This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json) Hash identifier: sudjyk8wDDAT3IURZeDjlLGavjWPZPORs418BBkuB/U= Subject key identifier: D6:E9:83:9F:68:3C:03:A0:8D:BE:8D:5E:7C:88:32:78:44:A1:24:50 Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Certificate serial: 019B3B34655E2496B82C7543E8CC0EE642C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft Manifest number: 0A2B Signing time: Sat 20 Dec 2025 10:00:47 +0000 Manifest this update: Sat 20 Dec 2025 10:00:47 +0000 Manifest next update: Sun 21 Dec 2025 10:00:47 +0000 Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=) 2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: SX7gLmPUS+2TF7chK4gBjWtULlCmTGmvP53gN/XxJ/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:65:5e:24:96:b8:2c:75:43:e8:cc:0e:e6:42:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Validity Not Before: Dec 20 10:00:47 2025 GMT Not After : Dec 21 10:00:47 2025 GMT Subject: CN=d6e9839f683c03a08dbe8d5e7c88327844a12450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:81:90:49:e4:ea:11:fa:01:60:78:c9:fc:2c: 82:d5:cd:40:62:0d:1b:f6:9a:e4:67:02:f8:5f:f5: aa:0a:64:e7:a0:4f:e8:df:c2:75:70:e7:07:67:7c: 53:ef:f4:1f:06:b2:90:23:37:0c:07:de:b7:5d:25: 2b:08:f5:ad:d2:27:c4:d3:2e:c1:95:8e:14:33:7a: c9:bf:97:14:9e:30:18:59:05:4c:2b:06:36:70:f7: 89:c2:0e:24:00:44:3f:90:15:d9:cb:65:f4:7d:cc: 3f:86:46:3b:31:40:c6:69:c2:4c:5b:37:f1:48:ad: 71:0f:6f:12:7b:7e:ee:e8:ae:c4:dc:e0:52:3a:3d: 96:9f:43:95:7e:a2:8d:18:42:76:25:9a:53:b6:8c: db:f2:a2:f5:10:97:90:91:fc:d7:db:7e:9f:b9:92: 8c:f1:99:fd:07:c6:e3:d2:c8:44:63:0a:d1:5f:f1: 6f:cc:35:1e:cd:17:19:ae:55:de:65:ae:1d:56:ce: e8:0d:cf:92:5f:38:45:bc:a9:65:76:bb:67:0f:4b: 2d:a5:70:d1:da:20:8d:62:91:2d:c3:7d:e2:0e:97: 07:ee:72:d6:79:d8:96:fb:1c:6b:22:ba:91:92:92: 51:f2:ae:d3:1d:1c:3e:f2:70:a7:7b:69:fa:b4:26: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:83:9F:68:3C:03:A0:8D:BE:8D:5E:7C:88:32:78:44:A1:24:50 X509v3 Authority Key Identifier: keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0a:4f:db:d2:0e:ee:de:7b:70:10:d0:dc:7d:5a:54:70:e2: 4c:cb:d2:04:c1:a4:a4:8a:15:e9:2f:ac:e0:d6:52:3d:f6:ea: 86:3e:f3:e3:6e:ad:9b:37:72:03:c1:c0:32:6c:29:f5:fd:d5: 82:c4:de:eb:56:e6:77:f0:e3:85:c9:44:73:67:75:18:56:c0: 12:bf:a9:70:4a:9f:75:13:2e:ab:89:c6:a5:77:3c:75:98:f0: d6:c6:72:f2:9d:e0:98:0e:6a:36:40:6a:ed:07:7d:45:98:61: d2:04:41:72:ab:f6:70:a7:07:37:58:2d:be:04:1c:85:86:32: 85:f3:cf:0d:4d:cb:86:7e:e1:7d:cc:0f:f7:6f:9b:66:fe:f2: 42:84:0e:ed:d0:01:84:51:d3:d8:1f:80:83:99:13:23:32:6e: 40:d0:1a:bc:c8:80:05:b8:f4:06:49:1c:2c:4c:84:26:9e:f0: 41:52:f4:72:cc:ed:37:8c:af:3c:92:3e:9c:d2:85:ee:b8:d1: 70:80:aa:d0:cf:49:6f:3c:02:0f:96:86:ca:b7:78:73:4c:11: f2:48:47:95:99:66:07:5a:58:18:fd:89:6a:b3:9e:97:a8:9e: 16:39:81:67:5e:6e:af:f7:e2:06:08:6e:ac:5b:6d:aa:1e:c3: 1f:b2:ab:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NGVeJJa4LHVD6MwO5kLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz YzQyZDYwHhcNMjUxMjIwMTAwMDQ3WhcNMjUxMjIxMTAwMDQ3WjAzMTEwLwYDVQQD EyhkNmU5ODM5ZjY4M2MwM2EwOGRiZThkNWU3Yzg4MzI3ODQ0YTEyNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIGQSeTqEfoBYHjJ/CyC1c1AYg0b 9prkZwL4X/WqCmTnoE/o38J1cOcHZ3xT7/QfBrKQIzcMB963XSUrCPWt0ifE0y7B lY4UM3rJv5cUnjAYWQVMKwY2cPeJwg4kAEQ/kBXZy2X0fcw/hkY7MUDGacJMWzfx SK1xD28Se37u6K7E3OBSOj2Wn0OVfqKNGEJ2JZpTtozb8qL1EJeQkfzX236fuZKM 8Zn9B8bj0shEYwrRX/FvzDUezRcZrlXeZa4dVs7oDc+SXzhFvKlldrtnD0stpXDR 2iCNYpEtw33iDpcH7nLWediW+xxrIrqRkpJR8q7THRw+8nCne2n6tCYW2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbpg59oPAOgjb6NXnyIMnhEoSRQMB8GA1UdIwQY MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiApP29IO 7t57cBDQ3H1aVHDiTMvSBMGkpIoV6S+s4NZSPfbqhj7z426tmzdyA8HAMmwp9f3V gsTe61bmd/DjhclEc2d1GFbAEr+pcEqfdRMuq4nGpXc8dZjw1sZy8p3gmA5qNkBq 7Qd9RZhh0gRBcqv2cKcHN1gtvgQchYYyhfPPDU3Lhn7hfcwP92+bZv7yQoQO7dAB hFHT2B+Ag5kTIzJuQNAavMiABbj0BkkcLEyEJp7wQVL0csztN4yvPJI+nNKF7rjR cICq0M9JbzwCD5aGyrd4c0wR8khHlZlmB1pYGP2JarOel6ieFjmBZ15ur/fiBghu rFttqh7DH7KrDA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:07:27 2025 by rpki-client