This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft File: FOEoPa4LC5l4ZyZcssAIPFETbto.mft (raw, json) Hash identifier: cG0GoDWb9bqEfU5e4o//myOkmRVCYOFoulYdt2/2ufU= Subject key identifier: 03:54:7B:A1:B8:71:AC:2B:7D:99:C4:3D:B0:3F:7A:B4:05:E8:12:00 Authority key identifier: 14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA Certificate issuer: /CN=14e1283dae0b0b997867265cb2c0083c51136eda Certificate serial: 019B41A46881D12904D9BFEA31A7036EDB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft Manifest number: A2 Signing time: Sun 21 Dec 2025 16:00:52 +0000 Manifest this update: Sun 21 Dec 2025 16:00:52 +0000 Manifest next update: Mon 22 Dec 2025 16:00:52 +0000 Files and hashes: 1: FOEoPa4LC5l4ZyZcssAIPFETbto.crl (hash: 9z9qzT+8GQgf/vsl8U9cZKkmZCnaPE11pXp1ViCa56s=) 2: YJnryPyjSM9m2GAkfptlcJ6VzAs.roa (hash: ycoIEs6bEZoIpBaIl7C3dtXJvolOHbKG/ZycQeSD1RA=) 3: _PTsrjA4Vx4ohcRmFglFLj69Gbk.roa (hash: qHBktGp3NlHLcFdGjmDdlgxPr6r0hRT3TQKlIEYQtgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:68:81:d1:29:04:d9:bf:ea:31:a7:03:6e:db:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e1283dae0b0b997867265cb2c0083c51136eda Validity Not Before: Dec 21 16:00:52 2025 GMT Not After : Dec 22 16:00:52 2025 GMT Subject: CN=03547ba1b871ac2b7d99c43db03f7ab405e81200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bb:3d:f3:99:b3:52:49:5f:21:df:f3:eb:d3: e9:a3:fd:c2:f4:b8:85:d7:a1:4c:c9:9a:eb:4f:e3: 24:be:d8:19:76:24:f7:7b:ff:23:f2:0a:77:32:9d: 4b:9f:c3:18:4a:1f:38:f2:8d:44:aa:38:24:b5:73: 22:5d:54:09:53:f8:76:af:64:1e:9c:31:c7:1e:f1: 9a:23:31:e0:b6:fb:18:1e:ca:ac:a1:c3:1e:2b:dc: e5:f7:bb:15:59:44:f8:41:c6:69:9a:5c:41:75:5b: b3:c6:b8:ce:ed:c0:17:58:8e:e4:59:51:31:72:51: 98:81:2d:52:36:15:01:b6:a6:19:66:ea:65:d7:69: db:27:44:d1:a9:c6:ba:11:61:4c:c2:b0:65:14:53: a4:73:6d:55:39:3f:54:a5:81:03:66:77:75:00:13: 05:ff:86:4b:7b:4a:75:3c:99:74:f3:4c:08:e4:51: 9c:9d:6a:24:0b:e7:66:c0:61:fd:9f:21:79:45:52: ce:bd:99:74:ee:df:3f:82:2a:52:91:84:85:86:ee: e4:9b:37:c4:91:b8:fc:90:7e:ae:ad:70:ee:f2:16: 08:c5:0c:7b:ea:7d:4b:e6:b9:d2:00:5e:3e:f1:51: 46:0e:f5:0f:4d:76:60:f7:a7:bd:8a:e1:ef:dc:ed: 18:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:54:7B:A1:B8:71:AC:2B:7D:99:C4:3D:B0:3F:7A:B4:05:E8:12:00 X509v3 Authority Key Identifier: