This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json) Hash identifier: v/e0PVMUS3FI6pQHQN5kWcanFv6dXEUXzg+TqxcJfD8= Subject key identifier: 2A:49:F2:29:07:07:E0:9F:60:4F:07:52:92:E4:60:1C:92:6C:FB:20 Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c Certificate serial: 019B56ABC374DF56EE77C5801E00DDACEBEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft Manifest number: 125A Signing time: Thu 25 Dec 2025 18:00:55 +0000 Manifest this update: Thu 25 Dec 2025 18:00:55 +0000 Manifest next update: Fri 26 Dec 2025 18:00:55 +0000 Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=) 2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: esG5KtXV123drO4FwpDQTbGnNafvpUWHqkkbSZXHcw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:c3:74:df:56:ee:77:c5:80:1e:00:dd:ac:eb:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c Validity Not Before: Dec 25 18:00:55 2025 GMT Not After : Dec 26 18:00:55 2025 GMT Subject: CN=2a49f2290707e09f604f075292e4601c926cfb20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:92:b4:c5:46:55:4d:ab:37:b1:02:72:ea: b4:5c:35:f3:f5:5d:4e:6a:39:9b:d1:62:c8:f8:2f: ba:c9:03:9e:3f:5e:46:29:5b:ab:58:88:0c:36:a8: 94:32:5d:75:d9:42:92:6e:c9:f2:be:46:b5:4c:cd: a5:ef:b4:11:6d:a1:af:65:b2:c5:32:b2:a7:cf:cb: 37:1a:f8:ce:7e:7e:3a:e6:b5:34:a4:dc:ad:1f:0a: b2:58:b7:f7:ed:35:1a:0a:c0:aa:a9:0d:ac:56:64: 33:aa:c3:63:6b:26:84:a6:cd:0c:67:28:8c:1f:8c: 8b:e6:51:67:96:22:e7:13:6c:e9:92:52:5d:8f:24: fe:f9:38:d5:88:48:af:90:6b:6e:83:21:40:35:e7: da:fc:0c:45:93:fe:a0:b4:a5:72:79:d9:6d:bb:1a: 2b:02:28:50:c5:b0:06:e0:fe:59:fb:b3:cd:ea:aa: 7f:b5:47:57:9f:bf:fa:b9:22:a5:0f:25:1a:d1:3d: ab:17:88:4d:b4:d6:e5:fe:5d:75:31:71:fa:6b:16: 59:8a:e0:a5:f9:02:08:01:12:84:cf:25:d0:f2:e9: 28:dd:1e:14:71:01:56:70:b6:0d:41:65:de:1c:bd: 60:be:47:c8:28:43:8e:d7:64:ac:02:e6:99:d7:8b: b6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:49:F2:29:07:07:E0:9F:60:4F:07:52:92:E4:60:1C:92:6C:FB:20 X509v3 Authority Key Identifier: keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:80:68:de:e0:89:ae:63:f5:3f:67:65:da:6c:45:99:9b:67: 0f:0c:3c:3d:2b:a9:4e:5d:12:5e:c8:0e:90:41:a6:3b:63:f2: 58:7e:6f:a1:17:f9:7d:f2:47:f3:8a:bd:47:38:20:13:58:de: a2:02:4b:45:de:00:1e:f0:43:1c:bd:0f:61:9d:ff:4a:2a:6d: 63:46:c6:45:eb:bd:db:1e:8d:c2:d9:29:89:4f:da:23:1d:38: 06:3d:09:53:2e:34:f4:0b:64:9e:c2:fe:4f:29:ec:ba:60:b7: 8c:b7:af:fd:d0:e7:72:54:58:c6:c2:97:91:82:fc:1d:aa:d8: a2:84:cb:82:6d:78:89:f3:49:8c:dd:e7:cb:40:1a:a5:38:7d: cf:86:6b:93:33:71:3f:35:5a:10:37:ae:c0:88:86:1c:71:b1: 80:5f:1d:d4:af:b4:4b:26:7e:93:78:65:d3:f8:be:a2:06:ae: bb:66:9b:ec:10:ad:04:44:70:f2:ad:39:46:a2:c6:67:94:5b: f2:66:3e:aa:7a:f9:d7:81:38:83:fc:d4:e5:ae:98:cc:b8:d3: 35:b4:b7:10:1e:a1:22:f8:1a:60:02:e8:4d:f1:4e:34:09:22: 7e:e3:e1:3c:06:2d:2d:91:12:70:32:54:ec:1e:90:6d:d5:10: a2:fe:68:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq8N031bud8WAHgDdrOvrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4 NDc3MGMwHhcNMjUxMjI1MTgwMDU1WhcNMjUxMjI2MTgwMDU1WjAzMTEwLwYDVQQD EygyYTQ5ZjIyOTA3MDdlMDlmNjA0ZjA3NTI5MmU0NjAxYzkyNmNmYjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cCStMVGVU2rN7ECcuq0XDXz9V1O ajmb0WLI+C+6yQOeP15GKVurWIgMNqiUMl112UKSbsnyvka1TM2l77QRbaGvZbLF MrKnz8s3GvjOfn465rU0pNytHwqyWLf37TUaCsCqqQ2sVmQzqsNjayaEps0MZyiM H4yL5lFnliLnE2zpklJdjyT++TjViEivkGtugyFANefa/AxFk/6gtKVyedltuxor AihQxbAG4P5Z+7PN6qp/tUdXn7/6uSKlDyUa0T2rF4hNtNbl/l11MXH6axZZiuCl +QIIARKEzyXQ8uko3R4UcQFWcLYNQWXeHL1gvkfIKEOO12SsAuaZ14u2SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpJ8ikHB+CfYE8HUpLkYBySbPsgMB8GA1UdIwQY MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt ODAzNWYyZGZjMWY0LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0 LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIBo3uCJ rmP1P2dl2mxFmZtnDww8PSupTl0SXsgOkEGmO2PyWH5voRf5ffJH84q9RzggE1je ogJLRd4AHvBDHL0PYZ3/SiptY0bGReu92x6NwtkpiU/aIx04Bj0JUy409AtknsL+ TynsumC3jLev/dDnclRYxsKXkYL8HarYooTLgm14ifNJjN3ny0AapTh9z4ZrkzNx PzVaEDeuwIiGHHGxgF8d1K+0SyZ+k3hl0/i+ogauu2ab7BCtBERw8q05RqLGZ5Rb 8mY+qnr514E4g/zU5a6YzLjTNbS3EB6hIvgaYALoTfFONAkifuPhPAYtLZEScDJU 7B6QbdUQov5oeQ== -----END CERTIFICATE-----Generated at Thu Dec 25 19:40:31 2025 by rpki-client