This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json) Hash identifier: QAqePD7yq0XcBbFGXdYftUbLekUIENh3flE9VLvlKyg= Subject key identifier: A6:F1:03:43:0B:52:5E:DE:47:31:73:46:24:20:85:19:57:7C:FC:0A Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Certificate serial: 019B4AA7B6E2B74467275522E0E0781AA210 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft Manifest number: 17A0 Signing time: Tue 23 Dec 2025 10:01:03 +0000 Manifest this update: Tue 23 Dec 2025 10:01:03 +0000 Manifest next update: Wed 24 Dec 2025 10:01:03 +0000 Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: QsgnzdY9SoBpmeuTwVo71p+wTRPwTcbe4mIYop6gAgE=) 2: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (hash: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:b6:e2:b7:44:67:27:55:22:e0:e0:78:1a:a2:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Validity Not Before: Dec 23 10:01:03 2025 GMT Not After : Dec 24 10:01:03 2025 GMT Subject: CN=a6f103430b525ede4731734624208519577cfc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bb:1d:77:0d:bc:95:f5:5c:93:89:a3:98:4a: 40:48:1a:f7:b7:60:1e:2b:64:b9:81:1d:b8:d3:aa: fb:f4:0c:a9:c8:bd:9a:40:6c:44:18:f4:91:20:29: 21:81:f7:2b:7f:08:a5:25:f7:af:61:ee:f6:b9:6f: 80:27:b4:c0:78:dc:50:fe:27:f6:bf:3c:b7:93:db: 65:d1:3f:05:cd:c5:7c:95:31:06:84:73:ef:ef:75: 73:3c:67:5e:ce:34:34:58:75:6b:51:d1:61:46:87: ba:c4:39:ba:6b:f4:d4:c5:e3:18:16:9b:a0:41:ef: 69:a3:88:80:ec:d6:a0:57:55:6f:eb:ab:8f:ba:4b: c5:3d:8a:cb:0a:6d:a1:2f:5c:af:11:0f:c1:34:bf: 6e:98:d1:d0:a2:2f:c9:65:25:f0:a6:76:2a:6b:03: 4c:10:e1:5b:bc:82:4e:73:1c:76:a3:62:d9:cb:8a: 45:b6:18:a0:d5:67:eb:c1:67:53:5f:d8:bb:b4:09: 18:46:96:25:b2:2d:3a:61:78:48:f0:00:eb:9d:20: 74:59:19:ce:b6:34:2d:d7:75:c2:62:68:0c:5e:52: cb:12:ff:f6:bd:9b:1e:d5:b0:6b:d0:76:04:82:9e: 46:74:a2:e3:e9:01:d9:76:c4:14:ad:d4:39:dc:b9: 35:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F1:03:43:0B:52:5E:DE:47:31:73:46:24:20:85:19:57:7C:FC:0A X509v3 Authority Key Identifier: keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e7:61:02:e8:e9:d2:69:da:d0:4f:0b:0f:f7:a7:7c:28:73: 9e:cc:f5:ed:c1:db:00:5b:60:e1:e4:5a:74:09:8f:ab:7f:41: 48:8e:6e:7d:a5:15:08:d2:0a:6e:92:cb:d2:5b:7e:9a:0b:fe: 2b:cf:49:96:d5:b1:3d:60:7b:6b:fe:43:92:df:20:ad:4f:b8: a6:57:e9:ed:ee:95:bd:23:84:98:d3:5b:96:1c:63:00:9a:16: 4f:45:75:0c:b0:e7:b3:72:35:80:b0:7c:60:51:05:94:f2:bf: 0e:7e:46:8e:57:81:ff:7a:6f:0b:61:6b:fa:a1:07:25:a1:3d: fe:5a:a0:6f:c2:41:86:6d:cc:c9:78:1d:28:2e:96:43:7a:62: a7:79:a7:0c:51:6a:b8:5f:81:ce:1b:72:f3:de:de:8b:c3:29: f3:71:93:cb:1a:44:8d:3d:be:f9:66:4f:53:46:01:82:13:49: 15:bb:4c:77:0a:e1:ee:10:a5:74:bf:7d:4f:10:17:e4:7e:79: 80:8b:69:79:13:ef:9f:fa:eb:1b:7d:b1:b9:99:1c:99:d4:a1: b4:86:bb:e1:5b:26:2e:42:ef:b2:ba:f6:f2:bc:d6:a4:94:ec: fe:48:ba:4e:32:b6:6b:5b:60:2d:1b:d3:bf:96:b3:9a:d1:e9: 70:f4:7f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp7bit0RnJ1Ui4OB4GqIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj NGNjYzQwHhcNMjUxMjIzMTAwMTAzWhcNMjUxMjI0MTAwMTAzWjAzMTEwLwYDVQQD EyhhNmYxMDM0MzBiNTI1ZWRlNDczMTczNDYyNDIwODUxOTU3N2NmYzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bsddw28lfVck4mjmEpASBr3t2Ae K2S5gR2406r79AypyL2aQGxEGPSRICkhgfcrfwilJfevYe72uW+AJ7TAeNxQ/if2 vzy3k9tl0T8FzcV8lTEGhHPv73VzPGdezjQ0WHVrUdFhRoe6xDm6a/TUxeMYFpug Qe9po4iA7NagV1Vv66uPukvFPYrLCm2hL1yvEQ/BNL9umNHQoi/JZSXwpnYqawNM EOFbvIJOcxx2o2LZy4pFthig1WfrwWdTX9i7tAkYRpYlsi06YXhI8ADrnSB0WRnO tjQt13XCYmgMXlLLEv/2vZse1bBr0HYEgp5GdKLj6QHZdsQUrdQ53Lk1OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbxA0MLUl7eRzFzRiQghRlXfPwKMB8GA1UdIwQY MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt NWU3NDlmNDM0MWE0LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0 LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAludhAujp 0mna0E8LD/enfChznsz17cHbAFtg4eRadAmPq39BSI5ufaUVCNIKbpLL0lt+mgv+ K89JltWxPWB7a/5Dkt8grU+4plfp7e6VvSOEmNNblhxjAJoWT0V1DLDns3I1gLB8 YFEFlPK/Dn5GjleB/3pvC2Fr+qEHJaE9/lqgb8JBhm3MyXgdKC6WQ3pip3mnDFFq uF+Bzhty897ei8Mp83GTyxpEjT2++WZPU0YBghNJFbtMdwrh7hCldL99TxAX5H55 gItpeRPvn/rrG32xuZkcmdShtIa74VsmLkLvsrr28rzWpJTs/ki6TjK2a1tgLRvT v5azmtHpcPR/VA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:42 2025 by rpki-client