This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json) Hash identifier: gpBcos1dw18ztS6gpBXGYfx66d20PgszQOJ998osCH8= Subject key identifier: 81:32:C2:43:EA:BC:FD:FD:F8:F4:9C:CF:FD:CC:9D:E5:58:AF:F5:1C Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f Certificate serial: 019B3DFE3D87CF0A1DE9F273276FFBF4C172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft Manifest number: 0C06 Signing time: Sat 20 Dec 2025 23:00:30 +0000 Manifest this update: Sat 20 Dec 2025 23:00:30 +0000 Manifest next update: Sun 21 Dec 2025 23:00:30 +0000 Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: 7N0tArLvvgx9f7bgRZ3VzlKfFH1eBHhwmKWBzi8kRgQ=) 2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3d:87:cf:0a:1d:e9:f2:73:27:6f:fb:f4:c1:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f Validity Not Before: Dec 20 23:00:30 2025 GMT Not After : Dec 21 23:00:30 2025 GMT Subject: CN=8132c243eabcfdfdf8f49ccffdcc9de558aff51c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:99:d7:44:68:c3:d4:fa:aa:4b:9e:8f:33:3e: 2f:e3:21:2b:96:8f:40:7d:85:e0:61:b2:02:55:4f: 0e:a6:32:fb:d7:ae:00:81:30:d4:11:c3:b4:6f:0c: fd:26:0e:35:1e:2c:ba:f8:9e:99:33:5f:4a:f9:6e: cb:fd:88:48:a7:98:57:55:32:40:05:cb:cc:eb:b6: 91:70:6a:36:a1:19:e9:85:bf:bc:68:63:d9:70:d4: 5b:1a:b6:e0:02:33:ce:cf:e6:1b:3d:d7:89:3b:5a: 3b:23:ab:24:48:6f:f9:09:ef:fe:57:81:db:12:2f: 68:67:4a:c4:83:aa:4c:a5:fa:fc:ac:73:d2:b4:a7: 6e:83:aa:46:e0:5f:14:52:de:d6:a0:df:ce:c2:2d: fd:5e:74:ae:f6:c8:66:05:6c:4d:8b:03:3a:ba:49: 3c:b7:8a:31:75:35:b9:1f:c7:5c:68:e4:04:ed:f4: fc:0e:97:44:55:ab:30:f5:3c:05:64:b8:b6:b6:12: 76:be:32:50:4d:9a:90:50:c2:db:b2:40:6c:5d:b2: 93:75:71:91:86:52:9f:14:45:20:83:fd:b2:cd:be: 0e:30:87:4f:b8:d6:64:28:71:94:5a:0e:f5:7f:f9: a8:29:4f:6e:ee:1e:18:09:8e:ea:a7:e4:9b:43:bd: bf:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:32:C2:43:EA:BC:FD:FD:F8:F4:9C:CF:FD:CC:9D:E5:58:AF:F5:1C X509v3 Authority Key Identifier: keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fd:10:69:8b:00:e4:b7:d0:4e:df:5d:7c:e7:92:bb:b4:5e: de:bb:f3:c1:1a:a1:69:7f:7c:ea:53:0f:25:4a:0f:42:37:96: f5:a7:b7:3c:9c:de:da:ec:b0:c4:ff:00:c1:52:0c:31:5b:9d: 7d:0a:b3:75:1f:4a:70:a7:7a:c0:f7:32:7c:5f:df:b1:d2:c1: 71:99:16:b0:05:7a:3a:3e:a6:1e:86:ba:9f:d8:0d:70:f4:72: a9:7d:08:cb:81:23:de:ad:c5:43:09:f5:d5:6e:ef:b3:0a:cb: 0c:22:96:b6:cf:fa:f2:d5:00:64:2e:ca:a9:50:19:66:3e:b9: f3:a2:8a:42:cf:dc:ec:30:5d:9d:63:c7:01:d6:7f:74:20:4f: 09:51:a9:36:fc:03:4c:53:28:4d:2c:43:3b:7b:8b:33:a4:7f: c8:0d:e8:b4:f1:b5:b1:ab:cc:c7:41:64:b9:4f:3b:e2:16:28: a3:20:09:3b:5a:9b:00:ff:fc:05:9e:57:f9:9f:17:a0:23:71: b7:c3:86:d7:36:1c:df:74:28:ac:c0:1e:57:04:c1:61:4b:97: c1:1f:46:a3:9d:2e:77:42:49:59:dd:80:7f:77:02:b2:da:d0: 93:90:64:24:e2:a0:df:8d:9a:cc:01:50:70:cd:1b:d6:5c:a9: 7a:ed:94:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/j2Hzwod6fJzJ2/79MFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTc2NzU4NWRjZWY3M2UxZmE5ZjY0ZGE2YzdmMjc2ZWQ4 N2E3MWYwHhcNMjUxMjIwMjMwMDMwWhcNMjUxMjIxMjMwMDMwWjAzMTEwLwYDVQQD Eyg4MTMyYzI0M2VhYmNmZGZkZjhmNDljY2ZmZGNjOWRlNTU4YWZmNTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZnXRGjD1PqqS56PMz4v4yErlo9A fYXgYbICVU8OpjL7164AgTDUEcO0bwz9Jg41Hiy6+J6ZM19K+W7L/YhIp5hXVTJA BcvM67aRcGo2oRnphb+8aGPZcNRbGrbgAjPOz+YbPdeJO1o7I6skSG/5Ce/+V4Hb Ei9oZ0rEg6pMpfr8rHPStKdug6pG4F8UUt7WoN/Owi39XnSu9shmBWxNiwM6ukk8 t4oxdTW5H8dcaOQE7fT8DpdEVasw9TwFZLi2thJ2vjJQTZqQUMLbskBsXbKTdXGR hlKfFEUgg/2yzb4OMIdPuNZkKHGUWg71f/moKU9u7h4YCY7qp+SbQ72/rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIEywkPqvP39+PScz/3MneVYr/UcMB8GA1UdIwQY MBaAFBaXZ1hdzvc+H6n2TabH8nbth6cfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAt NDdiNjMwOTUzYzUwLzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAtNDdiNjMwOTUzYzUw LzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApv0QaYsA 5LfQTt9dfOeSu7Re3rvzwRqhaX986lMPJUoPQjeW9ae3PJze2uywxP8AwVIMMVud fQqzdR9KcKd6wPcyfF/fsdLBcZkWsAV6Oj6mHoa6n9gNcPRyqX0Iy4Ej3q3FQwn1 1W7vswrLDCKWts/68tUAZC7KqVAZZj6586KKQs/c7DBdnWPHAdZ/dCBPCVGpNvwD TFMoTSxDO3uLM6R/yA3otPG1savMx0FkuU874hYooyAJO1qbAP/8BZ5X+Z8XoCNx t8OG1zYc33QorMAeVwTBYUuXwR9Go50ud0JJWd2Af3cCstrQk5BkJOKg342azAFQ cM0b1lypeu2UDw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:12 2025 by rpki-client