This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft File: FKR4D1zQfpSL5vpLSSWnMTkG1es.mft (raw, json) Hash identifier: h4rijiyzirb3sNdevaLXve350d3KhklnvbPtJgpLTpQ= Subject key identifier: 74:49:D0:B1:BC:13:19:AE:71:AD:37:35:14:CC:9C:90:82:42:E7:EF Authority key identifier: 14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB Certificate issuer: /CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb Certificate serial: 019B3FED48B1B54E4D728A1058599FE38A14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft Manifest number: 1529 Signing time: Sun 21 Dec 2025 08:01:13 +0000 Manifest this update: Sun 21 Dec 2025 08:01:13 +0000 Manifest next update: Mon 22 Dec 2025 08:01:13 +0000 Files and hashes: 1: 77yJaauLzrFexoGSd8mW28O_fIU.roa (hash: ub7MVHo9mZ0L5vdaNfZlA1Alkn53dGfVV4Z9Peyi1bs=) 2: FKR4D1zQfpSL5vpLSSWnMTkG1es.crl (hash: DIQsIBgrHjEYWwvOhDxJrtsNwteBPjb33c1tajmfGR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:48:b1:b5:4e:4d:72:8a:10:58:59:9f:e3:8a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a4780f5cd07e948be6fa4b4925a7313906d5eb Validity Not Before: Dec 21 08:01:13 2025 GMT Not After : Dec 22 08:01:13 2025 GMT Subject: CN=7449d0b1bc1319ae71ad373514cc9c908242e7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:eb:f6:36:ad:5f:0e:49:99:03:a6:b8:6e:e3: 01:0f:61:87:bd:f7:83:2b:99:04:c3:37:16:23:f2: 9f:36:58:57:e3:d7:77:d6:7a:40:e5:e1:59:76:ae: 82:de:79:91:9c:78:ee:2f:d1:1c:16:99:4a:87:0e: 80:a7:18:41:de:55:1e:2f:d2:f3:97:42:3b:2a:4f: 18:5c:6c:f3:a3:b5:c8:b5:07:47:27:0c:1e:09:30: 02:92:50:d5:0a:2a:e0:44:4c:53:c8:fc:29:d4:b6: a4:48:25:3e:1a:90:a0:91:5d:19:ee:77:b7:d4:51: 32:5b:32:7d:05:00:32:56:04:2f:6b:de:ff:4b:d7: 10:9d:c3:94:b6:72:79:72:e9:52:3e:99:3c:17:56: 77:f3:53:20:a1:86:04:fb:ac:30:4b:f1:0c:26:64: ae:21:44:71:c4:40:55:d1:2d:99:87:a5:6b:96:09: 2e:48:8d:81:e5:d5:f8:d5:48:29:8c:11:63:f1:40: 4f:e6:cf:f3:34:30:4c:0b:01:9a:4f:ff:14:d3:ec: 7e:d7:99:a6:d7:7d:c9:97:06:79:bf:6c:bf:a5:14: 0d:94:51:fb:e7:2b:a3:8b:ec:1a:f4:20:37:b4:e1: 1b:3b:87:ac:6b:d4:16:c6:44:e4:48:cf:f7:5b:e4: 6a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:D0:B1:BC:13:19:AE:71:AD:37:35:14:CC:9C:90:82:42:E7:EF X509v3 Authority Key Identifier: keyid:14:A4:78:0F:5C:D0:7E:94:8B:E6:FA:4B:49:25:A7:31:39:06:D5:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKR4D1zQfpSL5vpLSSWnMTkG1es.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/42cdab-2029-4624-9f4b-99323686216d/1/FKR4D1zQfpSL5vpLSSWnMTkG1es.