This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json) Hash identifier: w5Kv2EFTpMiH1pHjFl9J/k5I3Iuyd0T0f9HzZqcd2kI= Subject key identifier: 4E:CE:D3:D1:96:1B:E0:55:16:A1:F5:15:C6:F2:3E:47:41:56:67:F7 Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276 Certificate serial: 019AF5406D542CF075E2C784C0EE51991C7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft Manifest number: 102D Signing time: Sat 06 Dec 2025 20:00:31 +0000 Manifest this update: Sat 06 Dec 2025 20:00:31 +0000 Manifest next update: Sun 07 Dec 2025 20:00:31 +0000 Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: B1mi8vxb6NtpkB2+WwP1ByPAsnuFDjMGK1eXDyqRkO8=) 2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:6d:54:2c:f0:75:e2:c7:84:c0:ee:51:99:1c:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276 Validity Not Before: Dec 6 20:00:31 2025 GMT Not After : Dec 7 20:00:31 2025 GMT Subject: CN=4eced3d1961be05516a1f515c6f23e47415667f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:23:e3:d8:e0:61:38:0d:e5:8a:0b:e2:59:0d: 65:39:9c:de:14:5c:c4:01:83:72:31:4d:30:a0:4b: 22:5d:b7:26:52:2b:c0:8c:87:ac:69:2d:92:0a:7f: 80:1a:6f:50:05:4e:43:60:36:fd:d7:51:67:66:fd: 70:39:94:da:94:2e:44:a8:c6:bc:5e:cf:89:d8:85: 88:41:dd:4b:3e:4a:5d:d4:7a:a4:7f:9e:51:1e:67: bf:66:bd:14:d1:53:12:90:3f:c6:5b:f4:fd:ba:bb: a7:4b:bf:0e:61:a9:b1:a1:f4:6b:6b:1b:63:b0:cb: 9e:57:0d:3e:e9:42:1b:8e:ba:db:e2:d5:3d:35:2f: e7:d2:c3:2e:a1:40:89:88:9b:19:51:12:6d:ff:f2: 4a:e7:77:56:99:3d:c4:6f:a8:38:e7:2d:ad:9a:b0: db:6d:e7:7b:91:30:37:7b:fe:cd:1e:21:3c:a0:e3: 03:77:41:e9:2d:09:89:3a:11:95:7b:dd:b2:64:5f: 11:61:2b:98:98:df:e3:dc:0c:d5:09:ad:e1:65:53: 2b:3d:e5:2c:ff:17:1d:1a:77:e3:11:0b:d8:53:76: ae:c8:7b:0f:4f:b2:09:ea:fc:91:9b:46:1f:4e:7e: c1:d2:35:da:cb:2f:88:3d:07:46:3a:b1:57:68:3f: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CE:D3:D1:96:1B:E0:55:16:A1:F5:15:C6:F2:3E:47:41:56:67:F7 X509v3 Authority Key Identifier: keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8a:c1:9a:6e:b0:a7:a6:20:c9:6c:ea:31:2f:63:83:e7:27: 74:3c:30:5d:69:cc:14:fc:bc:e0:68:b4:18:c7:78:23:62:b4: c4:f0:d1:5c:06:04:ba:2e:08:01:28:22:5c:61:84:2f:0a:3f: 0f:9e:1a:70:45:15:12:26:51:20:38:c0:f1:04:3b:f1:2d:95: 68:3d:69:1f:73:b1:6f:6d:69:c4:8e:a2:e6:d7:3d:df:b3:21: 78:94:0c:27:ba:78:37:3d:3d:8b:50:4f:0b:2d:be:db:b8:c1: 68:8f:19:f6:ea:79:92:4c:25:e9:b8:de:b6:35:b7:fa:4f:7a: 92:d8:af:b1:61:36:f1:e9:89:92:9d:ed:0a:e0:96:8c:7a:1f: db:6f:92:8d:a5:17:b9:f1:46:39:2b:75:21:76:d8:00:00:f0: 50:f5:af:59:ae:0b:c1:14:46:fa:46:63:6b:4b:d3:2b:67:03: 8b:8e:4e:9a:0e:d9:a1:f5:31:69:52:82:61:40:21:78:b2:cd: 6e:05:13:cf:16:41:8b:8e:1a:e2:ff:25:c8:8c:e7:a3:9c:19: 28:8d:61:3f:c3:e2:8e:fd:84:ef:37:51:15:12:32:dd:81:a5: ee:39:94:13:e7:c6:7a:91:98:6f:19:32:04:f0:f4:a8:ff:b6: 41:3d:e0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QG1ULPB14seEwO5RmRx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJiYjA4MDM3YTg3NjIzMDQwNmZhNjczNzlmOTgwYjVh YjMyNzYwHhcNMjUxMjA2MjAwMDMxWhcNMjUxMjA3MjAwMDMxWjAzMTEwLwYDVQQD Eyg0ZWNlZDNkMTk2MWJlMDU1MTZhMWY1MTVjNmYyM2U0NzQxNTY2N2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSPj2OBhOA3ligviWQ1lOZzeFFzE AYNyMU0woEsiXbcmUivAjIesaS2SCn+AGm9QBU5DYDb911FnZv1wOZTalC5EqMa8 Xs+J2IWIQd1LPkpd1Hqkf55RHme/Zr0U0VMSkD/GW/T9urunS78OYamxofRraxtj sMueVw0+6UIbjrrb4tU9NS/n0sMuoUCJiJsZURJt//JK53dWmT3Eb6g45y2tmrDb bed7kTA3e/7NHiE8oOMDd0HpLQmJOhGVe92yZF8RYSuYmN/j3AzVCa3hZVMrPeUs /xcdGnfjEQvYU3auyHsPT7IJ6vyRm0YfTn7B0jXayy+IPQdGOrFXaD8itQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7O09GWG+BVFqH1FcbyPkdBVmf3MB8GA1UdIwQY MBaAFHwbuwgDeodiMEBvpnN5+YC1qzJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5Njct MDhkNWNkMTZmNTQ5LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5NjctMDhkNWNkMTZmNTQ5 LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4rBmm6w p6YgyWzqMS9jg+cndDwwXWnMFPy84Gi0GMd4I2K0xPDRXAYEui4IASgiXGGELwo/ D54acEUVEiZRIDjA8QQ78S2VaD1pH3Oxb21pxI6i5tc937MheJQMJ7p4Nz09i1BP Cy2+27jBaI8Z9up5kkwl6bjetjW3+k96ktivsWE28emJkp3tCuCWjHof22+SjaUX ufFGOSt1IXbYAADwUPWvWa4LwRRG+kZja0vTK2cDi45Omg7ZofUxaVKCYUAheLLN bgUTzxZBi44a4v8lyIzno5wZKI1hP8Pijv2E7zdRFRIy3YGl7jmUE+fGepGYbxky BPD0qP+2QT3goQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:03:41 2025 by rpki-client