This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft File: FhQcZCnqr_caNR-yVz32A7uV8nA.mft (raw, json) Hash identifier: G7AYJnFL4sIktDfttz0qD/Z3tDGSyk1sYN8zmJOt7aE= Subject key identifier: 33:47:F8:BF:91:01:C6:78:70:EE:D4:35:5C:AC:50:FF:4D:FD:6A:06 Authority key identifier: 16:14:1C:64:29:EA:AF:F7:1A:35:1F:B2:57:3D:F6:03:BB:95:F2:70 Certificate issuer: /CN=16141c6429eaaff71a351fb2573df603bb95f270 Certificate serial: 019B66FAD987B184820E0BFAA2BEB3C5BC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft Manifest number: 0252 Signing time: Sun 28 Dec 2025 22:01:14 +0000 Manifest this update: Sun 28 Dec 2025 22:01:14 +0000 Manifest next update: Mon 29 Dec 2025 22:01:14 +0000 Files and hashes: 1: FhQcZCnqr_caNR-yVz32A7uV8nA.crl (hash: 8djrOenD5FXEENgwxVZ7fGJLXhKpt3zmYgOXrJn3/Rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fa:d9:87:b1:84:82:0e:0b:fa:a2:be:b3:c5:bc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16141c6429eaaff71a351fb2573df603bb95f270 Validity Not Before: Dec 28 22:01:14 2025 GMT Not After : Dec 29 22:01:14 2025 GMT Subject: CN=3347f8bf9101c67870eed4355cac50ff4dfd6a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c3:18:d1:25:ca:22:b1:c2:a5:70:68:98:39: 25:17:05:c3:15:02:88:93:39:32:e6:9f:aa:dd:39: 10:96:a0:e5:21:00:b8:c4:a9:cf:bd:80:a8:c9:d4: 62:c3:22:06:01:5f:b6:cc:98:03:c3:6c:b7:ac:9f: 26:8b:f6:a9:ed:77:8f:ef:0a:a5:89:51:b1:2d:26: 94:91:d2:c9:19:36:5c:2b:d1:4f:6b:54:ad:aa:6e: ce:6f:10:22:94:b1:a7:36:40:a6:29:fd:ee:98:1b: de:ac:f3:5f:ae:70:9a:ad:09:8f:f4:e3:bf:71:a3: 37:fc:bd:a3:95:8c:ae:1c:19:51:2e:ac:2c:de:b5: ae:d3:53:81:6d:da:1a:83:2a:f1:57:7b:0f:7e:a3: 6e:c4:a8:89:53:83:94:66:c4:15:f4:30:a4:2b:36: ab:7b:30:4e:43:d4:21:cf:c1:7a:88:a8:95:c9:f3: 63:77:fc:33:e0:7f:21:b2:4b:f7:d6:6b:f2:8e:6b: ad:10:3f:dd:9c:2a:0a:12:40:42:d7:f7:0b:a6:35: 73:f0:3c:89:73:3a:a0:cf:44:d6:7d:79:46:2b:05: 6b:58:8d:90:81:57:64:8a:73:44:43:e1:73:70:9a: a3:d0:56:e7:58:3a:78:ac:70:87:44:a9:1f:f8:cf: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:47:F8:BF:91:01:C6:78:70:EE:D4:35:5C:AC:50:FF:4D:FD:6A:06 X509v3 Authority Key Identifier: keyid:16:14:1C:64:29:EA:AF:F7:1A:35:1F:B2:57:3D:F6:03:BB:95:F2:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhQcZCnqr_caNR-yVz32A7uV8nA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/63d28b-d152-44cd-b504-5d8fce0a0bb2/1/FhQcZCnqr_caNR-yVz32A7uV8nA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7a:20:b7:10:bb:b7:ce:8d:02:4d:47:16:7b:2e:6f:ba:d1: 