This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json) Hash identifier: nGRL96plpGIShclMTQgq3JmNl5hg1HdwUWgbIGbKUjU= Subject key identifier: D3:7A:0D:E9:8F:FA:8A:F4:BB:93:F1:F6:F8:2E:04:90:1B:BB:B2:C8 Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce Certificate serial: 019B4438FEFAACD8E601D428E1B8691C4F32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft Manifest number: 1078 Signing time: Mon 22 Dec 2025 04:02:24 +0000 Manifest this update: Mon 22 Dec 2025 04:02:24 +0000 Manifest next update: Tue 23 Dec 2025 04:02:24 +0000 Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: HNTHoG0G0OYlrPMNUmwwMPA5NX5leVukbHmdg7rPH4o=) 2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=) 3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:fe:fa:ac:d8:e6:01:d4:28:e1:b8:69:1c:4f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce Validity Not Before: Dec 22 04:02:24 2025 GMT Not After : Dec 23 04:02:24 2025 GMT Subject: CN=d37a0de98ffa8af4bb93f1f6f82e04901bbbb2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:32:5f:b7:e7:67:75:66:5c:69:5e:6b:f6:98: 71:67:eb:93:f3:3d:78:a1:96:29:79:f6:e0:54:54: 16:10:f5:d9:df:cf:51:e0:e4:34:83:e6:1a:0e:07: d1:06:1b:c3:9d:0d:bf:92:b9:c2:49:dc:bd:fe:65: f3:11:ba:de:0d:9b:a1:bd:e5:5c:57:b2:3a:82:a2: ec:13:53:af:6d:12:36:9a:6b:ba:4f:b4:d1:be:6e: 97:22:46:51:dc:c8:ef:85:fb:3b:8c:4e:b3:ce:c9: e0:38:80:1b:d4:fd:56:46:9e:13:2b:32:c3:4a:40: d9:d3:af:23:75:55:0e:e7:b5:72:aa:e2:1b:80:84: 4a:3d:ed:b7:5e:f6:50:89:3f:19:57:72:e7:0f:7a: 47:13:24:c9:2b:ef:a3:86:76:21:2b:b0:30:15:57: 89:5a:5e:32:f0:58:89:4c:da:cc:19:09:46:c9:17: 8b:03:02:ca:df:d5:fc:cb:4a:a6:18:c0:4e:c6:46: 78:27:e5:2b:91:a2:da:f5:07:1b:6a:4e:4e:c0:22: b5:99:9f:68:b3:17:aa:93:df:bd:78:c1:5b:fb:03: 9e:55:29:b7:39:3e:f7:55:5b:64:c4:60:7f:57:63: dc:a1:44:b1:2f:4b:94:92:53:73:4e:a3:34:93:32: 00:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7A:0D:E9:8F:FA:8A:F4:BB:93:F1:F6:F8:2E:04:90:1B:BB:B2:C8 X509v3 Authority Key Identifier: keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:87:da:24:9e:e9:6f:c2:6f:41:7f:41:c3:14:8b:af:fd:a3: 5f:d6:10:6c:35:a1:3b:05:da:3a:07:f7:a5:7a:60:ee:51:40: d5:03:9b:e0:ef:8d:95:a9:14:c8:03:aa:d7:c2:d9:75:24:60: 9d:31:14:24:a9:5c:0f:cf:1b:7e:bb:6d:96:42:be:6e:10:be: ae:8d:20:a2:40:c9:25:c1:a7:ad:0c:a7:5c:98:5a:7c:d2:44: ea:ae:7b:d4:93:e2:5d:4e:a6:e2:00:69:a3:28:41:48:aa:0d: 5d:74:9b:23:38:76:26:b5:aa:e6:12:c2:a4:5a:1b:df:15:d2: 63:7a:1c:bd:c1:69:4a:21:78:64:a8:80:ec:b5:84:95:2d:d7: af:b9:3c:87:4f:fc:04:f3:4c:7b:75:3d:25:fe:23:3b:b4:f8: b5:03:06:86:d0:ae:77:15:8b:95:7f:ca:13:66:c8:34:64:3c: 82:f9:c5:2c:44:5b:90:e6:15:24:fe:90:c8:da:3d:5a:0f:93: 9e:d7:39:f3:77:6e:82:ed:cf:99:7a:c7:2b:4d:9c:60:3c:82: 35:ae:0b:ea:62:15:73:23:fd:78:2e:91:1d:4d:26:c6:93:42: fa:c4:f8:85:79:29:35:c8:2c:c1:89:43:c7:82:f4:af:e4:87: 38:55:5a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOP76rNjmAdQo4bhpHE8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1 M2FiY2UwHhcNMjUxMjIyMDQwMjI0WhcNMjUxMjIzMDQwMjI0WjAzMTEwLwYDVQQD EyhkMzdhMGRlOThmZmE4YWY0YmI5M2YxZjZmODJlMDQ5MDFiYmJiMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJft+dndWZcaV5r9phxZ+uT8z14 oZYpefbgVFQWEPXZ389R4OQ0g+YaDgfRBhvDnQ2/krnCSdy9/mXzEbreDZuhveVc V7I6gqLsE1OvbRI2mmu6T7TRvm6XIkZR3Mjvhfs7jE6zzsngOIAb1P1WRp4TKzLD SkDZ068jdVUO57VyquIbgIRKPe23XvZQiT8ZV3LnD3pHEyTJK++jhnYhK7AwFVeJ Wl4y8FiJTNrMGQlGyReLAwLK39X8y0qmGMBOxkZ4J+UrkaLa9Qcbak5OwCK1mZ9o sxeqk9+9eMFb+wOeVSm3OT73VVtkxGB/V2PcoUSxL0uUklNzTqM0kzIAbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN6DemP+or0u5Px9vguBJAbu7LIMB8GA1UdIwQY MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt Zjk1NDAwMmY1MjQ1LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1 LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ4faJJ7p b8JvQX9BwxSLr/2jX9YQbDWhOwXaOgf3pXpg7lFA1QOb4O+NlakUyAOq18LZdSRg nTEUJKlcD88bfrttlkK+bhC+ro0gokDJJcGnrQynXJhafNJE6q571JPiXU6m4gBp oyhBSKoNXXSbIzh2JrWq5hLCpFob3xXSY3ocvcFpSiF4ZKiA7LWElS3Xr7k8h0/8 BPNMe3U9Jf4jO7T4tQMGhtCudxWLlX/KE2bINGQ8gvnFLERbkOYVJP6QyNo9Wg+T ntc583dugu3PmXrHK02cYDyCNa4L6mIVcyP9eC6RHU0mxpNC+sT4hXkpNcgswYlD x4L0r+SHOFVa1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 08:07:59 2025 by rpki-client