This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft File: fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json) Hash identifier: b9/pGFCnvMmsDFbmucQ8OFrbaOpNJUh6WtR+DhJV46U= Subject key identifier: F6:4F:7E:BB:34:F8:5F:09:6A:12:FE:34:67:96:12:53:40:20:DB:AC Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C Certificate issuer: /CN=7c99016af748a48fce84f63f5e3a89331427dd8c Certificate serial: 019AF1D1F9C2A8B6AB04F081EC2C577DD182 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft Manifest number: 48 Signing time: Sat 06 Dec 2025 04:01:01 +0000 Manifest this update: Sat 06 Dec 2025 04:01:01 +0000 Manifest next update: Sun 07 Dec 2025 04:01:01 +0000 Files and hashes: 1: XboEdK3xIDFvJjunJFetI7wr7Xs.roa (hash: DUjE1oXn69cTox8Qm8z0w4X18Z6oVVbesmMEJc9r5hI=) 2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: fb3lzfmagM9mV46WVZ2FPM0XObh0p0ARcHOmHxPOPCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f9:c2:a8:b6:ab:04:f0:81:ec:2c:57:7d:d1:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c Validity Not Before: Dec 6 04:01:01 2025 GMT Not After : Dec 7 04:01:01 2025 GMT Subject: CN=f64f7ebb34f85f096a12fe34679612534020dbac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:81:ec:2c:12:a9:f1:92:60:3f:05:2a:11:45: 2c:53:16:35:55:a3:4b:4d:19:aa:76:18:09:63:03: 79:5d:09:6a:e6:3a:cc:1c:77:49:1b:25:e1:89:86: 22:71:e9:c9:24:db:ce:d6:0d:83:ab:78:7a:1a:b9: d3:72:11:36:c9:94:db:7a:8f:4c:f5:09:14:b9:2a: bf:78:ce:6d:c6:58:4f:ea:a4:60:40:f5:1b:21:b6: 2c:7b:4d:2e:1d:48:3f:09:2b:ec:29:2a:68:38:5d: 89:5d:0e:bd:c8:36:31:67:7b:24:d1:be:6f:81:c5: 6b:d8:91:80:6d:55:4f:c4:11:08:e0:75:e4:1f:23: 9c:48:61:a1:a6:1f:8b:62:94:ae:bd:fa:eb:06:f0: 66:2d:bd:f3:1b:78:cb:23:b3:f7:35:87:06:9d:ec: f0:47:01:bd:4d:e7:d6:12:02:42:71:0f:3f:26:46: f8:09:1b:24:d6:e3:89:75:ec:17:e2:b9:a6:33:0e: e4:4d:14:6d:f4:fc:78:40:80:e1:56:d1:ff:57:de: e9:25:ca:4e:c1:08:dd:65:d8:22:ee:f4:52:28:15: 91:4b:de:aa:db:ff:6e:9c:66:1d:fc:57:1e:1f:14: 4c:81:58:d8:07:1a:0e:c2:dd:61:bd:e1:a8:a4:ea: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4F:7E:BB:34:F8:5F:09:6A:12:FE:34:67:96:12:53:40:20:DB:AC X509v3 Authority Key Identifier: keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:71:9a:4e:31:fc:ae:3a:e5:ce:e8:d0:75:d6:29:a1:97:33: e9:e2:38:18:44:e2:f1:30:af:24:da:9b:bf:71:a2:50:cf:8d: f7:26:ce:ee:20:27:ba:0f:be:15:86:a7:9b:f7:7a:b6:c7:8d: 02:07:82:4e:b1:a4:0f:dd:9a:a6:44:7f:76:c5:82:e4:f3:2f: 17:08:e6:49:e5:81:8d:a1:2d:5d:7c:7e:b3:40:c6:a8:0d:77: 6e:27:c4:2d:e7:ef:04:37:93:e3:0d:63:b8:e7:0c:08:df:e1: 95:06:03:ae:1f:88:3a:85:b4:91:90:5b:b2:85:69:38:ad:72: e8:b1:c9:db:9f:c6:27:ce:3b:ed:32:c9:e5:d3:9b:cc:91:23: 51:a4:54:f6:28:62:bc:13:e8:67:81:df:09:21:6f:48:b1:74: 0c:6f:ba:5f:48:ad:17:1e:2e:ed:75:78:7b:89:42:40:2b:30: 3f:cf:d0:d0:8a:d7:39:38:81:25:c3:07:20:a3:e7:c6:de:fb: de:32:91:b7:11:66:c5:a8:f0:a6:ec:b2:bd:38:00:7a:cd:26: 29:30:6f:d5:e1:d4:62:bb:7d:db:f9:ea:64:ff:ae:37:8d:c5: cf:3a:8c:04:51:2f:42:79:e4:2e:c3:96:a8:a0:8d:fc:f7:c2: 2d:af:a8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fnCqLarBPCB7CxXfdGCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOTkwMTZhZjc0OGE0OGZjZTg0ZjYzZjVlM2E4OTMzMTQy N2RkOGMwHhcNMjUxMjA2MDQwMTAxWhcNMjUxMjA3MDQwMTAxWjAzMTEwLwYDVQQD EyhmNjRmN2ViYjM0Zjg1ZjA5NmExMmZlMzQ2Nzk2MTI1MzQwMjBkYmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIHsLBKp8ZJgPwUqEUUsUxY1VaNL TRmqdhgJYwN5XQlq5jrMHHdJGyXhiYYicenJJNvO1g2Dq3h6GrnTchE2yZTbeo9M 9QkUuSq/eM5txlhP6qRgQPUbIbYse00uHUg/CSvsKSpoOF2JXQ69yDYxZ3sk0b5v gcVr2JGAbVVPxBEI4HXkHyOcSGGhph+LYpSuvfrrBvBmLb3zG3jLI7P3NYcGnezw RwG9TefWEgJCcQ8/Jkb4CRsk1uOJdewX4rmmMw7kTRRt9Px4QIDhVtH/V97pJcpO wQjdZdgi7vRSKBWRS96q2/9unGYd/FceHxRMgVjYBxoOwt1hveGopOpgpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZPfrs0+F8JahL+NGeWElNAINusMB8GA1UdIwQY MBaAFHyZAWr3SKSPzoT2P146iTMUJ92MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDIt MTU1NGYxZDNiOWI2LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8zZjcyZDctYjViNS00ZGMyLTlmMDItMTU1NGYxZDNiOWI2 LzEvZkprQmF2ZElwSV9PaFBZX1hqcUpNeFFuM1l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3GaTjH8 rjrlzujQddYpoZcz6eI4GETi8TCvJNqbv3GiUM+N9ybO7iAnug++FYanm/d6tseN AgeCTrGkD92apkR/dsWC5PMvFwjmSeWBjaEtXXx+s0DGqA13bifELefvBDeT4w1j uOcMCN/hlQYDrh+IOoW0kZBbsoVpOK1y6LHJ25/GJ8477TLJ5dObzJEjUaRU9ihi vBPoZ4HfCSFvSLF0DG+6X0itFx4u7XV4e4lCQCswP8/Q0IrXOTiBJcMHIKPnxt77 3jKRtxFmxajwpuyyvTgAes0mKTBv1eHUYrt92/nqZP+uN43FzzqMBFEvQnnkLsOW qKCN/PfCLa+oXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:46:43 2025 by rpki-client