This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json) Hash identifier: 0zt/qxmowLb/CqsP/3dnsNvvg22NSt2VBGVoF+inZLs= Subject key identifier: C1:E9:13:EF:FA:C3:A8:B3:79:68:16:ED:83:53:E0:68:CE:8D:3F:E4 Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b Certificate serial: 019AF19B6C02D58016775FCEBD28141E57F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft Manifest number: 0873 Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=) 2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: 80GI/aQlkPbQzZl53tUojS22T/sSBIDTD8ZGdRKjKmQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6c:02:d5:80:16:77:5f:ce:bd:28:14:1e:57:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=c1e913effac3a8b3796816ed8353e068ce8d3fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:55:9d:b4:31:a3:14:da:2f:e5:af:fd:a3:a0: 6b:6f:7a:12:ac:1b:b1:53:72:b1:b0:21:4d:cb:a8: fc:cf:0f:7b:23:79:25:43:39:83:9d:c1:99:de:84: 6b:be:7a:26:88:a3:70:f5:81:8b:f7:fa:d4:35:67: 16:90:46:9c:39:9a:95:8e:2a:d6:ed:03:1f:8e:22: fc:ed:be:93:32:e9:57:c8:0d:84:fd:49:74:46:e2: 14:40:71:36:5d:3b:4a:4b:19:61:3f:e9:48:12:1c: a6:dd:6e:82:fb:ec:43:6f:ef:67:c4:b8:3b:3a:02: 14:e8:0a:1d:43:70:80:10:62:7f:f3:4a:6c:4d:11: 4b:98:98:b2:14:88:8b:b4:98:d3:a6:8a:a6:eb:19: 9f:f0:b1:de:75:81:7b:b7:f5:58:20:02:4d:29:18: 77:61:d4:35:13:05:86:2e:7a:0f:0b:37:8a:07:6c: ef:0a:ab:ba:46:18:1f:87:e5:f2:21:da:3e:88:26: d9:ad:66:97:85:1d:46:ab:73:b6:9e:8d:53:50:84: 31:71:a0:77:64:04:b7:77:ff:68:2f:11:f2:01:8e: e3:a7:4d:cd:bf:9a:5e:50:7f:fe:0e:af:34:1b:7e: 9c:99:6e:da:c5:10:08:e6:6f:5c:82:23:81:ce:7b: 5d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E9:13:EF:FA:C3:A8:B3:79:68:16:ED:83:53:E0:68:CE:8D:3F:E4 X509v3 Authority Key Identifier: keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:89:2d:77:54:65:a8:3e:fd:de:56:d5:5a:de:97:4d:4c:9d: fd:0d:eb:51:af:ab:2b:5f:c4:3a:81:f2:83:b9:ec:f9:ba:67: 76:5c:fc:04:14:2a:83:74:c2:6a:3b:ed:d6:86:a8:ed:67:f1: e3:e7:89:93:31:72:a4:34:af:e3:4e:f9:95:38:20:96:81:4b: f5:43:80:e5:e5:00:64:f5:79:a3:1e:c2:87:c8:24:d6:0b:3a: ee:06:a9:5b:12:c8:78:5b:f6:90:0b:cd:5b:d0:36:fb:73:34: ba:15:b8:44:4a:d5:84:74:09:84:72:de:6e:e8:1d:df:bf:f4: e7:72:74:e6:2a:56:c6:a9:a6:dc:34:0c:a7:13:2b:6b:ad:05: df:81:e9:dd:58:40:fa:44:94:5b:04:fc:46:b6:f2:d1:71:da: b6:ce:16:cb:12:e7:b8:e0:4f:77:b9:3f:54:bb:5b:0f:c8:fe: 09:78:b5:25:e0:21:52:5c:f1:ef:2d:d3:e0:ea:68:8c:1a:90: 0d:7c:08:dd:b4:4b:bc:6a:0f:1d:09:01:b8:e2:20:c9:be:b6: 5c:6e:f0:66:3a:c6:bf:15:f7:2c:df:6d:68:8b:ea:b5:04:27: f4:4f:b4:45:a7:c1:16:57:b4:11:f5:3b:0a:86:b4:4f:6e:ea: 2e:57:30:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2wC1YAWd1/OvSgUHlf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4 ZWYyNWIwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EyhjMWU5MTNlZmZhYzNhOGIzNzk2ODE2ZWQ4MzUzZTA2OGNlOGQzZmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlWdtDGjFNov5a/9o6Brb3oSrBux U3KxsCFNy6j8zw97I3klQzmDncGZ3oRrvnomiKNw9YGL9/rUNWcWkEacOZqVjirW 7QMfjiL87b6TMulXyA2E/Ul0RuIUQHE2XTtKSxlhP+lIEhym3W6C++xDb+9nxLg7 OgIU6AodQ3CAEGJ/80psTRFLmJiyFIiLtJjTpoqm6xmf8LHedYF7t/VYIAJNKRh3 YdQ1EwWGLnoPCzeKB2zvCqu6Rhgfh+XyIdo+iCbZrWaXhR1Gq3O2no1TUIQxcaB3 ZAS3d/9oLxHyAY7jp03Nv5peUH/+Dq80G36cmW7axRAI5m9cgiOBzntdkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHpE+/6w6izeWgW7YNT4GjOjT/kMB8GA1UdIwQY MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2 LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqoktd1Rl qD793lbVWt6XTUyd/Q3rUa+rK1/EOoHyg7ns+bpndlz8BBQqg3TCajvt1oao7Wfx 4+eJkzFypDSv4075lTggloFL9UOA5eUAZPV5ox7Ch8gk1gs67gapWxLIeFv2kAvN W9A2+3M0uhW4RErVhHQJhHLebugd37/053J05ipWxqmm3DQMpxMra60F34Hp3VhA +kSUWwT8Rrby0XHats4WyxLnuOBPd7k/VLtbD8j+CXi1JeAhUlzx7y3T4OpojBqQ DXwI3bRLvGoPHQkBuOIgyb62XG7wZjrGvxX3LN9taIvqtQQn9E+0RafBFle0EfU7 Coa0T27qLlcwNg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:10 2025 by rpki-client