This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft File: FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json) Hash identifier: DJALrFQ3AC3VhfNlaa0aHmfjO2r80rOST3AxlShw2Ig= Subject key identifier: 1C:0A:C9:53:13:3D:1D:62:CD:07:13:62:92:F5:4E:A3:9F:FE:E0:8C Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC Certificate issuer: /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec Certificate serial: 019B41367B1CECFD76FAC5B4B93A18762A9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft Manifest number: 1278 Signing time: Sun 21 Dec 2025 14:00:48 +0000 Manifest this update: Sun 21 Dec 2025 14:00:48 +0000 Manifest next update: Mon 22 Dec 2025 14:00:48 +0000 Files and hashes: 1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: Jf3c6AC6oqCLow8pJ62wUu4nrlXdAYOOZOK1ftvkNlM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:7b:1c:ec:fd:76:fa:c5:b4:b9:3a:18:76:2a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec Validity Not Before: Dec 21 14:00:48 2025 GMT Not After : Dec 22 14:00:48 2025 GMT Subject: CN=1c0ac953133d1d62cd07136292f54ea39ffee08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:91:b5:7d:3c:fa:71:6a:68:ce:ed:e8:dc: 7a:ec:ca:83:87:5c:d5:9b:05:8c:b8:86:b0:5e:0e: 72:33:b0:19:36:e8:e7:1d:ab:fd:fe:ba:87:46:83: 00:d3:89:5a:e4:b8:92:44:4c:23:b3:31:e5:93:e9: 61:56:21:a6:16:f5:91:1d:7f:4e:7e:7e:91:89:c9: cc:83:ed:b4:73:db:5e:e6:aa:b9:43:1c:cb:3c:b0: b5:57:ea:98:7d:d0:29:83:2b:76:c3:21:37:79:84: 82:fc:ed:7f:a8:f4:f8:5a:d4:50:e2:7e:3c:a2:f0: 09:68:80:43:c8:2b:30:79:12:73:e7:d9:62:03:af: 51:c5:98:66:4c:d1:66:a5:07:d7:1e:e9:13:9a:98: ca:64:77:07:6a:1a:93:9d:49:2c:28:f2:84:e5:b9: 40:7b:68:9a:8c:9e:1f:4a:66:a9:c9:06:d0:29:d5: de:dc:a9:b9:91:18:fd:b9:2d:3f:86:8c:16:c0:03: 48:ec:d3:88:f4:cc:87:cc:9b:b5:47:da:79:48:40: aa:e5:c0:ef:85:6b:d4:6c:2f:a8:10:6f:c2:ea:8e: 0e:ac:ab:e2:8f:04:2b:e5:e3:d0:fd:aa:fa:3b:31: db:63:e0:9d:8b:4e:72:1c:fe:32:7e:6e:6b:b6:3a: 63:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0A:C9:53:13:3D:1D:62:CD:07:13:62:92:F5:4E:A3:9F:FE:E0:8C X509v3 Authority Key Identifier: keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:df:e5:22:ae:b1:44:97:f3:f1:99:4c:a6:41:29:aa:61:fc: e3:3a:fe:9b:cb:8e:a5:92:2d:f3:24:7c:d8:34:8c:7a:87:7b: fb:9f:7c:bd:66:e0:8c:a4:18:48:19:ff:59:2e:ec:8c:f7:fa: 6a:69:74:04:68:05:63:e9:3d:cf:04:61:f2:a7:9f:c9:ed:36: 84:00:a1:e2:ec:da:7c:de:55:ff:c4:ea:d6:45:6b:07:41:66: 93:7f:11:59:cc:97:6f:6d:7d:c6:5a:53:b2:36:03:8f:79:a2: c1:e3:71:41:ea:59:e8:10:ad:fc:e5:27:9a:3c:be:0e:88:72: 00:af:37:34:d6:94:b5:0e:2a:48:9f:9e:59:af:56:43:4a:96: 33:f2:80:66:d3:a7:d4:ec:41:67:bf:6b:a7:10:90:32:5a:3d: 01:08:8f:83:0b:7d:70:33:c9:91:93:0a:d5:12:41:91:c9:2c: 3d:e1:65:7b:ac:fa:da:98:53:67:c2:cf:2c:ef:a4:0f:ef:10: 2b:52:c5:cf:76:06:5d:13:2a:90:68:69:ba:80:18:3f:52:1c: 82:ea:be:ca:6b:e0:16:5d:52:ff:36:85:8e:a5:0a:5a:88:96: 8a:9d:58:43:99:ab:88:c2:dd:fb:7b:7c:e1:af:a8:be:a6:75: 24:b1:4b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNnsc7P12+sW0uToYdiqeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjJiZGRkNmM4NWY2M2IzZGJlNzdlN2FjODU0OWMyNmZl NmYzZWMwHhcNMjUxMjIxMTQwMDQ4WhcNMjUxMjIyMTQwMDQ4WjAzMTEwLwYDVQQD EygxYzBhYzk1MzEzM2QxZDYyY2QwNzEzNjI5MmY1NGVhMzlmZmVlMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtiRtX08+nFqaM7t6Nx67MqDh1zV mwWMuIawXg5yM7AZNujnHav9/rqHRoMA04la5LiSREwjszHlk+lhViGmFvWRHX9O fn6RicnMg+20c9te5qq5QxzLPLC1V+qYfdApgyt2wyE3eYSC/O1/qPT4WtRQ4n48 ovAJaIBDyCsweRJz59liA69RxZhmTNFmpQfXHukTmpjKZHcHahqTnUksKPKE5blA e2iajJ4fSmapyQbQKdXe3Km5kRj9uS0/howWwANI7NOI9MyHzJu1R9p5SECq5cDv hWvUbC+oEG/C6o4OrKvijwQr5ePQ/ar6OzHbY+Cdi05yHP4yfm5rtjpjmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwKyVMTPR1izQcTYpL1TqOf/uCMMB8GA1UdIwQY MBaAFBRivd1shfY7Pb5356yFScJv5vPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOThmNmItNDdjZS00MWZjLThjZGQt NjdhOGEwZTdhY2E5LzEvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOThmNmItNDdjZS00MWZjLThjZGQtNjdhOGEwZTdhY2E5 LzEvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWN/lIq6x RJfz8ZlMpkEpqmH84zr+m8uOpZIt8yR82DSMeod7+598vWbgjKQYSBn/WS7sjPf6 aml0BGgFY+k9zwRh8qefye02hACh4uzafN5V/8Tq1kVrB0Fmk38RWcyXb219xlpT sjYDj3miweNxQepZ6BCt/OUnmjy+DohyAK83NNaUtQ4qSJ+eWa9WQ0qWM/KAZtOn 1OxBZ79rpxCQMlo9AQiPgwt9cDPJkZMK1RJBkcksPeFle6z62phTZ8LPLO+kD+8Q K1LFz3YGXRMqkGhpuoAYP1Icguq+ymvgFl1S/zaFjqUKWoiWip1YQ5mriMLd+3t8 4a+ovqZ1JLFLog== -----END CERTIFICATE-----Generated at Sun Dec 21 15:19:40 2025 by rpki-client