This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft File: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft (raw, json) Hash identifier: QphGC40plikhhEVszPV0ZYrYxR4wJFaCDpYhY0/ecgg= Subject key identifier: AE:15:8B:1C:BD:A3:80:DE:0B:B7:5C:2D:04:66:E8:51:D0:51:42:64 Authority key identifier: 7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4 Certificate issuer: /CN=7f0757c331981e042b7471373527d0f64a1356b4 Certificate serial: 019AF12EAEC88342CF4F46CD4F0A594769E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft Manifest number: 1304 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl (hash: 7Q2dgCXS3YBd7wT5kQHOLxVDyOgZT9OwRCseOwUrNVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ae:c8:83:42:cf:4f:46:cd:4f:0a:59:47:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f0757c331981e042b7471373527d0f64a1356b4 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=ae158b1cbda380de0bb75c2d0466e851d0514264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:5b:72:2d:a6:d4:15:ab:f7:ea:e7:c4:87: 07:e7:0b:c8:e7:8b:6f:a5:4d:80:39:94:27:51:c2: 84:63:9c:6b:b5:ca:42:72:1c:06:37:70:74:47:2a: 24:52:d5:4e:36:ec:2c:0e:4c:51:bd:64:5e:67:cb: 89:1f:96:14:ca:6c:c0:5e:30:b1:51:cd:1f:07:2f: 70:60:76:54:91:d5:e5:80:11:60:e7:14:a5:be:cb: 79:f5:d1:90:c1:69:2d:fc:ae:c8:c1:8d:3a:da:88: 34:63:84:23:18:77:14:94:9c:8f:97:c4:bf:bd:46: 91:23:2f:72:c5:2d:6c:7a:30:0d:95:c3:17:dd:a0: 4c:39:9e:44:1f:14:87:4e:af:e0:1e:35:92:fd:59: d0:b4:8b:2c:2f:75:99:68:bd:13:84:04:4d:1a:79: b5:1d:11:2a:2c:47:53:90:08:74:bd:b8:42:ec:5c: 18:09:75:19:77:6a:3e:d6:53:25:a6:bf:d6:45:33: 49:39:bc:6c:b7:23:d4:3d:d8:3c:81:1e:5c:82:10: a2:dd:df:1b:3d:b7:a4:7f:cc:4e:0b:8f:a5:92:3c: b1:9b:b7:62:22:ed:39:55:7f:e0:30:2a:7b:46:33: d0:8b:b7:c9:e0:c7:29:78:10:3e:46:d4:fd:07:d0: 7c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:15:8B:1C:BD:A3:80:DE:0B:B7:5C:2D:04:66:E8:51:D0:51:42:64 X509v3 Authority Key Identifier: keyid:7F:07:57:C3:31:98:1E:04:2B:74:71:37:35:27:D0:F6:4A:13:56:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f96f9-569f-433c-b9a8-6a2612d40f50/1/fwdXwzGYHgQrdHE3NSfQ9koTVrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:7b:0e:03:e3:3d:53:ef:68:f8:0e:d8:a0:9c:6c:1e:87:04: 54:b0:49:76:99:94:8c:27:c5:9d:0a:65:01:dc:d4:e1:a1:dc: c8:d1:38:5d:43:62:7e:3a:42:cf:d5:09:b9:87:2c:49:e8:34: 5b:2e:1a:2e:bc:79:fa:a5:cc:07:3e:58:ea:d0:04:8a:62:5b: ba:54:0f:5b:5c:ac:e4:47:74:24:a6:b2:4a:3a:5d:87:54:cc: fb:e4:cb:4f:8f:9d:64:16:20:a2:d7:9d:fd:41:3a:a0:e5:b0: 32:dd:c0:2a:4d:26:4f:e1:00:3d:b8:1a:2b:7c:bf:9b:9c:c9: cc:94:43:eb:c4:f7:62:81:15:5a:6e:79:5c:b0:e8:86:37:9e: 1d:32:83:b8:4f:7d:a9:33:f2:93:1f:95:59:66:ee:cc:6a:7c: c7:e2:dd:2a:b2:7b:a9:fd:44:78:4f:4c:ca:97:1f:20:b1:a3: 71:eb:d7:f3:05:b6:d5:f1:6d:67:4c:e3:45:e4:0a:6b:09:09: 03:f9:65:bf:3b:5d:65:5f:50:6e:1b:fd:f0:44:ef:fb:af:5e: 4f:c2:17:31:91:48:45:5b:05:6e:08:46:ef:73:fc:4f:e3:36: f3:7e:61:4c:a0:22:28:5f:aa:02:99:33:b7:bb:2b:be:6d:c5: 0c:9f:52:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq7Ig0LPT0bNTwpZR2ngMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMDc1N2MzMzE5ODFlMDQyYjc0NzEzNzM1MjdkMGY2NGEx MzU2YjQwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EyhhZTE1OGIxY2JkYTM4MGRlMGJiNzVjMmQwNDY2ZTg1MWQwNTE0MjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbxbci2m1BWr9+rnxIcH5wvI54tv pU2AOZQnUcKEY5xrtcpCchwGN3B0RyokUtVONuwsDkxRvWReZ8uJH5YUymzAXjCx Uc0fBy9wYHZUkdXlgBFg5xSlvst59dGQwWkt/K7IwY062og0Y4QjGHcUlJyPl8S/ vUaRIy9yxS1sejANlcMX3aBMOZ5EHxSHTq/gHjWS/VnQtIssL3WZaL0ThARNGnm1 HREqLEdTkAh0vbhC7FwYCXUZd2o+1lMlpr/WRTNJObxstyPUPdg8gR5cghCi3d8b Pbekf8xOC4+lkjyxm7diIu05VX/gMCp7RjPQi7fJ4McpeBA+RtT9B9B8KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4Vixy9o4DeC7dcLQRm6FHQUUJkMB8GA1UdIwQY MBaAFH8HV8MxmB4EK3RxNzUn0PZKE1a0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgt NmEyNjEyZDQwZjUwLzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80Zjk2ZjktNTY5Zi00MzNjLWI5YTgtNmEyNjEyZDQwZjUw LzEvZndkWHd6R1lIZ1FyZEhFM05TZlE5a29UVnJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHsOA+M9 U+9o+A7YoJxsHocEVLBJdpmUjCfFnQplAdzU4aHcyNE4XUNifjpCz9UJuYcsSeg0 Wy4aLrx5+qXMBz5Y6tAEimJbulQPW1ys5Ed0JKaySjpdh1TM++TLT4+dZBYgoted /UE6oOWwMt3AKk0mT+EAPbgaK3y/m5zJzJRD68T3YoEVWm55XLDohjeeHTKDuE99 qTPykx+VWWbuzGp8x+LdKrJ7qf1EeE9MypcfILGjcevX8wW21fFtZ0zjReQKawkJ A/llvztdZV9Qbhv98ETv+69eT8IXMZFIRVsFbghG73P8T+M2835hTKAiKF+qApkz t7srvm3FDJ9SaA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:13 2025 by rpki-client