This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft File: FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json) Hash identifier: lTzqG2mnlJ6B9t3ccDymGJTPObebdELlO1BQwSp1uUw= Subject key identifier: 0F:08:3D:4C:14:24:2F:34:87:98:9C:B4:7E:51:70:AF:05:36:73:AB Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 Certificate issuer: /CN=15c18a2908cebd9085e01266bb02fb8af2247735 Certificate serial: 019B631EACF2F4EA936013F1A640CF92EFEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft Manifest number: 0251 Signing time: Sun 28 Dec 2025 04:01:53 +0000 Manifest this update: Sun 28 Dec 2025 04:01:53 +0000 Manifest next update: Mon 29 Dec 2025 04:01:53 +0000 Files and hashes: 1: 2KNjtYfkkvpIBPVL-Dk7JZfM4jU.roa (hash: YZgrPPEN8zGqhO8cwF6VGe00Dd89Opm5ALHWcKmIHgM=) 2: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: siLYANDUx3DU8zBq9Z9BSWq+zrfPyAlzhaFGV4rbuKY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:ac:f2:f4:ea:93:60:13:f1:a6:40:cf:92:ef:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735 Validity Not Before: Dec 28 04:01:53 2025 GMT Not After : Dec 29 04:01:53 2025 GMT Subject: CN=0f083d4c14242f3487989cb47e5170af053673ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:c5:31:b2:ac:7e:c2:f0:ca:bd:91:a3:c9: e0:53:ac:de:63:c1:21:c6:20:f0:d6:04:39:d8:5e: d9:83:6b:62:bd:b2:f4:e1:bf:ad:5a:d9:8c:fd:a9: 5c:a1:57:82:ba:b8:c4:0e:97:fb:cb:ee:62:55:cd: 43:64:ce:6b:ef:53:6b:a2:be:6a:bb:84:99:26:b4: 03:f7:65:10:2f:4e:98:59:9a:c1:7e:25:44:c4:0e: 9f:63:79:c7:79:a7:58:c1:0f:c4:3b:a0:08:dd:b6: 1c:7c:a5:e7:37:1d:00:56:f2:a7:18:9d:18:f6:1b: e2:93:da:dd:10:87:8f:66:5a:6d:44:1f:63:f5:74: d3:6d:35:fc:7c:bc:25:55:83:f8:81:97:76:7f:95: 41:89:5c:0d:b9:39:07:c4:9e:5f:88:3e:57:19:79: 0a:43:ff:a9:0d:05:3e:c3:9e:09:49:b8:16:e6:b5: 00:6c:fb:87:66:63:c5:e0:60:b7:94:b3:e3:ce:0d: 05:63:d6:17:54:6e:2b:f6:10:b6:fb:29:fd:24:79: 38:2f:b7:60:2c:bf:e6:58:b7:cd:ec:f3:0a:84:a9: 8f:c8:f2:c8:5a:ed:ce:a1:09:f1:43:ed:a3:b4:81: 61:0a:39:80:82:20:5b:47:32:d8:ca:ca:d4:f8:35: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:08:3D:4C:14:24:2F:34:87:98:9C:B4:7E:51:70:AF:05:36:73:AB X509v3 Authority Key Identifier: keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:b6:39:a1:27:0d:dc:48:f7:a0:d8:0f:da:17:14:b3:fd:d9: e2:7e:9b:5f:b7:24:5e:63:92:1a:1b:34:55:5a:c4:88:14:4e: 3c:42:8b:01:5f:12:dd:b0:04:f9:5f:a9:cb:ea:84:12:c1:e8: c9:af:bd:85:b0:d2:f3:ac:f2:e5:cf:5b:f4:1d:9a:6f:c6:67: 2a:5a:7d:c3:5e:5f:aa:e7:9e:ad:59:16:95:c0:a3:c2:7f:aa: d2:ee:14:15:b4:02:6d:fa:92:d5:0d:f7:5b:95:c4:0d:50:3d: 8b:6d:fc:fc:d7:96:8e:44:bd:27:77:4c:1a:d9:40:8f:f3:6f: ca:c3:4d:10:20:b9:6a:66:c3:43:7f:c2:81:50:43:10:91:6b: 56:f5:2a:41:83:02:f2:65:05:f2:9e:3a:da:02:24:c9:1f:94: c0:06:dc:9f:48:34:42:5b:d8:ce:d5:3b:0c:23:be:3a:44:f5: 76:80:76:26:6b:2e:2f:b0:21:91:b7:56:a5:fd:29:53:a1:1b: 77:6d:7a:68:b4:b5:1d:cd:72:1b:65:8e:5d:2f:e7:54:a5:41: c3:b6:c5:76:74:22:9d:98:fe:33:8e:b1:87:05:bd:dc:4e:ec: bb:58:20:0f:51:68:d6:88:5a:6d:83:8a:03:9c:61:fa:ab:8c: ad:d1:00:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHqzy9OqTYBPxpkDPku/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzE4YTI5MDhjZWJkOTA4NWUwMTI2NmJiMDJmYjhhZjIy NDc3MzUwHhcNMjUxMjI4MDQwMTUzWhcNMjUxMjI5MDQwMTUzWjAzMTEwLwYDVQQD EygwZjA4M2Q0YzE0MjQyZjM0ODc5ODljYjQ3ZTUxNzBhZjA1MzY3M2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRPFMbKsfsLwyr2Ro8ngU6zeY8Eh xiDw1gQ52F7Zg2tivbL04b+tWtmM/alcoVeCurjEDpf7y+5iVc1DZM5r71Nror5q u4SZJrQD92UQL06YWZrBfiVExA6fY3nHeadYwQ/EO6AI3bYcfKXnNx0AVvKnGJ0Y 9hvik9rdEIePZlptRB9j9XTTbTX8fLwlVYP4gZd2f5VBiVwNuTkHxJ5fiD5XGXkK Q/+pDQU+w54JSbgW5rUAbPuHZmPF4GC3lLPjzg0FY9YXVG4r9hC2+yn9JHk4L7dg LL/mWLfN7PMKhKmPyPLIWu3OoQnxQ+2jtIFhCjmAgiBbRzLYysrU+DV4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8IPUwUJC80h5ictH5RcK8FNnOrMB8GA1UdIwQY MBaAFBXBiikIzr2QheASZrsC+4ryJHc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5Mzgt N2U1M2QxYzU1OGQ5LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC82ZjgxNTctOGQ3Ni00ZDNlLTg5MzgtN2U1M2QxYzU1OGQ5 LzEvRmNHS0tRak92WkNGNEJKbXV3TDdpdklrZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbY5oScN 3Ej3oNgP2hcUs/3Z4n6bX7ckXmOSGhs0VVrEiBROPEKLAV8S3bAE+V+py+qEEsHo ya+9hbDS86zy5c9b9B2ab8ZnKlp9w15fqueerVkWlcCjwn+q0u4UFbQCbfqS1Q33 W5XEDVA9i238/NeWjkS9J3dMGtlAj/NvysNNECC5ambDQ3/CgVBDEJFrVvUqQYMC 8mUF8p462gIkyR+UwAbcn0g0QlvYztU7DCO+OkT1doB2JmsuL7AhkbdWpf0pU6Eb d216aLS1Hc1yG2WOXS/nVKVBw7bFdnQinZj+M46xhwW93E7su1ggD1Fo1ohabYOK A5xh+quMrdEAHQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:16 2025 by rpki-client