This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: 8E0t/GxxUq4IWAx30K7sBHkjMyfBA7zGK5HPZtfb5aE= Subject key identifier: B9:10:2D:DC:F5:00:01:E0:BD:5D:D8:50:CA:70:53:B1:8C:3A:8E:EC Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019B37FCED793BAD01D68266DD01B24A426F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 17AF Signing time: Fri 19 Dec 2025 19:01:21 +0000 Manifest this update: Fri 19 Dec 2025 19:01:21 +0000 Manifest next update: Sat 20 Dec 2025 19:01:21 +0000 Files and hashes: 1: DikZcVQXQSFDOynsfX_sTyHMKBA.roa (hash: AwRolSp7x+aH8sUfMqGwV4s9pfQGgtvsHaMInWlZZdE=) 2: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 3pmR1cPxWEirdU6BwltQd2UchtpVY4Ht2CueGeqzpaQ=) 3: Ky4bLo9J6pOGQKNm7HdTTpVyXUQ.roa (hash: Nz/bgREWmfO74J020d6hSSWbUR82qaNTZZa/sGleP5Q=) 4: NWfd370uH5lbUacr8duxGeUTYdk.roa (hash: VFsocYh+H8xYkjBU76EMDy8y6zCloFEwH+T0zIEKZhI=) 5: _ZHo0DXp29WN4BOS9yj8UgLowqU.roa (hash: k2O5B28gMEUS5GB1MDIowIqcob2fshstanyKIafnymc=) 6: i4MzjZTpbtZK_ZPjW181XA_QlOs.roa (hash: a3SMnVU0VU8ASpu/GP3SPdiJleFoyqLmWwLdGByzs8I=) 7: j6hKxXwYJoHNuCTDhs-IfIh2tt4.roa (hash: TjFUu5xlgLo8Aa3mMyacmbyQA66hBclRcNenDgJBYgM=) 8: kEE54Na7-BCTgHLb6bkDtNrQEVo.roa (hash: q7RWUfa1vIWc5o8bk7iDaK25w/Hb4HrDG1w6G9yuV+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:ed:79:3b:ad:01:d6:82:66:dd:01:b2:4a:42:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Dec 19 19:01:21 2025 GMT Not After : Dec 20 19:01:21 2025 GMT Subject: CN=b9102ddcf50001e0bd5dd850ca7053b18c3a8eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:77:98:a8:47:42:4a:64:d0:41:57:57:8e:25: 99:59:f9:72:2c:d4:ed:23:d4:29:11:82:43:a8:e6: e3:d1:ff:78:3d:9c:ce:8c:93:56:59:c6:66:7e:d3: 8a:a5:2d:06:b4:17:47:8f:a1:8c:8d:ab:e4:56:7f: 53:1e:7d:7a:31:78:00:84:e2:0d:42:ef:a5:45:02: b4:ee:96:8e:cd:96:44:b3:e7:0f:d3:ea:e7:a6:e8: 9c:bd:58:9e:41:97:a8:f2:b0:ce:7f:3d:39:0f:b5: 32:95:b7:00:1a:03:ea:c2:ad:6e:38:34:1e:b6:36: a0:ab:e2:72:73:9e:31:ad:df:c1:a6:d6:29:c5:cc: 2a:21:81:3c:8f:2f:26:02:7c:2c:39:13:a2:e3:2a: 0d:62:6a:86:2b:45:e7:18:c5:70:3c:29:41:a0:9c: 1c:44:69:b7:07:fa:49:5c:10:56:da:9b:4e:43:f7: a1:4c:3b:fb:d7:4f:1b:44:30:3e:c8:ce:3d:75:9f: 85:b8:8f:ab:95:2f:12:0b:b0:2d:aa:30:8b:d9:ec: f4:dd:7b:05:03:eb:82:e5:3d:6e:04:9d:40:55:8f: