This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json) Hash identifier: Pz4e5IDMLKp0wanFjdGl55CdwI4m4oMM2eVNiUYkzOY= Subject key identifier: 8A:E4:A4:70:D5:FC:AB:7E:68:56:B3:CC:62:40:E9:B4:A4:20:71:9E Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019B39B3F16747A5CF1CB03FB3BE12970285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft Manifest number: 14D3 Signing time: Sat 20 Dec 2025 03:00:52 +0000 Manifest this update: Sat 20 Dec 2025 03:00:52 +0000 Manifest next update: Sun 21 Dec 2025 03:00:52 +0000 Files and hashes: 1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=) 2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=) 3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: B7jr0vAwmXy9cQiJKEGdsT15oFbT38mV7EofKpnBWrY=) 4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=) 5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=) 6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=) 7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:f1:67:47:a5:cf:1c:b0:3f:b3:be:12:97:02:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Dec 20 03:00:52 2025 GMT Not After : Dec 21 03:00:52 2025 GMT Subject: CN=8ae4a470d5fcab7e6856b3cc6240e9b4a420719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:c5:17:24:d0:e4:10:30:63:a6:43:b6:01: 91:40:89:d5:74:e2:e5:cc:fe:d4:ce:e1:c0:4d:51: 55:1d:ac:92:24:a7:ac:0b:53:48:57:5d:34:89:15: 16:db:bb:e7:d4:5e:51:49:12:63:46:1d:a8:08:63: d2:35:71:c5:5b:21:24:70:a1:5a:3b:46:16:55:70: f9:c4:dd:30:66:4d:6a:79:5f:61:22:f0:f7:b4:87: b9:db:d7:4c:f6:56:f8:26:fb:7e:2c:3f:f1:b8:84: c5:73:d8:51:5c:dd:e6:f2:75:38:14:be:3c:d6:f7: 42:23:c1:6a:c8:64:c4:9f:af:37:9c:56:88:f5:32: 98:49:04:1d:d1:f0:32:72:c4:43:59:40:21:70:e8: 58:6e:09:e0:39:7f:50:11:fd:f8:d5:20:55:59:c0: cb:14:79:f9:59:3b:ee:06:fc:51:2b:34:2f:68:40: 32:94:1c:b1:d4:7e:a7:64:87:6a:a0:c3:bd:5a:77: f6:90:07:1a:c4:bb:58:43:a1:0c:1c:74:3d:3e:3d: ca:15:e4:bb:7e:c1:55:e2:50:98:bb:48:d6:1d:b3: b3:ad:bb:27:c6:43:77:ce:75:0a:14:e1:f9:3b:5b: 87:77:04:6d:f4:ae:4d:8c:26:52:86:0b:3b:69:2c: eb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E4:A4:70:D5:FC:AB:7E:68:56:B3:CC:62:40:E9:B4:A4:20:71:9E X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:53:56:7a:bb:ca:a7:a8:56:9d:98:38:2e:9a:95:23:8a:a6: 16:8c:e1:5a:28:79:ad:83:d1:1e:d8:da:13:cb:8f:00:da:85: 71:dc:9a:90:84:c1:c4:21:b9:cc:35:47:e6:fa:bd:3e:a9:1a: 29:3e:cd:07:68:7e:08:b1:95:e4:5f:57:54:43:ec:5a:49:64: b1:e2:ed:e1:17:37:ee:1e:1f:0f:26:e0:87:48:24:4a:c3:4b: 0b:c1:39:40:eb:0e:05:39:c4:b5:26:46:28:98:85:17:cc:f1: 43:22:17:c5:52:09:0e:da:0a:9b:e0:1c:18:c8:b4:f2:a7:a5: 7a:d3:32:61:74:48:9b:5c:fe:d1:86:51:02:2f:cc:da:29:c0: 94:fe:bf:60:1c:e4:78:1b:9b:df:a5:c7:e7:23:08:fc:13:c3: bb:5a:dc:09:7d:80:0a:5e:60:cf:40:fb:0e:38:5f:dd:12:70: bb:d4:04:84:f5:83:8a:97:f0:55:87:69:1a:20:10:14:11:58: ec:e0:f1:1c:ce:e4:96:a9:52:df:d1:3f:56:32:83:50:3c:07: 0e:e8:23:55:c4:ed:08:cc:40:d3:96:ad:bc:ae:42:8b:20:86: 83:c0:e6:af:d4:4d:09:58:1f:bd:c0:13:71:69:86:68:46:14: 90:ce:a3:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s/FnR6XPHLA/s74SlwKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjUxMjIwMDMwMDUyWhcNMjUxMjIxMDMwMDUyWjAzMTEwLwYDVQQD Eyg4YWU0YTQ3MGQ1ZmNhYjdlNjg1NmIzY2M2MjQwZTliNGE0MjA3MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+jFFyTQ5BAwY6ZDtgGRQInVdOLl zP7UzuHATVFVHaySJKesC1NIV100iRUW27vn1F5RSRJjRh2oCGPSNXHFWyEkcKFa O0YWVXD5xN0wZk1qeV9hIvD3tIe529dM9lb4Jvt+LD/xuITFc9hRXN3m8nU4FL48 1vdCI8FqyGTEn683nFaI9TKYSQQd0fAycsRDWUAhcOhYbgngOX9QEf341SBVWcDL FHn5WTvuBvxRKzQvaEAylByx1H6nZIdqoMO9Wnf2kAcaxLtYQ6EMHHQ9Pj3KFeS7 fsFV4lCYu0jWHbOzrbsnxkN3znUKFOH5O1uHdwRt9K5NjCZShgs7aSzrewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrkpHDV/Kt+aFazzGJA6bSkIHGeMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVNWervK p6hWnZg4LpqVI4qmFozhWih5rYPRHtjaE8uPANqFcdyakITBxCG5zDVH5vq9Pqka KT7NB2h+CLGV5F9XVEPsWklkseLt4Rc37h4fDybgh0gkSsNLC8E5QOsOBTnEtSZG KJiFF8zxQyIXxVIJDtoKm+AcGMi08qeletMyYXRIm1z+0YZRAi/M2inAlP6/YBzk eBub36XH5yMI/BPDu1rcCX2ACl5gz0D7Djhf3RJwu9QEhPWDipfwVYdpGiAQFBFY 7ODxHM7klqlS39E/VjKDUDwHDugjVcTtCMxA05atvK5CiyCGg8Dmr9RNCVgfvcAT cWmGaEYUkM6jVQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:34 2025 by rpki-client