This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json) Hash identifier: 69aAHKSRiNxTL1dTt101cMaqOvqRJNR+CtHpWpJLZkw= Subject key identifier: 85:CB:80:8B:C1:56:94:9B:25:D1:5B:39:96:AC:42:21:9B:F8:DB:65 Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c Certificate serial: 019B37FC3CB3834F482947AAE422EF4E3D86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft Manifest number: 16F1 Signing time: Fri 19 Dec 2025 19:00:36 +0000 Manifest this update: Fri 19 Dec 2025 19:00:36 +0000 Manifest next update: Sat 20 Dec 2025 19:00:36 +0000 Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: oOastpxO+c5+45xr4656lktokRXCXOHR6bPGOlfWLgs=) 2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:3c:b3:83:4f:48:29:47:aa:e4:22:ef:4e:3d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c Validity Not Before: Dec 19 19:00:36 2025 GMT Not After : Dec 20 19:00:36 2025 GMT Subject: CN=85cb808bc156949b25d15b3996ac42219bf8db65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:dd:e3:4b:db:58:83:55:b7:ae:9a:38:1c:34: 55:24:de:a9:92:65:ce:58:22:de:44:54:c2:7b:8f: fa:d4:5d:12:24:62:b5:47:bb:4c:52:d2:d3:a2:3f: 9f:bf:21:84:5b:eb:5b:2c:dc:3c:be:dc:8a:45:1d: 73:dc:03:4a:20:1f:8e:0c:cd:d0:7a:2c:79:73:bc: 42:ea:9f:01:54:51:59:00:ad:7f:e5:3d:71:46:e6: 4b:3c:ea:c3:19:5b:e3:8e:6a:13:46:be:17:b3:bb: 99:d6:45:fa:6a:a9:25:7e:ef:5e:c1:38:fc:c9:4e: 51:fe:e1:b3:3f:0b:32:6e:b9:c9:50:4b:46:10:e6: 0f:87:c2:79:04:6c:2f:7c:62:60:c5:90:de:e8:11: 57:09:47:6b:f2:70:02:c0:66:60:5b:cb:81:c8:56: b2:fb:33:12:ce:8c:ed:dc:68:b7:46:85:6a:d1:0d: 9e:40:83:fe:62:ac:99:d1:af:7e:e6:95:70:c5:91: 62:6d:21:8d:00:5a:53:41:f2:14:67:09:1d:36:76: 63:78:c5:f2:51:af:b9:02:75:06:c5:8f:ec:0d:bb: a5:7c:3e:22:54:c7:9c:ae:33:1d:ac:76:2a:b1:19: 55:13:98:a5:39:6c:06:d9:0d:d7:25:f3:9c:7d:eb: 95:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CB:80:8B:C1:56:94:9B:25:D1:5B:39:96:AC:42:21:9B:F8:DB:65 X509v3 Authority Key Identifier: keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:25:c1:17:9b:21:23:25:70:c6:fc:33:48:77:70:c5:0a:cb: 89:38:79:1c:b4:55:8c:80:05:6c:0d:fa:f3:d0:04:dc:f6:6c: 76:45:e9:32:a0:96:26:02:90:cd:93:d2:88:8f:cb:cc:07:fd: a1:44:5a:dd:63:33:82:72:98:1a:83:8c:3a:3a:e5:0e:0c:7e: 6d:83:6b:ff:8f:c2:e5:8e:da:8d:42:1d:9a:78:f1:8c:b3:14: b3:c1:34:17:67:31:a4:f2:7e:9b:7f:e6:b0:b3:4c:10:67:b6: 08:26:bb:60:60:62:da:de:38:c9:54:da:ab:4f:36:b5:12:82: 55:ab:4c:50:c9:9d:cc:0c:21:fb:81:3c:c1:73:56:ca:77:0c: b5:86:52:75:57:70:b3:1d:a4:83:7b:1c:41:44:68:3b:d7:e0: 73:15:98:b2:e0:63:b5:d4:b0:f4:09:87:5f:e4:62:27:2e:86: 1c:d0:69:a7:46:76:7a:46:36:2b:8f:ed:c6:13:56:6c:e4:a2: d6:ee:94:de:dd:b4:64:4a:94:f4:98:cc:83:df:7b:99:c2:67: f5:4d:38:bd:74:00:7f:76:21:1d:00:3d:68:cf:74:66:c2:3a: fe:aa:6f:37:2d:c3:98:97:c3:bf:72:8c:b1:f2:4c:b9:d0:67: fd:0b:44:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/Dyzg09IKUeq5CLvTj2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5 NGU0OWMwHhcNMjUxMjE5MTkwMDM2WhcNMjUxMjIwMTkwMDM2WjAzMTEwLwYDVQQD Eyg4NWNiODA4YmMxNTY5NDliMjVkMTViMzk5NmFjNDIyMTliZjhkYjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA293jS9tYg1W3rpo4HDRVJN6pkmXO WCLeRFTCe4/61F0SJGK1R7tMUtLToj+fvyGEW+tbLNw8vtyKRR1z3ANKIB+ODM3Q eix5c7xC6p8BVFFZAK1/5T1xRuZLPOrDGVvjjmoTRr4Xs7uZ1kX6aqklfu9ewTj8 yU5R/uGzPwsybrnJUEtGEOYPh8J5BGwvfGJgxZDe6BFXCUdr8nACwGZgW8uByFay +zMSzozt3Gi3RoVq0Q2eQIP+YqyZ0a9+5pVwxZFibSGNAFpTQfIUZwkdNnZjeMXy Ua+5AnUGxY/sDbulfD4iVMecrjMdrHYqsRlVE5ilOWwG2Q3XJfOcfeuVnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXLgIvBVpSbJdFbOZasQiGb+NtlMB8GA1UdIwQY MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyXBF5sh IyVwxvwzSHdwxQrLiTh5HLRVjIAFbA3689AE3PZsdkXpMqCWJgKQzZPSiI/LzAf9 oURa3WMzgnKYGoOMOjrlDgx+bYNr/4/C5Y7ajUIdmnjxjLMUs8E0F2cxpPJ+m3/m sLNMEGe2CCa7YGBi2t44yVTaq082tRKCVatMUMmdzAwh+4E8wXNWyncMtYZSdVdw sx2kg3scQURoO9fgcxWYsuBjtdSw9AmHX+RiJy6GHNBpp0Z2ekY2K4/txhNWbOSi 1u6U3t20ZEqU9JjMg997mcJn9U04vXQAf3YhHQA9aM90ZsI6/qpvNy3DmJfDv3KM sfJMudBn/QtE7w== -----END CERTIFICATE-----Generated at Fri Dec 19 20:09:15 2025 by rpki-client