This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json) Hash identifier: BxfgOZoNoTuzjvqkZgow4B22kCV2CrIL63DCMVEIgrY= Subject key identifier: 5E:75:53:7A:6A:B0:C4:A5:B0:E1:1A:2A:B1:C8:5A:EC:DA:10:13:77 Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204 Certificate serial: 019AF2400201C05482290AA459A00402BA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft Manifest number: 11AA Signing time: Sat 06 Dec 2025 06:01:12 +0000 Manifest this update: Sat 06 Dec 2025 06:01:12 +0000 Manifest next update: Sun 07 Dec 2025 06:01:12 +0000 Files and hashes: 1: _J2QkiOT3wZXiv-kIeQ1vzDjGQI.roa (hash: ieQbUeSA/ZnjcXq9UchtsLIMyHxTCALoQIa6C87a8+U=) 2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: K0R69TEWYQvLTwpm6+pGVkwrcT36aMMw0UXUJFXNriA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:02:01:c0:54:82:29:0a:a4:59:a0:04:02:ba:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204 Validity Not Before: Dec 6 06:01:12 2025 GMT Not After : Dec 7 06:01:12 2025 GMT Subject: CN=5e75537a6ab0c4a5b0e11a2ab1c85aecda101377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:27:78:02:e5:1c:75:b7:6c:fe:e6:bb:6f:e4: a0:ea:17:c3:57:bc:e0:2e:a6:e4:2c:df:ba:04:14: 25:d6:5a:68:32:7d:9a:ea:54:3a:c2:93:8b:6c:fc: 72:86:14:e1:39:f5:0e:41:e1:0c:e5:fd:54:f8:18: 01:5f:58:66:28:81:76:05:e5:ff:4a:5c:de:89:5d: 0e:bf:c9:1b:4d:e7:8b:3c:e0:f7:59:df:88:a8:3d: a8:17:25:1f:37:43:d6:e7:8b:1a:24:f1:cd:04:06: 7b:55:76:8d:96:f7:27:b6:e5:6a:cb:fe:c9:a4:d9: 36:60:6a:38:a8:4b:e2:7f:ba:74:f0:a4:1b:da:aa: d9:89:83:94:06:32:c5:65:28:4c:5c:ce:03:83:1d: 0b:b5:c2:f3:30:ac:3f:56:b1:3c:0f:b0:9f:8d:66: cc:9c:0d:14:a5:43:41:28:b3:fc:5d:cc:9c:00:24: 96:49:0d:ec:80:6d:fa:26:4f:5d:15:b6:75:e4:4e: 1e:05:02:72:af:81:1d:82:87:dc:5e:f6:4a:6e:c2: eb:49:82:e2:42:0a:f0:8d:04:f9:48:3d:21:8b:e7: 2d:d8:05:93:a3:94:4c:bb:b6:04:48:23:5b:f6:0c: d0:d9:43:f1:f0:60:d5:08:73:4b:aa:6f:61:de:6a: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:75:53:7A:6A:B0:C4:A5:B0:E1:1A:2A:B1:C8:5A:EC:DA:10:13:77 X509v3 Authority Key Identifier: keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c2:61:f8:76:6b:ac:2d:2e:65:3f:6b:5e:14:df:76:b5:19: fa:34:d2:8d:64:39:99:fe:2c:85:cd:03:67:76:24:4e:df:2f: 01:78:02:24:22:41:4a:15:43:8b:de:4c:26:9e:73:70:f1:01: f0:31:7a:0e:4d:28:11:20:2f:0a:4f:68:ce:e0:70:86:30:ef: 11:2f:10:9d:8b:db:dd:b8:19:b2:4b:aa:ae:2f:c3:5e:9e:0f: d8:f2:46:b8:da:f4:bb:d7:bc:61:ac:cb:6a:01:d1:d9:db:d6: 76:c0:23:80:c3:36:af:74:fe:68:d8:9a:a6:ec:b8:56:3f:7d: 5c:af:53:6f:0e:f1:be:45:61:12:e7:1b:f0:86:93:1e:41:ed: fc:5e:ab:9d:75:5f:fe:16:94:0a:32:e8:71:7f:c4:34:d5:a1: be:ba:bc:42:6b:8e:e9:94:9c:3a:e4:76:b0:9e:e2:3a:26:c1: 71:b5:21:15:4e:61:35:1b:4c:77:17:c1:27:dd:8c:6c:28:1c: 0a:94:7b:7c:25:f7:32:0e:c5:f9:43:14:ea:27:5b:5f:2d:e0: df:af:bc:05:75:4c:3b:c1:40:05:72:6c:a1:9d:50:51:7b:87: 77:4a:75:fb:80:15:50:56:6d:a0:5c:f1:71:cc:52:be:57:6c: 42:31:6e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAIBwFSCKQqkWaAEArpSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3 MTkyMDQwHhcNMjUxMjA2MDYwMTEyWhcNMjUxMjA3MDYwMTEyWjAzMTEwLwYDVQQD Eyg1ZTc1NTM3YTZhYjBjNGE1YjBlMTFhMmFiMWM4NWFlY2RhMTAxMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cd4AuUcdbds/ua7b+Sg6hfDV7zg LqbkLN+6BBQl1lpoMn2a6lQ6wpOLbPxyhhThOfUOQeEM5f1U+BgBX1hmKIF2BeX/ SlzeiV0Ov8kbTeeLPOD3Wd+IqD2oFyUfN0PW54saJPHNBAZ7VXaNlvcntuVqy/7J pNk2YGo4qEvif7p08KQb2qrZiYOUBjLFZShMXM4Dgx0LtcLzMKw/VrE8D7CfjWbM nA0UpUNBKLP8XcycACSWSQ3sgG36Jk9dFbZ15E4eBQJyr4EdgofcXvZKbsLrSYLi QgrwjQT5SD0hi+ct2AWTo5RMu7YESCNb9gzQ2UPx8GDVCHNLqm9h3mqzLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF51U3pqsMSlsOEaKrHIWuzaEBN3MB8GA1UdIwQY MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt NzI4MjdmZTZkN2FmLzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8Jh+HZr rC0uZT9rXhTfdrUZ+jTSjWQ5mf4shc0DZ3YkTt8vAXgCJCJBShVDi95MJp5zcPEB 8DF6Dk0oESAvCk9ozuBwhjDvES8QnYvb3bgZskuqri/DXp4P2PJGuNr0u9e8YazL agHR2dvWdsAjgMM2r3T+aNiapuy4Vj99XK9Tbw7xvkVhEucb8IaTHkHt/F6rnXVf /haUCjLocX/ENNWhvrq8QmuO6ZScOuR2sJ7iOibBcbUhFU5hNRtMdxfBJ92MbCgc CpR7fCX3Mg7F+UMU6idbXy3g36+8BXVMO8FABXJsoZ1QUXuHd0p1+4AVUFZtoFzx ccxSvldsQjFu6g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:20 2025 by rpki-client