This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json) Hash identifier: sexVEnz5K381W2Z1E7HTKjqmWXVOSDVqVMBgeHykJ5Y= Subject key identifier: 3E:DA:C8:1D:E1:4C:43:FD:F3:6C:BA:5F:12:EB:A1:FA:D3:AA:7F:4F Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494 Certificate serial: 019AF464C6B342FFC3200860F655C1E51095 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft Manifest number: 082A Signing time: Sat 06 Dec 2025 16:00:36 +0000 Manifest this update: Sat 06 Dec 2025 16:00:36 +0000 Manifest next update: Sun 07 Dec 2025 16:00:36 +0000 Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=) 2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: FvVQX8n/OrwLX59NpBsr1WmEpbBKx60/oX5zeCrNXow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:c6:b3:42:ff:c3:20:08:60:f6:55:c1:e5:10:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494 Validity Not Before: Dec 6 16:00:36 2025 GMT Not After : Dec 7 16:00:36 2025 GMT Subject: CN=3edac81de14c43fdf36cba5f12eba1fad3aa7f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:d2:3b:bf:59:a3:89:07:35:f7:e2:82:0c: b4:f2:3e:a9:d3:62:1d:ff:22:3a:90:ff:4e:f0:eb: 8f:b9:d0:a0:42:93:56:25:45:38:d7:ba:25:a4:e4: 0f:03:0c:1f:e9:c9:b9:a7:98:62:20:13:ee:ae:53: 82:c0:e4:40:6e:80:d5:4a:4b:75:fa:59:11:23:0c: 10:5e:94:f1:c4:92:2e:d2:fe:88:7f:f8:54:ab:ad: 52:36:09:14:1f:58:b6:ad:45:24:a0:8f:85:e2:e1: c9:c6:96:e2:f7:82:91:86:4e:c0:52:c3:3b:14:0c: 3f:f0:13:67:2b:41:de:e0:ea:fc:b3:53:42:d1:2c: 06:4b:e4:f0:44:36:55:11:94:e3:88:c4:78:39:8b: 56:c3:7d:0a:6f:33:06:d6:c1:f4:2b:93:4c:c9:47: 9d:f5:b4:a2:f4:fb:9c:3d:14:11:aa:e7:a3:c3:b8: 12:a4:f8:43:7e:7b:7f:97:48:ce:0e:1c:e7:cf:a7: 91:8c:d4:d3:ea:2e:8b:d6:cc:b8:7c:bd:cc:d3:95: b6:75:dc:7d:1a:12:94:e9:66:3c:79:41:9e:ba:10: 68:b0:c1:ea:2e:a7:49:83:fb:32:93:48:d3:06:fe: 8e:bc:cc:6f:44:0b:64:ac:35:85:d2:80:da:18:cf: f3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:DA:C8:1D:E1:4C:43:FD:F3:6C:BA:5F:12:EB:A1:FA:D3:AA:7F:4F X509v3 Authority Key Identifier: keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:62:a2:c1:67:fc:ca:ff:82:44:93:a0:f8:e5:00:f7:5d:2a: 3f:5a:42:b4:30:2a:23:ec:1a:b3:59:11:49:ab:bb:b5:c8:e0: 01:72:e6:54:57:d8:c7:26:43:7d:44:de:5d:5f:2f:6f:5a:a6: 1d:84:e5:98:52:6a:9b:75:04:60:d0:ac:2a:9e:84:6c:21:01: aa:0f:f3:f4:63:c6:f8:61:c0:5b:d4:16:c9:5e:5c:fd:22:fa: d0:f3:72:0f:76:c1:15:e6:57:9a:c2:8e:47:f7:eb:dd:f3:cd: 9d:32:0c:14:9b:f8:70:81:71:27:72:58:0f:d4:bb:d0:6f:4f: 52:29:d9:b4:5d:20:9f:e5:ca:30:b5:6a:b2:96:6c:2c:bd:ad: ff:1f:e1:d3:eb:a1:e7:33:d8:ac:ce:2c:3e:d8:be:d9:a0:c3: b4:e6:f7:c6:2e:0e:da:38:7f:da:8e:08:fd:0b:18:f5:17:34: 99:85:f2:bb:cf:9f:73:72:21:22:0c:b5:f3:6a:62:21:91:be: b7:37:2a:1f:a7:7f:76:a3:53:72:88:30:9f:db:cd:a3:cc:c9: 81:b9:01:99:e7:75:85:09:7a:f5:32:9e:31:56:d4:73:41:e4: 20:ff:8f:66:e3:ae:3f:aa:3f:de:74:66:6e:1b:bb:33:05:2b: 2b:b8:a0:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZMazQv/DIAhg9lXB5RCVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1 NWI0OTQwHhcNMjUxMjA2MTYwMDM2WhcNMjUxMjA3MTYwMDM2WjAzMTEwLwYDVQQD EygzZWRhYzgxZGUxNGM0M2ZkZjM2Y2JhNWYxMmViYTFmYWQzYWE3ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoPSO79Zo4kHNffiggy08j6p02Id /yI6kP9O8OuPudCgQpNWJUU417olpOQPAwwf6cm5p5hiIBPurlOCwORAboDVSkt1 +lkRIwwQXpTxxJIu0v6If/hUq61SNgkUH1i2rUUkoI+F4uHJxpbi94KRhk7AUsM7 FAw/8BNnK0He4Or8s1NC0SwGS+TwRDZVEZTjiMR4OYtWw30KbzMG1sH0K5NMyUed 9bSi9PucPRQRquejw7gSpPhDfnt/l0jODhznz6eRjNTT6i6L1sy4fL3M05W2ddx9 GhKU6WY8eUGeuhBosMHqLqdJg/syk0jTBv6OvMxvRAtkrDWF0oDaGM/z2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7ayB3hTEP982y6XxLrofrTqn9PMB8GA1UdIwQY MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmKiwWf8 yv+CRJOg+OUA910qP1pCtDAqI+was1kRSau7tcjgAXLmVFfYxyZDfUTeXV8vb1qm HYTlmFJqm3UEYNCsKp6EbCEBqg/z9GPG+GHAW9QWyV5c/SL60PNyD3bBFeZXmsKO R/fr3fPNnTIMFJv4cIFxJ3JYD9S70G9PUinZtF0gn+XKMLVqspZsLL2t/x/h0+uh 5zPYrM4sPti+2aDDtOb3xi4O2jh/2o4I/QsY9Rc0mYXyu8+fc3IhIgy182piIZG+ tzcqH6d/dqNTcogwn9vNo8zJgbkBmed1hQl69TKeMVbUc0HkIP+PZuOuP6o/3nRm bhu7MwUrK7ig5w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:49 2025 by rpki-client