This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json) Hash identifier: ZXTJYQefitGKBLPH01/PhZ40UKEkJUX3Y8As6x2L9Cg= Subject key identifier: 5B:14:94:21:BF:38:E5:A1:AF:EA:DE:A3:50:BB:7B:CE:19:15:04:57 Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019B563D9E31D856936B6330478214A77EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 16:00:37 +0000 Manifest this update: Thu 25 Dec 2025 16:00:37 +0000 Manifest next update: Fri 26 Dec 2025 16:00:37 +0000 Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: n37NNTN+fjkpl6GPDyNtJK/+HOMgRoNsr8fDSHd5HgA=) 2: wFxMftMrQqOgNqLanUvVrEPuk0E.roa (hash: Kt7E8p9gxrWDn7h3MqNJ+mao+upazAnAmbSkQF2stto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:3d:9e:31:d8:56:93:6b:63:30:47:82:14:a7:7e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Dec 25 16:00:37 2025 GMT Not After : Dec 26 16:00:37 2025 GMT Subject: CN=5b149421bf38e5a1afeadea350bb7bce19150457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:59:8b:4e:6c:33:f8:fd:63:a6:1b:8e:dc:32: bf:3b:32:61:ed:f3:fc:20:22:54:2e:4c:e6:ce:7a: 7e:8f:7e:c1:3e:36:53:44:96:7d:21:78:91:e5:60: 32:7a:68:bd:4d:77:f3:36:90:28:2f:e4:79:78:95: 41:cb:70:c5:4b:d8:e7:86:87:b1:82:0d:6e:a2:e6: 2e:82:19:82:a2:26:0f:77:41:eb:5b:a9:12:90:1b: fa:1f:17:fc:52:a8:c6:a4:7c:b7:3e:7f:0a:0f:85: 7f:d1:16:50:0b:81:3f:6b:6d:1d:3d:28:3e:b3:6d: 0c:e9:d9:7d:c6:b5:dc:ed:f9:94:ff:d2:fa:13:8d: 98:f7:88:4b:7d:7a:a2:07:05:64:fe:f5:8e:0b:6a: cd:1d:d5:c2:82:9e:52:e4:03:3a:9b:34:c9:67:ed: b2:54:ce:55:28:f8:8a:11:2c:8e:75:38:59:e2:45: 67:56:5b:38:72:a8:82:e9:11:ca:f8:95:7a:24:e0: 12:54:00:f5:c7:65:44:64:10:57:b9:d6:f2:e3:3f: 20:0c:a7:db:3b:c3:0b:1a:bf:41:02:e1:b4:4b:de: a7:0e:00:d3:c5:7f:a7:7a:12:09:af:6a:15:11:6c: 17:bb:e2:09:2e:84:98:5e:62:a5:21:4a:68:42:8d: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:14:94:21:BF:38:E5:A1:AF:EA:DE:A3:50:BB:7B:CE:19:15:04:57 X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:5f:ee:2a:25:13:e0:00:0e:96:cf:2b:d5:30:8d:63:2e:8c: 11:a8:08:d1:bd:eb:48:46:5a:fd:e3:e5:49:3e:46:65:bd:d3: 29:cf:ff:17:64:18:dd:3f:75:2f:86:06:13:d3:c1:b3:bf:0e: 2c:d0:cf:3d:0b:fc:a1:91:57:68:95:d5:0e:be:6b:54:a9:2b: 6b:8e:6a:6c:6e:8c:07:41:bc:77:d2:16:53:fc:1b:44:e6:c7: 93:5e:17:e0:48:a2:98:d7:43:e7:86:bb:31:a5:24:54:08:f7: 1c:da:a5:9f:61:7c:45:a7:01:5f:ca:14:24:dc:5c:13:c3:34: 72:c3:1b:94:a9:9e:44:f2:c4:92:38:a1:ad:fd:96:33:4a:5f: f3:05:45:c6:6e:6e:7b:62:9c:9a:86:0b:36:41:22:fb:4c:4d: 61:52:db:a0:ae:72:f0:13:78:26:d2:02:3b:45:d9:63:5d:b9: d9:4d:ae:61:5e:f0:f0:a3:82:be:b7:ed:f4:36:89:cd:64:48: 31:e4:86:92:fc:7a:6b:9f:c0:d3:2a:08:c6:30:d7:c3:47:37: 93:b1:10:c4:47:4f:0d:b3:92:f5:0e:85:cd:3d:6d:3f:0e:5c: 73:74:d2:be:03:e9:1d:78:f7:75:f4:ff:2b:1c:bb:b8:29:d6: 16:ac:05:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWPZ4x2FaTa2MwR4IUp36rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjUxMjI1MTYwMDM3WhcNMjUxMjI2MTYwMDM3WjAzMTEwLwYDVQQD Eyg1YjE0OTQyMWJmMzhlNWExYWZlYWRlYTM1MGJiN2JjZTE5MTUwNDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVmLTmwz+P1jphuO3DK/OzJh7fP8 ICJULkzmznp+j37BPjZTRJZ9IXiR5WAyemi9TXfzNpAoL+R5eJVBy3DFS9jnhoex gg1uouYughmCoiYPd0HrW6kSkBv6Hxf8UqjGpHy3Pn8KD4V/0RZQC4E/a20dPSg+ s20M6dl9xrXc7fmU/9L6E42Y94hLfXqiBwVk/vWOC2rNHdXCgp5S5AM6mzTJZ+2y VM5VKPiKESyOdThZ4kVnVls4cqiC6RHK+JV6JOASVAD1x2VEZBBXudby4z8gDKfb O8MLGr9BAuG0S96nDgDTxX+nehIJr2oVEWwXu+IJLoSYXmKlIUpoQo1/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsUlCG/OOWhr+reo1C7e84ZFQRXMB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARl/uKiUT 4AAOls8r1TCNYy6MEagI0b3rSEZa/ePlST5GZb3TKc//F2QY3T91L4YGE9PBs78O LNDPPQv8oZFXaJXVDr5rVKkra45qbG6MB0G8d9IWU/wbRObHk14X4EiimNdD54a7 MaUkVAj3HNqln2F8RacBX8oUJNxcE8M0csMblKmeRPLEkjihrf2WM0pf8wVFxm5u e2KcmoYLNkEi+0xNYVLboK5y8BN4JtICO0XZY1252U2uYV7w8KOCvrft9DaJzWRI MeSGkvx6a5/A0yoIxjDXw0c3k7EQxEdPDbOS9Q6FzT1tPw5cc3TSvgPpHXj3dfT/ Kxy7uCnWFqwFIA== -----END CERTIFICATE-----Generated at Thu Dec 25 22:41:25 2025 by rpki-client