This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft File: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft (raw, json) Hash identifier: HCwfA7QNJ1/aJBBwtQQsedpX1EsW+TGzjGYRoqOjPak= Subject key identifier: 07:5B:94:22:BD:A5:63:84:E0:C9:69:A9:04:BB:AD:12:A4:D6:A2:83 Authority key identifier: 16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 Certificate issuer: /CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Certificate serial: 019AF19AEA9570F8DD7D4E5B5DC71DC22134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft Manifest number: 0BD7 Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl (hash: WEI/mwUVLw824HbNnpysX8AsCnQp43AfZBaoIUPE8mg=) 2: wbh15XPn1kgCYyJ-XkIl20Yytuw.roa (hash: aWvLndo6Gq/HOzsYU6uHpO8FpYdNLyOKJEg8ZgZ7QAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ea:95:70:f8:dd:7d:4e:5b:5d:c7:1d:c2:21:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169ea0275c765e17603eb59eef39e2fab5380ef0 Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=075b9422bda56384e0c969a904bbad12a4d6a283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d1:dc:eb:cd:ed:6d:e4:d8:98:49:aa:26:9c: 0c:e8:cd:05:83:a1:f7:86:67:6a:30:e9:a0:95:16: d8:1f:54:b5:c3:cc:42:c8:50:0f:f1:ad:3e:9c:06: 2e:81:d6:1b:9a:1a:ec:d0:5e:69:60:15:79:99:da: e9:0b:5f:1d:ae:d9:5a:e1:af:48:df:23:58:6a:a1: 17:88:b4:3a:45:23:57:7d:4b:a6:47:82:75:bb:26: e4:c4:ec:99:f0:16:04:e1:7e:a5:d8:45:98:d5:9f: 25:ee:8a:88:c3:f8:79:d2:51:89:9a:19:e2:0b:3f: fb:a0:0f:d8:ee:a0:22:88:e8:21:74:1f:75:45:69: 67:f2:d7:04:a4:b7:24:60:dc:5b:63:e2:af:11:37: 10:8d:f3:83:c5:ae:99:5d:96:71:ef:c6:88:f5:55: ff:c0:0d:d7:5b:de:f3:02:eb:14:27:7b:20:7c:0f: 50:2b:e9:5e:45:5c:d8:40:a4:56:1f:cd:56:67:0b: 6c:b5:04:22:74:0d:e7:0d:55:76:81:3c:4b:d0:dc: 4d:56:11:39:1e:49:dc:e1:4c:0e:bf:c0:18:60:21: 78:67:ee:4a:05:18:6b:a9:72:12:4a:96:fe:3b:11: a0:89:bc:db:1a:6d:45:50:dc:ae:a6:e9:53:e1:a3: d5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5B:94:22:BD:A5:63:84:E0:C9:69:A9:04:BB:AD:12:A4:D6:A2:83 X509v3 Authority Key Identifier: keyid:16:9E:A0:27:5C:76:5E:17:60:3E:B5:9E:EF:39:E2:FA:B5:38:0E:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4a54fd-bbea-415a-b969-d69ef422c167/1/Fp6gJ1x2XhdgPrWe7zni-rU4DvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:f0:e9:06:56:88:d5:b0:d4:2a:d8:b5:d9:29:65:4c:d2:20: ed:94:2c:67:1a:95:e3:cc:d6:63:e7:5e:33:30:c9:95:d8:24: a3:2e:58:df:ff:19:a9:fb:58:97:e4:00:2a:1f:e3:61:04:34: 79:74:8d:68:c5:61:7d:44:d7:a6:80:41:b8:2b:b4:fd:be:0b: 76:32:53:64:13:06:5f:7d:73:b6:71:2d:f3:ae:8c:10:af:63: 39:cb:e0:50:ba:2a:c1:22:2b:7f:ce:6b:75:0f:1e:1f:35:fa: ec:b3:63:50:ba:79:dd:8c:a1:95:bf:f1:57:32:8a:96:b2:93: ab:55:1f:10:d4:56:ab:3b:94:78:81:62:b1:ce:ff:bc:9c:71: 7e:e8:7e:c1:96:67:64:b8:92:8f:a2:4f:fc:c9:3c:9e:58:98: 5b:fd:64:a3:84:8b:c8:56:2f:bc:bd:11:61:5b:dc:6c:0f:29: 43:b9:83:db:4d:ef:23:6e:23:8b:f6:65:14:d8:b0:75:b9:a0: 4d:5d:eb:c3:19:71:db:cf:ca:3d:b8:e0:7d:fc:2d:5d:f3:25: b2:02:ce:e9:f9:bc:02:57:3f:b3:1e:c7:0a:1b:88:70:7c:3f: 65:6c:c2:38:d8:5e:ea:a5:b9:9a:42:e3:e4:d8:59:54:10:28: 74:ec:00:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuqVcPjdfU5bXccdwiE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OWVhMDI3NWM3NjVlMTc2MDNlYjU5ZWVmMzllMmZhYjUz ODBlZjAwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EygwNzViOTQyMmJkYTU2Mzg0ZTBjOTY5YTkwNGJiYWQxMmE0ZDZhMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdHc683tbeTYmEmqJpwM6M0Fg6H3 hmdqMOmglRbYH1S1w8xCyFAP8a0+nAYugdYbmhrs0F5pYBV5mdrpC18drtla4a9I 3yNYaqEXiLQ6RSNXfUumR4J1uybkxOyZ8BYE4X6l2EWY1Z8l7oqIw/h50lGJmhni Cz/7oA/Y7qAiiOghdB91RWln8tcEpLckYNxbY+KvETcQjfODxa6ZXZZx78aI9VX/ wA3XW97zAusUJ3sgfA9QK+leRVzYQKRWH81WZwtstQQidA3nDVV2gTxL0NxNVhE5 Hknc4UwOv8AYYCF4Z+5KBRhrqXISSpb+OxGgibzbGm1FUNyupulT4aPVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdblCK9pWOE4MlpqQS7rRKk1qKDMB8GA1UdIwQY MBaAFBaeoCdcdl4XYD61nu854vq1OA7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5Njkt ZDY5ZWY0MjJjMTY3LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi80YTU0ZmQtYmJlYS00MTVhLWI5NjktZDY5ZWY0MjJjMTY3 LzEvRnA2Z0oxeDJYaGRnUHJXZTd6bmktclU0RHZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPDpBlaI 1bDUKti12SllTNIg7ZQsZxqV48zWY+deMzDJldgkoy5Y3/8ZqftYl+QAKh/jYQQ0 eXSNaMVhfUTXpoBBuCu0/b4LdjJTZBMGX31ztnEt866MEK9jOcvgULoqwSIrf85r dQ8eHzX67LNjULp53Yyhlb/xVzKKlrKTq1UfENRWqzuUeIFisc7/vJxxfuh+wZZn ZLiSj6JP/Mk8nliYW/1ko4SLyFYvvL0RYVvcbA8pQ7mD203vI24ji/ZlFNiwdbmg TV3rwxlx28/KPbjgffwtXfMlsgLO6fm8Alc/sx7HChuIcHw/ZWzCONhe6qW5mkLj 5NhZVBAodOwAOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:23 2025 by rpki-client