This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft File: _fGs8n0eRLz5EnH7Z1AVXENV_zk.mft (raw, json) Hash identifier: 4e/K20DN9kdM1H4BwD9ucyhDr5gQvXRg5b4ZutZOzkI= Subject key identifier: 17:B9:DB:BC:4D:B7:F9:A2:67:E4:79:17:88:87:54:93:AC:56:03:D7 Authority key identifier: FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 Certificate issuer: /CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Certificate serial: 019AF23F8C07D5E85909842CC420243C9476 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft Manifest number: 0B6F Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: _fGs8n0eRLz5EnH7Z1AVXENV_zk.crl (hash: GCuLtjws5t0ugsqVXJzbjqp3D9uJQZKTbr9y+bSVjDM=) 2: pSzdGy5wvZ2oOOhRlwxrxQanyEI.roa (hash: gpyggWv1B6MR9MZIaLvGDCcYLmPKVbPbekI0j6+XsgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8c:07:d5:e8:59:09:84:2c:c4:20:24:3c:94:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf1acf27d1e44bcf91271fb6750155c4355ff39 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=17b9dbbc4db7f9a267e4791788875493ac5603d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:20:13:1e:20:f8:bc:a0:ba:d6:77:a8:dd:cc: 65:f6:8c:e7:28:72:49:97:a0:ba:61:92:9b:0d:f3: 32:69:ce:13:d1:93:37:56:a7:35:76:0d:01:b3:5b: 61:8c:9d:71:24:6e:cb:66:d5:07:9a:07:9f:74:64: f1:4c:7f:f3:fc:bf:2e:3d:e0:fc:52:96:62:e9:9a: 03:19:7f:db:fb:88:cc:ee:1b:bc:3d:4a:98:d7:63: 20:3d:4a:c6:79:92:8f:70:d8:b3:ba:81:0d:dd:62: 28:0d:28:5b:95:c6:f3:91:bc:b0:e9:d4:0c:b2:9c: c8:89:e7:72:72:d4:04:58:81:dd:22:48:95:3f:6e: 84:d4:d2:6d:7c:e4:da:f9:6e:2d:b5:79:31:ab:86: 9c:91:dd:3e:49:6a:00:6d:fa:22:c3:04:2d:19:85: a7:09:5b:dc:f2:c3:e8:90:1a:17:03:ac:8e:df:70: 9a:83:94:22:75:52:77:c5:a5:ee:aa:d0:ab:21:b8: 56:2c:7f:c5:5e:5f:b6:77:0c:d8:2b:4a:e9:d8:f4: d9:7a:e4:42:7e:27:54:80:28:70:f9:48:64:4d:e9: de:f9:d1:67:bd:98:7e:91:6c:43:15:48:bb:b9:a9: 7f:c7:4f:20:af:fd:e7:80:94:77:0c:fb:ac:31:8a: b5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:DB:BC:4D:B7:F9:A2:67:E4:79:17:88:87:54:93:AC:56:03:D7 X509v3 Authority Key Identifier: keyid:FD:F1:AC:F2:7D:1E:44:BC:F9:12:71:FB:67:50:15:5C:43:55:FF:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fGs8n0eRLz5EnH7Z1AVXENV_zk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6520c4-77ce-4638-b2ac-dc9fccd5fe01/1/_fGs8n0eRLz5EnH7Z1AVXENV_zk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:0a:a2:2d:1c:1f:69:e3:ba:95:dc:12:72:27:4c:4f:76:65: aa:54:11:17:f1:5a:68:6f:36:c1:84:96:c9:56:69:93:02:ea: 4e:d7:99:f3:ae:eb:18:80:f7:53:81:e1:8f:4f:79:dd:ba:12: fd:da:72:8b:bd:79:d1:e9:e7:39:53:35:09:ab:99:ce:de:ff: 59:c4:86:c6:1b:5d:94:ad:36:65:a2:33:0a:99:6e:64:bb:ad: 9d:83:e8:e3:9e:a5:a6:3b:50:4d:56:26:c8:c2:a4:43:65:d9: b3:6b:c0:de:8f:f5:9a:4d:b6:b3:5c:75:d1:22:67:2f:d2:d4: 28:11:e8:dd:22:38:68:87:17:0f:72:13:fa:1d:84:2d:4c:d1: bb:d0:9c:26:ef:da:34:32:41:82:1a:e0:6d:c3:4d:a2:fc:c1: fc:ae:dd:3f:f5:37:cd:68:25:7c:ed:05:c1:f0:af:08:02:8e: 45:80:a8:a9:45:e5:8a:66:ad:86:e7:fa:57:80:64:65:fc:2e: b1:f1:6b:7a:99:b1:3d:7d:9b:f6:8f:3b:c5:b7:87:0a:c6:a9: f4:ca:5b:7a:43:7f:d8:92:86:59:f5:56:f4:a6:f3:1c:73:73: 7f:72:b5:e7:bd:b3:7a:f7:cd:71:f7:08:fb:f2:fd:0e:28:a6: e0:96:f0:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4wH1ehZCYQsxCAkPJR2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjFhY2YyN2QxZTQ0YmNmOTEyNzFmYjY3NTAxNTVjNDM1 NWZmMzkwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EygxN2I5ZGJiYzRkYjdmOWEyNjdlNDc5MTc4ODg3NTQ5M2FjNTYwM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SATHiD4vKC61neo3cxl9oznKHJJ l6C6YZKbDfMyac4T0ZM3Vqc1dg0Bs1thjJ1xJG7LZtUHmgefdGTxTH/z/L8uPeD8 UpZi6ZoDGX/b+4jM7hu8PUqY12MgPUrGeZKPcNizuoEN3WIoDShblcbzkbyw6dQM spzIiedyctQEWIHdIkiVP26E1NJtfOTa+W4ttXkxq4ackd0+SWoAbfoiwwQtGYWn CVvc8sPokBoXA6yO33Cag5QidVJ3xaXuqtCrIbhWLH/FXl+2dwzYK0rp2PTZeuRC fidUgChw+UhkTene+dFnvZh+kWxDFUi7ual/x08gr/3ngJR3DPusMYq1EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe527xNt/miZ+R5F4iHVJOsVgPXMB8GA1UdIwQY MBaAFP3xrPJ9HkS8+RJx+2dQFVxDVf85MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMt ZGM5ZmNjZDVmZTAxLzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82NTIwYzQtNzdjZS00NjM4LWIyYWMtZGM5ZmNjZDVmZTAx LzEvX2ZHczhuMGVSTHo1RW5IN1oxQVZYRU5WX3prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAqiLRwf aeO6ldwScidMT3ZlqlQRF/FaaG82wYSWyVZpkwLqTteZ867rGID3U4Hhj0953boS /dpyi7150ennOVM1CauZzt7/WcSGxhtdlK02ZaIzCpluZLutnYPo456lpjtQTVYm yMKkQ2XZs2vA3o/1mk22s1x10SJnL9LUKBHo3SI4aIcXD3IT+h2ELUzRu9CcJu/a NDJBghrgbcNNovzB/K7dP/U3zWglfO0FwfCvCAKORYCoqUXlimathuf6V4BkZfwu sfFrepmxPX2b9o87xbeHCsap9MpbekN/2JKGWfVW9KbzHHNzf3K1572zevfNcfcI +/L9Diim4Jbw8g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:12 2025 by rpki-client