q+DFa5k9ZAw3Oif/c4FwkjsYq1barss6a+bjh7VZTSxjrRBtCfjWHaMBPu0n0O sSpIaN70YI5Tq7u5p+JRYa9lKp0TTuLHa6ijWtyuvBwX0YOMky6pj72XL8NwEsXn kf44DBJU01NLFA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:35 2025 by rpki-client