This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json) Hash identifier: 2YjpgOEyVopP8+B5hy/8wKtI5XQD9IOWvAPOXdy6omc= Subject key identifier: D1:87:60:F6:A3:80:89:55:74:CA:99:DE:36:1F:5C:1C:E2:40:BD:89 Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c Certificate serial: 019B2E1DBD9882CCF119F8B554B25FCBE11A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft Manifest number: 1245 Signing time: Wed 17 Dec 2025 21:00:59 +0000 Manifest this update: Wed 17 Dec 2025 21:00:59 +0000 Manifest next update: Thu 18 Dec 2025 21:00:59 +0000 Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=) 2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: afW1EK9Yyg2nl7e9pnwWcbQF69wFf7EEKeubQzWmPk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1d:bd:98:82:cc:f1:19:f8:b5:54:b2:5f:cb:e1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c Validity Not Before: Dec 17 21:00:59 2025 GMT Not After : Dec 18 21:00:59 2025 GMT Subject: CN=d18760f6a380895574ca99de361f5c1ce240bd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:82:21:9f:b6:e0:ca:b6:d1:23:e3:0e:c6: 49:c0:72:3b:82:34:6b:05:d6:d8:d0:5b:38:57:08: c2:76:dc:b1:b0:e2:77:4e:09:6a:7f:ed:f6:79:0c: 0d:67:aa:eb:c6:97:ce:89:f2:a8:1c:a1:a1:5a:0f: cb:59:7c:04:10:1b:d3:08:8d:af:8e:f0:8c:62:5c: 72:9f:ac:f6:94:4c:50:1c:fb:60:5b:b6:15:ef:8c: cc:13:9c:e0:28:96:ff:3c:1f:aa:77:68:2b:db:a7: 4d:f6:f4:cd:52:43:5d:20:d5:ae:2f:3f:82:ba:a9: 67:11:b9:e5:56:17:79:a3:16:4f:38:42:8c:3a:34: 92:8d:18:60:0d:20:3b:69:63:e9:56:b2:0b:8a:84: dc:be:99:2c:8f:d0:40:3b:06:20:3b:27:55:a3:3a: e8:a0:b8:4f:03:83:33:64:26:99:b3:18:99:ca:13: d2:65:51:3b:5c:e4:88:15:f5:28:40:1a:e2:2e:70: 42:6e:c2:e8:9f:71:42:85:b3:83:c1:0a:0b:83:aa: b7:c5:be:85:a8:71:7e:d0:b2:22:0f:c8:b7:21:be: 99:da:13:c8:35:6d:2e:de:9d:fe:29:f9:66:97:a7: 96:b7:b6:b1:ad:98:2d:9b:a4:cc:1c:6a:8e:41:f5: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:87:60:F6:A3:80:89:55:74:CA:99:DE:36:1F:5C:1C:E2:40:BD:89 X509v3 Authority Key Identifier: keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:c2:c2:3c:35:65:56:cb:7b:e5:48:27:dc:b6:e2:cc:37:ef: a7:1d:e8:e3:3d:d4:9c:29:13:4b:f0:1f:53:f0:78:cd:1b:de: de:83:8f:8a:61:6a:3d:8b:97:06:5a:ec:8c:04:81:a2:bc:f4: 31:ba:2c:b1:de:3b:5c:7f:c1:75:1c:8d:87:5f:c4:c8:ff:df: 1d:3d:97:37:6c:4a:d7:d0:21:4b:9c:d1:ba:33:75:b9:55:a2: f1:43:f3:4a:cf:bd:fd:56:b0:61:d5:94:2c:a5:bb:f1:55:1c: ca:96:da:e2:2c:3d:7f:36:a9:aa:44:dc:67:17:f9:89:75:04: 91:6e:59:e7:96:9c:7d:a7:b7:5b:3b:3d:fe:82:ea:3e:85:a7: d2:e1:38:a6:2e:fc:d6:18:17:2d:21:a8:4e:48:64:28:6c:64: 0a:a0:3f:26:c9:7f:94:8d:4e:31:cb:2e:b0:e4:e5:68:e7:7c: 18:a4:7b:8a:ab:63:6d:23:b3:05:e8:16:c1:d8:e9:1d:57:85: 58:fa:d6:69:45:ab:fc:aa:98:e0:80:d8:44:94:4d:59:cd:9e: 44:88:e1:76:1c:8b:b9:ce:0c:f8:02:54:66:f3:e7:c8:f6:23: f1:8e:7f:b7:65:5e:e6:ee:0d:27:ff:b0:b3:35:6b:6f:c1:49: c6:f8:59:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHb2YgszxGfi1VLJfy+EaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4 NDc3MGMwHhcNMjUxMjE3MjEwMDU5WhcNMjUxMjE4MjEwMDU5WjAzMTEwLwYDVQQD EyhkMTg3NjBmNmEzODA4OTU1NzRjYTk5ZGUzNjFmNWMxY2UyNDBiZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6CIZ+24Mq20SPjDsZJwHI7gjRr BdbY0Fs4VwjCdtyxsOJ3Tglqf+32eQwNZ6rrxpfOifKoHKGhWg/LWXwEEBvTCI2v jvCMYlxyn6z2lExQHPtgW7YV74zME5zgKJb/PB+qd2gr26dN9vTNUkNdINWuLz+C uqlnEbnlVhd5oxZPOEKMOjSSjRhgDSA7aWPpVrILioTcvpksj9BAOwYgOydVozro oLhPA4MzZCaZsxiZyhPSZVE7XOSIFfUoQBriLnBCbsLon3FChbODwQoLg6q3xb6F qHF+0LIiD8i3Ib6Z2hPINW0u3p3+Kflml6eWt7axrZgtm6TMHGqOQfUA3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGHYPajgIlVdMqZ3jYfXBziQL2JMB8GA1UdIwQY MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt ODAzNWYyZGZjMWY0LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0 LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMLCPDVl Vst75Ugn3LbizDfvpx3o4z3UnCkTS/AfU/B4zRve3oOPimFqPYuXBlrsjASBorz0 Mbossd47XH/BdRyNh1/EyP/fHT2XN2xK19AhS5zRujN1uVWi8UPzSs+9/VawYdWU LKW78VUcypba4iw9fzapqkTcZxf5iXUEkW5Z55acfae3Wzs9/oLqPoWn0uE4pi78 1hgXLSGoTkhkKGxkCqA/Jsl/lI1OMcsusOTlaOd8GKR7iqtjbSOzBegWwdjpHVeF WPrWaUWr/KqY4IDYRJRNWc2eRIjhdhyLuc4M+AJUZvPnyPYj8Y5/t2Ve5u4NJ/+w szVrb8FJxvhZcw== -----END CERTIFICATE-----Generated at Wed Dec 17 23:31:48 2025 by rpki-client