This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft File: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft (raw, json) Hash identifier: kVdqbl3/gahESPi9dRrLrCEgJ2mw9ifNQbFhfdACfYQ= Subject key identifier: 96:B6:49:3B:14:34:9C:62:F6:4B:54:79:22:7D:E2:E9:D4:47:4E:4E Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5 Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5 Certificate serial: 019AF1D25C2F0864DF97DFB15D9A89FFEC1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft Manifest number: 0890 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: 1fzx311S5jcwOa4F8HMO1WGGMRs.roa (hash: Nf7uyvKCbxyvq+ckjdshr/ayknm9CnDDcdCg9xx36FM=) 2: 9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl (hash: gTfZ/YhgfGeHikjx4Lxzjvn/jSukycWlt3V1X+jVkY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5c:2f:08:64:df:97:df:b1:5d:9a:89:ff:ec:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=96b6493b14349c62f64b5479227de2e9d4474e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:06:1e:3d:8c:c8:dc:82:8a:41:75:49:b6:85: 56:7d:f3:93:73:49:32:a6:51:4e:aa:15:0a:8b:d9: 45:43:1b:f9:c8:69:4f:24:85:a6:3a:d3:e3:1e:3a: e7:5d:11:5a:4c:99:97:4f:14:89:7d:eb:93:b2:49: 17:a1:49:eb:fe:e9:50:ed:d3:62:9d:7e:6d:0b:82: 23:26:78:9b:48:30:2f:80:f6:75:4c:e2:28:f6:52: 50:02:27:3f:39:78:18:fa:f6:05:0b:86:63:19:0a: fe:4e:be:5b:61:07:24:30:1d:9e:7a:ea:58:be:70: 6c:fd:4f:00:7c:5a:d5:5c:b4:be:72:8b:3d:47:ea: ba:de:d3:c7:c8:03:2f:60:57:4a:6d:af:6b:d7:4e: 14:8d:41:be:82:e9:dd:f5:34:46:e2:b5:27:5d:f8: 8e:3d:eb:0c:84:1e:8c:31:8e:d9:2a:99:b5:2a:83: ed:a3:f9:e5:7c:6d:1c:67:b3:84:7c:08:16:d1:d1: f8:e8:85:3a:06:34:1d:f5:43:80:3d:b7:29:66:3a: 05:cf:1e:06:d4:d6:20:a6:a6:17:9c:dc:55:75:fc: 44:a7:df:42:cc:7b:36:88:16:73:32:db:1c:53:6d: f6:8a:89:da:25:53:7a:4d:9c:70:a3:a3:5d:a1:15: e0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B6:49:3B:14:34:9C:62:F6:4B:54:79:22:7D:E2:E9:D4:47:4E:4E X509v3 Authority Key Identifier: keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:e3:e3:7a:aa:7f:53:e5:44:9b:33:36:6e:2f:42:2b:a6: f3:bf:bb:3e:20:01:69:f9:f3:d3:6a:dc:30:62:d9:e7:3c:84: cc:67:ab:42:8a:27:b0:a9:f8:48:5d:0b:6d:6f:5f:30:51:72: 2b:a3:60:7f:f2:2d:c3:18:23:41:a3:a0:66:32:d5:9f:95:ba: 6e:2d:4b:b0:3a:8d:27:cb:74:cc:33:49:1b:c6:a8:22:d1:36: 74:02:cd:8a:52:0a:43:ea:6b:c3:7e:1d:71:22:37:c1:41:3a: 47:5f:2b:8c:85:85:c5:c9:a8:f3:e1:a7:ba:31:53:d2:bb:88: 53:eb:10:87:cb:9a:8f:df:a0:59:4d:ec:ee:fa:13:03:6b:2f: 1b:b8:28:7a:6f:3a:c9:e8:9c:cf:e4:8a:c0:d8:26:e6:0a:ba: f0:78:3a:7d:94:27:f3:54:ed:86:41:52:7f:5b:a1:b4:e5:26: 65:a9:ad:07:dc:1d:be:6a:b5:da:f0:2b:ad:b2:f1:b5:5a:03: 9b:e9:56:d0:6d:67:0c:bf:e2:37:52:77:29:74:a3:e6:5d:25: 4b:db:79:78:c1:47:c6:98:69:60:ce:d6:64:06:4f:6b:df:f1: 9e:e0:61:52:5a:ef:a8:35:ab:a3:e7:6b:30:8c:b0:58:cf:5b: 1f:53:4c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lwvCGTfl9+xXZqJ/+wcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MTg2MTlhZTNjOWI1OWQ4NjhiY2RmY2M3ZTczZDgxM2Y4 NTA0ZTUwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD Eyg5NmI2NDkzYjE0MzQ5YzYyZjY0YjU0NzkyMjdkZTJlOWQ0NDc0ZTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wYePYzI3IKKQXVJtoVWffOTc0ky plFOqhUKi9lFQxv5yGlPJIWmOtPjHjrnXRFaTJmXTxSJfeuTskkXoUnr/ulQ7dNi nX5tC4IjJnibSDAvgPZ1TOIo9lJQAic/OXgY+vYFC4ZjGQr+Tr5bYQckMB2eeupY vnBs/U8AfFrVXLS+cos9R+q63tPHyAMvYFdKba9r104UjUG+gund9TRG4rUnXfiO PesMhB6MMY7ZKpm1KoPto/nlfG0cZ7OEfAgW0dH46IU6BjQd9UOAPbcpZjoFzx4G 1NYgpqYXnNxVdfxEp99CzHs2iBZzMtscU232ionaJVN6TZxwo6NdoRXglwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJa2STsUNJxi9ktUeSJ94unUR05OMB8GA1UdIwQY MBaAFPYYYZrjybWdhovN/MfnPYE/hQTlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQt ZDk3N2IzODlkNWFiLzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS85ZjUxMDUtMTJkNy00ZjZiLTlkMGQtZDk3N2IzODlkNWFi LzEvOWhoaG11UEp0WjJHaTgzOHgtYzlnVC1GQk9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP3j43qq f1PlRJszNm4vQium87+7PiABafnz02rcMGLZ5zyEzGerQoonsKn4SF0LbW9fMFFy K6Ngf/ItwxgjQaOgZjLVn5W6bi1LsDqNJ8t0zDNJG8aoItE2dALNilIKQ+prw34d cSI3wUE6R18rjIWFxcmo8+GnujFT0ruIU+sQh8uaj9+gWU3s7voTA2svG7goem86 yeicz+SKwNgm5gq68Hg6fZQn81TthkFSf1uhtOUmZamtB9wdvmq12vArrbLxtVoD m+lW0G1nDL/iN1J3KXSj5l0lS9t5eMFHxphpYM7WZAZPa9/xnuBhUlrvqDWro+dr MIywWM9bH1NM5w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:49 2025 by rpki-client