This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json) Hash identifier: kbQRDddRQdePkfETHqm4ZoydlKzxF8BStq2oX7hap+M= Subject key identifier: FE:67:B0:AA:F2:23:65:DF:D3:41:86:EA:6D:89:70:C9:92:DD:25:21 Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb Certificate serial: 019B2FD4DDFCC0785F4B49369485832EEB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft Manifest number: 0A8C Signing time: Thu 18 Dec 2025 05:00:38 +0000 Manifest this update: Thu 18 Dec 2025 05:00:38 +0000 Manifest next update: Fri 19 Dec 2025 05:00:38 +0000 Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: WvbHipKcxkizfGoxSS6c148TYdu2o7hF50rrqmhWbtM=) 2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:dd:fc:c0:78:5f:4b:49:36:94:85:83:2e:eb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb Validity Not Before: Dec 18 05:00:38 2025 GMT Not After : Dec 19 05:00:38 2025 GMT Subject: CN=fe67b0aaf22365dfd34186ea6d8970c992dd2521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1d:b3:ee:a7:6f:39:b0:23:2d:e4:e5:23:ee: d4:7f:23:da:43:2a:06:f7:4f:db:b1:93:7f:94:3b: 6c:90:1d:31:b9:74:8b:49:cc:db:14:97:9d:8f:de: 34:4c:89:d6:1f:0b:5d:2d:81:de:64:d6:c2:e0:bc: 93:28:4f:f3:b8:b0:89:b0:1a:4a:3c:d1:4a:f6:31: 37:42:7b:42:89:1a:00:c0:b3:42:e3:a1:bf:9d:d3: fb:60:19:72:2a:a2:ad:95:67:c0:82:36:57:75:db: b7:62:42:25:ec:38:18:55:e4:05:15:ac:5b:19:62: 6b:40:93:ad:ac:21:38:6f:b6:87:cb:5e:af:50:07: ba:69:b0:d4:28:22:18:ca:2c:95:6d:55:72:2c:5c: ab:3c:58:89:9e:5a:c2:fb:5a:16:28:86:e6:10:1b: ca:e7:40:d7:e8:05:31:7d:0a:53:f7:93:84:74:cf: fc:4f:d5:16:a0:33:1a:11:3d:31:d7:46:31:e4:1b: dc:37:7f:b3:f3:c2:53:b1:27:dc:af:24:96:e9:e4: a8:07:a5:df:d1:1c:2b:e0:e5:de:dd:67:3f:87:3d: b2:a8:fc:8f:86:4c:e3:73:e3:22:6a:66:d0:74:c1: 62:8a:a0:d3:3f:e2:4f:4e:dc:9e:8b:94:de:30:b9: c2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:67:B0:AA:F2:23:65:DF:D3:41:86:EA:6D:89:70:C9:92:DD:25:21 X509v3 Authority Key Identifier: keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a9:d3:1f:ad:2f:ef:c8:a1:40:9a:ba:3c:b8:be:9a:ff:b0: aa:fa:01:b8:0c:0e:7e:c1:58:83:a2:a2:a0:71:4d:70:6d:d0: bb:2b:7f:bf:ef:50:f8:f5:f2:fa:67:75:89:9b:ac:76:d1:60: 02:9d:55:5b:4f:2c:b4:c5:a6:eb:2d:8c:dc:72:34:c0:9b:fd: 89:8f:a1:11:e2:4c:d5:e9:76:5c:99:aa:41:aa:e3:f5:77:33: 84:60:bd:55:85:80:c1:49:db:6e:86:1a:a9:d3:7d:e8:b6:99: bc:ea:17:f3:57:96:3f:64:de:d3:bb:50:d7:fa:16:70:9e:54: ba:06:1f:81:db:fe:d8:31:a4:7d:b8:6c:eb:d9:60:a3:68:a6: 56:3d:1a:e0:1b:c3:8f:87:bb:44:c4:46:29:b5:bf:ca:d5:03: bf:30:14:27:7a:37:ae:99:51:a4:1c:30:68:5e:8c:6e:30:f7: 30:55:c8:b3:3a:b5:e0:65:d5:20:f0:1b:54:b7:1e:e5:05:8d: e2:7e:e7:e1:ed:2f:dc:41:82:3c:22:02:23:76:95:6a:2e:88: 47:29:c1:de:af:09:52:04:0d:d9:36:d0:48:36:ae:2b:15:b7: 29:68:70:ff:da:de:82:8c:16:e5:5e:99:dd:b4:3c:21:ed:42: fd:82:9c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1N38wHhfS0k2lIWDLutlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OThkZjAzMDBhYWI1ZTJhNmYxYWM3OGU1OTNlY2M5NzQw ZGFhZGIwHhcNMjUxMjE4MDUwMDM4WhcNMjUxMjE5MDUwMDM4WjAzMTEwLwYDVQQD EyhmZTY3YjBhYWYyMjM2NWRmZDM0MTg2ZWE2ZDg5NzBjOTkyZGQyNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B2z7qdvObAjLeTlI+7UfyPaQyoG 90/bsZN/lDtskB0xuXSLSczbFJedj940TInWHwtdLYHeZNbC4LyTKE/zuLCJsBpK PNFK9jE3QntCiRoAwLNC46G/ndP7YBlyKqKtlWfAgjZXddu3YkIl7DgYVeQFFaxb GWJrQJOtrCE4b7aHy16vUAe6abDUKCIYyiyVbVVyLFyrPFiJnlrC+1oWKIbmEBvK 50DX6AUxfQpT95OEdM/8T9UWoDMaET0x10Yx5BvcN3+z88JTsSfcrySW6eSoB6Xf 0Rwr4OXe3Wc/hz2yqPyPhkzjc+MiambQdMFiiqDTP+JPTtyei5TeMLnCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5nsKryI2Xf00GG6m2JcMmS3SUhMB8GA1UdIwQY MBaAFBaY3wMAqrXipvGseOWT7Ml0DarbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYt NmVjOWQ5ODhhNDA4LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYtNmVjOWQ5ODhhNDA4 LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6nTH60v 78ihQJq6PLi+mv+wqvoBuAwOfsFYg6KioHFNcG3Quyt/v+9Q+PXy+md1iZusdtFg Ap1VW08stMWm6y2M3HI0wJv9iY+hEeJM1el2XJmqQarj9XczhGC9VYWAwUnbboYa qdN96LaZvOoX81eWP2Te07tQ1/oWcJ5UugYfgdv+2DGkfbhs69lgo2imVj0a4BvD j4e7RMRGKbW/ytUDvzAUJ3o3rplRpBwwaF6MbjD3MFXIszq14GXVIPAbVLce5QWN 4n7n4e0v3EGCPCICI3aVai6IRynB3q8JUgQN2TbQSDauKxW3KWhw/9regowW5V6Z 3bQ8Ie1C/YKcEg== -----END CERTIFICATE-----Generated at Thu Dec 18 11:12:11 2025 by rpki-client