This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json) Hash identifier: JW8Hqyf2oPmICjh9wxpay+0RoFMD0z4/2Mg/ex+et1I= Subject key identifier: 3C:DB:CD:9B:29:C3:34:F5:C8:4F:B4:C5:37:67:22:D5:DC:D4:A5:1D Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Certificate serial: 019B6844628E8B7F1F2F39CCAEF2AEA865F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft Manifest number: 179F Signing time: Mon 29 Dec 2025 04:01:10 +0000 Manifest this update: Mon 29 Dec 2025 04:01:10 +0000 Manifest next update: Tue 30 Dec 2025 04:01:10 +0000 Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: J2EzAM0/gNOwM72Dhg77KMIgBD7IFVcfm37Wl36O/hI=) 2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:44:62:8e:8b:7f:1f:2f:39:cc:ae:f2:ae:a8:65:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Validity Not Before: Dec 29 04:01:10 2025 GMT Not After : Dec 30 04:01:10 2025 GMT Subject: CN=3cdbcd9b29c334f5c84fb4c5376722d5dcd4a51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:e8:5a:9f:99:fe:ff:cd:13:84:45:82:bc: 69:a8:f0:a2:42:a6:c4:c2:b2:8c:9f:8e:17:c2:27: a7:8e:2f:f3:fb:24:de:48:53:25:3a:55:24:61:f3: 36:42:a5:ab:5b:17:04:94:a9:31:7b:a4:e4:1f:38: a1:58:c3:dc:34:a2:01:38:d5:07:cb:a8:d8:1d:67: af:7e:0d:d7:a1:7d:35:d1:d3:5b:f7:72:97:9e:0a: b9:12:56:33:12:e1:a6:99:8d:a3:2d:3e:ab:2a:d2: 3e:d7:d2:f4:7f:3e:6f:d1:5d:fd:8d:b5:ef:ab:41: 6b:28:f7:e0:e2:db:6c:2b:f7:5e:ba:c7:51:d3:b5: aa:48:02:f9:ca:29:96:2c:7d:a9:9f:5d:b0:47:70: 28:50:e0:13:47:16:f4:ed:07:9f:7a:ef:f0:8a:67: 32:69:5d:b3:22:9e:ac:61:3a:ce:aa:4f:d4:38:c0: e1:b3:42:96:65:2f:6e:a3:0c:cf:84:7e:d9:62:20: 27:09:f8:62:34:ca:88:7c:2d:7a:f4:0d:99:0e:64: ab:64:63:3d:49:cc:24:db:ff:f4:5c:be:21:48:8c: 0c:24:94:6c:de:5c:8e:50:c3:28:89:7a:0a:5a:57: 11:42:0b:0c:0a:eb:e2:ea:52:bc:44:1d:60:90:44: c3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:DB:CD:9B:29:C3:34:F5:C8:4F:B4:C5:37:67:22:D5:DC:D4:A5:1D X509v3 Authority Key Identifier: keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:dd:f5:25:a8:9e:1e:cd:cc:07:44:1b:6d:47:74:99:16:a5: 07:b6:3b:04:bb:9c:4f:46:d6:4e:01:f0:31:99:90:70:4d:c7: 30:d4:ad:11:d7:1b:03:4a:bd:15:8f:d9:fb:52:c7:94:50:e3: ec:ad:d2:69:f3:9c:b8:75:9e:57:94:c8:f3:c2:18:e3:d1:64: 07:d4:6e:fe:d5:50:42:d9:13:e1:48:82:c1:b0:56:14:72:32: a8:ec:e9:be:58:33:b2:74:8e:99:43:d4:18:17:ec:f3:b9:19: 67:b1:f6:0d:54:f9:9a:52:c5:1c:9a:51:e7:14:dc:a1:ee:ea: 66:c3:d6:33:c4:86:71:91:f0:ac:31:d2:c4:02:db:85:14:d2: 88:35:fb:1d:2c:6b:f1:85:9b:d8:34:74:ed:3d:b5:27:3a:61: 10:00:a5:0b:88:f1:6f:11:43:33:31:d6:0e:97:b1:5c:5c:e3: c9:98:22:a6:a3:2d:49:1a:f7:b9:e8:85:eb:4a:65:89:f0:02: b7:ba:84:28:8a:e0:54:54:a1:4b:94:2f:6c:c8:7c:a4:ce:f2: 10:fe:4c:88:32:41:1c:e4:a0:61:f4:c6:94:78:12:00:0e:9b: e8:be:b2:2a:e9:03:ed:0d:ef:3d:fd:6a:24:44:25:d7:28:e4: 3f:d0:5a:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoRGKOi38fLznMrvKuqGX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw NmM2NzkwHhcNMjUxMjI5MDQwMTEwWhcNMjUxMjMwMDQwMTEwWjAzMTEwLwYDVQQD EygzY2RiY2Q5YjI5YzMzNGY1Yzg0ZmI0YzUzNzY3MjJkNWRjZDRhNTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOzoWp+Z/v/NE4RFgrxpqPCiQqbE wrKMn44Xwienji/z+yTeSFMlOlUkYfM2QqWrWxcElKkxe6TkHzihWMPcNKIBONUH y6jYHWevfg3XoX010dNb93KXngq5ElYzEuGmmY2jLT6rKtI+19L0fz5v0V39jbXv q0FrKPfg4ttsK/deusdR07WqSAL5yimWLH2pn12wR3AoUOATRxb07Qefeu/wimcy aV2zIp6sYTrOqk/UOMDhs0KWZS9uowzPhH7ZYiAnCfhiNMqIfC169A2ZDmSrZGM9 Scwk2//0XL4hSIwMJJRs3lyOUMMoiXoKWlcRQgsMCuvi6lK8RB1gkETD8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDzbzZspwzT1yE+0xTdnItXc1KUdMB8GA1UdIwQY MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbN31Jaie Hs3MB0QbbUd0mRalB7Y7BLucT0bWTgHwMZmQcE3HMNStEdcbA0q9FY/Z+1LHlFDj 7K3SafOcuHWeV5TI88IY49FkB9Ru/tVQQtkT4UiCwbBWFHIyqOzpvlgzsnSOmUPU GBfs87kZZ7H2DVT5mlLFHJpR5xTcoe7qZsPWM8SGcZHwrDHSxALbhRTSiDX7HSxr 8YWb2DR07T21JzphEAClC4jxbxFDMzHWDpexXFzjyZgipqMtSRr3ueiF60plifAC t7qEKIrgVFShS5QvbMh8pM7yEP5MiDJBHOSgYfTGlHgSAA6b6L6yKukD7Q3vPf1q JEQl1yjkP9BaWw== -----END CERTIFICATE-----Generated at Mon Dec 29 05:24:01 2025 by rpki-client