This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft File: FJD8Fzgt1gZqOOQjutstihjRwEU.mft (raw, json) Hash identifier: z8gSw6iaeEIyCHfmzO+vVOQzZHzq/oB8ey/NULg+9yM= Subject key identifier: 48:00:D6:2C:7E:0D:1D:B9:21:E1:04:6B:4C:AD:9B:72:12:89:53:68 Authority key identifier: 14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45 Certificate issuer: /CN=1490fc17382dd6066a38e423badb2d8a18d1c045 Certificate serial: 019B3E6CA95E13589DB40DE8E068C52BBF1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft Manifest number: 150B Signing time: Sun 21 Dec 2025 01:01:07 +0000 Manifest this update: Sun 21 Dec 2025 01:01:07 +0000 Manifest next update: Mon 22 Dec 2025 01:01:07 +0000 Files and hashes: 1: FJD8Fzgt1gZqOOQjutstihjRwEU.crl (hash: WJhaiWbub/Pr5d4r4scK5G8/YLNwQFnFVhrdFeSN0KU=) 2: GBpd_CXuB-9kNsxFo6gk--Reihk.roa (hash: g01Wtwi7iT3bkjePjiBnddon67j1RhvdGQsrObyK/EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:a9:5e:13:58:9d:b4:0d:e8:e0:68:c5:2b:bf:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1490fc17382dd6066a38e423badb2d8a18d1c045 Validity Not Before: Dec 21 01:01:07 2025 GMT Not After : Dec 22 01:01:07 2025 GMT Subject: CN=4800d62c7e0d1db921e1046b4cad9b7212895368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7c:1a:2f:f0:97:3e:d6:5b:e3:ca:30:08:fc: 5b:fd:a5:4d:eb:94:fa:b9:12:cd:be:da:75:7a:fe: 57:57:fc:96:d9:41:0a:d4:f9:1f:d3:27:3c:65:82: f2:98:bc:26:29:46:37:cb:89:b5:24:d6:38:b9:87: 7f:29:5e:0e:46:bf:86:7d:64:d0:65:b0:b7:b4:d2: e3:43:aa:94:ee:5b:c1:11:d4:a2:dc:ad:47:0a:a8: fc:1b:df:06:f7:47:6e:ee:9f:53:b9:94:02:a0:05: 50:ef:15:94:d7:1a:61:85:3c:51:c3:61:82:c6:96: a4:b0:03:55:cc:79:07:59:e6:b1:3e:68:eb:9e:ed: ec:1e:07:5b:3c:c6:e4:c1:7b:49:19:83:23:92:bd: 0a:b9:53:c9:2b:2f:80:99:d6:49:71:d8:f5:d9:d4: ed:10:b2:87:90:93:b7:98:10:f4:ad:f0:d1:aa:ce: 4c:65:3e:13:c4:40:4e:be:3e:79:00:20:8e:d1:ea: 02:71:54:40:85:d7:43:16:fb:31:6c:e9:6c:55:d1: 1e:de:9f:d3:d0:72:51:31:25:ce:95:50:93:62:be: a5:4b:ff:5b:8d:f2:6e:4a:d5:61:97:9d:6d:dd:ba: e5:b7:f4:98:d4:21:11:6f:ed:b6:fc:4b:12:9b:5c: 85:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:00:D6:2C:7E:0D:1D:B9:21:E1:04:6B:4C:AD:9B:72:12:89:53:68 X509v3 Authority Key Identifier: keyid:14:90:FC:17:38:2D:D6:06:6A:38:E4:23:BA:DB:2D:8A:18:D1:C0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJD8Fzgt1gZqOOQjutstihjRwEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/96eb70-0d04-476f-825e-556cc2e071dc/1/FJD8Fzgt1gZqOOQjutstihjRwEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:72:42:67:4a:a4:27:cc:ba:d8:dd:10:c5:4a:78:c4:78:41: