This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json) Hash identifier: crmHjOglslMa26YIiE3bVJ4VRK041Rm8K+LZlagDkRg= Subject key identifier: B7:0B:A5:1C:61:8E:DC:1E:E8:7E:72:55:76:B5:85:72:AA:DD:C8:53 Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Certificate serial: 019AF27716E71114C3739C5AE41878F0A765 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft Manifest number: 0AAE Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=) 2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: 7FHm6PMwAgmZDBMTueiNRE7h/1zOBLVapJNlAweQWsk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:16:e7:11:14:c3:73:9c:5a:e4:18:78:f0:a7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=b70ba51c618edc1ee87e725576b58572aaddc853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:1b:64:8b:fb:bd:f4:4a:c6:1c:d6:cb:db: 24:ca:60:91:21:d6:a0:da:3c:ca:76:82:fd:b9:55: 22:1c:31:9a:2a:2e:2a:11:06:0d:52:f4:0b:b8:43: 41:4e:0d:32:0a:43:dd:bf:2b:80:b4:27:ca:fe:3f: 3a:b7:c0:86:61:ec:b2:5f:00:d2:0f:ba:c1:f2:0b: 72:b9:48:d4:c7:f9:1b:39:20:a3:cb:a2:8d:22:cd: 60:85:7f:b7:c4:55:bf:9e:bf:84:19:7b:79:67:9c: e5:05:47:e8:92:4b:a1:f9:79:99:5b:27:b7:bd:59: 3d:0b:9a:35:30:c1:74:33:83:03:76:c8:29:18:65: 43:07:0d:22:5b:50:92:f5:3b:58:b2:a2:5d:0e:6b: 50:a2:f3:e5:8d:98:26:5f:5b:fd:2f:e8:a9:e9:31: 54:23:1e:09:ee:00:37:72:1c:0a:c4:15:d7:e2:21: 56:e8:7d:6a:bb:54:cd:c6:e5:7a:70:df:95:a8:97: a7:ab:b8:fa:c2:1a:22:4c:41:91:d3:c8:52:62:f2: 68:eb:83:63:09:7b:30:0a:73:36:eb:2d:1f:46:c4: 4b:98:58:f2:58:da:a9:55:c6:2f:75:21:ac:79:9f: 99:da:69:9a:19:de:aa:23:1e:94:79:2e:e5:3c:31: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0B:A5:1C:61:8E:DC:1E:E8:7E:72:55:76:B5:85:72:AA:DD:C8:53 X509v3 Authority Key Identifier: keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4d:60:31:93:81:52:51:a4:2f:c9:1a:6c:e7:7d:cd:c5:67: 87:5f:83:c1:eb:a4:39:34:81:c0:6c:93:2f:ad:48:3e:67:bb: 1a:25:14:34:26:fa:74:0b:95:e1:b7:80:46:86:4e:9e:be:41: 47:d7:3a:b5:08:fc:17:3c:09:0b:8f:47:86:ed:91:2f:d9:b3: 90:82:2f:25:e2:18:9a:1c:b6:01:51:65:c6:58:43:9d:fd:bd: 04:34:0c:79:2b:24:e4:58:2a:08:28:9e:33:91:97:f0:61:c4: 3b:02:07:c9:56:c3:b1:22:2a:d9:68:af:78:3c:4d:0d:4d:c6: f7:5c:40:27:fd:84:ca:a6:a5:b7:29:d0:f3:29:91:c0:38:10: ce:31:ee:ac:13:50:8b:6c:70:21:21:bf:31:9d:6c:dc:1b:80: 05:2f:b8:07:4b:5d:28:ac:11:bc:00:81:47:36:66:0f:5e:c9: 28:a8:a3:0a:db:0d:87:db:bc:24:8e:3e:bd:7f:21:78:86:ef: 76:cc:b8:68:de:a4:a0:92:aa:c6:92:2f:00:07:14:71:80:20: ba:61:f3:69:fa:2c:c5:51:d7:e1:00:f4:b2:ef:92:54:05:46: 2c:23:ce:2b:eb:81:54:9c:5d:85:61:bb:84:1c:45:82:5f:bc: 0a:fc:a4:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxbnERTDc5xa5Bh48KdlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj NWFlNDgwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhiNzBiYTUxYzYxOGVkYzFlZTg3ZTcyNTU3NmI1ODU3MmFhZGRjODUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/sbZIv7vfRKxhzWy9skymCRIdag 2jzKdoL9uVUiHDGaKi4qEQYNUvQLuENBTg0yCkPdvyuAtCfK/j86t8CGYeyyXwDS D7rB8gtyuUjUx/kbOSCjy6KNIs1ghX+3xFW/nr+EGXt5Z5zlBUfokkuh+XmZWye3 vVk9C5o1MMF0M4MDdsgpGGVDBw0iW1CS9TtYsqJdDmtQovPljZgmX1v9L+ip6TFU Ix4J7gA3chwKxBXX4iFW6H1qu1TNxuV6cN+VqJenq7j6whoiTEGR08hSYvJo64Nj CXswCnM26y0fRsRLmFjyWNqpVcYvdSGseZ+Z2mmaGd6qIx6UeS7lPDGu/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLcLpRxhjtwe6H5yVXa1hXKq3chTMB8GA1UdIwQY MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2 LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK01gMZOB UlGkL8kabOd9zcVnh1+DweukOTSBwGyTL61IPme7GiUUNCb6dAuV4beARoZOnr5B R9c6tQj8FzwJC49Hhu2RL9mzkIIvJeIYmhy2AVFlxlhDnf29BDQMeSsk5FgqCCie M5GX8GHEOwIHyVbDsSIq2WiveDxNDU3G91xAJ/2EyqaltynQ8ymRwDgQzjHurBNQ i2xwISG/MZ1s3BuABS+4B0tdKKwRvACBRzZmD17JKKijCtsNh9u8JI4+vX8heIbv dsy4aN6koJKqxpIvAAcUcYAgumHzafosxVHX4QD0su+SVAVGLCPOK+uBVJxdhWG7 hBxFgl+8CvykSw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:56 2025 by rpki-client