This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft File: FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json) Hash identifier: cSKNZ38crtRIWThWaZ6jQlGxKwj7J7SyETpb29ZFG0Q= Subject key identifier: FB:12:6B:97:6E:D7:D1:47:47:1A:02:75:0F:A6:52:A6:D8:CB:11:4D Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 Certificate issuer: /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Certificate serial: 019B3E6DA927CBD8CF37593DDD4DF66B1CCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft Manifest number: 5E Signing time: Sun 21 Dec 2025 01:02:12 +0000 Manifest this update: Sun 21 Dec 2025 01:02:12 +0000 Manifest next update: Mon 22 Dec 2025 01:02:12 +0000 Files and hashes: 1: 9TfeR_30HdflGM3xsr3vdtt0wxc.roa (hash: I0ktpU2S4wkVyCed3envFEYM53nS3HQyZq29EYOjDpg=) 2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: PJDuSg0RN70gmDSjQDDmabmZtEv8b7AsIbWO7qIbyRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:a9:27:cb:d8:cf:37:59:3d:dd:4d:f6:6b:1c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4 Validity Not Before: Dec 21 01:02:12 2025 GMT Not After : Dec 22 01:02:12 2025 GMT Subject: CN=fb126b976ed7d147471a02750fa652a6d8cb114d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:0c:ff:49:c2:4e:54:b1:34:74:a0:4b:ce: 97:8c:74:21:97:e5:06:39:0a:b2:fa:40:5e:e0:a6: 73:75:5c:28:3d:e7:22:f3:48:4e:1d:b6:2a:0b:1e: 69:ce:26:b8:17:a7:25:a7:dc:c4:c7:be:f2:46:30: 45:a6:50:e0:de:f8:e7:34:c0:23:e2:01:6f:78:c2: 35:63:26:a6:b7:b9:59:6c:97:02:b8:0a:c4:22:7d: 93:cb:89:ba:a6:aa:6e:c8:58:6b:3a:e2:cd:a5:29: a3:6c:7b:1d:99:fd:cf:af:73:6c:51:2b:79:a8:62: 6b:ff:8d:a5:ff:f5:3d:d4:5a:39:d1:1b:5e:e6:f9: 24:36:ac:b6:c0:5f:8f:90:88:fe:37:5c:5e:f4:da: ec:5d:98:7e:82:00:f1:1d:d5:cf:b5:58:56:50:26: 91:7d:36:17:31:b4:1b:f3:33:f1:a8:8b:d2:36:ce: 78:87:bf:b9:88:c8:cf:9d:0c:56:c0:c1:c2:25:e2: bd:a1:6f:5e:51:85:88:c7:ed:45:1e:9b:b4:1b:90: ad:0b:d4:e2:5b:cc:8c:10:36:88:f4:6c:dc:f2:15: 8d:12:7f:6d:49:99:30:b8:b9:2c:57:9a:d8:5f:12: 16:33:5b:01:6e:de:b3:ef:f1:4b:cd:8a:22:15:47: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:12:6B:97:6E:D7:D1:47:47:1A:02:75:0F:A6:52:A6:D8:CB:11:4D X509v3 Authority Key Identifier: keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:22:e2:b7:92:1f:3c:b0:c4:f8:46:44:42:9f:1f:05:cb:81: ec:dc:37:a0:11:ba:c2:43:3e:88:4e:0f:8f:eb:de:3c:bf:97: ab:b7:36:be:fd:2b:05:fa:b9:2e:d4:98:4c:71:81:4b:d2:20: eb:48:61:65:84:e3:57:ee:12:93:c7:ad:ed:1c:8a:0c:97:e1: 40:bd:e9:d9:0d:46:58:c2:25:6c:f7:98:38:8c:05:14:df:0c: b3:84:3b:e4:e0:11:62:14:d3:c7:48:f0:a8:4f:c9:22:07:64: b4:1f:79:3c:e3:b1:b4:3e:a1:5a:54:c9:fa:71:8e:d4:4f:27: 98:c8:1b:8d:1d:63:01:85:a8:df:06:2e:78:f8:a9:4b:5a:0b: 46:ae:b7:0a:2e:32:dc:2c:17:40:74:f8:88:17:9b:d7:c0:7e: cd:9d:ac:8f:f5:8d:90:6c:f8:bd:5b:71:bc:10:44:5d:44:5d: 72:b6:09:cb:e3:c5:1c:e4:ee:75:ef:f2:0e:f8:29:55:32:e4: b5:62:8d:56:12:7f:ae:d9:51:6f:b6:c7:17:8e:a7:d0:7b:45: 3d:37:b1:2a:ea:8f:d9:11:f2:7b:46:7d:f0:c1:74:c2:d6:ba: ac:49:e8:3a:d5:18:d3:95:d3:c4:c3:37:d8:a2:b1:86:0a:fa: 77:35:7b:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bakny9jPN1k93U32axzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0 YjYyYjQwHhcNMjUxMjIxMDEwMjEyWhcNMjUxMjIyMDEwMjEyWjAzMTEwLwYDVQQD EyhmYjEyNmI5NzZlZDdkMTQ3NDcxYTAyNzUwZmE2NTJhNmQ4Y2IxMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYEM/0nCTlSxNHSgS86XjHQhl+UG OQqy+kBe4KZzdVwoPeci80hOHbYqCx5pzia4F6clp9zEx77yRjBFplDg3vjnNMAj 4gFveMI1Yyamt7lZbJcCuArEIn2Ty4m6pqpuyFhrOuLNpSmjbHsdmf3Pr3NsUSt5 qGJr/42l//U91Fo50Rte5vkkNqy2wF+PkIj+N1xe9NrsXZh+ggDxHdXPtVhWUCaR fTYXMbQb8zPxqIvSNs54h7+5iMjPnQxWwMHCJeK9oW9eUYWIx+1FHpu0G5CtC9Ti W8yMEDaI9Gzc8hWNEn9tSZkwuLksV5rYXxIWM1sBbt6z7/FLzYoiFUf0EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsSa5du19FHRxoCdQ+mUqbYyxFNMB8GA1UdIwQY MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt NTYyNDk4YzY4YTc4LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4 LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiLit5If PLDE+EZEQp8fBcuB7Nw3oBG6wkM+iE4Pj+vePL+Xq7c2vv0rBfq5LtSYTHGBS9Ig 60hhZYTjV+4Sk8et7RyKDJfhQL3p2Q1GWMIlbPeYOIwFFN8Ms4Q75OARYhTTx0jw qE/JIgdktB95POOxtD6hWlTJ+nGO1E8nmMgbjR1jAYWo3wYuePipS1oLRq63Ci4y 3CwXQHT4iBeb18B+zZ2sj/WNkGz4vVtxvBBEXURdcrYJy+PFHOTude/yDvgpVTLk tWKNVhJ/rtlRb7bHF46n0HtFPTexKuqP2RHye0Z98MF0wta6rEnoOtUY05XTxMM3 2KKxhgr6dzV7Mw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:29 2025 by rpki-client