This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: qU+a4fC4+r2JJjfExgkCviYTwSUbUEwLoSpbwCp0ILE= Subject key identifier: EA:46:4F:03:4C:7F:93:EF:80:48:55:0E:B0:58:32:97:74:2D:05:4D Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019B60C1EC5F1C84C6505DB5164CA7E0EA09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 091E Signing time: Sat 27 Dec 2025 17:01:20 +0000 Manifest this update: Sat 27 Dec 2025 17:01:20 +0000 Manifest next update: Sun 28 Dec 2025 17:01:20 +0000 Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: tUY6ggOu3uJeuQ7yVSt3kW6f0vZDpMzqaYdzIHvg4XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 17:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:ec:5f:1c:84:c6:50:5d:b5:16:4c:a7:e0:ea:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Dec 27 17:01:20 2025 GMT Not After : Dec 28 17:01:20 2025 GMT Subject: CN=ea464f034c7f93ef8048550eb0583297742d054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:62:83:d8:02:d3:3c:8e:22:e5:85:00:28: 28:ec:59:a6:5b:e5:68:54:75:7b:4b:64:01:33:ef: c6:4a:94:d6:b6:8e:27:d0:08:a4:81:9a:b9:64:04: fb:87:3a:eb:7e:e5:79:2e:05:3f:3a:03:d9:b4:80: 49:84:83:7f:8e:b0:d9:03:71:6f:c6:89:ad:35:b8: 5e:2e:5c:ac:5e:de:4f:26:1f:e6:4e:d0:40:51:c4: bb:c4:5e:1b:57:12:4d:e0:41:33:98:13:e3:c2:01: e4:64:19:63:ff:16:af:96:fe:af:0e:41:ae:dc:02: e5:ee:c0:bb:38:be:66:75:f9:2b:32:f3:6f:40:6a: 6b:b7:a4:af:56:a4:46:60:53:ce:c2:c1:c9:dd:52: cb:5d:a5:53:3d:55:d8:86:3a:a7:5e:55:ca:f5:87: bf:f3:66:85:63:90:c5:80:30:8e:0b:76:07:bb:b4: 94:8b:bf:ec:39:6a:da:a3:a5:ad:88:e9:e8:2e:10: 07:7b:e9:55:c5:47:c6:25:e4:79:a1:61:d9:6a:a0: 7e:4c:5c:2b:e8:d9:57:15:30:db:8d:a4:af:d0:b5: 05:6a:48:a5:d7:09:4b:ee:57:a7:90:99:f9:85:a5: 20:60:e1:14:eb:f3:f9:c1:72:35:3d:c7:f6:fd:4e: b1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:46:4F:03:4C:7F:93:EF:80:48:55:0E:B0:58:32:97:74:2D:05:4D X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:84:91:2b:41:40:16:e1:4e:57:41:dc:cb:60:20:23:dc:a7: 4b:01:8f:f5:ed:31:44:38:d6:c7:f5:87:a5:b3:6d:7a:ca:9a: 51:8c:9e:6d:b5:ce:d2:09:34:3d:02:c2:9b:68:55:da:4f:2b: df:f9:06:1b:60:9f:19:59:a7:54:39:ea:27:33:6c:fe:7d:64: c9:00:7f:b5:f0:86:ed:dc:32:21:2f:bf:2d:89:99:4b:ea:99: 4e:98:72:00:23:76:11:7c:9b:c0:08:3e:fb:54:9d:9e:96:45: 9a:20:2d:ac:ac:c8:0a:d1:bc:f9:57:c6:a4:ad:32:01:44:83: c1:16:f4:52:c6:de:5e:75:62:af:b7:f5:27:15:ab:be:3c:55: d3:50:26:0e:5e:7a:d3:2d:cc:ec:b3:25:4b:55:6c:e0:54:e9: 38:f1:d8:39:ac:ca:4b:22:10:b7:0c:72:fa:47:64:44:46:6a: d9:2d:4a:4e:63:64:a7:31:86:14:75:f5:53:7a:08:f8:29:f0: 95:bb:9c:b2:0c:ee:fe:3a:d7:62:53:59:4c:c2:a7:3c:b8:07: 8b:ae:42:79:ca:b5:48:82:05:64:e7:70:e3:51:b7:5d:21:13: 32:f0:a2:5d:ad:4f:23:89:37:42:28:a6:bb:16:f0:8e:f4:31: da:c0:16:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgwexfHITGUF21Fkyn4OoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjUxMjI3MTcwMTIwWhcNMjUxMjI4MTcwMTIwWjAzMTEwLwYDVQQD EyhlYTQ2NGYwMzRjN2Y5M2VmODA0ODU1MGViMDU4MzI5Nzc0MmQwNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQZig9gC0zyOIuWFACgo7FmmW+Vo VHV7S2QBM+/GSpTWto4n0AikgZq5ZAT7hzrrfuV5LgU/OgPZtIBJhIN/jrDZA3Fv xomtNbheLlysXt5PJh/mTtBAUcS7xF4bVxJN4EEzmBPjwgHkZBlj/xavlv6vDkGu 3ALl7sC7OL5mdfkrMvNvQGprt6SvVqRGYFPOwsHJ3VLLXaVTPVXYhjqnXlXK9Ye/ 82aFY5DFgDCOC3YHu7SUi7/sOWrao6WtiOnoLhAHe+lVxUfGJeR5oWHZaqB+TFwr 6NlXFTDbjaSv0LUFakil1wlL7lenkJn5haUgYOEU6/P5wXI1Pcf2/U6xZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpGTwNMf5PvgEhVDrBYMpd0LQVNMB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4SRK0FA FuFOV0Hcy2AgI9ynSwGP9e0xRDjWx/WHpbNtesqaUYyebbXO0gk0PQLCm2hV2k8r 3/kGG2CfGVmnVDnqJzNs/n1kyQB/tfCG7dwyIS+/LYmZS+qZTphyACN2EXybwAg+ +1SdnpZFmiAtrKzICtG8+VfGpK0yAUSDwRb0UsbeXnVir7f1JxWrvjxV01AmDl56 0y3M7LMlS1Vs4FTpOPHYOazKSyIQtwxy+kdkREZq2S1KTmNkpzGGFHX1U3oI+Cnw lbucsgzu/jrXYlNZTMKnPLgHi65Cecq1SIIFZOdw41G3XSETMvCiXa1PI4k3Qiim uxbwjvQx2sAW/w== -----END CERTIFICATE-----Generated at Sun Dec 28 03:16:24 2025 by rpki-client