This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json) Hash identifier: WItTFmNCnpcMLcKJt2o15YYYw6NiuAefeR24pNGZp7Y= Subject key identifier: 7F:96:85:B6:C3:B7:F8:FD:36:76:C1:F6:7A:B5:8A:8A:10:97:F1:AC Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Certificate serial: 019B2B53ED2C40901F935431078F3407A5DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft Manifest number: 1058 Signing time: Wed 17 Dec 2025 08:01:18 +0000 Manifest this update: Wed 17 Dec 2025 08:01:18 +0000 Manifest next update: Thu 18 Dec 2025 08:01:18 +0000 Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=) 2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: Ja4jqNJnuj6ohNNavYSrydbLYX/0cqJAW4TVgyV2SP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:ed:2c:40:90:1f:93:54:31:07:8f:34:07:a5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Validity Not Before: Dec 17 08:01:18 2025 GMT Not After : Dec 18 08:01:18 2025 GMT Subject: CN=7f9685b6c3b7f8fd3676c1f67ab58a8a1097f1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:86:75:d2:af:06:e1:8a:9e:30:62:b8:7c:df: 48:61:95:94:ad:68:af:44:20:54:b9:4c:b1:3c:8a: 02:6d:b1:80:60:e6:d1:b4:b5:0f:4a:df:ff:63:0d: 03:56:ce:34:80:e4:00:1b:72:19:a1:de:e7:8a:7d: 28:17:59:95:0c:16:88:f2:b0:ff:b0:7b:b5:68:5f: 8f:77:b6:09:65:64:9f:92:d0:72:20:6b:88:3f:22: 19:b3:58:f3:a7:aa:80:43:2c:ef:88:45:f7:19:f3: 76:4b:1b:67:d0:ab:20:b1:50:f9:68:17:82:43:2b: 33:81:02:1f:73:a9:93:5c:7c:ae:89:8a:24:ef:17: 61:a6:ff:d0:c4:ce:41:8c:ec:0d:37:1e:6d:2b:38: d7:b2:1a:8b:32:45:5a:48:6e:59:79:26:21:a9:32: e0:33:b3:64:29:a6:14:4c:e3:ce:43:ac:6a:ab:4b: fa:65:6a:97:c3:c3:88:f7:ba:bc:4e:76:5c:f8:5c: 46:f7:be:0b:6e:ce:6d:ec:0c:a4:48:f3:4d:05:46: 62:88:39:66:30:b9:03:e3:35:37:55:bd:48:bc:2e: cf:e7:cd:3b:22:fa:0f:14:e0:e9:14:ac:2e:48:5c: d6:33:f4:dc:01:e1:83:24:fd:0e:6f:87:69:b2:81: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:96:85:B6:C3:B7:F8:FD:36:76:C1:F6:7A:B5:8A:8A:10:97:F1:AC X509v3 Authority Key Identifier: keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c4:1a:0c:57:2c:bb:1e:dd:b7:6f:e0:7a:3a:79:ea:64:42: d4:d5:df:16:f4:86:4e:c3:ab:2f:8c:c9:f9:1c:d1:38:aa:3f: 80:6b:b6:fc:ee:5f:56:22:ec:67:04:b9:55:10:90:51:e0:95: 8c:bf:95:de:e2:03:c3:4a:0b:de:4a:51:f1:5b:e4:e0:e3:09: 1d:92:97:ad:fc:30:ff:85:2b:73:85:f8:d2:3c:f7:ca:56:1b: 29:22:bb:7e:74:66:46:a3:3b:31:fe:ca:25:b4:d2:43:d8:d8: 07:bb:a2:ea:3e:26:fa:78:3b:a7:c6:86:5a:49:7e:33:db:85: 9a:96:da:01:b0:1e:14:5d:2b:89:52:90:68:4a:42:9f:0e:4e: f9:25:76:b3:5b:86:f6:7d:dd:73:e0:87:03:70:61:a2:4c:3c: 25:45:8b:3f:71:86:aa:61:64:83:d4:60:e8:8f:7b:ad:e8:c2: cc:f7:55:52:83:f7:a9:8a:9e:78:84:28:a9:62:64:3d:7c:f1: e3:65:22:95:08:91:10:c8:58:8b:9e:b2:a2:8e:f6:d7:45:67: ec:eb:05:09:29:7a:65:b6:d9:1e:d3:b7:5e:2b:dc:bd:5d:0b: d9:e0:a9:75:3d:6b:0a:6d:d8:4e:dd:5c:31:1e:95:5a:9f:6e: ec:c9:b9:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU+0sQJAfk1QxB480B6XbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl OWNjNzkwHhcNMjUxMjE3MDgwMTE4WhcNMjUxMjE4MDgwMTE4WjAzMTEwLwYDVQQD Eyg3Zjk2ODViNmMzYjdmOGZkMzY3NmMxZjY3YWI1OGE4YTEwOTdmMWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IZ10q8G4YqeMGK4fN9IYZWUrWiv RCBUuUyxPIoCbbGAYObRtLUPSt//Yw0DVs40gOQAG3IZod7nin0oF1mVDBaI8rD/ sHu1aF+Pd7YJZWSfktByIGuIPyIZs1jzp6qAQyzviEX3GfN2Sxtn0KsgsVD5aBeC QyszgQIfc6mTXHyuiYok7xdhpv/QxM5BjOwNNx5tKzjXshqLMkVaSG5ZeSYhqTLg M7NkKaYUTOPOQ6xqq0v6ZWqXw8OI97q8TnZc+FxG974Lbs5t7AykSPNNBUZiiDlm MLkD4zU3Vb1IvC7P5807IvoPFODpFKwuSFzWM/TcAeGDJP0Ob4dpsoEfBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+WhbbDt/j9NnbB9nq1iooQl/GsMB8GA1UdIwQY MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecQaDFcs ux7dt2/gejp56mRC1NXfFvSGTsOrL4zJ+RzROKo/gGu2/O5fViLsZwS5VRCQUeCV jL+V3uIDw0oL3kpR8Vvk4OMJHZKXrfww/4Urc4X40jz3ylYbKSK7fnRmRqM7Mf7K JbTSQ9jYB7ui6j4m+ng7p8aGWkl+M9uFmpbaAbAeFF0riVKQaEpCnw5O+SV2s1uG 9n3dc+CHA3Bhokw8JUWLP3GGqmFkg9Rg6I97rejCzPdVUoP3qYqeeIQoqWJkPXzx 42UilQiREMhYi56yoo7210Vn7OsFCSl6ZbbZHtO3XivcvV0L2eCpdT1rCm3YTt1c MR6VWp9u7Mm5Xw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:12:05 2025 by rpki-client