This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft File: fgX1rbuaqxB5slJG4ju71qF-Ptg.mft (raw, json) Hash identifier: mM5M/Y0WfZBwB4he3fAiLSFD+1pPBcEKLd+JcDKJBYM= Subject key identifier: 76:D1:03:48:4F:73:3F:6C:8B:3E:6C:F8:20:B1:26:4A:EB:34:64:F9 Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 Certificate issuer: /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Certificate serial: 019B2EFA5C44F72EA4DC7EAD2E145A99A1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 01:01:57 +0000 Manifest this update: Thu 18 Dec 2025 01:01:57 +0000 Manifest next update: Fri 19 Dec 2025 01:01:57 +0000 Files and hashes: 1: HP64WtX1yfILpkNOMbG1q1N4a3k.roa (hash: qIWMDdKxzjP3RhBE+pArO3QBDZn+hnUGI/cwBEig+dA=) 2: fgX1rbuaqxB5slJG4ju71qF-Ptg.crl (hash: bMv5i55p40P8fgLxLN/+eDfm/qQPk32EWiiDiZsZ/90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:5c:44:f7:2e:a4:dc:7e:ad:2e:14:5a:99:a1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Validity Not Before: Dec 18 01:01:57 2025 GMT Not After : Dec 19 01:01:57 2025 GMT Subject: CN=76d103484f733f6c8b3e6cf820b1264aeb3464f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:99:0d:ef:e0:f7:4b:4b:8c:d1:ce:3d:33:81: dd:1d:01:b9:d5:69:38:ef:54:bf:0e:3f:f1:e1:a5: e9:3d:b0:a7:d8:10:a3:6e:34:77:a8:94:de:8b:f4: e8:91:6f:8d:ab:b9:a7:d4:11:a4:5a:92:74:97:fa: be:d2:8a:ff:c5:88:bf:1b:71:7e:40:9c:7d:c9:51: e5:b0:c4:e9:2c:c9:7e:bc:6a:2e:b7:41:4c:dc:d7: e1:f9:ec:10:51:99:e9:ca:18:41:03:e4:03:24:21: 74:80:67:fe:c6:65:dd:73:21:0e:f3:2e:75:0a:a7: 07:71:56:87:28:d6:4e:4a:e3:e5:0f:1b:87:fe:f2: c6:34:dc:da:88:ee:51:e8:d0:4b:27:2d:b8:b6:72: 23:1a:9f:26:ec:3f:0d:36:49:ae:4d:30:4f:c3:8c: 97:68:32:64:6d:de:00:26:25:f9:48:a6:18:90:ec: 6c:b5:fd:71:73:77:3a:96:c1:fa:08:16:0b:07:5a: 89:2c:93:05:01:8f:40:f1:81:63:27:70:07:d1:62: b1:06:d4:b6:e5:69:65:b1:b6:72:74:f0:25:1e:ea: 8d:a4:76:4a:bf:56:0d:f0:7c:fc:ff:b7:12:68:46: 6d:03:ab:39:c3:10:ca:1d:08:20:69:55:12:80:25: c9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D1:03:48:4F:73:3F:6C:8B:3E:6C:F8:20:B1:26:4A:EB:34:64:F9 X509v3 Authority Key Identifier: keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ee:5e:2e:69:fa:f2:bb:b4:ba:1e:a3:1b:13:e1:2a:40:ba: 9c:16:8f:34:af:0f:e7:e9:1a:c0:94:80:92:4b:af:8f:58:11: d4:80:da:6c:82:f5:28:4c:67:81:19:60:87:dc:5f:90:f6:79: 23:32:4c:8e:19:d5:e4:04:48:67:0e:9e:28:65:90:26:6b:c4: eb:e5:ed:02:6b:cd:3e:b9:21:3e:51:47:e5:46:59:ea:df:7f: 96:cd:ff:c9:90:b7:50:a1:bf:b8:6f:3c:04:9a:96:59:c1:0d: a0:cc:3c:4a:50:1b:c6:61:3b:5f:3c:07:fd:55:a9:62:99:83: 7c:ba:d7:22:b8:af:df:09:29:f8:47:2c:92:12:28:48:62:b9: b2:02:35:2c:aa:e4:be:1e:f5:e5:c2:83:57:c2:9a:f6:de:10: 95:c8:6c:49:0f:c8:68:4d:0c:ea:2e:1e:d1:bd:96:4f:98:c4: 50:af:66:06:ba:ea:ec:87:66:54:ea:ba:7a:5f:12:e0:ef:4d: f4:61:0d:b9:a0:8f:bd:d8:ac:a5:a1:14:21:07:f1:b0:74:b4: 8a:5a:60:64:b8:17:f9:99:c7:34:a8:81:30:50:a4:6c:98:6e: cc:d8:f6:fb:ed:d1:26:d3:b4:d0:be:0a:49:27:58:47:33:90: 22:56:82:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+lxE9y6k3H6tLhRamaHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDVmNWFkYmI5YWFiMTA3OWIyNTI0NmUyM2JiYmQ2YTE3 ZTNlZDgwHhcNMjUxMjE4MDEwMTU3WhcNMjUxMjE5MDEwMTU3WjAzMTEwLwYDVQQD Eyg3NmQxMDM0ODRmNzMzZjZjOGIzZTZjZjgyMGIxMjY0YWViMzQ2NGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZkN7+D3S0uM0c49M4HdHQG51Wk4 71S/Dj/x4aXpPbCn2BCjbjR3qJTei/TokW+Nq7mn1BGkWpJ0l/q+0or/xYi/G3F+ QJx9yVHlsMTpLMl+vGout0FM3Nfh+ewQUZnpyhhBA+QDJCF0gGf+xmXdcyEO8y51 CqcHcVaHKNZOSuPlDxuH/vLGNNzaiO5R6NBLJy24tnIjGp8m7D8NNkmuTTBPw4yX aDJkbd4AJiX5SKYYkOxstf1xc3c6lsH6CBYLB1qJLJMFAY9A8YFjJ3AH0WKxBtS2 5WllsbZydPAlHuqNpHZKv1YN8Hz8/7cSaEZtA6s5wxDKHQggaVUSgCXJHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbRA0hPcz9siz5s+CCxJkrrNGT5MB8GA1UdIwQY MBaAFH4F9a27mqsQebJSRuI7u9ahfj7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2It NGY2Yzg1ZmQ1MGYxLzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2ItNGY2Yzg1ZmQ1MGYx LzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApe5eLmn6 8ru0uh6jGxPhKkC6nBaPNK8P5+kawJSAkkuvj1gR1IDabIL1KExngRlgh9xfkPZ5 IzJMjhnV5ARIZw6eKGWQJmvE6+XtAmvNPrkhPlFH5UZZ6t9/ls3/yZC3UKG/uG88 BJqWWcENoMw8SlAbxmE7XzwH/VWpYpmDfLrXIriv3wkp+EcskhIoSGK5sgI1LKrk vh715cKDV8Ka9t4QlchsSQ/IaE0M6i4e0b2WT5jEUK9mBrrq7IdmVOq6el8S4O9N 9GENuaCPvdispaEUIQfxsHS0ilpgZLgX+ZnHNKiBMFCkbJhuzNj2++3RJtO00L4K SSdYRzOQIlaC/A== -----END CERTIFICATE-----Generated at Thu Dec 18 05:07:43 2025 by rpki-client