This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json) Hash identifier: pPE+yTzPnlt1pEuJeD+sjRNDd97gFN+H/B3i117168A= Subject key identifier: C7:D4:C3:D3:2F:A5:DD:28:99:8A:9E:09:99:13:AD:4C:F0:E6:A3:3E Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b Certificate serial: 019B405A9783834C85B89B4A6A8CB70D7B4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft Manifest number: 0C41 Signing time: Sun 21 Dec 2025 10:00:37 +0000 Manifest this update: Sun 21 Dec 2025 10:00:37 +0000 Manifest next update: Mon 22 Dec 2025 10:00:37 +0000 Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: WffLmG/YhgZj0vx5PajcLylVkrNNSblSOvuNQsbv4eA=) 2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:97:83:83:4c:85:b8:9b:4a:6a:8c:b7:0d:7b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b Validity Not Before: Dec 21 10:00:37 2025 GMT Not After : Dec 22 10:00:37 2025 GMT Subject: CN=c7d4c3d32fa5dd28998a9e099913ad4cf0e6a33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ff:71:e9:34:b3:72:72:8b:91:94:8c:46:93: f6:52:21:9a:14:8c:92:48:4e:b8:da:5b:15:e6:c4: 24:90:8e:80:53:ec:0f:2a:37:13:93:96:fa:92:cd: eb:2a:af:fc:34:08:3d:7e:27:31:b7:cf:29:a5:c2: a9:c1:31:db:87:ab:50:fd:24:0c:b9:19:9e:5e:70: 17:ba:a2:cd:3f:5b:c9:32:6b:15:4a:b5:3a:05:c1: ba:ee:e5:34:ec:4f:43:cb:0d:27:80:47:59:fe:45: ac:e0:8b:74:aa:9d:0d:0f:48:5a:9a:5f:6e:2c:4c: 03:60:c3:f4:09:44:66:dd:73:39:8c:e3:de:ed:99: a0:a8:18:03:9a:d8:c3:96:bf:1f:b0:22:61:b9:ff: 62:8b:5c:4a:e8:9c:cf:0b:e8:f8:5a:7b:c8:d7:bf: 0f:69:c2:ff:b3:0e:6c:23:56:4a:c3:db:87:ff:04: 2f:28:4f:47:ba:8f:67:ca:0e:4c:6e:86:6e:c8:ae: 48:30:f6:d6:6c:df:08:b2:8c:c8:82:5e:a9:40:5a: 7d:e4:e9:a2:f0:a4:62:aa:77:d8:22:56:a5:b7:3c: 77:99:53:25:ce:2d:4f:01:db:ff:3e:f7:f0:f5:06: 3a:f4:81:2b:3e:fb:eb:88:d4:24:b3:39:37:e9:0e: 8c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D4:C3:D3:2F:A5:DD:28:99:8A:9E:09:99:13:AD:4C:F0:E6:A3:3E X509v3 Authority Key Identifier: keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:76:f9:95:59:5d:5e:47:4b:ea:a5:bf:e0:78:10:dc:60:cf: 0a:ba:d1:21:ce:75:81:a6:09:ea:54:12:87:bb:c2:08:f5:11: 43:8b:73:14:5d:18:54:36:bb:21:5e:8c:b8:3c:3b:0b:45:07: 62:5c:cd:e2:c2:ef:2d:3e:0d:c7:6d:b4:e4:c2:12:5e:6e:44: 40:4a:08:26:f2:47:a4:14:fd:26:40:b4:69:d8:00:a0:f1:72: 46:b4:8f:06:fb:3a:d8:9a:ce:a5:c7:65:e7:00:f3:70:6e:fe: ca:40:95:89:01:40:15:cb:f2:6b:d8:27:af:3c:46:d9:08:fd: 2b:c4:a0:ea:cd:87:3a:fd:6d:8d:09:ff:5e:ce:41:cf:a6:8b: ce:2c:4e:2a:79:23:97:6c:fa:d5:47:db:db:de:25:b1:86:59: 9c:46:ae:fb:8a:17:6c:0c:32:d9:aa:7e:af:a1:ec:f5:0f:0c: 78:10:87:0a:93:0e:ae:3d:6f:0e:50:02:e3:b2:d9:85:f1:11: c8:ff:c6:2d:ec:ef:b9:af:b1:25:db:78:e0:70:3d:93:0f:73: 25:97:1d:5d:9c:e0:8c:e2:9c:ee:47:57:68:57:ac:b9:81:64: 1c:f2:6a:92:56:ab:36:67:e6:ac:1f:ed:1e:40:5b:21:b8:20: 9f:c2:80:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWpeDg0yFuJtKaoy3DXtKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz OTI3MWIwHhcNMjUxMjIxMTAwMDM3WhcNMjUxMjIyMTAwMDM3WjAzMTEwLwYDVQQD EyhjN2Q0YzNkMzJmYTVkZDI4OTk4YTllMDk5OTEzYWQ0Y2YwZTZhMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv9x6TSzcnKLkZSMRpP2UiGaFIyS SE642lsV5sQkkI6AU+wPKjcTk5b6ks3rKq/8NAg9ficxt88ppcKpwTHbh6tQ/SQM uRmeXnAXuqLNP1vJMmsVSrU6BcG67uU07E9Dyw0ngEdZ/kWs4It0qp0ND0haml9u LEwDYMP0CURm3XM5jOPe7ZmgqBgDmtjDlr8fsCJhuf9ii1xK6JzPC+j4WnvI178P acL/sw5sI1ZKw9uH/wQvKE9Huo9nyg5MboZuyK5IMPbWbN8IsozIgl6pQFp95Omi 8KRiqnfYIlaltzx3mVMlzi1PAdv/Pvfw9QY69IErPvvriNQkszk36Q6M1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfUw9Mvpd0omYqeCZkTrUzw5qM+MB8GA1UdIwQY MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4 LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXb5lVld XkdL6qW/4HgQ3GDPCrrRIc51gaYJ6lQSh7vCCPURQ4tzFF0YVDa7IV6MuDw7C0UH YlzN4sLvLT4Nx2205MISXm5EQEoIJvJHpBT9JkC0adgAoPFyRrSPBvs62JrOpcdl 5wDzcG7+ykCViQFAFcvya9gnrzxG2Qj9K8Sg6s2HOv1tjQn/Xs5Bz6aLzixOKnkj l2z61Ufb294lsYZZnEau+4oXbAwy2ap+r6Hs9Q8MeBCHCpMOrj1vDlAC47LZhfER yP/GLezvua+xJdt44HA9kw9zJZcdXZzgjOKc7kdXaFesuYFkHPJqklarNmfmrB/t HkBbIbggn8KAoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:52:41 2025 by rpki-client