This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json) Hash identifier: FsF03zmN3sTlxZZiGViEOWYzsYwtv78JEj0+cUHLUzk= Subject key identifier: B3:6F:80:0E:0C:A8:94:58:7D:02:C2:1C:A8:90:C5:6B:9F:3B:D2:63 Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Certificate serial: 019B3A21FE56B02D4D8EE86A374B0ABEF334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft Manifest number: 0D8D Signing time: Sat 20 Dec 2025 05:01:04 +0000 Manifest this update: Sat 20 Dec 2025 05:01:04 +0000 Manifest next update: Sun 21 Dec 2025 05:01:04 +0000 Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: r3EN7P+3un/nzY6KE8FRv7X+pgeZ68D7rc19j2i6Eeg=) 2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:fe:56:b0:2d:4d:8e:e8:6a:37:4b:0a:be:f3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Validity Not Before: Dec 20 05:01:04 2025 GMT Not After : Dec 21 05:01:04 2025 GMT Subject: CN=b36f800e0ca894587d02c21ca890c56b9f3bd263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:10:bd:ef:ca:ca:67:61:12:1f:ed:d0:28: 88:7b:1f:62:00:37:5b:2e:47:50:72:b1:91:13:81: 6b:7a:c4:d8:2d:f1:31:b1:a2:49:dd:47:65:22:40: 7e:72:8e:16:b8:5d:9c:ce:74:5a:ea:e8:57:45:4a: 2f:62:18:90:55:9c:37:7c:0e:b8:2c:ac:13:ea:f9: c2:f5:79:48:ad:18:76:e4:b2:25:76:f7:1f:49:56: 5b:96:62:53:3b:7e:af:61:0f:31:91:81:ea:d6:a9: 71:60:0a:ac:ee:6a:0d:45:c5:ab:5a:7a:2f:5b:c6: eb:1f:9a:4e:c7:c9:77:b3:7d:13:1a:14:f4:b1:d1: fb:b4:14:f5:76:af:3a:fe:7e:e3:8c:86:6c:64:be: e0:8f:18:7d:3b:e4:c4:55:e5:d1:cb:11:8a:e9:24: 86:6b:a9:0d:23:66:91:a5:6b:57:8e:be:26:5c:2d: 32:65:e1:30:fc:db:d7:c5:7e:4d:88:02:c9:73:cc: e8:da:ad:cb:e6:a1:c4:e3:3a:8f:78:28:02:c5:c6: 76:66:16:a0:c6:c4:23:25:66:fe:60:cf:59:a4:7d: 9d:3b:7f:a2:7d:d1:73:c1:16:ad:ab:44:da:1a:9b: a9:04:4d:5e:b6:4a:fb:f3:62:cb:47:84:21:fc:6f: 8d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6F:80:0E:0C:A8:94:58:7D:02:C2:1C:A8:90:C5:6B:9F:3B:D2:63 X509v3 Authority Key Identifier: keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9c:11:3a:99:57:97:fb:a9:94:5b:3c:40:22:32:16:6f:b3: cf:7f:39:16:80:0c:bf:f4:eb:b5:b3:88:8b:f6:97:f1:a4:a9: b3:cb:fb:39:b2:1e:fe:7c:05:61:d9:6a:8d:88:2f:ec:de:4d: 87:04:18:55:26:23:dd:55:44:37:e7:6a:c9:3c:2c:99:6a:98: 55:e5:f4:4d:b5:7f:f2:c7:3a:07:3a:35:78:4a:40:08:ca:a2: b2:90:e9:72:fc:f9:c8:4f:b7:eb:52:2e:16:0b:30:0c:ea:e3: 79:00:44:e2:41:51:1c:73:4f:59:b9:f1:10:fc:8e:9a:21:c7: c0:e2:3e:50:ee:c3:88:dd:68:d2:91:0a:87:3a:55:77:95:27: d1:dc:99:0e:02:dd:f7:1f:34:19:4d:89:a4:08:bb:6c:01:7e: 52:af:c7:5e:6b:56:13:ab:89:5f:e6:04:a9:90:9c:7b:cd:6e: 1b:4f:d2:a3:a2:77:2f:2f:90:87:33:e4:b5:d9:15:a1:82:84: 78:0a:86:aa:ad:4a:4c:b5:b3:72:46:b2:23:ad:e0:e2:f1:d9: 87:8d:10:60:1b:54:1d:62:1a:32:f3:41:41:be:f3:51:b5:c9: 99:ae:a3:5c:74:50:16:3b:33:78:09:7a:2c:0c:b1:d8:1a:03: df:98:72:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6If5WsC1NjuhqN0sKvvM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3 YzkxMDEwHhcNMjUxMjIwMDUwMTA0WhcNMjUxMjIxMDUwMTA0WjAzMTEwLwYDVQQD EyhiMzZmODAwZTBjYTg5NDU4N2QwMmMyMWNhODkwYzU2YjlmM2JkMjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleYQve/KymdhEh/t0CiIex9iADdb LkdQcrGRE4FresTYLfExsaJJ3UdlIkB+co4WuF2cznRa6uhXRUovYhiQVZw3fA64 LKwT6vnC9XlIrRh25LIldvcfSVZblmJTO36vYQ8xkYHq1qlxYAqs7moNRcWrWnov W8brH5pOx8l3s30TGhT0sdH7tBT1dq86/n7jjIZsZL7gjxh9O+TEVeXRyxGK6SSG a6kNI2aRpWtXjr4mXC0yZeEw/NvXxX5NiALJc8zo2q3L5qHE4zqPeCgCxcZ2Zhag xsQjJWb+YM9ZpH2dO3+ifdFzwRatq0TaGpupBE1etkr782LLR4Qh/G+NhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNvgA4MqJRYfQLCHKiQxWufO9JjMB8GA1UdIwQY MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpwROplX l/uplFs8QCIyFm+zz385FoAMv/TrtbOIi/aX8aSps8v7ObIe/nwFYdlqjYgv7N5N hwQYVSYj3VVEN+dqyTwsmWqYVeX0TbV/8sc6Bzo1eEpACMqispDpcvz5yE+361Iu FgswDOrjeQBE4kFRHHNPWbnxEPyOmiHHwOI+UO7DiN1o0pEKhzpVd5Un0dyZDgLd 9x80GU2JpAi7bAF+Uq/HXmtWE6uJX+YEqZCce81uG0/So6J3Ly+QhzPktdkVoYKE eAqGqq1KTLWzckayI63g4vHZh40QYBtUHWIaMvNBQb7zUbXJma6jXHRQFjszeAl6 LAyx2BoD35hy3Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:57:12 2025 by rpki-client