This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json) Hash identifier: qLVe8yTLReck9bIaaY0u+jnKmaMKBawdgffVdZN/6V8= Subject key identifier: 9E:91:79:21:AB:77:CF:8B:BA:85:63:E8:75:82:09:55:AE:B6:0E:46 Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Certificate serial: 019AF5AE927DB0660645D00A6B9E9C50CC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft Manifest number: DF Signing time: Sat 06 Dec 2025 22:00:49 +0000 Manifest this update: Sat 06 Dec 2025 22:00:49 +0000 Manifest next update: Sun 07 Dec 2025 22:00:49 +0000 Files and hashes: 1: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: UqKXebKP4+HeRTQXcPlt9ZjXV5QIHm34dCsNDTNEH5g=) 2: zIaCxLUjq21dOPZ6oricOQf9_f8.roa (hash: lDpgOF97BKIlMEFYdLb+3oy7Ebe7Mk1d7MHbR+tgmKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:92:7d:b0:66:06:45:d0:0a:6b:9e:9c:50:cc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Validity Not Before: Dec 6 22:00:49 2025 GMT Not After : Dec 7 22:00:49 2025 GMT Subject: CN=9e917921ab77cf8bba8563e875820955aeb60e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:96:1c:78:ae:88:0c:91:9a:b9:8a:d2:d4:6a: 50:e2:62:8e:0d:bf:1f:02:79:67:14:12:11:ec:a7: 52:c9:23:a2:91:64:2f:df:78:69:08:16:ef:95:91: 36:37:5b:2d:f1:75:15:7d:c9:62:0f:71:5d:33:fb: 31:da:3b:a1:1a:c6:85:b4:1b:4b:7c:bc:21:2f:d7: f9:16:08:ff:de:6a:c1:a6:65:6b:da:19:3f:b5:a6: 53:4c:28:d7:d5:0d:dc:0a:9e:0a:7d:0c:ab:ca:60: 2e:f4:0d:b1:1f:b4:db:51:33:5c:01:b8:ee:e8:25: a1:c5:27:88:f1:74:f4:0b:96:a7:8c:41:7a:2f:6b: 60:37:94:a8:5f:56:0e:98:34:23:fb:0e:0a:63:8d: 53:bc:81:36:d8:17:fc:63:bd:5b:23:44:17:0c:81: d2:90:33:f0:20:0b:65:8d:21:0f:0a:f3:0d:6c:ad: 30:7f:12:c3:45:62:08:e2:ba:91:49:13:ce:19:c4: af:99:75:08:3d:07:7e:61:77:54:62:be:d3:66:eb: ee:dc:96:b3:b0:a5:b2:60:5d:6e:ce:e0:f2:52:b6: a7:5c:72:78:72:9b:e9:49:72:01:45:99:f6:3b:cd: a1:fc:a8:df:f4:16:97:22:1c:44:15:03:59:a7:14: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:91:79:21:AB:77:CF:8B:BA:85:63:E8:75:82:09:55:AE:B6:0E:46 X509v3 Authority Key Identifier: keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a1:74:52:21:a5:2b:a4:9e:32:fe:c2:dd:82:b7:50:93:58: b3:8d:26:0b:8f:a6:01:9c:64:41:48:98:2a:ac:7b:9e:3f:18: b6:48:01:6e:d1:38:d2:d4:24:e0:41:a4:19:99:df:e9:4f:da: 2e:69:58:a4:6e:1d:e3:44:63:15:87:aa:91:91:96:6b:8d:60: 5f:21:e6:36:ba:71:fb:ad:72:08:31:74:f8:15:1f:90:93:47: 33:32:95:d5:47:32:31:f8:2b:11:60:aa:d9:63:8d:98:b0:7c: 62:b2:a7:49:7f:62:ad:55:8e:d1:68:c0:fd:25:d7:f7:87:2b: ab:d9:30:82:63:e3:83:5d:13:4e:85:cd:0b:f7:77:12:05:a5: 79:86:3e:00:48:5b:37:c2:65:57:75:87:d2:79:6c:b8:ea:19: 1e:f3:93:e5:59:e2:b2:e7:37:0c:b7:8d:9f:c3:c0:ce:cd:c8: 5c:ad:be:36:e9:b7:dc:cc:50:86:9b:db:ec:3e:79:68:49:4e: 2a:30:dc:b2:5d:bc:5a:d5:f2:dd:dd:59:58:6c:38:58:43:92: d4:01:6b:c3:d5:42:38:fd:c6:92:f0:e4:59:43:24:5b:9a:f5: 21:ab:ac:b0:fb:b6:ee:a9:ff:48:59:5c:6b:8b:b9:8c:d1:08: 54:bf:4c:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rpJ9sGYGRdAKa56cUMwQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0 NGI4YjIwHhcNMjUxMjA2MjIwMDQ5WhcNMjUxMjA3MjIwMDQ5WjAzMTEwLwYDVQQD Eyg5ZTkxNzkyMWFiNzdjZjhiYmE4NTYzZTg3NTgyMDk1NWFlYjYwZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJYceK6IDJGauYrS1GpQ4mKODb8f AnlnFBIR7KdSySOikWQv33hpCBbvlZE2N1st8XUVfcliD3FdM/sx2juhGsaFtBtL fLwhL9f5Fgj/3mrBpmVr2hk/taZTTCjX1Q3cCp4KfQyrymAu9A2xH7TbUTNcAbju 6CWhxSeI8XT0C5anjEF6L2tgN5SoX1YOmDQj+w4KY41TvIE22Bf8Y71bI0QXDIHS kDPwIAtljSEPCvMNbK0wfxLDRWII4rqRSRPOGcSvmXUIPQd+YXdUYr7TZuvu3Jaz sKWyYF1uzuDyUranXHJ4cpvpSXIBRZn2O82h/Kjf9BaXIhxEFQNZpxStNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6ReSGrd8+LuoVj6HWCCVWutg5GMB8GA1UdIwQY MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5 LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqF0UiGl K6SeMv7C3YK3UJNYs40mC4+mAZxkQUiYKqx7nj8YtkgBbtE40tQk4EGkGZnf6U/a LmlYpG4d40RjFYeqkZGWa41gXyHmNrpx+61yCDF0+BUfkJNHMzKV1UcyMfgrEWCq 2WONmLB8YrKnSX9irVWO0WjA/SXX94crq9kwgmPjg10TToXNC/d3EgWleYY+AEhb N8JlV3WH0nlsuOoZHvOT5Vnisuc3DLeNn8PAzs3IXK2+Num33MxQhpvb7D55aElO KjDcsl28WtXy3d1ZWGw4WEOS1AFrw9VCOP3GkvDkWUMkW5r1IaussPu27qn/SFlc a4u5jNEIVL9M4g== -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:42 2025 by rpki-client