This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json) Hash identifier: CnuB4NRQ73vRzOzcutEcw1qFiSTxxFO5qmp5xzR3exk= Subject key identifier: 60:E5:5C:00:C5:09:13:77:39:11:B1:45:B2:B3:81:3A:08:12:F1:17 Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Certificate serial: 019B582C2BEAA945158E46C561A995C1F6F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft Manifest number: 17A7 Signing time: Fri 26 Dec 2025 01:00:48 +0000 Manifest this update: Fri 26 Dec 2025 01:00:48 +0000 Manifest next update: Sat 27 Dec 2025 01:00:48 +0000 Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: aZ6UIzpGasgKUFXuOpvOA/M5vdKbVEZvKpbEKe3xCv4=) 2: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (hash: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:2c:2b:ea:a9:45:15:8e:46:c5:61:a9:95:c1:f6:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Validity Not Before: Dec 26 01:00:48 2025 GMT Not After : Dec 27 01:00:48 2025 GMT Subject: CN=60e55c00c50913773911b145b2b3813a0812f117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:75:41:6d:41:7e:2f:bc:ca:28:a0:19:06: 39:6c:10:ed:fe:b4:68:08:f2:d9:07:4f:38:47:0b: 51:0a:2d:27:31:1e:e7:68:ff:26:1b:6d:e4:2d:28: 42:19:8a:1f:f8:ca:98:90:60:76:05:92:17:ce:be: de:88:ab:38:b7:3c:a2:3b:48:54:7d:ed:d4:47:92: 4f:c4:aa:f1:ce:db:e6:28:97:74:16:a5:14:9b:8e: a2:fc:c3:62:8d:c7:bf:37:c5:cb:59:56:75:16:bf: cf:eb:07:18:33:c4:e0:45:5d:bc:81:3e:3b:47:40: 70:4c:c4:63:b8:16:2e:57:36:f8:97:21:68:fe:30: 39:3d:b3:bb:84:e6:4b:7a:f7:8b:b8:60:f7:96:d4: 8b:35:6b:9e:f2:2e:46:6e:37:34:22:33:b0:74:64: 71:b5:f0:b7:9d:af:99:fd:a1:fa:9a:51:fc:1e:77: 3c:67:94:41:9b:41:8d:f4:26:9b:55:ed:68:ff:33: e6:fc:9c:c6:54:b9:23:68:9e:1e:df:a6:92:0c:7a: c6:77:36:59:ae:11:80:00:f7:12:8c:e4:c0:c1:56: e9:d6:81:49:54:e1:51:c0:08:d1:c8:84:0a:50:7c: e8:5e:6a:4f:f4:ee:33:41:91:b3:27:87:16:4a:0e: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E5:5C:00:C5:09:13:77:39:11:B1:45:B2:B3:81:3A:08:12:F1:17 X509v3 Authority Key Identifier: keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ad:6f:ae:b1:0e:63:d8:73:bc:72:5d:f6:e6:18:72:23:b2: 38:49:82:09:05:7b:41:32:ce:e0:6b:6d:1f:48:d9:c2:95:fb: ae:a8:78:cd:72:7a:9f:bd:da:75:f8:ed:65:9f:2d:db:82:02: 9f:8c:d9:93:2f:0f:c7:5d:f0:43:46:e8:24:ec:aa:92:0a:a7: d0:ec:b3:04:2c:3e:97:9c:62:79:3e:57:79:e8:7d:d4:27:99: d3:1f:bd:ac:b5:b2:ef:93:c6:f6:08:2b:34:d4:e0:22:18:dd: 6c:62:cd:80:3c:ad:3f:37:e9:94:fb:b5:94:cc:ac:e2:97:67: 33:dd:c6:3b:04:0e:39:30:7e:82:72:d6:8d:78:62:66:27:ca: 5f:f0:af:61:6b:93:1b:52:4c:ae:6e:88:d0:68:b8:67:ce:36: 8e:b5:52:70:53:a4:dc:8b:57:7f:03:ab:17:e7:4a:58:e7:be: 4c:7d:25:37:eb:18:15:24:11:7e:75:e1:d2:67:a3:9c:7a:ae: 0f:64:85:13:0f:8b:25:13:e3:8c:80:b8:73:3a:8f:a2:ed:bc: 91:48:c4:ff:aa:79:59:b9:d7:35:5e:80:23:a6:eb:bf:00:9e: 3e:20:99:fc:65:77:09:50:4c:f4:8d:63:65:c7:39:a1:47:53: 7f:c1:01:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYLCvqqUUVjkbFYamVwfb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj NGNjYzQwHhcNMjUxMjI2MDEwMDQ4WhcNMjUxMjI3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg2MGU1NWMwMGM1MDkxMzc3MzkxMWIxNDViMmIzODEzYTA4MTJmMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEZ1QW1Bfi+8yiigGQY5bBDt/rRo CPLZB084RwtRCi0nMR7naP8mG23kLShCGYof+MqYkGB2BZIXzr7eiKs4tzyiO0hU fe3UR5JPxKrxztvmKJd0FqUUm46i/MNijce/N8XLWVZ1Fr/P6wcYM8TgRV28gT47 R0BwTMRjuBYuVzb4lyFo/jA5PbO7hOZLeveLuGD3ltSLNWue8i5Gbjc0IjOwdGRx tfC3na+Z/aH6mlH8Hnc8Z5RBm0GN9CabVe1o/zPm/JzGVLkjaJ4e36aSDHrGdzZZ rhGAAPcSjOTAwVbp1oFJVOFRwAjRyIQKUHzoXmpP9O4zQZGzJ4cWSg7DlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDlXADFCRN3ORGxRbKzgToIEvEXMB8GA1UdIwQY MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt NWU3NDlmNDM0MWE0LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0 LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPK1vrrEO Y9hzvHJd9uYYciOyOEmCCQV7QTLO4GttH0jZwpX7rqh4zXJ6n73adfjtZZ8t24IC n4zZky8Px13wQ0boJOyqkgqn0OyzBCw+l5xieT5Xeeh91CeZ0x+9rLWy75PG9ggr NNTgIhjdbGLNgDytPzfplPu1lMys4pdnM93GOwQOOTB+gnLWjXhiZifKX/CvYWuT G1JMrm6I0Gi4Z842jrVScFOk3ItXfwOrF+dKWOe+TH0lN+sYFSQRfnXh0mejnHqu D2SFEw+LJRPjjIC4czqPou28kUjE/6p5WbnXNV6AI6brvwCePiCZ/GV3CVBM9I1j Zcc5oUdTf8EByA== -----END CERTIFICATE-----Generated at Fri Dec 26 07:48:32 2025 by rpki-client