This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json) Hash identifier: FaCdezygB2FeOvnivO16676BiWDrrdHUU1qzi2e2cBc= Subject key identifier: 7A:89:69:FC:E0:39:81:E3:DD:19:A9:90:D9:26:80:92:69:34:AA:5F Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Certificate serial: 019AF2AD3DC295FBBAC2233DBF94B4D2464B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:00:30 +0000 Manifest this update: Sat 06 Dec 2025 08:00:30 +0000 Manifest next update: Sun 07 Dec 2025 08:00:30 +0000 Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=) 2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: Mg6HCxqUBjLGAPXvrQhYpMbSARCK9ZyaFt+jS7LGxBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:3d:c2:95:fb:ba:c2:23:3d:bf:94:b4:d2:46:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Validity Not Before: Dec 6 08:00:30 2025 GMT Not After : Dec 7 08:00:30 2025 GMT Subject: CN=7a8969fce03981e3dd19a990d92680926934aa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e5:db:bb:19:35:07:aa:c2:fa:30:f7:84:56: 75:21:f5:fa:f1:55:3f:41:fb:25:42:98:20:4d:78: 0d:5d:fd:a4:70:76:44:fa:70:61:c8:15:9a:dc:d0: fd:55:c8:ad:47:ef:fc:6e:a9:dc:a9:02:dc:1e:08: 03:a1:9f:45:8d:94:bb:89:24:cb:f5:c2:54:6c:ce: 1f:8f:9c:6b:ce:2c:8c:e7:8b:f4:11:6a:fb:53:7e: 5c:61:85:94:73:b2:c2:01:56:da:46:ef:aa:df:c5: 8d:80:90:cf:5b:34:c7:78:45:7d:a9:25:1c:4e:d7: e6:95:1b:ad:ab:6b:d3:bb:1d:16:f2:38:9d:03:f0: 8c:0e:e3:2a:2f:c5:08:4b:14:22:7b:30:f4:8d:82: 5a:66:bd:db:6a:81:77:26:33:92:33:2a:5d:04:cb: 19:76:e2:fb:60:f9:91:35:87:bd:5d:42:47:e5:ca: b4:5e:07:10:e2:33:2d:51:e7:1c:63:24:23:f6:92: ea:c1:9f:59:4c:00:f4:b2:51:ab:0e:ce:61:c1:ca: b3:3a:98:5f:ec:48:da:72:d7:60:8f:b3:45:e1:13: b4:9a:5e:78:e4:7c:6c:07:1c:a1:78:f8:dd:28:26: c9:51:8b:37:66:85:26:0d:ae:d5:74:1a:91:7c:54: 8e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:89:69:FC:E0:39:81:E3:DD:19:A9:90:D9:26:80:92:69:34:AA:5F X509v3 Authority Key Identifier: keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6d:d0:91:8f:3c:83:61:7c:57:ba:45:15:04:a7:6f:16:32: be:0a:c9:e5:8e:e1:58:d2:e1:61:e8:92:8e:98:36:e3:0c:91: b0:d2:cc:2e:97:00:f2:af:c5:f5:58:71:2b:ae:77:ea:e9:c1: 7f:28:0a:d7:91:aa:48:68:14:1f:54:1e:21:c1:8c:71:6a:84: 32:3f:d3:c9:a7:19:2b:ff:29:80:79:ab:71:e5:e9:f6:5b:2b: d8:77:51:64:cf:ef:0f:f9:98:93:a5:df:1e:b3:b9:82:1a:23: 6b:8f:49:f1:f0:ef:c0:49:42:ab:54:90:87:62:f6:9a:1c:9b: f2:51:5d:5a:88:30:c5:78:e6:a5:b6:5e:92:c9:bf:d2:04:54: ea:0a:bd:d8:38:ce:be:3f:f0:9a:b4:b3:3d:6e:e1:f5:fd:16: b1:88:f8:e2:ea:c0:dc:0c:ff:2b:aa:2e:a2:e3:88:6c:b9:19: 7b:19:b2:54:2d:61:8c:28:d5:93:0e:0b:76:72:bf:60:ef:ce: a0:62:7f:1c:f0:0c:63:d1:85:f7:7a:f1:77:ff:2c:cc:df:05: 66:cc:96:59:14:5b:f7:18:81:04:a7:1f:d3:d5:10:74:e8:27: bf:0b:27:d1:a4:aa:5c:de:c5:0d:dc:23:e5:6b:a5:c0:de:9f: 0c:df:14:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrT3Clfu6wiM9v5S00kZLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk NTUyMWIwHhcNMjUxMjA2MDgwMDMwWhcNMjUxMjA3MDgwMDMwWjAzMTEwLwYDVQQD Eyg3YTg5NjlmY2UwMzk4MWUzZGQxOWE5OTBkOTI2ODA5MjY5MzRhYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteXbuxk1B6rC+jD3hFZ1IfX68VU/ QfslQpggTXgNXf2kcHZE+nBhyBWa3ND9VcitR+/8bqncqQLcHggDoZ9FjZS7iSTL 9cJUbM4fj5xrziyM54v0EWr7U35cYYWUc7LCAVbaRu+q38WNgJDPWzTHeEV9qSUc TtfmlRutq2vTux0W8jidA/CMDuMqL8UISxQiezD0jYJaZr3baoF3JjOSMypdBMsZ duL7YPmRNYe9XUJH5cq0XgcQ4jMtUeccYyQj9pLqwZ9ZTAD0slGrDs5hwcqzOphf 7Ejactdgj7NF4RO0ml545HxsBxyhePjdKCbJUYs3ZoUmDa7VdBqRfFSObQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqJafzgOYHj3RmpkNkmgJJpNKpfMB8GA1UdIwQY MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf23QkY88 g2F8V7pFFQSnbxYyvgrJ5Y7hWNLhYeiSjpg24wyRsNLMLpcA8q/F9VhxK6536unB fygK15GqSGgUH1QeIcGMcWqEMj/TyacZK/8pgHmrceXp9lsr2HdRZM/vD/mYk6Xf HrO5ghoja49J8fDvwElCq1SQh2L2mhyb8lFdWogwxXjmpbZeksm/0gRU6gq92DjO vj/wmrSzPW7h9f0WsYj44urA3Az/K6ououOIbLkZexmyVC1hjCjVkw4LdnK/YO/O oGJ/HPAMY9GF93rxd/8szN8FZsyWWRRb9xiBBKcf09UQdOgnvwsn0aSqXN7FDdwj 5WulwN6fDN8UUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:21 2025 by rpki-client