This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft File: fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft (raw, json) Hash identifier: +24GkK9SgHZ/KIDezXtaCZKyj3BPQEMDHzYr9GjTqdE= Subject key identifier: D3:B7:BB:B0:BA:15:D8:07:28:6C:D8:C3:5A:66:91:57:15:5A:4C:99 Authority key identifier: 7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 Certificate issuer: /CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705 Certificate serial: 019AF2097C1B5EEAF70E5BC656E2056FFA25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft Manifest number: 0AB8 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl (hash: 4+PSVvkq0JBhkGGtAnNOpmBFlxWmqwQJLwUVlESwxNs=) 2: mC5LwElUmLRuYfhtRytHc9ZpqR0.roa (hash: ThX2BNk8xeMGUBx8nMXao6T14FMQBl6CvbjOYDIbLcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7c:1b:5e:ea:f7:0e:5b:c6:56:e2:05:6f:fa:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c9129aadb203354d15ff56a27e8dbadaf8d0705 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=d3b7bbb0ba15d807286cd8c35a669157155a4c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:1d:f3:22:4f:7a:4d:f4:a9:96:e6:33:f7: 31:7c:5e:ef:67:45:4e:7d:47:ab:77:a8:1c:a1:d3: 39:46:ae:bc:c5:89:a8:82:f1:f1:a3:83:25:72:da: 9c:3d:71:0c:55:2b:cf:a2:95:46:30:64:83:e7:f6: ec:91:88:f0:6b:8f:98:02:28:85:88:5b:c3:d6:94: 95:4d:ee:1d:0d:b0:a5:36:f0:1d:c1:47:37:88:91: 9f:aa:48:27:67:89:fd:e6:10:6d:01:96:16:11:71: d4:b7:cf:fd:af:06:17:27:4d:31:02:3b:43:d7:59: 13:d3:81:d9:73:7d:4f:d5:f3:be:08:c0:0e:01:30: 94:f2:b5:f9:87:82:90:2a:5f:05:9f:09:51:f3:c7: 33:99:ad:eb:5e:59:7c:b9:88:5c:65:86:10:fe:c5: fc:6a:32:05:5d:89:24:ed:7e:77:66:27:fe:5d:48: 7e:de:35:87:b3:aa:11:fa:40:53:ae:32:47:6f:c1: aa:22:a1:0d:61:08:c7:cb:bb:7e:d7:98:14:8f:ad: 0e:c3:be:40:e8:78:5b:c9:2e:c6:48:20:1a:35:2d: 88:e1:7f:b8:b1:71:85:d4:a1:eb:49:5f:15:48:bd: fd:d5:77:04:35:5a:18:ce:72:e5:9a:6f:5a:ce:07: 3b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B7:BB:B0:BA:15:D8:07:28:6C:D8:C3:5A:66:91:57:15:5A:4C:99 X509v3 Authority Key Identifier: keyid:7C:91:29:AA:DB:20:33:54:D1:5F:F5:6A:27:E8:DB:AD:AF:8D:07:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEpqtsgM1TRX_VqJ-jbra-NBwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6e4fed-66c8-4d24-aa66-f2c4c9ca1556/1/fJEpqtsgM1TRX_VqJ-jbra-NBwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b6:40:14:ad:4f:0e:83:6c:c9:bc:3f:20:a2:b1:07:63:bc: 87:3b:96:30:c3:ac:1b:d9:fd:74:aa:cd:ea:68:35:bc:d4:4f: 51:5a:dc:04:67:8e:29:d8:cd:ac:ef:69:ad:2c:03:90:d1:38: a6:5c:b6:f3:73:d8:80:33:aa:39:6f:8c:82:6a:3c:9a:f9:eb: 14:76:12:73:64:ff:aa:95:ef:71:30:ad:d0:ce:44:fa:22:07: dc:d8:d3:0c:7d:12:ea:6a:c0:6f:ef:4a:eb:a2:de:3b:ff:aa: 84:5f:36:d3:1c:ad:5b:c3:df:63:3c:0a:97:6d:da:80:d8:92: 15:7a:bf:73:c6:04:b2:1d:fd:cc:8a:23:3f:fe:42:22:bd:4f: 02:51:29:fc:4b:9f:83:e9:53:8a:88:49:df:3f:bb:83:5b:8d: 84:1b:41:48:f6:b4:8f:51:9f:ec:b8:be:ed:48:63:4f:49:1e: fe:39:9d:c4:ec:4e:b7:a1:42:75:6a:20:21:6a:e2:6c:a6:b9: 52:a1:53:e2:71:69:4c:50:78:8e:9e:9e:d9:7e:c2:78:80:01: 0f:8b:40:13:1f:54:04:59:1e:2d:8d:29:a5:1f:d8:48:64:34: 67:95:f8:2a:3d:b0:0a:d2:23:c5:e1:31:78:52:53:04:63:f3: 8c:2b:e9:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXwbXur3DlvGVuIFb/olMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOTEyOWFhZGIyMDMzNTRkMTVmZjU2YTI3ZThkYmFkYWY4 ZDA3MDUwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EyhkM2I3YmJiMGJhMTVkODA3Mjg2Y2Q4YzM1YTY2OTE1NzE1NWE0Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Md8yJPek30qZbmM/cxfF7vZ0VO fUerd6gcodM5Rq68xYmogvHxo4MlctqcPXEMVSvPopVGMGSD5/bskYjwa4+YAiiF iFvD1pSVTe4dDbClNvAdwUc3iJGfqkgnZ4n95hBtAZYWEXHUt8/9rwYXJ00xAjtD 11kT04HZc31P1fO+CMAOATCU8rX5h4KQKl8FnwlR88czma3rXll8uYhcZYYQ/sX8 ajIFXYkk7X53Zif+XUh+3jWHs6oR+kBTrjJHb8GqIqENYQjHy7t+15gUj60Ow75A 6HhbyS7GSCAaNS2I4X+4sXGF1KHrSV8VSL391XcENVoYznLlmm9azgc7iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO3u7C6FdgHKGzYw1pmkVcVWkyZMB8GA1UdIwQY MBaAFHyRKarbIDNU0V/1aifo262vjQcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYt ZjJjNGM5Y2ExNTU2LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82ZTRmZWQtNjZjOC00ZDI0LWFhNjYtZjJjNGM5Y2ExNTU2 LzEvZkpFcHF0c2dNMVRSWF9WcUotamJyYS1OQndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbZAFK1P DoNsybw/IKKxB2O8hzuWMMOsG9n9dKrN6mg1vNRPUVrcBGeOKdjNrO9prSwDkNE4 ply283PYgDOqOW+Mgmo8mvnrFHYSc2T/qpXvcTCt0M5E+iIH3NjTDH0S6mrAb+9K 66LeO/+qhF820xytW8PfYzwKl23agNiSFXq/c8YEsh39zIojP/5CIr1PAlEp/Euf g+lTiohJ3z+7g1uNhBtBSPa0j1Gf7Li+7UhjT0ke/jmdxOxOt6FCdWogIWribKa5 UqFT4nFpTFB4jp6e2X7CeIABD4tAEx9UBFkeLY0ppR/YSGQ0Z5X4Kj2wCtIjxeEx eFJTBGPzjCvpWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:29 2025 by rpki-client