This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json) Hash identifier: dF/GxdCaL63k5QUHYUFhle3RBDY/Ba58Y2Tz+PwFSXg= Subject key identifier: 97:1C:27:E3:CC:E3:75:03:BC:43:2D:7B:5F:1B:E9:DE:D9:CD:0D:17 Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Certificate serial: 019AF35241CD60AEA824470F6278BE6BDB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft Manifest number: 103B Signing time: Sat 06 Dec 2025 11:00:45 +0000 Manifest this update: Sat 06 Dec 2025 11:00:45 +0000 Manifest next update: Sun 07 Dec 2025 11:00:45 +0000 Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=) 2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: vSND0EP8qYluLRTpbtvfusSKIfKgQlzsKCg8AF3ATPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:41:cd:60:ae:a8:24:47:0f:62:78:be:6b:db:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Validity Not Before: Dec 6 11:00:45 2025 GMT Not After : Dec 7 11:00:45 2025 GMT Subject: CN=971c27e3cce37503bc432d7b5f1be9ded9cd0d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:54:65:6d:58:e6:41:07:df:5f:3a:1c:62:e8: ca:73:5a:c5:8a:34:8e:6e:6d:73:15:5c:3c:e6:40: 1c:fd:6e:f7:9b:91:67:90:f8:69:e6:59:a8:6e:4a: ed:c9:27:2e:02:28:73:a1:57:b2:c8:fa:cd:b5:ae: 4f:db:b0:d2:8d:d0:06:01:a6:8f:5a:f7:21:81:d8: 71:d0:82:0b:d3:8e:90:4f:68:92:be:f1:c8:ca:da: 5e:31:09:e2:1a:2f:d6:a9:4c:46:2e:4d:8a:21:c6: 05:b7:61:cb:a4:2a:1a:5b:69:2c:18:d5:3c:d1:e0: 88:6e:68:af:11:cc:b9:d7:72:cc:31:ff:28:57:ea: 68:f0:4b:9b:40:12:2f:b7:54:2c:f0:35:81:d2:6c: d4:57:e2:d6:62:70:4f:66:65:74:27:7f:48:ee:c0: d3:dd:97:39:a8:68:80:b0:6d:5e:fc:46:0f:2b:0d: 1f:f7:66:46:4a:ec:08:c9:8c:61:ee:c5:a1:b9:ea: 3e:95:bf:b8:c2:75:1b:f1:db:aa:8d:f2:75:96:80: 92:4f:15:df:e1:35:4c:50:55:97:3c:92:31:52:bd: ff:18:97:b3:63:29:86:68:d9:09:db:c2:e9:5c:6f: 8c:23:46:d4:f7:30:04:36:fa:d7:90:19:c0:f0:a5: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1C:27:E3:CC:E3:75:03:BC:43:2D:7B:5F:1B:E9:DE:D9:CD:0D:17 X509v3 Authority Key Identifier: keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:52:08:f2:bc:3f:6c:aa:e1:47:70:f5:f1:fd:23:5d:b0:27: 4f:ee:c5:ae:1d:41:d8:d4:36:6a:6f:8e:e8:b6:63:4b:75:21: 3b:99:6e:7b:91:3f:00:02:f7:a1:99:3b:0e:c9:f5:ff:38:b6: bd:10:e1:e3:3e:09:2a:99:42:57:b9:d5:7c:d5:1b:f3:dc:6a: e4:f3:82:de:ef:3a:6d:0d:13:72:ee:56:ff:91:8a:9c:02:14: 09:c6:65:f9:88:1a:7e:88:27:eb:a5:8d:35:87:4c:f0:e9:62: b9:ed:cb:28:8a:b6:a1:44:00:de:88:0b:07:c7:e6:45:9e:a2: a9:83:02:46:cb:38:b5:eb:40:55:bc:95:dd:f8:50:b8:16:f0: 26:6e:8b:46:3b:31:b4:f0:a3:97:9d:08:6a:20:a6:cc:2e:b6: 6b:55:46:27:72:1f:33:f5:0e:e1:34:65:d4:b3:aa:f1:b2:08: ba:a6:f6:f0:91:30:50:bb:cd:eb:88:3d:3b:11:f6:43:53:e6: 2a:31:65:f4:83:ee:6b:2a:dc:9e:4b:88:03:0c:1d:14:2c:cb: fb:e0:28:4d:38:38:70:4d:d0:43:af:ce:26:8c:5a:0b:e7:fb: f9:20:fc:b5:f6:18:f1:2e:1a:4b:06:9e:95:50:e0:d8:e7:88: c4:2d:f6:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUkHNYK6oJEcPYni+a9toMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl OWNjNzkwHhcNMjUxMjA2MTEwMDQ1WhcNMjUxMjA3MTEwMDQ1WjAzMTEwLwYDVQQD Eyg5NzFjMjdlM2NjZTM3NTAzYmM0MzJkN2I1ZjFiZTlkZWQ5Y2QwZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lRlbVjmQQffXzocYujKc1rFijSO bm1zFVw85kAc/W73m5FnkPhp5lmobkrtyScuAihzoVeyyPrNta5P27DSjdAGAaaP Wvchgdhx0IIL046QT2iSvvHIytpeMQniGi/WqUxGLk2KIcYFt2HLpCoaW2ksGNU8 0eCIbmivEcy513LMMf8oV+po8EubQBIvt1Qs8DWB0mzUV+LWYnBPZmV0J39I7sDT 3Zc5qGiAsG1e/EYPKw0f92ZGSuwIyYxh7sWhueo+lb+4wnUb8duqjfJ1loCSTxXf 4TVMUFWXPJIxUr3/GJezYymGaNkJ28LpXG+MI0bU9zAENvrXkBnA8KV3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJccJ+PM43UDvEMte18b6d7ZzQ0XMB8GA1UdIwQY MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVII8rw/ bKrhR3D18f0jXbAnT+7Frh1B2NQ2am+O6LZjS3UhO5lue5E/AAL3oZk7Dsn1/zi2 vRDh4z4JKplCV7nVfNUb89xq5POC3u86bQ0Tcu5W/5GKnAIUCcZl+Ygafogn66WN NYdM8Oliue3LKIq2oUQA3ogLB8fmRZ6iqYMCRss4tetAVbyV3fhQuBbwJm6LRjsx tPCjl50IaiCmzC62a1VGJ3IfM/UO4TRl1LOq8bIIuqb28JEwULvN64g9OxH2Q1Pm KjFl9IPuayrcnkuIAwwdFCzL++AoTTg4cE3QQ6/OJoxaC+f7+SD8tfYY8S4aSwae lVDg2OeIxC32Wg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:50 2025 by rpki-client