This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft File: G_JoF1xaCaev0Nh4UYJOHbc_fns.mft (raw, json) Hash identifier: Ku7r2ca8VZyqaqtfO5KVLSlm/Qg50KMcKgOFqudAd48= Subject key identifier: BE:36:F7:6C:B9:59:28:64:C2:58:28:BA:74:CA:FE:9D:1D:90:D7:09 Authority key identifier: 1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B Certificate issuer: /CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Certificate serial: 019B3D908D36FE90A613441AFF1C8B905941 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft Manifest number: 0B2B Signing time: Sat 20 Dec 2025 21:00:41 +0000 Manifest this update: Sat 20 Dec 2025 21:00:41 +0000 Manifest next update: Sun 21 Dec 2025 21:00:41 +0000 Files and hashes: 1: G_JoF1xaCaev0Nh4UYJOHbc_fns.crl (hash: OvXKLZB+kMVGTMb278fhFFApNB34g+qzTE49zI5WvCs=) 2: m6ICGY8tDK8Q212zDiNB6cUKuGY.roa (hash: EJb3usFy++FqYT3SUw3jZOIZDnNXZwJojnoQ4titUsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:8d:36:fe:90:a6:13:44:1a:ff:1c:8b:90:59:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bf268175c5a09a7afd0d87851824e1db73f7e7b Validity Not Before: Dec 20 21:00:41 2025 GMT Not After : Dec 21 21:00:41 2025 GMT Subject: CN=be36f76cb9592864c25828ba74cafe9d1d90d709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:77:8e:30:34:57:68:a8:b0:fb:ce:cd:2e: 3e:a4:8f:ad:4c:7f:1b:60:bc:fc:e6:03:5e:31:bf: f2:0b:c2:d6:f0:9d:a8:80:07:89:59:e2:bb:f7:2b: fb:cc:03:43:ca:f8:fc:de:d4:f3:f6:07:7a:32:db: 77:90:8e:d2:8b:53:02:5c:4c:4f:84:a5:10:52:4c: 1e:e3:3a:9f:48:c1:4e:62:30:97:1e:69:45:dd:a5: 80:05:b4:1c:1a:36:ff:12:f6:73:c6:fa:45:05:a4: 53:e9:32:86:0b:cd:e6:b0:84:f1:ee:8f:9f:f5:6f: 05:e0:e4:1a:30:7d:4a:93:58:c8:fe:81:1c:7a:44: c7:05:84:7b:b5:ce:7d:e8:ba:55:d1:cb:6b:b8:19: b2:12:e5:ae:55:9a:6b:9e:6a:e6:ca:c2:15:75:ca: bc:61:fb:33:04:85:e5:f6:71:6d:7b:64:2d:91:7d: 1e:53:02:b8:ad:1f:36:e4:74:a7:a9:65:4e:fb:64: b4:8a:c3:4c:1b:c7:9a:88:fd:71:cc:a0:df:ff:27: b2:1f:65:ea:87:4a:62:1e:a5:e1:6c:18:e1:06:8f: db:58:b7:89:cb:66:28:7c:ee:05:be:01:a5:a8:8e: c7:96:80:a1:b4:b5:f2:d2:fd:79:c6:ec:16:b6:1c: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:36:F7:6C:B9:59:28:64:C2:58:28:BA:74:CA:FE:9D:1D:90:D7:09 X509v3 Authority Key Identifier: keyid:1B:F2:68:17:5C:5A:09:A7:AF:D0:D8:78:51:82:4E:1D:B7:3F:7E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_JoF1xaCaev0Nh4UYJOHbc_fns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/66650a-598a-4389-941f-534b8cd652e9/1/G_JoF1xaCaev0Nh4UYJOHbc_fns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:41:41:78:1f:77:8b:2f:ec:1d:aa:b0:5d:7b:7d:06:6a:3e: