This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft File: FkThypMSunm-VZ4RyOoJEAYN1I0.mft (raw, json) Hash identifier: 21WuXAfljLvx5nO6Z8QulyALcQeUEqIMdO46v76GUW8= Subject key identifier: D0:5E:1E:62:4C:24:18:AE:A4:FF:07:0D:3F:3C:37:A0:E7:0C:86:5A Authority key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D Certificate issuer: /CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Certificate serial: 019B5FAF6AA5858F763227C8B593189C6576 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft Manifest number: 12DF Signing time: Sat 27 Dec 2025 12:01:30 +0000 Manifest this update: Sat 27 Dec 2025 12:01:30 +0000 Manifest next update: Sun 28 Dec 2025 12:01:30 +0000 Files and hashes: 1: FkThypMSunm-VZ4RyOoJEAYN1I0.crl (hash: OSC46ysxKOeo6syGB1eovi1bcz60oPXqWyn9QC4U/08=) 2: QrSU_Lf7dcN4wLABGo09onOb-5k.roa (hash: d8YS3u/35OANrm0h/7ZyhxDmlo6tTG/PBizWtzmzfo4=) 3: eb-heUaDZ_codDy_g1my71P0p7Y.roa (hash: 7spa1VP0F+9Wr91aLAHj5ebr1/oFjn6POPsYKzuLimU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:af:6a:a5:85:8f:76:32:27:c8:b5:93:18:9c:65:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d Validity Not Before: Dec 27 12:01:30 2025 GMT Not After : Dec 28 12:01:30 2025 GMT Subject: CN=d05e1e624c2418aea4ff070d3f3c37a0e70c865a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:40:1a:fb:c7:2a:78:51:28:37:a6:91:e8:52: ed:d2:4c:95:26:e0:d5:df:80:88:74:73:91:9b:0d: 52:2b:20:ef:39:fe:a3:18:cf:33:7b:5b:2a:17:6d: 72:ee:a8:36:8e:94:cc:89:19:38:8e:53:d5:97:31: 3b:25:0a:0a:ca:0d:fe:27:28:f1:2f:ae:6c:fc:58: f1:f4:2d:2b:e0:fb:71:f5:b6:df:4d:07:d7:b3:0e: f9:41:40:a9:ae:da:98:68:f5:5e:57:d8:69:7b:0e: cc:65:9a:4b:8a:56:0e:9a:64:1e:88:73:a3:10:f1: 06:77:3c:8f:ce:12:04:a1:96:6a:76:3d:40:28:26: 37:cb:d1:92:ef:2e:9e:11:e2:cd:6c:ee:f3:c1:a6: b0:21:bd:d9:2a:76:20:89:66:f0:aa:87:3c:70:44: 38:a7:76:8e:9b:f3:bf:e6:26:ce:ee:89:ef:70:54: 45:96:41:ae:15:7d:ad:78:53:58:bd:b8:5c:49:9d: c5:cc:6c:f8:2a:f9:00:fc:6b:f9:63:3c:50:41:3a: a7:8f:35:5c:06:37:f3:18:51:03:1f:bc:7a:e4:eb: 80:2b:14:b5:ba:6f:a2:a6:ce:56:ca:0f:c6:55:75: 5c:b5:32:b6:c5:a7:4f:98:53:95:f7:83:ec:dd:f4: 23:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:5E:1E:62:4C:24:18:AE:A4:FF:07:0D:3F:3C:37:A0:E7:0C:86:5A X509v3 Authority Key Identifier: