This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json) Hash identifier: kxnIgACrXCUgTvMAMBN0uyLM35JvEHOj7E/9T9/pheE= Subject key identifier: 03:81:29:20:BF:E3:AE:44:94:75:7C:25:91:11:E2:CC:02:DF:A3:93 Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae Certificate serial: 019B3D5A1D7BF24ABEB7C206451432765C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 20:01:14 +0000 Manifest this update: Sat 20 Dec 2025 20:01:14 +0000 Manifest next update: Sun 21 Dec 2025 20:01:14 +0000 Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=) 2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: xrY0H8xVuGUCbkBVkT+G7bIM1LDdLTMw190YER4xzC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:1d:7b:f2:4a:be:b7:c2:06:45:14:32:76:5c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae Validity Not Before: Dec 20 20:01:14 2025 GMT Not After : Dec 21 20:01:14 2025 GMT Subject: CN=03812920bfe3ae4494757c259111e2cc02dfa393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ba:ee:a7:7e:4d:eb:03:47:ef:3c:f9:90:5d: 32:53:91:52:d5:df:01:77:bd:36:65:5d:a4:8c:c9: 19:77:b0:c7:d9:56:62:b5:d0:3c:83:00:bd:c5:1c: 86:eb:9d:07:d9:eb:8d:32:b6:1e:ce:d8:e6:02:f7: ba:49:d4:49:2e:90:bc:3f:7d:40:da:45:dc:2a:38: d4:53:37:d7:bd:20:9b:ca:20:ec:26:a3:64:0e:9f: c9:82:2f:4c:de:eb:1d:b1:89:28:df:5b:43:ee:dc: a7:02:51:b1:80:36:dd:b1:26:22:7b:2c:19:b8:83: 33:3c:e2:0b:d5:ad:bb:9e:39:6d:54:30:11:00:26: 49:fb:d3:96:2b:9c:46:e8:b9:70:ac:c6:fe:ee:a0: bd:55:7a:78:f6:4b:75:a0:82:d7:e9:bf:06:42:80: 31:21:e8:39:23:5c:21:c8:73:25:73:dc:61:ca:c6: bd:37:65:14:fb:e4:75:3e:12:a7:51:8f:56:34:5f: 22:5c:a0:11:63:a4:78:bf:6e:23:a0:29:c9:32:3e: f1:3f:a6:3b:5c:f6:ea:7d:ce:9f:27:11:94:32:84: 9e:ca:b9:b9:c2:5c:31:65:36:0a:86:f6:82:04:30: 89:a9:d9:d2:43:5c:90:08:ec:d6:7c:24:5f:28:07: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:29:20:BF:E3:AE:44:94:75:7C:25:91:11:E2:CC:02:DF:A3:93 X509v3 Authority Key Identifier: keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:f5:e6:26:3b:46:43:d1:d6:d4:8b:76:00:40:83:0d:29:15: 24:6c:bc:2c:1a:ca:18:6f:18:bb:ad:43:3f:c6:a0:85:67:a7: 3a:15:6a:03:79:08:05:fc:4f:45:b8:0d:fd:f6:83:db:fb:c0: 85:88:b2:d1:34:aa:9b:98:f7:93:a6:91:89:65:7d:c7:97:f8: 74:53:29:45:50:a5:91:b2:a7:2f:1a:69:7b:38:df:28:43:1e: 90:d9:e6:6b:d1:2d:44:5e:71:b5:83:5a:09:b5:32:24:60:14: 32:13:2a:8f:ba:ce:71:cd:13:73:38:8d:a2:25:55:c5:9c:5c: f7:6e:ff:b0:12:54:82:37:95:a1:94:d3:14:ba:b1:2e:2f:f3: e8:49:e8:06:9d:31:5a:3d:e0:e5:36:91:bb:d6:69:bf:27:30: a8:1d:9d:ec:71:77:b2:58:2b:55:3d:53:54:73:40:38:e4:e1: 80:3c:1a:77:2e:05:b2:3d:4a:e7:53:b5:50:f6:2a:c5:ee:f3: b3:4d:6e:ed:da:db:38:7e:54:9e:64:73:78:de:ef:8e:44:d9: 20:e4:ab:b3:8f:39:f1:25:98:a6:cc:b5:69:c4:13:c4:58:b7: 09:c3:be:52:55:b8:93:92:5e:4d:b8:ec:95:00:7d:11:ea:59: 4b:49:ba:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wh178kq+t8IGRRQydlxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NDAzZTE1N2M4MmY3NWVmYTdjNTRhOWJjN2QwZDFiZjAx YjFjYWUwHhcNMjUxMjIwMjAwMTE0WhcNMjUxMjIxMjAwMTE0WjAzMTEwLwYDVQQD EygwMzgxMjkyMGJmZTNhZTQ0OTQ3NTdjMjU5MTExZTJjYzAyZGZhMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLrup35N6wNH7zz5kF0yU5FS1d8B d702ZV2kjMkZd7DH2VZitdA8gwC9xRyG650H2euNMrYeztjmAve6SdRJLpC8P31A 2kXcKjjUUzfXvSCbyiDsJqNkDp/Jgi9M3usdsYko31tD7tynAlGxgDbdsSYieywZ uIMzPOIL1a27njltVDARACZJ+9OWK5xG6LlwrMb+7qC9VXp49kt1oILX6b8GQoAx Ieg5I1whyHMlc9xhysa9N2UU++R1PhKnUY9WNF8iXKARY6R4v24joCnJMj7xP6Y7 XPbqfc6fJxGUMoSeyrm5wlwxZTYKhvaCBDCJqdnSQ1yQCOzWfCRfKAeYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOBKSC/465ElHV8JZER4swC36OTMB8GA1UdIwQY MBaAFBVAPhV8gvde+nxUqbx9DRvwGxyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUt MzM0Zjk0MjkyNDhlLzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUtMzM0Zjk0MjkyNDhl LzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfXmJjtG Q9HW1It2AECDDSkVJGy8LBrKGG8Yu61DP8aghWenOhVqA3kIBfxPRbgN/faD2/vA hYiy0TSqm5j3k6aRiWV9x5f4dFMpRVClkbKnLxppezjfKEMekNnma9EtRF5xtYNa CbUyJGAUMhMqj7rOcc0TcziNoiVVxZxc927/sBJUgjeVoZTTFLqxLi/z6EnoBp0x Wj3g5TaRu9ZpvycwqB2d7HF3slgrVT1TVHNAOOThgDwady4Fsj1K51O1UPYqxe7z s01u7drbOH5UnmRzeN7vjkTZIOSrs4858SWYpsy1acQTxFi3CcO+UlW4k5JeTbjs lQB9EepZS0m64A== -----END CERTIFICATE-----Generated at Sun Dec 21 00:00:39 2025 by rpki-client