26:48:e9:81:e4:da:be:08:9c:65:c2:a2:56:52:7c:c1:6b:d9: 06:19:e2:ca:08:09:3d:ce:3e:dc:13:89:d1:dd:62:49:a9:b0: 72:02:24:f6:74:bf:77:79:1e:17:28:af:b6:1d:94:f4:94:02: a7:2e:26:80:9d:f0:0f:da:88:67:70:f9:0e:a3:e8:c0:76:6a: 87:43:e8:b9:9e:3e:4e:e8:ab:6d:8c:b6:af:dd:4d:5a:cd:11: cd:52:80:39:0b:e0:7c:7f:ee:d2:32:ea:a0:79:0a:57:bc:44: e2:ae:78:fb:0a:a5:20:35:3c:78:18:3d:b4:c6:54:4d:9f:63: 73:58:ef:2e:09:5a:3d:d8:c9:15:7a:33:c6:fe:c6:21:b0:68: 95:0c:06:69:6e:1b:30:24:57:1c:5b:61:b3:a8:43:92:bc:34: 5c:27:1f:ac:de:71:03:02:59:5d:e0:27:33:71:88:3d:cf:ea: 03:5e:e2:aa:31:02:0d:fb:a6:77:ff:a2:7d:e0:e7:9d:1b:45: 54:5b:b0:42:55:de:47:6a:10:d3:f1:62:cf:89:77:d4:60:c3: 0e:8c:58:32:a9:70:17:a2:4a:e6:a2:d1:dd:f2:0c:f8:6b:ff: 48:62:25:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+tmHsYSCDgv6or6zxbwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MTQxYzY0MjllYWFmZjcxYTM1MWZiMjU3M2RmNjAzYmI5 NWYyNzAwHhcNMjUxMjI4MjIwMTE0WhcNMjUxMjI5MjIwMTE0WjAzMTEwLwYDVQQD EygzMzQ3ZjhiZjkxMDFjNjc4NzBlZWQ0MzU1Y2FjNTBmZjRkZmQ2YTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMMY0SXKIrHCpXBomDklFwXDFQKI kzky5p+q3TkQlqDlIQC4xKnPvYCoydRiwyIGAV+2zJgDw2y3rJ8mi/ap7XeP7wql iVGxLSaUkdLJGTZcK9FPa1Stqm7ObxAilLGnNkCmKf3umBverPNfrnCarQmP9OO/ caM3/L2jlYyuHBlRLqws3rWu01OBbdoagyrxV3sPfqNuxKiJU4OUZsQV9DCkKzar ezBOQ9Qhz8F6iKiVyfNjd/wz4H8hskv31mvyjmutED/dnCoKEkBC1/cLpjVz8DyJ czqgz0TWfXlGKwVrWI2QgVdkinNEQ+FzcJqj0FbnWDp4rHCHRKkf+M+EewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNH+L+RAcZ4cO7UNVysUP9N/WoGMB8GA1UdIwQY MBaAFBYUHGQp6q/3GjUfslc99gO7lfJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmhRY1pDbnFyX2NhTlIteVZ6MzJBN3VWOG5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny82M2QyOGItZDE1Mi00NGNkLWI1MDQt NWQ4ZmNlMGEwYmIyLzEvRmhRY1pDbnFyX2NhTlIteVZ6MzJBN3VWOG5BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny82M2QyOGItZDE1Mi00NGNkLWI1MDQtNWQ4ZmNlMGEwYmIy LzEvRmhRY1pDbnFyX2NhTlIteVZ6MzJBN3VWOG5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXogtxC7 t86NAk1HFnsub7rRJkjpgeTavgicZcKiVlJ8wWvZBhniyggJPc4+3BOJ0d1iSamw cgIk9nS/d3keFyivth2U9JQCpy4mgJ3wD9qIZ3D5DqPowHZqh0PouZ4+TuirbYy2 r91NWs0RzVKAOQvgfH/u0jLqoHkKV7xE4q54+wqlIDU8eBg9tMZUTZ9jc1jvLgla PdjJFXozxv7GIbBolQwGaW4bMCRXHFths6hDkrw0XCcfrN5xAwJZXeAnM3GIPc/q A17iqjECDfumd/+ifeDnnRtFVFuwQlXeR2oQ0/Fiz4l31GDDDoxYMqlwF6JK5qLR 3fIM+Gv/SGIlPA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:08:49 2025 by rpki-client