This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json) Hash identifier: 4RpIXcHKFyAwnvAKeZK2SqxY4uTNXdJWbvwHMZZHKNA= Subject key identifier: 50:21:A1:29:9D:51:41:D4:BA:7A:C7:5B:DA:B5:0A:64:AE:1B:EC:FE Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Certificate serial: 019AF12DC1DA5488C9C413061C8A971904C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft Manifest number: 108C Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: dY8PRHODabkygNlq6-JaDEHqZls.asa (hash: wO6s5irr+VwBuwHpzpyaBiPqP7VqY55H1NCOsRyEv68=) 2: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: 49EhjuGwiCkeuPwSPIXXKEOHK0D/n1KChfeXd+Q1HfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c1:da:54:88:c9:c4:13:06:1c:8a:97:19:04:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=5021a1299d5141d4ba7ac75bdab50a64ae1becfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:49:0f:9b:9d:89:79:87:f6:15:81:0d:0d:a5: 4d:a4:a6:73:b5:ea:a9:99:37:ac:5d:fd:4e:93:32: 04:98:86:25:a3:41:cd:0a:d5:e8:f3:38:c1:47:98: 3b:b0:f7:d5:73:a1:75:1d:7a:94:14:bd:e8:1d:07: 4d:70:be:2e:4d:f3:87:f8:42:54:75:a0:84:d8:e7: 48:b6:21:7f:6b:bc:93:0c:62:07:3c:c7:06:e8:b4: ae:77:14:85:1f:1c:d2:46:b2:3f:e7:be:6d:b2:dd: ea:75:fc:f0:80:fe:84:74:b1:47:7e:63:41:1a:be: 74:bc:bf:a0:c7:05:d4:e5:e8:c3:e9:a4:49:a7:fb: c1:06:18:17:e5:2c:81:79:7c:b7:a0:44:f9:0d:21: a3:25:07:38:c3:1e:c2:eb:ec:93:3f:98:ad:22:6b: 60:7e:86:78:35:31:6d:03:86:90:ea:0d:49:08:aa: ca:d0:3f:50:b3:86:67:c5:36:d4:3b:a9:10:c6:bd: 79:aa:1b:a0:6f:48:5b:75:c1:e2:a2:13:fb:4f:72: be:a6:0f:1b:ee:65:81:82:64:df:60:11:4a:03:8b: d4:46:93:ad:b0:92:5c:8a:b1:a6:e4:e4:6b:a7:a9: 78:02:4b:d9:ab:a5:5d:9b:c6:f7:80:eb:4f:9e:3f: 32:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:21:A1:29:9D:51:41:D4:BA:7A:C7:5B:DA:B5:0A:64:AE:1B:EC:FE X509v3 Authority Key Identifier: keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:7c:48:49:30:14:05:dc:7b:b1:0c:52:cc:9f:eb:5b:81:aa: 07:34:4e:ce:e9:4b:1e:59:01:6f:0f:d5:6d:cb:3a:10:42:42: 15:4f:34:37:4a:d3:73:de:e5:51:66:56:26:8e:a1:5c:f0:6c: 35:db:f8:a7:e9:91:5e:68:9f:27:c1:6a:da:ab:b8:4a:d2:69: ee:e5:e7:b6:65:3d:45:93:b9:09:a7:6a:a0:a8:cd:0e:7a:a0: 23:a5:5d:f8:8e:6d:ce:26:99:cf:b0:bb:c9:90:21:be:4a:10: f9:68:88:41:aa:6f:8c:28:2b:ab:98:31:a4:c6:56:9d:14:42: 2d:71:6a:51:01:20:a5:17:0a:ee:14:86:fe:92:c1:ec:0d:c2: b6:7f:00:47:4c:23:e1:7b:3e:86:29:8b:11:94:df:b1:86:c2: 14:3f:0d:39:76:cc:14:60:a9:91:db:64:68:5d:bc:02:8e:3b: 3a:35:8b:03:96:4e:5e:61:65:58:ec:85:8a:66:3b:a4:54:89: 68:07:38:dd:53:89:f5:41:e0:42:f0:82:50:b2:21:69:a2:69: 0c:b7:c7:ad:18:6f:e5:77:1c:ff:95:c7:ec:b9:b2:20:32:b7: 69:7e:f1:1c:ca:09:79:e9:27:8e:98:78:72:2e:69:56:32:90: b0:a1:56:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcHaVIjJxBMGHIqXGQTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1 ZGJiMjQwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD Eyg1MDIxYTEyOTlkNTE0MWQ0YmE3YWM3NWJkYWI1MGE2NGFlMWJlY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEkPm52JeYf2FYENDaVNpKZzteqp mTesXf1OkzIEmIYlo0HNCtXo8zjBR5g7sPfVc6F1HXqUFL3oHQdNcL4uTfOH+EJU daCE2OdItiF/a7yTDGIHPMcG6LSudxSFHxzSRrI/575tst3qdfzwgP6EdLFHfmNB Gr50vL+gxwXU5ejD6aRJp/vBBhgX5SyBeXy3oET5DSGjJQc4wx7C6+yTP5itImtg foZ4NTFtA4aQ6g1JCKrK0D9Qs4ZnxTbUO6kQxr15qhugb0hbdcHiohP7T3K+pg8b 7mWBgmTfYBFKA4vURpOtsJJcirGm5ORrp6l4AkvZq6Vdm8b3gOtPnj8yEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAhoSmdUUHUunrHW9q1CmSuG+z+MB8GA1UdIwQY MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt ODdhNjJlMGZjNDhjLzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3xISTAU Bdx7sQxSzJ/rW4GqBzROzulLHlkBbw/Vbcs6EEJCFU80N0rTc97lUWZWJo6hXPBs Ndv4p+mRXmifJ8Fq2qu4StJp7uXntmU9RZO5CadqoKjNDnqgI6Vd+I5tziaZz7C7 yZAhvkoQ+WiIQapvjCgrq5gxpMZWnRRCLXFqUQEgpRcK7hSG/pLB7A3Ctn8AR0wj 4Xs+himLEZTfsYbCFD8NOXbMFGCpkdtkaF28Ao47OjWLA5ZOXmFlWOyFimY7pFSJ aAc43VOJ9UHgQvCCULIhaaJpDLfHrRhv5Xcc/5XH7LmyIDK3aX7xHMoJeeknjph4 ci5pVjKQsKFWyw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:05:12 2025 by rpki-client