This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json) Hash identifier: FGBBW2M/jiamivT62zjgDG7bIOx1G8VSnmE1T/YGYU8= Subject key identifier: F3:BA:09:FF:75:39:85:FE:46:39:70:0E:F0:D8:A7:1B:5E:CA:4F:86 Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Certificate serial: 019B6C2135DBF97F3F3504BD9FCC32059EE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 22:01:14 +0000 Manifest this update: Mon 29 Dec 2025 22:01:14 +0000 Manifest next update: Tue 30 Dec 2025 22:01:14 +0000 Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: VAQ0q6NQu0nzNwvLaVrY2C5RiJaIW4NoJ6xlcvGoaKk=) 2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:21:35:db:f9:7f:3f:35:04:bd:9f:cc:32:05:9e:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Validity Not Before: Dec 29 22:01:14 2025 GMT Not After : Dec 30 22:01:14 2025 GMT Subject: CN=f3ba09ff753985fe4639700ef0d8a71b5eca4f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:39:65:24:47:03:cc:81:02:ac:70:8c:a3: 68:8a:12:6c:2d:7e:4d:91:e6:ff:52:92:86:4f:36: 1b:99:ab:5b:45:46:8a:78:bd:5b:2a:af:2b:5e:64: ee:43:17:4e:dd:a6:14:93:6b:64:49:f6:37:d9:47: b8:c3:6d:7f:c9:26:1e:76:6f:5f:ba:ec:43:d1:bf: 7e:42:7d:62:6d:25:6b:bd:03:8f:ad:62:2d:ee:3f: f5:9d:f3:8a:58:d1:52:49:70:0a:07:cf:16:12:6c: 60:e7:d2:3d:bf:37:b7:2a:bb:3e:53:46:3d:8c:19: 11:52:41:9f:89:45:b7:6f:b7:f7:40:80:52:8f:6e: 62:d5:d5:9b:61:82:e4:cb:6b:ba:c8:48:a7:c9:cd: 6c:c1:9b:f9:7e:38:b8:21:24:32:41:cd:a0:45:ef: 8d:e8:c9:95:3f:b3:54:d3:5d:3e:10:1b:27:93:0e: 9f:6e:0d:b9:c3:41:3d:bc:51:93:43:8d:bf:29:7d: 0d:2f:a1:a6:94:e9:9f:6f:5c:3b:5c:ab:9b:cb:04: 41:01:7a:4b:fb:b7:58:4c:2d:76:77:ed:d4:5f:fb: be:08:43:cb:0b:13:30:03:ff:93:73:5f:7c:de:d7: 5a:ec:df:31:43:ad:7b:bf:a0:79:3f:fc:63:22:c0: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BA:09:FF:75:39:85:FE:46:39:70:0E:F0:D8:A7:1B:5E:CA:4F:86 X509v3 Authority Key Identifier: keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:06:7b:9a:8a:58:bf:35:26:d5:c3:c7:dd:8b:34:6e:c5:fe: 4f:ea:39:b9:dd:60:d7:32:3c:a4:c6:62:c0:a5:54:cf:8c:e6: 24:52:6a:ff:b5:c5:9a:c0:8b:da:7c:60:4e:70:36:4e:ff:01: 11:bf:6c:fe:e1:b3:8a:cb:2f:41:55:9f:e5:44:fc:bf:0e:3b: 89:3f:d1:88:5b:06:6f:ec:96:ea:77:58:ba:97:86:47:68:af: eb:ab:cf:0b:89:e3:1b:d6:27:60:40:62:dc:75:cc:e6:9d:5d: 94:6c:89:52:f4:c6:43:d1:d0:2c:28:3e:0a:8e:dd:d0:85:f4: aa:6e:bc:30:d4:0e:c2:b1:da:28:30:55:8b:8d:5f:fa:1f:c9: 45:3f:71:31:01:05:ba:ef:61:90:bf:27:45:1d:50:3f:b7:d0: 48:63:fb:dd:77:c8:3a:ac:01:27:ee:88:2c:b3:c9:26:37:6f: 86:e6:08:86:74:82:01:f5:ab:d5:0f:7f:9e:0e:71:2f:f2:43: 7c:d3:a8:6b:2e:0d:1d:f6:2d:8e:c4:03:bb:1c:a7:e3:27:64: c9:cc:b0:52:2d:5a:9d:3d:0a:a1:5a:0e:73:bc:49:8f:a8:00: 1b:ea:a5:35:6b:7d:9f:44:7c:55:71:c5:ed:04:d3:be:1c:65: 1a:1c:9c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsITXb+X8/NQS9n8wyBZ7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw NmM2NzkwHhcNMjUxMjI5MjIwMTE0WhcNMjUxMjMwMjIwMTE0WjAzMTEwLwYDVQQD EyhmM2JhMDlmZjc1Mzk4NWZlNDYzOTcwMGVmMGQ4YTcxYjVlY2E0Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnI5ZSRHA8yBAqxwjKNoihJsLX5N keb/UpKGTzYbmatbRUaKeL1bKq8rXmTuQxdO3aYUk2tkSfY32Ue4w21/ySYedm9f uuxD0b9+Qn1ibSVrvQOPrWIt7j/1nfOKWNFSSXAKB88WEmxg59I9vze3Krs+U0Y9 jBkRUkGfiUW3b7f3QIBSj25i1dWbYYLky2u6yEinyc1swZv5fji4ISQyQc2gRe+N 6MmVP7NU010+EBsnkw6fbg25w0E9vFGTQ42/KX0NL6GmlOmfb1w7XKubywRBAXpL +7dYTC12d+3UX/u+CEPLCxMwA/+Tc1983tda7N8xQ617v6B5P/xjIsBXIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO6Cf91OYX+RjlwDvDYpxteyk+GMB8GA1UdIwQY MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAZ7mopY vzUm1cPH3Ys0bsX+T+o5ud1g1zI8pMZiwKVUz4zmJFJq/7XFmsCL2nxgTnA2Tv8B Eb9s/uGzissvQVWf5UT8vw47iT/RiFsGb+yW6ndYupeGR2iv66vPC4njG9YnYEBi 3HXM5p1dlGyJUvTGQ9HQLCg+Co7d0IX0qm68MNQOwrHaKDBVi41f+h/JRT9xMQEF uu9hkL8nRR1QP7fQSGP73XfIOqwBJ+6ILLPJJjdvhuYIhnSCAfWr1Q9/ng5xL/JD fNOoay4NHfYtjsQDuxyn4ydkycywUi1anT0KoVoOc7xJj6gAG+qlNWt9n0R8VXHF 7QTTvhxlGhycCQ== -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:20 2025 by rpki-client