ee:b3:0a:ef:3c:78:86:02:80:b6:55:80:9a:43:b7:3e:38:44: 2a:06:d0:4e:ac:a5:8f:c5:a4:47:d3:40:9b:1e:89:d3:42:07: 7c:01:68:e0:b5:34:28:90:09:82:b1:57:85:72:35:28:1d:48: 5e:2c:90:5c:f9:f2:8c:49:f7:10:f6:f9:61:bf:46:81:27:f5: df:5e:37:f0:bf:1d:3c:d8:2b:19:e7:42:4b:f8:a9:03:75:46: 75:c3:89:91:34:51:e0:f9:b9:78:06:2f:ee:15:b7:b3:3b:7c: 73:5b:a2:20:ea:73:26:f3:b3:fe:ed:93:43:d1:24:e1:32:48: 9b:10:04:fa:0c:61:34:96:e3:f5:de:90:4f:3e:e4:df:b5:db: 5f:0e:d7:ad:63:7b:1d:b3:eb:a1:43:24:1e:22:50:3a:35:96: ca:32:5e:da:6e:59:e0:31:b2:d3:a9:b6:ad:da:39:57:28:31: f7:02:89:f7:d9:d5:d7:c0:d4:9f:d6:97:59:aa:72:4d:ba:60: db:4c:7c:01:1b:05:02:26:c1:14:c5:31:6e:e1:7a:74:e2:f4: 85:80:88:11:d7:a9:cc:e9:3a:cf:46:e5:56:38:34:15:be:56: 3c:9b:25:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kI02/pCmE0Qa/xyLkFlBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiZjI2ODE3NWM1YTA5YTdhZmQwZDg3ODUxODI0ZTFkYjcz ZjdlN2IwHhcNMjUxMjIwMjEwMDQxWhcNMjUxMjIxMjEwMDQxWjAzMTEwLwYDVQQD EyhiZTM2Zjc2Y2I5NTkyODY0YzI1ODI4YmE3NGNhZmU5ZDFkOTBkNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnix3jjA0V2iosPvOzS4+pI+tTH8b YLz85gNeMb/yC8LW8J2ogAeJWeK79yv7zANDyvj83tTz9gd6Mtt3kI7Si1MCXExP hKUQUkwe4zqfSMFOYjCXHmlF3aWABbQcGjb/EvZzxvpFBaRT6TKGC83msITx7o+f 9W8F4OQaMH1Kk1jI/oEcekTHBYR7tc596LpV0ctruBmyEuWuVZprnmrmysIVdcq8 YfszBIXl9nFte2QtkX0eUwK4rR825HSnqWVO+2S0isNMG8eaiP1xzKDf/yeyH2Xq h0piHqXhbBjhBo/bWLeJy2YofO4FvgGlqI7HloChtLXy0v15xuwWthyIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4292y5WShkwlgounTK/p0dkNcJMB8GA1UdIwQY MBaAFBvyaBdcWgmnr9DYeFGCTh23P357MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYt NTM0YjhjZDY1MmU5LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni82NjY1MGEtNTk4YS00Mzg5LTk0MWYtNTM0YjhjZDY1MmU5 LzEvR19Kb0YxeGFDYWV2ME5oNFVZSk9IYmNfZm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUFBeB93 iy/sHaqwXXt9Bmo+7rMK7zx4hgKAtlWAmkO3PjhEKgbQTqylj8WkR9NAmx6J00IH fAFo4LU0KJAJgrFXhXI1KB1IXiyQXPnyjEn3EPb5Yb9GgSf131438L8dPNgrGedC S/ipA3VGdcOJkTRR4Pm5eAYv7hW3szt8c1uiIOpzJvOz/u2TQ9Ek4TJImxAE+gxh NJbj9d6QTz7k37XbXw7XrWN7HbProUMkHiJQOjWWyjJe2m5Z4DGy06m2rdo5Vygx 9wKJ99nV18DUn9aXWapyTbpg20x8ARsFAibBFMUxbuF6dOL0hYCIEdepzOk6z0bl Vjg0Fb5WPJslHA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:58 2025 by rpki-client