b0:01:be:4d:95:ec:8e:fb:b2:84:96:62:a1:ce:04:63:a2:03: 02:ef:ce:e0:89:74:2a:7e:36:69:a6:ff:27:d2:bf:4a:47:ad: ab:f1:08:94:b3:ea:7a:b3:07:46:3d:70:94:85:5b:be:70:ad: 6c:44:f0:8d:ac:57:77:d8:1d:df:1f:3b:f6:b9:ad:e2:29:33: 4e:e2:2d:69:3e:dc:fa:f6:53:af:05:31:c6:98:8f:a6:84:5f: 69:6a:31:26:8d:53:fd:61:07:8e:d6:09:c4:00:19:60:9c:ca: 72:cc:c3:83:9c:ed:79:63:f8:f1:aa:3d:45:48:09:08:ef:a8: f9:08:78:d8:69:9c:8f:98:56:ab:bc:07:4f:48:f7:45:f2:3f: 3a:b8:4e:92:fc:3b:fd:94:b0:16:f8:dc:03:9d:b2:25:cd:f1: e3:7a:81:9e:88:62:51:fc:98:a9:56:44:f4:8f:e3:d5:ce:06: 11:8a:c5:f8:21:b2:aa:23:a5:eb:4e:ad:51:fa:19:a8:a7:5e: 25:2d:0e:9c:72:9a:a5:34:ec:7b:fe:3a:a4:5a:6d:d9:3a:29: fe:a8:39:8b:7d:28:f1:6c:6c:27:49:d5:81:d1:ca:53:8c:03: 1a:f0:10:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bKleE1idtA3o4GjFK78aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTBmYzE3MzgyZGQ2MDY2YTM4ZTQyM2JhZGIyZDhhMThk MWMwNDUwHhcNMjUxMjIxMDEwMTA3WhcNMjUxMjIyMDEwMTA3WjAzMTEwLwYDVQQD Eyg0ODAwZDYyYzdlMGQxZGI5MjFlMTA0NmI0Y2FkOWI3MjEyODk1MzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynwaL/CXPtZb48owCPxb/aVN65T6 uRLNvtp1ev5XV/yW2UEK1Pkf0yc8ZYLymLwmKUY3y4m1JNY4uYd/KV4ORr+GfWTQ ZbC3tNLjQ6qU7lvBEdSi3K1HCqj8G98G90du7p9TuZQCoAVQ7xWU1xphhTxRw2GC xpaksANVzHkHWeaxPmjrnu3sHgdbPMbkwXtJGYMjkr0KuVPJKy+AmdZJcdj12dTt ELKHkJO3mBD0rfDRqs5MZT4TxEBOvj55ACCO0eoCcVRAhddDFvsxbOlsVdEe3p/T 0HJRMSXOlVCTYr6lS/9bjfJuStVhl51t3brlt/SY1CERb+22/EsSm1yF2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgA1ix+DR25IeEEa0ytm3ISiVNoMB8GA1UdIwQY MBaAFBSQ/Bc4LdYGajjkI7rbLYoY0cBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUt NTU2Y2MyZTA3MWRjLzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85NmViNzAtMGQwNC00NzZmLTgyNWUtNTU2Y2MyZTA3MWRj LzEvRkpEOEZ6Z3QxZ1pxT09RanV0c3RpaGpSd0VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3JCZ0qk J8y62N0QxUp4xHhBsAG+TZXsjvuyhJZioc4EY6IDAu/O4Il0Kn42aab/J9K/Sket q/EIlLPqerMHRj1wlIVbvnCtbETwjaxXd9gd3x879rmt4ikzTuItaT7c+vZTrwUx xpiPpoRfaWoxJo1T/WEHjtYJxAAZYJzKcszDg5zteWP48ao9RUgJCO+o+Qh42Gmc j5hWq7wHT0j3RfI/OrhOkvw7/ZSwFvjcA52yJc3x43qBnohiUfyYqVZE9I/j1c4G EYrF+CGyqiOl606tUfoZqKdeJS0OnHKapTTse/46pFpt2Top/qg5i30o8WxsJ0nV gdHKU4wDGvAQyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:33:44 2025 by rpki-client