This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json) Hash identifier: 81hC0f3PwqPXl3zujKTBc6VPfDpgJepYqcS7kg1Va/s= Subject key identifier: 23:9F:3A:02:3C:12:AE:0E:7F:CD:60:66:74:B3:FE:BD:2F:9C:79:D7 Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4 Certificate serial: 019B26642752E0A49EB4568D50B029DA4615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft Manifest number: 063B Signing time: Tue 16 Dec 2025 09:00:56 +0000 Manifest this update: Tue 16 Dec 2025 09:00:56 +0000 Manifest next update: Wed 17 Dec 2025 09:00:56 +0000 Files and hashes: 1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=) 2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: 3npOzcG7Hnr9fm/84Z8Yrs/yNXec8D7JTN/12TETd4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:27:52:e0:a4:9e:b4:56:8d:50:b0:29:da:46:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4 Validity Not Before: Dec 16 09:00:56 2025 GMT Not After : Dec 17 09:00:56 2025 GMT Subject: CN=239f3a023c12ae0e7fcd606674b3febd2f9c79d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:57:87:b0:8a:32:d7:ff:b1:dc:9a:a9:e1:be: 96:3f:40:d9:ff:15:03:2c:01:99:04:ce:02:41:37: 90:f8:cc:29:c0:02:aa:0c:eb:9b:c5:b7:41:0b:d4: 50:52:87:cc:40:1e:3f:ca:a6:6d:8e:09:c3:eb:1f: c1:97:7c:94:dd:1b:ab:b9:c0:25:4b:4b:8a:4d:eb: ea:c3:ea:4b:8d:a6:f4:64:65:4a:3c:66:d6:4c:ea: b1:2e:74:8e:4a:d1:fb:2c:d8:8f:fe:c5:19:15:8a: 28:c0:e3:e2:10:c5:ac:3d:97:d5:75:e6:09:99:4a: c5:48:1e:4a:98:18:4f:95:e8:3e:ea:82:ee:54:f0: 7b:76:d3:ff:ff:d3:c7:f9:4f:e9:3d:63:4a:f1:b0: 0a:45:82:ea:05:da:b8:a0:12:d8:a8:98:d6:c0:25: 21:9c:67:01:0a:8a:45:06:49:2e:8e:90:40:a6:05: de:94:da:19:0b:15:d1:91:d2:fc:0d:66:9e:47:df: a5:df:99:c1:a1:73:1d:c0:38:de:1e:21:3b:3a:87: 49:8f:6d:87:7a:52:e8:71:50:67:9f:b0:d3:04:94: 46:03:d7:b0:07:62:64:c5:bb:fe:05:f8:60:21:26: 1e:ae:ff:e5:cf:ec:b4:7e:7a:3a:40:1a:ce:91:7f: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9F:3A:02:3C:12:AE:0E:7F:CD:60:66:74:B3:FE:BD:2F:9C:79:D7 X509v3 Authority Key Identifier: keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ef:ff:31:71:42:7f:08:03:2b:9f:ae:30:72:13:f4:05:81: f2:ae:b0:2d:5b:db:54:f5:f9:36:f6:08:4a:de:e2:01:7a:45: b8:a9:47:cd:d3:ed:a4:32:e4:47:63:6f:2b:0a:fe:a5:f1:c8: d2:2c:3b:01:ed:c1:f9:71:b9:c6:df:fc:ff:cb:4f:87:91:7c: 06:28:fc:3f:c7:e3:0c:4b:66:8f:49:b2:b7:f2:5f:e3:53:a4: e6:fb:59:4a:d8:6b:a7:ab:5a:a3:73:89:48:6b:78:d7:5a:55: 39:9a:35:90:f2:d3:40:85:90:fc:26:c3:8b:fa:eb:eb:46:2e: 71:24:36:6a:1c:ea:ed:e6:4e:a2:a1:9d:b1:80:0a:d2:a5:25: a0:d2:b0:9d:da:21:43:25:d8:41:b7:ce:1f:1d:12:95:e9:ff: ee:89:56:f7:98:3c:c2:20:10:a0:4f:e4:e5:96:57:33:1d:c2: 4f:4b:30:57:cc:87:e9:1d:c8:87:0c:d8:18:1a:d6:4e:85:54: ba:6e:ec:8d:1b:f8:d4:26:f0:08:15:84:0e:78:7f:3d:30:8b: 9c:b3:8e:d3:ff:67:fa:5c:d7:65:19:de:46:79:18:d2:f3:a2: 14:a1:ea:b5:3c:09:05:53:20:97:65:68:77:15:ae:e9:69:d5: 79:42:d7:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZCdS4KSetFaNULAp2kYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk OWFlYzQwHhcNMjUxMjE2MDkwMDU2WhcNMjUxMjE3MDkwMDU2WjAzMTEwLwYDVQQD EygyMzlmM2EwMjNjMTJhZTBlN2ZjZDYwNjY3NGIzZmViZDJmOWM3OWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+1eHsIoy1/+x3Jqp4b6WP0DZ/xUD LAGZBM4CQTeQ+MwpwAKqDOubxbdBC9RQUofMQB4/yqZtjgnD6x/Bl3yU3RurucAl S0uKTevqw+pLjab0ZGVKPGbWTOqxLnSOStH7LNiP/sUZFYoowOPiEMWsPZfVdeYJ mUrFSB5KmBhPleg+6oLuVPB7dtP//9PH+U/pPWNK8bAKRYLqBdq4oBLYqJjWwCUh nGcBCopFBkkujpBApgXelNoZCxXRkdL8DWaeR9+l35nBoXMdwDjeHiE7OodJj22H elLocVBnn7DTBJRGA9ewB2Jkxbv+BfhgISYerv/lz+y0fno6QBrOkX+BDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOfOgI8Eq4Of81gZnSz/r0vnHnXMB8GA1UdIwQY MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt ZDMwZWE5NjhiZmE3LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3 LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXu//MXFC fwgDK5+uMHIT9AWB8q6wLVvbVPX5NvYISt7iAXpFuKlHzdPtpDLkR2NvKwr+pfHI 0iw7Ae3B+XG5xt/8/8tPh5F8Bij8P8fjDEtmj0myt/Jf41Ok5vtZSthrp6tao3OJ SGt411pVOZo1kPLTQIWQ/CbDi/rr60YucSQ2ahzq7eZOoqGdsYAK0qUloNKwndoh QyXYQbfOHx0Slen/7olW95g8wiAQoE/k5ZZXMx3CT0swV8yH6R3IhwzYGBrWToVU um7sjRv41CbwCBWEDnh/PTCLnLOO0/9n+lzXZRneRnkY0vOiFKHqtTwJBVMgl2Vo dxWu6WnVeULXEg== -----END CERTIFICATE-----Generated at Tue Dec 16 19:12:34 2025 by rpki-client