This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json) Hash identifier: YId8xxpOx53dWODTrpZOBr66RyM8OKymu6Vc4NyANcY= Subject key identifier: CD:92:F9:02:7B:3F:1C:19:43:6E:97:9E:00:EA:01:CB:29:95:7D:8E Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933 Certificate serial: 019B3EA32740F990375082E566D9F0EFA593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft Manifest number: 1D Signing time: Sun 21 Dec 2025 02:00:38 +0000 Manifest this update: Sun 21 Dec 2025 02:00:38 +0000 Manifest next update: Mon 22 Dec 2025 02:00:38 +0000 Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: JviVxiGkLf1Q580ISnaxlY4SVeWmuhUgc8zcPYe6xXs=) 2: oyJa9c3yIWG6yoefC-Dl8q7v_4k.roa (hash: L8bXnJKZCUNQajwd4Sh21RwsiqjWxpRpS53i7yxKKJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:27:40:f9:90:37:50:82:e5:66:d9:f0:ef:a5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933 Validity Not Before: Dec 21 02:00:38 2025 GMT Not After : Dec 22 02:00:38 2025 GMT Subject: CN=cd92f9027b3f1c19436e979e00ea01cb29957d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:80:25:dd:8d:87:90:7e:5b:e7:fa:fa:99:9c: 23:02:30:85:a3:82:16:6b:d8:de:e3:d6:7e:8f:67: 23:ec:f6:f3:06:3a:67:a1:f4:c5:54:cb:a6:61:a5: 14:db:3e:8d:57:c6:3b:8d:95:89:6d:61:6b:f8:96: 62:24:6b:75:55:c1:76:72:87:a7:74:1b:22:7a:f2: d3:32:79:af:4a:24:f4:ef:9c:26:42:60:db:21:56: 7e:cf:27:e1:cc:4e:b4:e7:56:fb:8e:3b:ed:b3:83: bd:e5:1d:af:66:3e:dd:6e:a2:4f:7e:ff:3c:6b:6f: ab:3d:49:b6:fc:5a:6b:79:1a:4a:cd:46:5d:c8:e5: 90:a6:8b:80:a8:c2:09:1f:4d:60:d9:80:54:c5:21: 26:85:9b:9c:14:ff:b0:0e:41:e5:aa:83:ef:b8:67: 5c:b2:28:6f:72:6e:ad:a6:c4:65:2d:26:42:29:01: 19:4a:60:f7:62:43:a6:67:dc:e5:9f:f7:74:0b:9b: 37:de:39:6b:29:19:ca:32:9a:af:43:f9:1d:13:4c: be:da:e3:3b:6c:be:94:af:8f:7f:80:fe:70:4f:71: ad:30:61:12:47:6d:c5:5a:b7:78:5f:2f:26:91:c6: 6a:57:2e:52:48:40:c9:5c:0f:e6:09:1f:40:ca:af: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:92:F9:02:7B:3F:1C:19:43:6E:97:9E:00:EA:01:CB:29:95:7D:8E X509v3 Authority Key Identifier: keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:91:c2:f1:4a:b8:a7:bf:da:f5:2a:72:f5:8b:2e:ef:06:46: 3b:73:19:94:48:68:f7:53:b8:f7:bb:e7:e9:c3:90:2e:15:cf: 24:29:d5:a7:e1:29:3b:a7:49:14:ae:a5:05:0d:9b:23:5e:4a: 35:f7:e7:0c:a0:f3:e2:9d:23:ff:fa:ae:6e:f7:ae:d0:da:24: f5:eb:79:07:f2:71:a1:48:f7:16:b0:f9:c6:c8:7b:0d:f8:86: 7f:46:fe:e5:a1:ac:53:ca:43:6e:ff:15:13:b0:f3:ef:5f:e0: 3d:b9:c7:e8:69:98:ad:79:d0:e0:c2:72:08:46:3d:a0:38:d1: 1b:02:72:9b:4d:17:80:fe:f3:f7:dd:29:9a:7c:be:c9:52:5d: 1e:db:58:6a:c8:5d:e7:da:10:8a:94:92:19:b9:2a:4d:db:a7: da:aa:6c:3b:39:e4:0e:35:2a:bc:d0:66:53:5e:4e:8c:99:f4: 03:63:7d:ae:e3:87:89:37:74:49:8c:3b:50:1f:7e:1d:3b:f8: 66:6b:04:7d:5c:30:e8:21:dd:11:fe:db:2d:8a:62:60:16:73: d4:a0:93:9f:e5:ef:23:3d:e2:4e:0c:21:8c:a4:7c:5e:63:a8: 11:99:b6:aa:14:bf:80:85:2c:4d:2b:e1:67:b4:3b:3f:39:da: dd:35:5b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oydA+ZA3UILlZtnw76WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDQ0ZjY1OGJiYzkyMjcwNzg1ZjdiYjA3MmFjOTM2ODk1 ZjQ5MzMwHhcNMjUxMjIxMDIwMDM4WhcNMjUxMjIyMDIwMDM4WjAzMTEwLwYDVQQD EyhjZDkyZjkwMjdiM2YxYzE5NDM2ZTk3OWUwMGVhMDFjYjI5OTU3ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4Al3Y2HkH5b5/r6mZwjAjCFo4IW a9je49Z+j2cj7PbzBjpnofTFVMumYaUU2z6NV8Y7jZWJbWFr+JZiJGt1VcF2coen dBsievLTMnmvSiT075wmQmDbIVZ+zyfhzE6051b7jjvts4O95R2vZj7dbqJPfv88 a2+rPUm2/FpreRpKzUZdyOWQpouAqMIJH01g2YBUxSEmhZucFP+wDkHlqoPvuGdc sihvcm6tpsRlLSZCKQEZSmD3YkOmZ9zln/d0C5s33jlrKRnKMpqvQ/kdE0y+2uM7 bL6Ur49/gP5wT3GtMGESR23FWrd4Xy8mkcZqVy5SSEDJXA/mCR9Ayq9awwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2S+QJ7PxwZQ26XngDqAcsplX2OMB8GA1UdIwQY MBaAFBYET2WLvJInB4X3uwcqyTaJX0kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGIt ODIyYjI1NTUzOGZlLzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGItODIyYjI1NTUzOGZl LzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJHC8Uq4 p7/a9Spy9Ysu7wZGO3MZlEho91O497vn6cOQLhXPJCnVp+EpO6dJFK6lBQ2bI15K NffnDKDz4p0j//qubveu0Nok9et5B/JxoUj3FrD5xsh7DfiGf0b+5aGsU8pDbv8V E7Dz71/gPbnH6GmYrXnQ4MJyCEY9oDjRGwJym00XgP7z990pmny+yVJdHttYashd 59oQipSSGbkqTdun2qpsOznkDjUqvNBmU15OjJn0A2N9ruOHiTd0SYw7UB9+HTv4 ZmsEfVww6CHdEf7bLYpiYBZz1KCTn+XvIz3iTgwhjKR8XmOoEZm2qhS/gIUsTSvh Z7Q7Pzna3TVbSQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:38:29 2025 by rpki-client