This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft File: FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json) Hash identifier: zUP4xNT6aSBQwJXujDH5117s1qTelA/9Y/6quLwc6Z4= Subject key identifier: 4C:67:8A:73:ED:0F:8A:D7:99:06:73:39:48:0D:18:A9:BF:35:F3:49 Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE Certificate issuer: /CN=159366259f9bae7c37337b515fa5bee05f53abce Certificate serial: 019B5F4126C2A99CAACB4132701C6B945F19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft Manifest number: 1086 Signing time: Sat 27 Dec 2025 10:01:03 +0000 Manifest this update: Sat 27 Dec 2025 10:01:03 +0000 Manifest next update: Sun 28 Dec 2025 10:01:03 +0000 Files and hashes: 1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: UmqqpH2QZWgdwJLv3md1/vJsxHcYTjqh+GGsxbLwm0s=) 2: H8QVEiVhWpEoda9CGE6Oc3pdrL4.roa (hash: yuDUq5plzATZXFJtuu3iWGDCyprgTwUU8VCknElMZCk=) 3: _ct2jrxg6RKH3wrlYOdA7gv_y28.roa (hash: KvPeA3S14yjz3YBD7/OoXk/uguHv1hI5r36BeHgTkgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:26:c2:a9:9c:aa:cb:41:32:70:1c:6b:94:5f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce Validity Not Before: Dec 27 10:01:03 2025 GMT Not After : Dec 28 10:01:03 2025 GMT Subject: CN=4c678a73ed0f8ad799067339480d18a9bf35f349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:27:c1:03:70:ee:da:7b:87:24:92:5f:ed: 6c:4d:19:d2:ea:3e:d4:d6:6b:1c:fd:34:38:ea:01: fd:97:a3:3d:17:bb:f5:d9:d2:5f:74:3e:dc:68:94: d7:d3:d4:c7:f4:cf:bf:a9:ec:89:2c:f2:d1:36:f1: 3b:bd:83:9d:26:32:3a:fd:8f:e1:4d:65:9a:03:0d: 25:3d:66:66:4c:7e:73:d0:d9:97:9b:31:32:10:13: fe:07:26:2d:67:ab:57:32:54:00:6e:01:74:8e:eb: fa:85:2a:b6:7d:e6:56:08:ca:f2:ea:2e:44:87:1f: f8:43:a5:c8:a2:18:84:3a:f5:8e:b1:af:3a:2a:cd: 00:ed:7e:21:ac:61:09:bd:ea:05:95:db:5d:e4:c5: a1:0b:0a:5e:a0:39:47:04:35:96:b1:64:43:73:c6: 5b:98:59:e2:05:9d:66:e3:27:86:a9:20:fe:fe:17: 72:5b:e3:83:9f:c1:95:43:ed:45:bd:db:c7:de:22: b1:cd:b3:8a:1c:ab:9e:f9:3c:1d:42:37:a9:de:e0: 5e:ed:ed:c2:35:86:b5:e2:48:f6:8d:2e:8e:8c:14: eb:5e:8a:69:b4:55:61:48:35:99:04:f0:16:9d:a6: 13:68:36:74:0d:e1:37:70:8a:82:4b:ac:97:d9:17: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:67:8A:73:ED:0F:8A:D7:99:06:73:39:48:0D:18:A9:BF:35:F3:49 X509v3 Authority Key Identifier: keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3b:21:2e:8d:2f:f6:b2:64:b7:0c:5c:9a:34:81:b9:0c:39: 39:e1:53:91:12:cb:4f:ab:98:c2:73:b0:07:e0:bc:4f:17:d4: 71:b0:83:8a:c6:04:4e:21:3d:5c:c0:94:93:a0:3d:d3:82:2a: 84:df:7d:3f:8e:a5:ae:84:48:82:e1:55:1a:18:a4:56:2c:06: c4:bd:7b:31:03:d5:e9:33:30:4e:5b:7d:98:9f:c8:c8:d7:12: 47:ef:d9:a2:ee:bd:f4:4c:2d:91:a1:69:93:54:d3:42:4c:2e: f2:ae:47:73:38:3a:6d:b7:e5:ad:c7:2a:b2:8e:eb:4a:a8:25: 8c:d4:35:f2:5d:34:f7:ea:24:e2:5d:4c:d0:c1:3c:00:69:0f: 08:d5:d1:cc:a2:42:2e:f5:c4:fb:f2:5b:b4:39:44:d5:4d:0b: 84:0e:1f:c9:7b:c1:77:1b:e3:9f:ca:c9:0c:72:60:50:20:4d: 65:2f:19:16:4d:b8:3e:a6:85:70:4d:9e:f1:02:ca:b8:31:78: 22:ea:ce:d0:b4:0e:ab:50:05:ac:01:f4:c7:d2:63:bf:df:c2: 38:1c:98:0e:22:a3:69:ea:58:95:b6:d6:56:38:85:46:9a:43: cb:6e:e6:f5:3c:fd:f0:e4:e1:cd:ef:75:f1:fd:26:dd:7e:ae: ef:d0:83:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQSbCqZyqy0EycBxrlF8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OTM2NjI1OWY5YmFlN2MzNzMzN2I1MTVmYTViZWUwNWY1 M2FiY2UwHhcNMjUxMjI3MTAwMTAzWhcNMjUxMjI4MTAwMTAzWjAzMTEwLwYDVQQD Eyg0YzY3OGE3M2VkMGY4YWQ3OTkwNjczMzk0ODBkMThhOWJmMzVmMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdEnwQNw7tp7hySSX+1sTRnS6j7U 1msc/TQ46gH9l6M9F7v12dJfdD7caJTX09TH9M+/qeyJLPLRNvE7vYOdJjI6/Y/h TWWaAw0lPWZmTH5z0NmXmzEyEBP+ByYtZ6tXMlQAbgF0juv6hSq2feZWCMry6i5E hx/4Q6XIohiEOvWOsa86Ks0A7X4hrGEJveoFldtd5MWhCwpeoDlHBDWWsWRDc8Zb mFniBZ1m4yeGqSD+/hdyW+ODn8GVQ+1FvdvH3iKxzbOKHKue+TwdQjep3uBe7e3C NYa14kj2jS6OjBTrXopptFVhSDWZBPAWnaYTaDZ0DeE3cIqCS6yX2Re/PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExninPtD4rXmQZzOUgNGKm/NfNJMB8GA1UdIwQY MBaAFBWTZiWfm658NzN7UV+lvuBfU6vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEt Zjk1NDAwMmY1MjQ1LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8xMDhmNDUtM2U3MC00ZGFjLTkzNDEtZjk1NDAwMmY1MjQ1 LzEvRlpObUpaLWJybnczTTN0Ulg2Vy00RjlUcTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzshLo0v 9rJktwxcmjSBuQw5OeFTkRLLT6uYwnOwB+C8TxfUcbCDisYETiE9XMCUk6A904Iq hN99P46lroRIguFVGhikViwGxL17MQPV6TMwTlt9mJ/IyNcSR+/Zou699EwtkaFp k1TTQkwu8q5Hczg6bbflrccqso7rSqgljNQ18l009+ok4l1M0ME8AGkPCNXRzKJC LvXE+/JbtDlE1U0LhA4fyXvBdxvjn8rJDHJgUCBNZS8ZFk24PqaFcE2e8QLKuDF4 IurO0LQOq1AFrAH0x9Jjv9/COByYDiKjaepYlbbWVjiFRppDy27m9Tz98OThze91 8f0m3X6u79CDEg== -----END CERTIFICATE-----Generated at Sat Dec 27 15:43:30 2025 by rpki-client