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:05:af:78:b2:a6:12:a7:d2:f8:ec:c6:45:72:ff:b9:87:2d: a8:ad:28:eb:c0:48:27:bd:12:ac:d3:fb:bc:0b:34:34:01:a8: 52:e2:e4:11:ce:bd:f3:15:a7:f7:23:22:64:c1:f5:9c:91:fd: 8e:a8:12:75:6e:85:ea:b9:06:42:6e:21:4c:db:6a:0c:79:25: 74:d0:30:63:f5:34:69:52:85:5b:62:64:a7:de:ea:f6:80:94: 0e:cc:d8:22:3f:57:df:66:42:81:40:0b:66:5c:57:36:5f:19: 38:67:ce:29:e0:9e:a7:33:19:13:1f:6c:24:18:48:5f:12:4d: d6:d6:e6:63:d9:cb:94:e8:37:ec:0b:11:bf:f1:9c:98:a0:23: bc:e0:cb:eb:ee:14:8a:28:0f:3f:4c:4d:29:ad:64:9b:12:a3: a5:7d:48:d6:59:ae:34:5b:f5:2c:ff:18:cc:65:e7:02:17:c7: d2:bc:0f:e8:7d:1c:30:18:2a:e1:8d:ba:e3:07:70:e1:a5:63: 18:0d:4d:b6:d4:52:8f:57:5a:4d:2f:f0:e8:38:6a:fd:3c:82: 29:80:cd:b3:70:b1:5d:cc:45:bd:1e:5e:88:aa:f2:a2:9c:bd: 74:f3:50:1f:5b:76:20:f6:90:e1:44:51:06:d5:b9:cb:76:f4: 94:2e:b7:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7UixtU5NcooQWFmf44oUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTQ3ODBmNWNkMDdlOTQ4YmU2ZmE0YjQ5MjVhNzMxMzkw NmQ1ZWIwHhcNMjUxMjIxMDgwMTEzWhcNMjUxMjIyMDgwMTEzWjAzMTEwLwYDVQQD Eyg3NDQ5ZDBiMWJjMTMxOWFlNzFhZDM3MzUxNGNjOWM5MDgyNDJlN2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uv2Nq1fDkmZA6a4buMBD2GHvfeD K5kEwzcWI/KfNlhX49d31npA5eFZdq6C3nmRnHjuL9EcFplKhw6ApxhB3lUeL9Lz l0I7Kk8YXGzzo7XItQdHJwweCTACklDVCirgRExTyPwp1LakSCU+GpCgkV0Z7ne3 1FEyWzJ9BQAyVgQva97/S9cQncOUtnJ5culSPpk8F1Z381MgoYYE+6wwS/EMJmSu IURxxEBV0S2Zh6VrlgkuSI2B5dX41UgpjBFj8UBP5s/zNDBMCwGaT/8U0+x+15mm 133JlwZ5v2y/pRQNlFH75yuji+wa9CA3tOEbO4esa9QWxkTkSM/3W+RqYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRJ0LG8Exmuca03NRTMnJCCQufvMB8GA1UdIwQY MBaAFBSkeA9c0H6Ui+b6S0klpzE5BtXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGIt OTkzMjM2ODYyMTZkLzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80MmNkYWItMjAyOS00NjI0LTlmNGItOTkzMjM2ODYyMTZk LzEvRktSNEQxelFmcFNMNXZwTFNTV25NVGtHMWVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAWveLKm EqfS+OzGRXL/uYctqK0o68BIJ70SrNP7vAs0NAGoUuLkEc698xWn9yMiZMH1nJH9 jqgSdW6F6rkGQm4hTNtqDHkldNAwY/U0aVKFW2Jkp97q9oCUDszYIj9X32ZCgUAL ZlxXNl8ZOGfOKeCepzMZEx9sJBhIXxJN1tbmY9nLlOg37AsRv/GcmKAjvODL6+4U iigPP0xNKa1kmxKjpX1I1lmuNFv1LP8YzGXnAhfH0rwP6H0cMBgq4Y264wdw4aVj GA1NttRSj1daTS/w6Dhq/TyCKYDNs3CxXcxFvR5eiKryopy9dPNQH1t2IPaQ4URR BtW5y3b0lC63Jw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:46 2025 by rpki-client