This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft File: fBbp1X79rNP3vH6YSWtxn63Frkg.mft (raw, json) Hash identifier: OGS0oAhGEahowgWuhNY1R/SBIdQcrBTI+lMwgkFur/M= Subject key identifier: 25:CE:1B:98:02:58:5F:B2:00:2D:3F:63:06:84:50:05:16:7A:93:0E Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Certificate serial: 019B2E54B2FA2D311DD2B3935DAE78846157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft Manifest number: 0ACD Signing time: Wed 17 Dec 2025 22:01:01 +0000 Manifest this update: Wed 17 Dec 2025 22:01:01 +0000 Manifest next update: Thu 18 Dec 2025 22:01:01 +0000 Files and hashes: 1: 9x0C1ycahYIp0jhnR--av7frEvs.roa (hash: TxO2zK2Lq7rKbvn4CVYDpMwFmpWv6oOsKAtfhF9aA3s=) 2: fBbp1X79rNP3vH6YSWtxn63Frkg.crl (hash: v42M76NDahpHuSSCBe/X8ix9zvUkUcEVYWkOM/O9KCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:b2:fa:2d:31:1d:d2:b3:93:5d:ae:78:84:61:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48 Validity Not Before: Dec 17 22:01:01 2025 GMT Not After : Dec 18 22:01:01 2025 GMT Subject: CN=25ce1b9802585fb2002d3f6306845005167a930e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:aa:14:bd:ee:28:52:18:bd:68:29:e1:7e: c4:3d:84:fe:89:13:3d:44:8e:d3:b3:f5:6a:d0:1d: f3:66:09:22:81:3a:b1:12:94:4b:dc:84:d4:c8:28: f6:ec:b6:50:ef:f6:44:e0:42:f7:b9:3d:c0:a5:67: 81:fd:1a:76:69:68:58:c8:4e:8b:21:a6:48:16:e5: 47:9e:b0:87:e2:f7:01:d0:a5:b9:96:c5:db:39:1d: bd:4a:55:1e:0c:a6:c5:21:75:6c:b7:82:fe:c2:7a: 94:a2:45:8c:7a:92:cf:89:96:3d:88:0a:92:c0:5c: af:f7:44:63:77:ce:1f:3f:b2:9c:2b:ec:16:9e:ae: 00:f1:13:81:87:10:0f:37:9c:b1:0f:ac:fd:e1:4b: 59:6c:f8:27:76:69:0a:74:20:24:2c:eb:94:03:cd: be:37:17:de:ec:3a:57:82:ca:d6:52:57:eb:61:75: 70:0e:fe:06:90:0d:f9:56:b5:63:1d:54:27:78:27: d1:2f:dd:98:c4:8a:61:71:fb:11:49:93:e1:e5:c0: 8f:49:d4:a0:2a:56:73:b8:14:6f:3e:6c:7e:36:30: a5:4c:55:c1:dc:00:db:a1:37:d8:2d:f2:f3:f2:62: 35:3a:1d:4a:f1:7c:78:54:3b:39:a8:72:0d:2c:06: 4b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:1B:98:02:58:5F:B2:00:2D:3F:63:06:84:50:05:16:7A:93:0E X509v3 Authority Key Identifier: keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:53:44:5d:e2:6a:cf:39:a3:07:2b:28:92:bf:2d:aa:1a:5b: d6:e6:fd:2d:16:07:1c:9d:61:80:2a:ee:51:e1:18:39:bf:d4: f4:a3:c9:d1:02:11:72:66:fa:92:7a:26:89:44:d3:6b:5e:dc: c8:91:5b:c0:63:8a:82:c2:a0:4c:8c:bf:6a:b2:4d:1b:3b:8b: 1f:5b:fa:94:69:91:57:6c:f6:c4:bf:1a:cd:c6:59:c9:31:20: 26:ae:14:d5:8c:a3:2d:bc:04:d6:49:d3:dc:92:b3:e4:a9:43: 67:74:35:9c:35:83:f0:8d:39:e4:0d:c5:bc:d9:c8:48:6d:8b: 01:39:f3:12:f3:aa:32:b6:54:3c:8c:44:a5:a8:3e:da:ff:1c: 7a:26:8a:13:4d:05:a7:33:cd:fa:1b:db:79:0d:e5:ee:8b:8a: 90:f3:55:a7:3c:c5:58:ad:7e:af:f2:20:52:a8:2b:91:d0:01: 86:eb:86:db:b0:ac:ac:c4:8d:07:0a:5b:07:01:37:91:2c:7f: fe:c6:8c:cc:f4:b1:d4:4a:f6:16:21:9f:95:73:4a:92:91:57: a2:45:d5:19:05:3b:d8:fb:b2:d8:66:8e:8b:5c:65:45:3d:b1: 96:ce:3e:21:39:e1:df:53:e2:eb:1a:94:f5:b8:99:fb:00:53: 9b:4e:87:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVLL6LTEd0rOTXa54hGFXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMTZlOWQ1N2VmZGFjZDNmN2JjN2U5ODQ5NmI3MTlmYWRj NWFlNDgwHhcNMjUxMjE3MjIwMTAxWhcNMjUxMjE4MjIwMTAxWjAzMTEwLwYDVQQD EygyNWNlMWI5ODAyNTg1ZmIyMDAyZDNmNjMwNjg0NTAwNTE2N2E5MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnmqFL3uKFIYvWgp4X7EPYT+iRM9 RI7Ts/Vq0B3zZgkigTqxEpRL3ITUyCj27LZQ7/ZE4EL3uT3ApWeB/Rp2aWhYyE6L IaZIFuVHnrCH4vcB0KW5lsXbOR29SlUeDKbFIXVst4L+wnqUokWMepLPiZY9iAqS wFyv90Rjd84fP7KcK+wWnq4A8ROBhxAPN5yxD6z94UtZbPgndmkKdCAkLOuUA82+ Nxfe7DpXgsrWUlfrYXVwDv4GkA35VrVjHVQneCfRL92YxIphcfsRSZPh5cCPSdSg KlZzuBRvPmx+NjClTFXB3ADboTfYLfLz8mI1Oh1K8Xx4VDs5qHINLAZLRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXOG5gCWF+yAC0/YwaEUAUWepMOMB8GA1UdIwQY MBaAFHwW6dV+/azT97x+mElrcZ+txa5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2Et YjhhMjMyZWZmMmY2LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9mMTk3ZDAtYTU0MC00ODgyLWE2N2EtYjhhMjMyZWZmMmY2 LzEvZkJicDFYNzlyTlAzdkg2WVNXdHhuNjNGcmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlNEXeJq zzmjBysokr8tqhpb1ub9LRYHHJ1hgCruUeEYOb/U9KPJ0QIRcmb6knomiUTTa17c yJFbwGOKgsKgTIy/arJNGzuLH1v6lGmRV2z2xL8azcZZyTEgJq4U1YyjLbwE1knT 3JKz5KlDZ3Q1nDWD8I055A3FvNnISG2LATnzEvOqMrZUPIxEpag+2v8ceiaKE00F pzPN+hvbeQ3l7ouKkPNVpzzFWK1+r/IgUqgrkdABhuuG27CsrMSNBwpbBwE3kSx/ /saMzPSx1Er2FiGflXNKkpFXokXVGQU72Puy2GaOi1xlRT2xls4+ITnh31Pi6xqU 9biZ+wBTm06HYQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:00 2025 by rpki-client