This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json) Hash identifier: OBnY2FzZvrqpCXsbcOZjQcEoO+DOKfPGsZn8fJr8wok= Subject key identifier: A1:07:C3:0E:6E:B8:A5:C4:E8:A4:0C:17:2E:4D:5C:6F:DF:0E:43:4E Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276 Certificate serial: 019B34FB8862D9727E21F73B6F4F9EC6FBD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft Manifest number: 104E Signing time: Fri 19 Dec 2025 05:00:58 +0000 Manifest this update: Fri 19 Dec 2025 05:00:58 +0000 Manifest next update: Sat 20 Dec 2025 05:00:58 +0000 Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: /35JAUeaUYXmgpcfxdXZhFmiFGixDJMK3KZmyZp5I54=) 2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:88:62:d9:72:7e:21:f7:3b:6f:4f:9e:c6:fb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276 Validity Not Before: Dec 19 05:00:58 2025 GMT Not After : Dec 20 05:00:58 2025 GMT Subject: CN=a107c30e6eb8a5c4e8a40c172e4d5c6fdf0e434e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:91:23:34:13:50:39:d5:10:26:0f:f3:c3:0c: b5:5b:1a:34:c4:7c:3e:47:ac:93:52:b3:fd:5f:0f: 04:bc:f6:84:f5:a7:49:8a:55:19:ed:fb:dd:19:f3: 27:b2:05:b1:cf:ea:81:f5:98:76:7b:da:2c:ec:f9: 68:02:a4:ca:ce:8a:60:3b:6f:96:bc:29:ee:77:1f: ef:b2:dd:d9:3a:04:c1:53:32:ef:9a:48:ca:50:d2: 46:22:c9:15:ec:23:31:83:be:f7:f5:2e:5e:00:31: ef:6a:6b:a9:4b:c0:84:95:14:aa:25:0e:5a:36:98: 06:56:90:54:67:3b:d9:97:70:3c:df:97:bf:fd:ea: 0d:06:6c:0f:0a:fc:10:d3:8b:c6:05:cb:66:6d:41: 04:7b:29:4d:09:43:a0:51:b7:33:14:4e:1d:41:27: 5d:3f:25:6b:e2:49:40:cd:15:ae:51:a2:b4:7b:79: 63:0b:fb:c4:79:d6:0c:32:c9:d3:7b:34:b6:b2:b6: a1:c7:f3:57:47:0c:89:8e:9c:94:6f:41:51:08:6e: 01:15:fb:1e:6b:f1:c2:f6:5f:7e:36:d9:11:eb:1b: 1f:61:13:ac:1f:2a:d9:5e:40:aa:a7:9c:36:c2:ab: 03:27:5e:42:d8:2f:05:fa:69:53:b3:8f:ef:fa:be: c4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:07:C3:0E:6E:B8:A5:C4:E8:A4:0C:17:2E:4D:5C:6F:DF:0E:43:4E X509v3 Authority Key Identifier: keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7c:05:64:86:cb:bd:4c:fd:94:30:25:f7:13:73:0c:ba:46: 70:78:92:2d:b1:d3:ca:a4:0d:d5:88:17:fa:69:eb:07:3b:f3: c9:64:bb:a4:c9:d8:b1:e4:c2:2f:54:9c:77:51:4a:12:d5:30: ef:f4:da:af:16:1a:4e:d6:a4:f7:82:cd:3f:35:97:bd:f0:fa: 31:da:74:47:94:14:44:a6:45:68:43:dd:56:a4:d1:7a:c2:17: c7:ba:d4:f2:18:ad:18:5b:df:46:f6:5f:e0:a8:c6:35:2d:c5: e1:c8:09:47:e9:a0:b5:ce:ed:58:1b:c3:39:30:75:12:1a:eb: 56:c3:9c:62:c8:e3:f3:f5:91:54:6e:eb:b2:92:ad:63:94:bc: d7:76:ad:4c:23:28:6e:2d:47:fa:0a:5f:d5:d8:dd:05:f4:2d: 16:d7:89:11:f6:44:7a:d8:07:62:93:47:9a:aa:4c:c5:7d:8b: 99:53:6f:74:98:fc:ef:e4:24:07:0a:06:12:88:b1:26:78:c0: 74:ce:ce:5b:f0:ee:2f:ad:f4:f1:d2:42:51:29:f5:64:a8:66: fe:3d:1e:ba:ba:31:3a:27:a6:8d:b9:7d:b0:98:bb:7d:82:30: 17:44:64:44:f9:6e:fa:bf:eb:e1:9c:ec:ba:02:8a:44:47:d3: f5:81:31:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4hi2XJ+Ifc7b0+exvvSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJiYjA4MDM3YTg3NjIzMDQwNmZhNjczNzlmOTgwYjVh YjMyNzYwHhcNMjUxMjE5MDUwMDU4WhcNMjUxMjIwMDUwMDU4WjAzMTEwLwYDVQQD EyhhMTA3YzMwZTZlYjhhNWM0ZThhNDBjMTcyZTRkNWM2ZmRmMGU0MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJEjNBNQOdUQJg/zwwy1Wxo0xHw+ R6yTUrP9Xw8EvPaE9adJilUZ7fvdGfMnsgWxz+qB9Zh2e9os7PloAqTKzopgO2+W vCnudx/vst3ZOgTBUzLvmkjKUNJGIskV7CMxg7739S5eADHvamupS8CElRSqJQ5a NpgGVpBUZzvZl3A835e//eoNBmwPCvwQ04vGBctmbUEEeylNCUOgUbczFE4dQSdd PyVr4klAzRWuUaK0e3ljC/vEedYMMsnTezS2srahx/NXRwyJjpyUb0FRCG4BFfse a/HC9l9+NtkR6xsfYROsHyrZXkCqp5w2wqsDJ15C2C8F+mlTs4/v+r7EnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEHww5uuKXE6KQMFy5NXG/fDkNOMB8GA1UdIwQY MBaAFHwbuwgDeodiMEBvpnN5+YC1qzJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5Njct MDhkNWNkMTZmNTQ5LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5NjctMDhkNWNkMTZmNTQ5 LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXwFZIbL vUz9lDAl9xNzDLpGcHiSLbHTyqQN1YgX+mnrBzvzyWS7pMnYseTCL1Scd1FKEtUw 7/TarxYaTtak94LNPzWXvfD6Mdp0R5QURKZFaEPdVqTResIXx7rU8hitGFvfRvZf 4KjGNS3F4cgJR+mgtc7tWBvDOTB1EhrrVsOcYsjj8/WRVG7rspKtY5S813atTCMo bi1H+gpf1djdBfQtFteJEfZEetgHYpNHmqpMxX2LmVNvdJj87+QkBwoGEoixJnjA dM7OW/DuL6308dJCUSn1ZKhm/j0euroxOiemjbl9sJi7fYIwF0RkRPlu+r/r4Zzs ugKKREfT9YExAg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:56:15 2025 by rpki-client