This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json) Hash identifier: +P1wfnno9z7CrVWvABKvBtg5BIndR5CbGkiFJ59GXnE= Subject key identifier: A5:6F:D8:32:19:00:25:67:F5:D5:B3:85:E5:6E:FE:1B:FB:2F:38:09 Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b Certificate serial: 019B67D5E7A8717DE4E5546CB40F9EFF08D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft Manifest number: 057D Signing time: Mon 29 Dec 2025 02:00:30 +0000 Manifest this update: Mon 29 Dec 2025 02:00:30 +0000 Manifest next update: Tue 30 Dec 2025 02:00:30 +0000 Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: Y+6+3yMZNqMHFh8OZXgYcLytv/AvRdao4uZgAlyjjfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:d5:e7:a8:71:7d:e4:e5:54:6c:b4:0f:9e:ff:08:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b Validity Not Before: Dec 29 02:00:30 2025 GMT Not After : Dec 30 02:00:30 2025 GMT Subject: CN=a56fd83219002567f5d5b385e56efe1bfb2f3809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d0:bf:d9:53:16:f2:6d:cd:0c:6c:1f:d2:07: 2b:7b:1b:97:3c:c4:cc:eb:f7:7b:71:e3:28:60:64: 53:8e:dd:4f:11:66:e0:e3:f9:4e:2a:d8:0f:28:ac: ca:c2:55:8b:3d:94:d8:96:37:7d:9e:2f:16:a4:04: de:1e:30:92:20:28:4a:58:3d:13:42:74:bf:d8:a5: ab:89:14:7f:35:ad:b7:91:a9:4e:f6:33:bd:8a:86: 0c:1c:50:12:b6:04:81:06:e4:27:0a:3c:57:b9:91: e1:13:b1:c6:d4:99:74:b7:9c:03:07:97:1c:d2:1d: 79:bf:e0:57:a6:bb:b6:55:3a:54:44:b3:79:a9:0d: 74:9b:eb:92:17:7a:a5:b4:ec:de:f8:02:39:39:ad: fe:7d:6c:1c:d9:6f:21:a2:95:41:b3:ca:37:af:11: 02:c8:fa:b5:2d:a8:8e:8b:31:4b:fc:b8:e6:d9:97: d2:81:be:c6:95:e4:6e:51:54:45:25:28:20:14:3c: ac:c3:73:9b:3e:2c:25:b3:e3:19:d0:8a:f4:a3:be: 22:1e:c2:aa:2a:3a:66:1f:5d:d2:c7:4d:45:25:55: 20:a1:8e:ac:ff:67:1d:25:ee:d3:8e:0c:ab:8e:e7: 3c:23:8c:84:3c:bf:82:09:a0:7e:0b:aa:05:24:b3: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6F:D8:32:19:00:25:67:F5:D5:B3:85:E5:6E:FE:1B:FB:2F:38:09 X509v3 Authority Key Identifier: keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:1d:22:b6:63:7c:df:8a:3f:1e:bb:28:60:4e:1a:cf:ed:16: 7e:dc:62:ed:0e:bb:85:8a:af:6c:d5:41:47:2b:94:0f:6f:d7: 7f:3b:02:7d:89:af:58:b4:07:7a:53:28:19:a4:31:2b:fe:ca: 28:48:4f:39:4e:80:9a:7c:85:52:6d:92:20:dd:88:a1:ee:36: 4a:c2:42:d8:57:36:b1:b4:42:b3:f9:8c:d8:79:d3:17:51:6b: 75:83:63:c8:f2:51:46:e3:47:90:d7:12:37:6b:e9:59:8c:58: 1a:7a:1f:5b:d1:de:63:8d:cd:3e:8d:39:34:12:b4:05:b9:03: e1:0a:8e:de:e7:c4:35:61:9b:bb:bd:16:6d:0d:5a:12:e1:2a: 34:00:75:45:53:d7:b8:45:e5:6e:b7:ed:49:7f:8c:d4:3c:75: ea:3b:bb:cf:a1:ba:f9:d3:19:83:a4:7f:0f:ac:de:69:5a:ee: a4:c3:48:8d:f5:8c:13:90:9b:fe:bb:f7:e9:78:50:42:93:a1: d9:e6:02:f6:02:21:50:e7:ce:21:d1:55:6b:65:ed:fa:4b:1f: 16:ff:42:f5:c9:1c:df:01:c4:a8:4b:a1:85:1d:60:9c:c6:43: 06:a7:ea:22:af:0a:3f:fc:9a:11:2c:28:8b:20:65:78:15:1f: ae:39:75:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtn1eeocX3k5VRstA+e/wjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NGUyZjg1MzYxZmY1ZDA2MzA5YzI1Njg0YjkwOGQ3Yjcw MjQzOWIwHhcNMjUxMjI5MDIwMDMwWhcNMjUxMjMwMDIwMDMwWjAzMTEwLwYDVQQD EyhhNTZmZDgzMjE5MDAyNTY3ZjVkNWIzODVlNTZlZmUxYmZiMmYzODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdC/2VMW8m3NDGwf0gcrexuXPMTM 6/d7ceMoYGRTjt1PEWbg4/lOKtgPKKzKwlWLPZTYljd9ni8WpATeHjCSIChKWD0T QnS/2KWriRR/Na23kalO9jO9ioYMHFAStgSBBuQnCjxXuZHhE7HG1Jl0t5wDB5cc 0h15v+BXpru2VTpURLN5qQ10m+uSF3qltOze+AI5Oa3+fWwc2W8hopVBs8o3rxEC yPq1LaiOizFL/Ljm2ZfSgb7GleRuUVRFJSggFDysw3ObPiwls+MZ0Ir0o74iHsKq KjpmH13Sx01FJVUgoY6s/2cdJe7Tjgyrjuc8I4yEPL+CCaB+C6oFJLNqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVv2DIZACVn9dWzheVu/hv7LzgJMB8GA1UdIwQY MBaAFBVOL4U2H/XQYwnCVoS5CNe3AkObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEt NTUyODg5MGY5ZGIzLzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEtNTUyODg5MGY5ZGIz LzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZx0itmN8 34o/HrsoYE4az+0Wftxi7Q67hYqvbNVBRyuUD2/XfzsCfYmvWLQHelMoGaQxK/7K KEhPOU6AmnyFUm2SIN2Ioe42SsJC2Fc2sbRCs/mM2HnTF1FrdYNjyPJRRuNHkNcS N2vpWYxYGnofW9HeY43NPo05NBK0BbkD4QqO3ufENWGbu70WbQ1aEuEqNAB1RVPX uEXlbrftSX+M1Dx16ju7z6G6+dMZg6R/D6zeaVrupMNIjfWME5Cb/rv36XhQQpOh 2eYC9gIhUOfOIdFVa2Xt+ksfFv9C9ckc3wHEqEuhhR1gnMZDBqfqIq8KP/yaESwo iyBleBUfrjl1fg== -----END CERTIFICATE-----Generated at Mon Dec 29 06:49:14 2025 by rpki-client