keyid:14:E1:28:3D:AE:0B:0B:99:78:67:26:5C:B2:C0:08:3C:51:13:6E:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOEoPa4LC5l4ZyZcssAIPFETbto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/e66571-a0c4-4ac0-83ae-80411e917538/1/FOEoPa4LC5l4ZyZcssAIPFETbto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ae:b3:30:a4:c8:47:55:a8:ec:21:28:e2:56:07:9b:a5:58: 06:be:d5:62:77:85:8d:71:c7:4f:1d:5d:f4:25:72:bb:23:84: 72:69:50:e4:41:88:d7:9e:69:fd:91:fd:43:a8:71:7f:bf:e1: 9d:88:b8:81:f9:53:87:36:3a:cc:9e:54:3e:68:44:06:86:05: 1a:ad:9a:3f:36:b4:b2:d1:98:29:0a:c4:b9:43:0f:a5:39:f5: 6f:22:f6:03:40:06:f0:9d:35:e8:03:41:50:41:98:14:81:a0: 74:76:0c:21:e2:99:80:ec:fe:63:2b:fc:49:02:c9:4c:aa:9c: f3:19:76:5a:14:b7:4d:85:62:70:a1:f0:9c:dd:f5:cc:67:57: 7e:d2:40:d8:29:a5:e4:e9:c5:d8:be:cd:92:39:ca:c7:cd:7e: 65:f9:ab:cc:e1:6a:55:f1:35:b1:39:ad:1a:04:b4:2a:d6:49: b1:7a:96:94:27:c7:6e:e8:dc:60:74:8b:89:4b:f5:06:60:11: 77:50:7d:95:78:c0:85:e5:ad:b3:76:9e:d0:d0:8c:7d:1a:4e: e9:d7:76:9d:13:4c:36:52:5c:20:cd:88:df:b3:ea:43:85:f5: ee:4f:62:64:93:5e:8c:77:bb:91:71:f7:56:00:08:00:c7:f2: 9c:8b:26:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpGiB0SkE2b/qMacDbtsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTEyODNkYWUwYjBiOTk3ODY3MjY1Y2IyYzAwODNjNTEx MzZlZGEwHhcNMjUxMjIxMTYwMDUyWhcNMjUxMjIyMTYwMDUyWjAzMTEwLwYDVQQD EygwMzU0N2JhMWI4NzFhYzJiN2Q5OWM0M2RiMDNmN2FiNDA1ZTgxMjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLs985mzUklfId/z69Ppo/3C9LiF 16FMyZrrT+MkvtgZdiT3e/8j8gp3Mp1Ln8MYSh848o1EqjgktXMiXVQJU/h2r2Qe nDHHHvGaIzHgtvsYHsqsocMeK9zl97sVWUT4QcZpmlxBdVuzxrjO7cAXWI7kWVEx clGYgS1SNhUBtqYZZupl12nbJ0TRqca6EWFMwrBlFFOkc21VOT9UpYEDZnd1ABMF /4ZLe0p1PJl080wI5FGcnWokC+dmwGH9nyF5RVLOvZl07t8/gipSkYSFhu7kmzfE kbj8kH6urXDu8hYIxQx76n1L5rnSAF4+8VFGDvUPTXZg96e9iuHv3O0Y0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANUe6G4cawrfZnEPbA/erQF6BIAMB8GA1UdIwQY MBaAFBThKD2uCwuZeGcmXLLACDxRE27aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUt ODA0MTFlOTE3NTM4LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9lNjY1NzEtYTBjNC00YWMwLTgzYWUtODA0MTFlOTE3NTM4 LzEvRk9Fb1BhNExDNWw0WnlaY3NzQUlQRkVUYnRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq6zMKTI R1Wo7CEo4lYHm6VYBr7VYneFjXHHTx1d9CVyuyOEcmlQ5EGI155p/ZH9Q6hxf7/h nYi4gflThzY6zJ5UPmhEBoYFGq2aPza0stGYKQrEuUMPpTn1byL2A0AG8J016ANB UEGYFIGgdHYMIeKZgOz+Yyv8SQLJTKqc8xl2WhS3TYVicKHwnN31zGdXftJA2Cml 5OnF2L7NkjnKx81+ZfmrzOFqVfE1sTmtGgS0KtZJsXqWlCfHbujcYHSLiUv1BmAR d1B9lXjAheWts3ae0NCMfRpO6dd2nRNMNlJcIM2I37PqQ4X17k9iZJNejHe7kXH3 VgAIAMfynIsmSg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:31:11 2025 by rpki-client