This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
File: FIa0oIrOYOZw7c2J-tslQBFWL1M.mft (raw, json)
Hash identifier: LVnnhWHT67BtqDdoCxyERYGuUQZBV3i3cgTaBhf7GGg=
Subject key identifier: FC:B3:16:EE:95:EA:20:CB:8E:83:BD:6D:3D:A8:95:29:ED:9D:34:A1
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 019B52987A42326EBF4E0D4C0323A1D29605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
Manifest number: 0622
Signing time: Wed 24 Dec 2025 23:01:22 +0000
Manifest this update: Wed 24 Dec 2025 23:01:22 +0000
Manifest next update: Thu 25 Dec 2025 23:01:22 +0000
Files and hashes: 1: 0hE7yQkOsQYY1LQEos4wbxzkfnM.roa (hash: 70ia36yz/7UQliy+dQ5lEepwXI+ufgIzVRbaE7lLztM=)
2: FIa0oIrOYOZw7c2J-tslQBFWL1M.crl (hash: rb27iULLZ1gpjC0e27RaKulUQc4CghM8FyIySeEFDN4=)
3: YQdnp2VC261uNxqE4Oc-a1f9tGg.roa (hash: XivO/rYxkKb4OFfhsRiFIwL10Nr1ukhnz5M4clOZFnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:98:7a:42:32:6e:bf:4e:0d:4c:03:23:a1:d2:96:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: Dec 24 23:01:22 2025 GMT
Not After : Dec 25 23:01:22 2025 GMT
Subject: CN=fcb316ee95ea20cb8e83bd6d3da89529ed9d34a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3d:42:df:a1:d7:36:03:03:5d:d4:4a:5e:8d:
d4:db:ab:63:33:15:17:b9:44:f1:25:ba:66:f8:47:
56:b3:dd:ae:ee:2d:b0:80:a7:88:f5:79:d5:52:90:
f4:a6:5c:ec:27:fe:ee:a0:f5:99:45:98:06:5e:28:
a0:f1:95:b7:20:6b:44:0d:f0:a6:61:84:d8:72:43:
42:8f:fb:91:fd:15:a0:f3:19:0e:db:c1:76:ee:b7:
a9:ae:68:60:6e:a8:4c:15:f0:08:60:62:c9:7a:b4:
f1:de:11:4a:de:a9:70:d9:6f:d8:0d:d5:4f:89:9d:
5e:e4:67:d3:d8:9a:bd:c8:45:82:57:cd:66:a0:36:
11:5f:0b:d6:e4:33:18:77:ca:de:96:c9:76:86:40:
42:4c:6c:a1:56:95:4e:a3:57:ad:c9:6c:af:9c:6b:
35:05:72:6b:f6:7d:24:fd:38:db:ef:15:63:7b:a9:
21:3d:db:5d:55:eb:83:2a:b5:5e:cf:5c:ea:7a:94:
9a:5a:1d:40:34:44:c2:d8:4b:c2:d0:f9:d2:fd:77:
c9:aa:f0:dd:94:f5:fe:4c:a1:e2:3a:51:cd:03:18:
70:45:2b:38:bd:91:ff:22:02:fd:bc:bf:7c:92:49:
87:b7:a0:b6:95:ff:b3:98:59:c2:ed:80:5a:e1:cb:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:16:EE:95:EA:20:CB:8E:83:BD:6D:3D:A8:95:29:ED:9D:34:A1
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:74:6a:7c:9e:ea:84:61:c2:e0:ba:f0:bc:9c:6e:11:a9:
f1:0c:25:8d:ef:52:3d:8c:99:12:35:e8:df:df:1a:6a:d0:43:
53:63:68:f5:2e:65:6c:3e:0e:59:e9:36:85:5c:3d:79:55:ff:
93:45:67:eb:4f:5f:70:3e:e2:22:74:04:9f:78:87:5f:b8:39:
76:57:16:2b:f3:14:a1:bb:82:94:e3:47:81:69:1b:3c:94:ef:
f0:83:b3:38:5b:63:b3:e9:4c:08:8a:cf:da:ac:07:31:15:67:
67:a3:e4:b1:dd:5f:fc:1c:eb:3a:79:88:e3:cb:03:55:59:93:
ac:ce:8b:c8:23:0a:4d:55:71:20:c6:93:93:80:bf:60:42:2c:
eb:be:3b:ed:06:d0:d0:f1:ae:02:34:67:33:97:00:fd:bd:0f:
5c:a9:7d:24:e9:8c:81:2b:25:f6:4c:3d:06:74:9e:a5:e8:1a:
4f:5a:ec:ab:3a:14:3b:2e:1d:46:e0:c2:b3:0b:7e:75:67:83:
e2:3c:8a:67:7b:b4:af:b4:3f:57:35:6b:37:1b:63:0f:e5:08:
1c:8c:4f:f5:f5:d5:67:4a:60:96:cb:49:81:50:32:5c:69:a7:
ff:cc:8f:bd:4b:03:32:a6:eb:ea:07:b4:5d:fb:26:e9:1f:38:
54:96:22:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZtSmHpCMm6/Tg1MAyOh0pYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjUxMjI0MjMwMTIyWhcNMjUxMjI1MjMwMTIyWjAzMTEwLwYDVQQD
EyhmY2IzMTZlZTk1ZWEyMGNiOGU4M2JkNmQzZGE4OTUyOWVkOWQzNGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT1C36HXNgMDXdRKXo3U26tjMxUX
uUTxJbpm+EdWs92u7i2wgKeI9XnVUpD0plzsJ/7uoPWZRZgGXiig8ZW3IGtEDfCm
YYTYckNCj/uR/RWg8xkO28F27reprmhgbqhMFfAIYGLJerTx3hFK3qlw2W/YDdVP
iZ1e5GfT2Jq9yEWCV81moDYRXwvW5DMYd8relsl2hkBCTGyhVpVOo1etyWyvnGs1
BXJr9n0k/Tjb7xVje6khPdtdVeuDKrVez1zqepSaWh1ANETC2EvC0PnS/XfJqvDd
lPX+TKHiOlHNAxhwRSs4vZH/IgL9vL98kkmHt6C2lf+zmFnC7YBa4cuCDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyzFu6V6iDLjoO9bT2olSntnTShMB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUtZTgxODdmMzQ0Yzgw
LzEvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMot0anye
6oRhwuC68LycbhGp8Qwlje9SPYyZEjXo398aatBDU2No9S5lbD4OWek2hVw9eVX/
k0Vn609fcD7iInQEn3iHX7g5dlcWK/MUobuClONHgWkbPJTv8IOzOFtjs+lMCIrP
2qwHMRVnZ6Pksd1f/BzrOnmI48sDVVmTrM6LyCMKTVVxIMaTk4C/YEIs67477QbQ
0PGuAjRnM5cA/b0PXKl9JOmMgSsl9kw9BnSepegaT1rsqzoUOy4dRuDCswt+dWeD
4jyKZ3u0r7Q/VzVrNxtjD+UIHIxP9fXVZ0pglstJgVAyXGmn/8yPvUsDMqbr6ge0
Xfsm6R84VJYizQ==
-----END CERTIFICATE-----
Generated at Thu Dec 25 01:02:57 2025 by rpki-client