This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: OMGPaFNMk1OqneYI7cTnh5EWrdFTR/1/ue9FteApiIw= Subject key identifier: EA:03:70:26:18:AF:7D:4D:3A:0F:94:F0:1D:11:E2:EC:37:D1:83:18 Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019B43CA0AC08CA9AAB4ACBF31926B95AAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 090F Signing time: Mon 22 Dec 2025 02:01:12 +0000 Manifest this update: Mon 22 Dec 2025 02:01:12 +0000 Manifest next update: Tue 23 Dec 2025 02:01:12 +0000 Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: UD8YO9zpTUiL4lDwgyMmXvJ9MWpAX2OjVqSO00XwOSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:0a:c0:8c:a9:aa:b4:ac:bf:31:92:6b:95:aa:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Dec 22 02:01:12 2025 GMT Not After : Dec 23 02:01:12 2025 GMT Subject: CN=ea03702618af7d4d3a0f94f01d11e2ec37d18318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:ca:c3:66:87:9a:3a:ff:44:f9:af:52:65: a2:e4:e9:53:b2:85:a2:d5:f8:a8:bc:2b:49:43:ee: 4c:0f:b2:f0:e5:a3:21:1b:c8:2e:97:07:8f:ed:09: e9:09:8a:3a:b8:8d:cb:b4:d2:11:18:df:47:1a:2a: e5:87:16:07:80:2f:40:d0:51:55:b9:9e:4d:c0:e7: 37:6e:65:24:e5:d3:b9:5b:ab:e3:a7:32:94:67:8c: 9f:1d:00:e3:a6:4e:f6:2d:c6:92:87:a3:84:1a:1a: f6:10:2c:3c:bc:a3:08:1c:02:a9:bb:18:38:ce:5b: fa:1f:4a:c0:cc:12:d5:53:15:5a:f6:26:9f:b6:38: a2:27:0c:39:05:a6:c8:11:53:e7:a7:49:07:13:8f: 81:15:93:49:cc:b6:b8:5b:40:53:07:77:5f:df:c0: 88:28:74:72:22:97:1c:72:d7:e8:cb:a9:8b:73:67: 8f:72:9c:af:d7:97:ba:d7:ce:4f:a0:69:ff:22:ee: 3e:18:20:4a:02:41:95:25:74:04:df:a9:fb:03:9d: 3a:1e:c9:b0:e2:de:d3:24:56:1b:22:ca:71:91:f1: 59:23:dc:54:44:3e:a6:97:f2:67:31:53:a1:65:78: 93:da:fe:d5:a2:3b:99:0c:f3:e1:cd:7a:9d:42:a1: 22:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:03:70:26:18:AF:7D:4D:3A:0F:94:F0:1D:11:E2:EC:37:D1:83:18 X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bf:b6:2d:74:e7:ae:de:8d:2c:70:72:44:37:24:e1:d3:ab: 69:af:8c:55:99:14:d5:19:b3:eb:00:2c:41:ef:7b:33:7a:87: bd:05:36:fa:22:40:f7:57:cc:0a:c9:21:7e:10:a6:da:78:89: 2e:fa:42:d6:0e:1d:15:e5:59:f9:63:18:73:74:4a:c6:f7:35: fe:f5:a3:5b:fc:72:7a:0a:ae:58:58:3d:b0:b4:6f:9f:0e:c1: c8:71:e0:cc:74:3c:9f:d4:62:12:be:b1:ba:f3:73:d1:d4:ac: 91:9a:05:42:5b:ed:45:4f:01:55:13:04:71:15:e5:9a:49:22: 46:1f:6b:43:9a:e9:36:43:5e:07:6e:8e:df:f4:48:4f:42:b1: 21:61:d0:db:b8:a5:8e:32:67:4d:eb:2d:4f:17:eb:4c:0d:42: 3a:00:92:d4:87:c8:1b:c7:5a:bb:30:fa:4a:e2:aa:a8:0a:bd: 62:b9:21:d8:0f:20:96:f4:67:e6:e0:ee:9d:74:82:a2:3e:62: 1f:d1:99:6b:73:60:a9:23:90:ec:6e:b7:1f:02:81:fe:52:3b: ba:19:46:18:8a:b2:30:9d:ec:45:c5:b6:23:f6:b4:50:c2:b9: dc:e4:de:b1:95:26:17:16:7e:e7:fd:f2:57:fc:10:20:93:a4: 33:1d:18:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDygrAjKmqtKy/MZJrlarmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjUxMjIyMDIwMTEyWhcNMjUxMjIzMDIwMTEyWjAzMTEwLwYDVQQD EyhlYTAzNzAyNjE4YWY3ZDRkM2EwZjk0ZjAxZDExZTJlYzM3ZDE4MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCHKw2aHmjr/RPmvUmWi5OlTsoWi 1fiovCtJQ+5MD7Lw5aMhG8gulweP7QnpCYo6uI3LtNIRGN9HGirlhxYHgC9A0FFV uZ5NwOc3bmUk5dO5W6vjpzKUZ4yfHQDjpk72LcaSh6OEGhr2ECw8vKMIHAKpuxg4 zlv6H0rAzBLVUxVa9iaftjiiJww5BabIEVPnp0kHE4+BFZNJzLa4W0BTB3df38CI KHRyIpccctfoy6mLc2ePcpyv15e6185PoGn/Iu4+GCBKAkGVJXQE36n7A506Hsmw 4t7TJFYbIspxkfFZI9xURD6ml/JnMVOhZXiT2v7VojuZDPPhzXqdQqEiRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoDcCYYr31NOg+U8B0R4uw30YMYMB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhb+2LXTn rt6NLHByRDck4dOraa+MVZkU1Rmz6wAsQe97M3qHvQU2+iJA91fMCskhfhCm2niJ LvpC1g4dFeVZ+WMYc3RKxvc1/vWjW/xyegquWFg9sLRvnw7ByHHgzHQ8n9RiEr6x uvNz0dSskZoFQlvtRU8BVRMEcRXlmkkiRh9rQ5rpNkNeB26O3/RIT0KxIWHQ27il jjJnTestTxfrTA1COgCS1IfIG8dauzD6SuKqqAq9Yrkh2A8glvRn5uDunXSCoj5i H9GZa3NgqSOQ7G63HwKB/lI7uhlGGIqyMJ3sRcW2I/a0UMK53OTesZUmFxZ+5/3y V/wQIJOkMx0YIw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:51:13 2025 by rpki-client