This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft File: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json) Hash identifier: l84ovGLkHy3bgJMt8GW81y0kiH1ukw6p3TGHD5HSYxQ= Subject key identifier: 0C:F8:C7:E2:11:9E:75:F8:97:83:76:CA:12:80:94:A6:E7:06:A3:9E Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D Certificate issuer: /CN=16f91ff671f1de5143aa21a008e26e27946ab85d Certificate serial: 019B3A909F8CE10396466648FFF6D7E88BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 07:01:55 +0000 Manifest this update: Sat 20 Dec 2025 07:01:55 +0000 Manifest next update: Sun 21 Dec 2025 07:01:55 +0000 Files and hashes: 1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: +/poll3ogLJjlLKE4j10WXoMlYzC0BLrk9cifLrXyU0=) 2: Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa (hash: P6IjosmlOiqXveubqIomO6KehA4R0g/PyjiODsr89zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:9f:8c:e1:03:96:46:66:48:ff:f6:d7:e8:8b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d Validity Not Before: Dec 20 07:01:55 2025 GMT Not After : Dec 21 07:01:55 2025 GMT Subject: CN=0cf8c7e2119e75f8978376ca128094a6e706a39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:2c:e9:73:bf:2f:d1:41:b8:e5:b5:04:64: 7f:6a:c4:08:30:2b:58:62:fd:ad:51:34:72:e7:7b: d9:75:a6:8e:5b:5b:d8:b7:13:5a:37:ba:a2:b4:f3: ed:17:0b:7a:b7:fc:2f:7a:f7:1c:71:80:d7:00:7e: aa:1b:2b:d5:3f:1f:9e:41:9e:f7:e5:ec:c3:ba:4a: 2e:01:63:86:aa:07:54:40:b0:64:7a:da:d2:4b:e2: af:fc:fa:db:1f:f0:11:c4:57:c2:37:23:c4:64:1c: 7b:65:0c:62:18:c4:e7:2a:2a:5c:04:2e:74:d7:b9: c7:63:bd:52:c5:ae:57:2b:7e:71:ae:ef:7a:ce:fa: 4d:f2:43:e9:01:ea:74:2c:be:d9:64:c3:77:6c:e8: 93:ba:1c:62:95:25:9c:72:d3:8b:5f:23:0a:b2:20: ba:a7:af:fa:c1:41:95:c1:47:12:1d:b0:ac:ce:2a: 92:dd:23:8e:ba:ee:e4:03:41:df:93:8d:15:ce:c3: 7c:eb:8c:50:e3:19:9d:8d:b3:28:91:f1:72:fd:ec: 94:32:7c:9f:a0:8c:20:1f:7f:8e:7b:7b:db:6f:04: 70:29:cf:a7:57:11:3f:18:96:fc:cc:e7:7a:4f:54: 56:10:bd:cb:ff:d1:ae:4d:d9:4d:57:9a:a3:d3:7a: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F8:C7:E2:11:9E:75:F8:97:83:76:CA:12:80:94:A6:E7:06:A3:9E X509v3 Authority Key Identifier: keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d1:a2:d0:38:ad:35:7d:44:6c:9a:43:c2:a3:22:a8:0a:09: f9:f6:25:28:8c:a9:36:da:74:bf:4c:68:98:ac:2e:cf:3b:21: f1:d6:a7:75:e7:2a:25:4e:ed:a3:b1:12:16:5f:94:c2:11:05: 02:4f:83:c0:f0:d6:61:b7:16:fe:53:9c:99:ed:fc:e9:3a:6e: f0:28:40:01:83:5b:50:7b:55:66:df:34:00:a4:38:76:7c:70: c5:f0:8b:b7:13:85:03:65:a4:ce:20:53:55:94:56:93:43:fa: 50:db:74:6d:7c:48:e8:fb:8b:63:e8:17:41:6c:4e:96:67:9d: d0:2e:af:f6:26:3a:2f:35:a1:a2:43:40:52:b8:df:de:10:8c: cf:0c:f6:04:1c:f2:16:7d:08:2c:08:a9:e4:68:c8:fd:5b:e0: 28:de:70:fe:16:18:95:2b:b6:e6:4d:92:21:00:53:d5:44:4a: 6c:93:e5:6f:02:ee:10:0e:43:01:8a:3d:59:f4:b9:d0:27:70: 8d:a1:1a:86:88:78:bf:2e:e3:e6:9a:48:bd:c8:af:3f:96:5d: 92:48:48:7f:a6:bd:1d:0e:10:af:6d:3a:a5:62:73:dc:9e:60: 4d:0a:f3:ab:ad:72:a0:03:c0:c2:48:b9:55:cc:16:4d:26:18: 3b:28:94:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kJ+M4QOWRmZI//bX6IvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjkxZmY2NzFmMWRlNTE0M2FhMjFhMDA4ZTI2ZTI3OTQ2 YWI4NWQwHhcNMjUxMjIwMDcwMTU1WhcNMjUxMjIxMDcwMTU1WjAzMTEwLwYDVQQD EygwY2Y4YzdlMjExOWU3NWY4OTc4Mzc2Y2ExMjgwOTRhNmU3MDZhMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oIs6XO/L9FBuOW1BGR/asQIMCtY Yv2tUTRy53vZdaaOW1vYtxNaN7qitPPtFwt6t/wvevcccYDXAH6qGyvVPx+eQZ73 5ezDukouAWOGqgdUQLBketrSS+Kv/PrbH/ARxFfCNyPEZBx7ZQxiGMTnKipcBC50 17nHY71Sxa5XK35xru96zvpN8kPpAep0LL7ZZMN3bOiTuhxilSWcctOLXyMKsiC6 p6/6wUGVwUcSHbCsziqS3SOOuu7kA0Hfk40VzsN864xQ4xmdjbMokfFy/eyUMnyf oIwgH3+Oe3vbbwRwKc+nVxE/GJb8zOd6T1RWEL3L/9GuTdlNV5qj03qO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz4x+IRnnX4l4N2yhKAlKbnBqOeMB8GA1UdIwQY MBaAFBb5H/Zx8d5RQ6ohoAjibieUarhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1Zjkt YWE4NWE4YzBhZWMxLzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1ZjktYWE4NWE4YzBhZWMx LzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNGi0Dit NX1EbJpDwqMiqAoJ+fYlKIypNtp0v0xomKwuzzsh8dandecqJU7to7ESFl+UwhEF Ak+DwPDWYbcW/lOcme386Tpu8ChAAYNbUHtVZt80AKQ4dnxwxfCLtxOFA2WkziBT VZRWk0P6UNt0bXxI6PuLY+gXQWxOlmed0C6v9iY6LzWhokNAUrjf3hCMzwz2BBzy Fn0ILAip5GjI/VvgKN5w/hYYlSu25k2SIQBT1URKbJPlbwLuEA5DAYo9WfS50Cdw jaEahoh4vy7j5ppIvcivP5ZdkkhIf6a9HQ4Qr206pWJz3J5gTQrzq61yoAPAwki5 VcwWTSYYOyiUoA== -----END CERTIFICATE-----Generated at Sat Dec 20 10:44:35 2025 by rpki-client