keyid:16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:df:d8:89:33:65:67:c8:ac:1b:73:a9:1a:bf:19:6c:27:c9: da:f5:30:58:a1:e3:06:fc:05:7e:22:01:de:fc:d9:7d:64:d9: 75:aa:4c:a3:20:98:69:e3:e4:fa:24:cb:10:d4:a2:c6:e5:95: 45:11:0f:68:d8:d7:17:90:08:0d:93:58:7b:70:91:ef:69:07: 1d:fa:63:59:d9:62:ce:9e:c1:2e:7d:d9:94:56:a6:c3:1c:7b: 0c:27:b0:2e:cf:71:fa:4e:e7:5f:70:26:24:e6:d2:f5:f1:4a: 9c:66:bf:ba:c9:6d:33:e0:f5:6c:15:ee:cb:52:69:49:cf:6b: 23:4e:3d:b5:95:08:d8:6c:e2:23:a1:44:fa:d1:6f:84:7c:d0: fa:95:e4:36:ec:22:59:e6:53:17:a0:e5:e5:3e:27:1c:7a:8f: ef:b6:36:66:9a:3f:ab:eb:80:5c:c5:82:95:44:6a:16:a6:81: 63:b9:c2:97:e0:e8:0d:3a:c3:66:6e:f8:86:01:44:3a:43:37: dc:a9:36:b9:44:c8:b7:ea:10:e0:3c:35:7c:fc:31:52:fa:e6: 00:2d:63:0f:6e:c9:41:e0:4e:8d:f4:c7:b8:9f:eb:68:da:ee: d9:cf:d6:de:1b:b3:1f:6e:ab:fa:0b:b9:7a:6c:94:ee:ec:d7: 9c:a8:73:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfr2qlhY92MifItZMYnGV2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlMWNhOTMxMmJhNzliZTU1OWUxMWM4ZWEwOTEwMDYw ZGQ0OGQwHhcNMjUxMjI3MTIwMTMwWhcNMjUxMjI4MTIwMTMwWjAzMTEwLwYDVQQD EyhkMDVlMWU2MjRjMjQxOGFlYTRmZjA3MGQzZjNjMzdhMGU3MGM4NjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUAa+8cqeFEoN6aR6FLt0kyVJuDV 34CIdHORmw1SKyDvOf6jGM8ze1sqF21y7qg2jpTMiRk4jlPVlzE7JQoKyg3+Jyjx L65s/Fjx9C0r4Ptx9bbfTQfXsw75QUCprtqYaPVeV9hpew7MZZpLilYOmmQeiHOj EPEGdzyPzhIEoZZqdj1AKCY3y9GS7y6eEeLNbO7zwaawIb3ZKnYgiWbwqoc8cEQ4 p3aOm/O/5ibO7onvcFRFlkGuFX2teFNYvbhcSZ3FzGz4KvkA/Gv5YzxQQTqnjzVc BjfzGFEDH7x65OuAKxS1um+ips5Wyg/GVXVctTK2xadPmFOV94Ps3fQjvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBeHmJMJBiupP8HDT88N6DnDIZaMB8GA1UdIwQY MBaAFBZE4cqTErp5vlWeEcjqCRAGDdSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDIt NThlZWZjZDY1MmQ4LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85ZDZkNzktZWViMS00OTJhLWI2MDItNThlZWZjZDY1MmQ4 LzEvRmtUaHlwTVN1bm0tVlo0UnlPb0pFQVlOMUkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN/YiTNl Z8isG3OpGr8ZbCfJ2vUwWKHjBvwFfiIB3vzZfWTZdapMoyCYaePk+iTLENSixuWV RREPaNjXF5AIDZNYe3CR72kHHfpjWdlizp7BLn3ZlFamwxx7DCewLs9x+k7nX3Am JObS9fFKnGa/usltM+D1bBXuy1JpSc9rI049tZUI2GziI6FE+tFvhHzQ+pXkNuwi WeZTF6Dl5T4nHHqP77Y2Zpo/q+uAXMWClURqFqaBY7nCl+DoDTrDZm74hgFEOkM3 3Kk2uUTIt+oQ4Dw1fPwxUvrmAC1jD27JQeBOjfTHuJ/raNru2c/W3huzH26r+gu5 emyU7uzXnKhz6g== -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:51 2025 by rpki-client