c2:5b:3f:c7:ef:77:26:cf:e8:95:e1:f2:57:47:21: c2:ef:c0:32:60:9a:f6:89:12:36:02:a1:6e:f3:56: 0b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:10:2D:DC:F5:00:01:E0:BD:5D:D8:50:CA:70:53:B1:8C:3A:8E:EC X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:76:13:75:c9:8f:bf:3a:fc:dd:a6:b5:4c:cb:86:08:7f: 7e:aa:38:6f:b2:71:e5:e4:ae:05:69:1d:69:ce:bf:82:dc:11: 2e:51:6e:e5:4d:fc:ca:28:86:a8:41:41:1a:aa:84:17:92:60: 9f:64:65:d2:22:c5:16:e8:22:f0:5b:0f:d2:05:01:4a:3a:4f: 56:90:5c:28:c4:43:09:78:b2:d5:b1:07:25:7d:d4:85:f6:18: b1:3b:e9:cc:c3:c4:29:29:23:7a:61:ae:aa:1d:8d:4f:58:f7: 39:57:4d:7a:e2:b0:a2:23:0d:ff:b0:c5:c9:23:ae:2c:9d:02: 0a:e6:94:30:63:11:da:ae:e8:c9:c5:b1:0f:10:9b:5e:2f:d8: 1b:45:b4:e9:b8:8a:18:c9:f4:2d:1a:93:9a:bf:b5:bc:1a:1c: b3:05:a5:7e:c2:f7:12:27:0d:4c:5b:7f:5f:73:c9:5d:3e:ae: 59:10:38:1f:d8:75:03:a9:13:00:50:43:ed:d4:f9:35:2d:72: b8:ce:f9:19:46:e2:19:08:a0:5d:d2:8e:06:00:ff:19:c6:fe: 09:24:67:ea:4e:74:2e:1e:cd:4a:2b:b1:e6:2f:c2:26:43:92: ac:e0:b0:bb:f1:7f:71:10:73:a3:91:3a:46:a9:5f:0a:fc:a6: 50:19:e7:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/O15O60B1oJm3QGySkJvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjUxMjE5MTkwMTIxWhcNMjUxMjIwMTkwMTIxWjAzMTEwLwYDVQQD EyhiOTEwMmRkY2Y1MDAwMWUwYmQ1ZGQ4NTBjYTcwNTNiMThjM2E4ZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoneYqEdCSmTQQVdXjiWZWflyLNTt I9QpEYJDqObj0f94PZzOjJNWWcZmftOKpS0GtBdHj6GMjavkVn9THn16MXgAhOIN Qu+lRQK07paOzZZEs+cP0+rnpuicvVieQZeo8rDOfz05D7UylbcAGgPqwq1uODQe tjagq+Jyc54xrd/BptYpxcwqIYE8jy8mAnwsOROi4yoNYmqGK0XnGMVwPClBoJwc RGm3B/pJXBBW2ptOQ/ehTDv7108bRDA+yM49dZ+FuI+rlS8SC7AtqjCL2ez03XsF A+uC5T1uBJ1AVY/CWz/H73cmz+iV4fJXRyHC78AyYJr2iRI2AqFu81YLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkQLdz1AAHgvV3YUMpwU7GMOo7sMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDx2E3XJ j786/N2mtUzLhgh/fqo4b7Jx5eSuBWkdac6/gtwRLlFu5U38yiiGqEFBGqqEF5Jg n2Rl0iLFFugi8FsP0gUBSjpPVpBcKMRDCXiy1bEHJX3UhfYYsTvpzMPEKSkjemGu qh2NT1j3OVdNeuKwoiMN/7DFySOuLJ0CCuaUMGMR2q7oycWxDxCbXi/YG0W06biK GMn0LRqTmr+1vBocswWlfsL3EicNTFt/X3PJXT6uWRA4H9h1A6kTAFBD7dT5NS1y uM75GUbiGQigXdKOBgD/Gcb+CSRn6k50Lh7NSiux5i/CJkOSrOCwu/F/cRBzo5E6 RqlfCvymUBnnBA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:51:01 2025 by rpki-client