This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json) Hash identifier: pRk9hHKOvpegS+iystX6SK2NSragE89XAXxz/Zw9Wx0= Subject key identifier: D9:C7:1E:C0:9F:67:92:F9:74:7F:C9:30:44:E4:1F:69:C3:FE:49:F7 Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20 Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20 Certificate serial: 019B52CF151E1406B708C691CAE7BB7D6563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft Manifest number: 0479 Signing time: Thu 25 Dec 2025 00:01:01 +0000 Manifest this update: Thu 25 Dec 2025 00:01:01 +0000 Manifest next update: Fri 26 Dec 2025 00:01:01 +0000 Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: xxmknqahdLaPBSySLVLXq0O+aHHkmojo+/tdLmvZecY=) 2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 00:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:15:1e:14:06:b7:08:c6:91:ca:e7:bb:7d:65:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1693737a01469c95011d697392565916045d3a20 Validity Not Before: Dec 25 00:01:01 2025 GMT Not After : Dec 26 00:01:01 2025 GMT Subject: CN=d9c71ec09f6792f9747fc93044e41f69c3fe49f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:e4:ad:97:fd:c4:38:36:9f:a0:c3:a8:d5: 81:10:d8:6c:fd:b6:34:64:f0:36:06:f9:f3:88:15: 59:7c:f7:a5:38:57:8e:c6:99:d6:80:45:7d:62:2b: 7c:f2:6d:6e:84:e2:66:3b:3c:f2:a5:6b:ca:f0:90: 4b:9b:b3:3b:7d:39:50:eb:a6:ad:18:28:ac:7b:04: 71:6f:de:5a:ff:62:44:62:00:04:09:0c:37:9b:8e: 92:fa:eb:02:ce:0c:65:db:83:bc:ba:87:8e:57:a8: 10:d7:b2:cd:4a:a4:b4:74:43:3a:5a:d0:8d:2f:d8: 04:be:fd:3c:62:68:42:fd:2a:51:ca:b4:e1:5e:b9: 66:f4:92:b9:6b:18:31:2a:be:e0:83:e3:4c:21:fa: fa:6d:40:31:fa:5c:ab:81:b8:6b:83:a2:5e:ad:d0: ed:68:68:36:fe:30:f6:97:3e:03:08:c2:1a:f1:1e: d4:f0:7b:01:d2:ba:5b:d6:26:76:43:6d:a4:91:53: 4f:ab:04:23:87:1b:3e:b2:52:fb:26:b3:1e:20:76: 4e:ff:23:fe:d2:9c:36:b4:c6:a2:0b:58:fa:9e:c8: 2f:af:c7:ab:39:cc:c1:22:25:a4:83:c0:d0:84:5b: bd:d0:b1:34:2d:84:bd:1b:cf:2e:fc:23:80:0b:c1: 87:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C7:1E:C0:9F:67:92:F9:74:7F:C9:30:44:E4:1F:69:C3:FE:49:F7 X509v3 Authority Key Identifier: keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b2:ea:ab:00:f6:93:4b:a9:4b:9a:03:94:02:ab:dc:36:28: 87:8e:0f:5c:36:49:0a:73:10:cf:99:67:a9:46:b6:33:4f:90: 21:11:99:f7:6d:41:c8:2b:8b:c1:c9:d4:95:30:4b:41:2e:d2: 0b:6d:58:71:56:2f:37:90:c6:4c:09:9c:21:bd:c1:7d:e2:1d: 7a:1d:c2:b3:15:ef:e8:74:8a:3b:31:37:be:42:b7:45:ff:c5: 92:79:9b:4b:0f:36:20:55:97:88:bd:5b:b7:86:73:21:25:d0: 7b:93:9f:b3:05:66:4d:82:f0:d3:2c:d5:3f:aa:0f:19:b5:8a: 5c:53:7b:1a:97:4d:76:a6:57:6b:a3:19:48:86:2e:37:e9:92: 86:26:38:2c:74:a5:b0:a1:05:7a:23:72:68:68:73:f4:41:ce: 84:1f:0f:e5:ea:35:43:47:04:bc:8a:36:af:bb:ed:df:ac:bb: 5b:b1:c3:e5:39:d6:65:0f:d6:7e:ee:e9:93:44:5a:3f:03:fe: 17:51:a6:42:d2:47:b8:a3:d4:6c:b9:ac:36:eb:11:b0:a6:c7: 1d:41:44:22:65:8a:f3:33:e4:10:c4:24:09:9e:88:a2:15:24: ec:ce:1d:78:77:23:3b:4c:78:7b:75:52:28:5d:a8:76:8c:5c: b7:40:18:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzxUeFAa3CMaRyue7fWVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTM3MzdhMDE0NjljOTUwMTFkNjk3MzkyNTY1OTE2MDQ1 ZDNhMjAwHhcNMjUxMjI1MDAwMTAxWhcNMjUxMjI2MDAwMTAxWjAzMTEwLwYDVQQD EyhkOWM3MWVjMDlmNjc5MmY5NzQ3ZmM5MzA0NGU0MWY2OWMzZmU0OWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4TkrZf9xDg2n6DDqNWBENhs/bY0 ZPA2BvnziBVZfPelOFeOxpnWgEV9Yit88m1uhOJmOzzypWvK8JBLm7M7fTlQ66at GCisewRxb95a/2JEYgAECQw3m46S+usCzgxl24O8uoeOV6gQ17LNSqS0dEM6WtCN L9gEvv08YmhC/SpRyrThXrlm9JK5axgxKr7gg+NMIfr6bUAx+lyrgbhrg6JerdDt aGg2/jD2lz4DCMIa8R7U8HsB0rpb1iZ2Q22kkVNPqwQjhxs+slL7JrMeIHZO/yP+ 0pw2tMaiC1j6nsgvr8erOczBIiWkg8DQhFu90LE0LYS9G88u/COAC8GHeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnHHsCfZ5L5dH/JMETkH2nD/kn3MB8GA1UdIwQY MBaAFBaTc3oBRpyVAR1pc5JWWRYEXTogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYt NWFlMzA3MzA0YjBiLzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYtNWFlMzA3MzA0YjBi LzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrLqqwD2 k0upS5oDlAKr3DYoh44PXDZJCnMQz5lnqUa2M0+QIRGZ921ByCuLwcnUlTBLQS7S C21YcVYvN5DGTAmcIb3BfeIdeh3CsxXv6HSKOzE3vkK3Rf/FknmbSw82IFWXiL1b t4ZzISXQe5OfswVmTYLw0yzVP6oPGbWKXFN7GpdNdqZXa6MZSIYuN+mShiY4LHSl sKEFeiNyaGhz9EHOhB8P5eo1Q0cEvIo2r7vt36y7W7HD5TnWZQ/Wfu7pk0RaPwP+ F1GmQtJHuKPUbLmsNusRsKbHHUFEImWK8zPkEMQkCZ6IohUk7M4deHcjO0x4e3VS KF2odoxct0AYng== -----END CERTIFICATE-----Generated at Thu Dec 25 04:58:59 2025 by rpki-client