This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json) Hash identifier: h/hVyQdMVvwGY7czdVdCzXkPX7gpgQfJaJoVcpisDIg= Subject key identifier: C8:53:E6:80:C9:7E:31:49:B9:44:AE:20:F2:7E:95:62:F1:5E:4D:D4 Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Certificate serial: 019B2B8AC5BB020FFD06A0FE67FE39822648 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft Manifest number: 0C88 Signing time: Wed 17 Dec 2025 09:01:13 +0000 Manifest this update: Wed 17 Dec 2025 09:01:13 +0000 Manifest next update: Thu 18 Dec 2025 09:01:13 +0000 Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=) 2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: QpO8A12rFlsJ0ykM1omGdqO2UyHkcCUiNGxvGp3rHZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c5:bb:02:0f:fd:06:a0:fe:67:fe:39:82:26:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Validity Not Before: Dec 17 09:01:13 2025 GMT Not After : Dec 18 09:01:13 2025 GMT Subject: CN=c853e680c97e3149b944ae20f27e9562f15e4dd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:6f:f6:db:2a:e0:05:39:5b:ed:26:42:30: ca:c8:32:34:63:74:20:00:bb:69:8c:1d:ba:3e:0e: 5e:76:36:54:1b:18:5c:51:a3:2f:42:22:80:bd:f7: 52:7c:46:e3:4d:be:c9:e9:ef:6b:3d:c8:a2:02:96: 8d:42:6c:26:40:76:e5:79:5d:31:91:ff:d8:64:33: 21:16:c4:6f:53:87:bd:00:01:c7:d6:cc:34:ae:d5: f0:a1:6e:24:d9:81:46:71:a9:a8:f0:f1:55:25:dc: 23:24:af:72:31:66:23:b5:4f:96:bd:15:9a:cc:fe: b0:6c:07:0a:17:b4:b3:73:de:d0:b6:99:8c:65:3c: db:57:ec:1a:49:90:57:e7:fc:1a:43:ef:95:c7:71: 46:8a:5f:25:14:bb:08:d4:b0:96:88:19:d6:d1:56: df:78:45:c3:ae:9d:0e:3b:ed:83:c0:51:71:ac:4a: d1:f6:8d:e2:c2:76:d8:db:61:39:80:75:2d:c8:27: dc:01:b1:1b:62:60:ae:4d:c5:9b:a0:56:7f:f0:7d: 27:0e:ba:7b:32:f4:ce:4a:fe:69:19:cb:70:35:46: 4b:ed:15:83:11:6a:97:ef:05:b5:c8:3e:3a:2f:be: bf:6b:7f:7b:9e:35:6e:a9:5a:ad:d4:8f:e7:07:35: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:53:E6:80:C9:7E:31:49:B9:44:AE:20:F2:7E:95:62:F1:5E:4D:D4 X509v3 Authority Key Identifier: keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:37:0b:dc:9e:38:0b:4a:da:70:b0:91:88:48:3d:6b:66:1b: de:32:89:21:a5:fc:50:45:06:3c:3f:0d:56:a6:53:f6:31:f9: 01:36:cc:d6:35:81:1e:12:59:09:b0:40:c6:ff:65:ef:77:10: 1a:7c:10:0b:21:76:f3:f7:f8:03:f4:54:86:a4:25:78:d6:0e: 2d:52:14:41:51:d3:18:a9:35:87:ca:38:91:d7:eb:d4:c0:fd: 6e:2b:60:07:4f:c4:2d:d7:d2:ea:de:75:0f:4b:33:9c:c3:27: 8c:4f:7a:f3:2c:8c:20:ce:e8:34:f3:27:39:0d:17:0b:e0:a2: 78:16:8d:93:8c:6f:46:de:8d:67:7b:9b:73:fe:44:58:04:ed: 2d:2d:ef:b7:22:0f:71:22:d1:de:ca:5f:a2:5d:21:98:e9:7d: 0b:bb:49:e8:ec:7e:f8:d7:c6:f8:a9:85:a7:1a:8c:3c:eb:e0: 01:9a:fb:e0:f3:0d:c4:2e:4e:6a:f6:a6:8e:d5:a3:d5:81:04: 00:be:9f:91:e6:7f:fa:87:ce:bc:3f:e5:24:b6:a0:05:af:41: b9:f0:4f:c9:2b:5e:bb:62:60:2f:96:65:5b:bb:15:73:7d:eb: c1:c3:f9:b9:1c:ed:f5:18:3b:6d:ec:94:a1:ed:a8:a8:b3:ce: 97:a8:b3:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisW7Ag/9BqD+Z/45giZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj MDFhZjkwHhcNMjUxMjE3MDkwMTEzWhcNMjUxMjE4MDkwMTEzWjAzMTEwLwYDVQQD EyhjODUzZTY4MGM5N2UzMTQ5Yjk0NGFlMjBmMjdlOTU2MmYxNWU0ZGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyFv9tsq4AU5W+0mQjDKyDI0Y3Qg ALtpjB26Pg5edjZUGxhcUaMvQiKAvfdSfEbjTb7J6e9rPciiApaNQmwmQHbleV0x kf/YZDMhFsRvU4e9AAHH1sw0rtXwoW4k2YFGcamo8PFVJdwjJK9yMWYjtU+WvRWa zP6wbAcKF7Szc97QtpmMZTzbV+waSZBX5/waQ++Vx3FGil8lFLsI1LCWiBnW0Vbf eEXDrp0OO+2DwFFxrErR9o3iwnbY22E5gHUtyCfcAbEbYmCuTcWboFZ/8H0nDrp7 MvTOSv5pGctwNUZL7RWDEWqX7wW1yD46L76/a397njVuqVqt1I/nBzWcoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhT5oDJfjFJuUSuIPJ+lWLxXk3UMB8GA1UdIwQY MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjcL3J44 C0racLCRiEg9a2Yb3jKJIaX8UEUGPD8NVqZT9jH5ATbM1jWBHhJZCbBAxv9l73cQ GnwQCyF28/f4A/RUhqQleNYOLVIUQVHTGKk1h8o4kdfr1MD9bitgB0/ELdfS6t51 D0sznMMnjE968yyMIM7oNPMnOQ0XC+CieBaNk4xvRt6NZ3ubc/5EWATtLS3vtyIP cSLR3spfol0hmOl9C7tJ6Ox++NfG+KmFpxqMPOvgAZr74PMNxC5OavamjtWj1YEE AL6fkeZ/+ofOvD/lJLagBa9BufBPySteu2JgL5ZlW7sVc33rwcP5uRzt9Rg7beyU oe2oqLPOl6izTA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:48:15 2025 by rpki-client