This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft File: fgX1rbuaqxB5slJG4ju71qF-Ptg.mft (raw, json) Hash identifier: sZYndmRuGpBhTdyQguTTamr8B+hGmDzImSorHoGAx5o= Subject key identifier: EE:38:ED:05:19:BC:FE:AA:14:1E:0A:A7:BE:E2:CC:60:A9:EA:0A:76 Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 Certificate issuer: /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Certificate serial: 019AF12D8D2260ED9B2C9C76C45A99139485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:01:25 +0000 Manifest this update: Sat 06 Dec 2025 01:01:25 +0000 Manifest next update: Sun 07 Dec 2025 01:01:25 +0000 Files and hashes: 1: HP64WtX1yfILpkNOMbG1q1N4a3k.roa (hash: qIWMDdKxzjP3RhBE+pArO3QBDZn+hnUGI/cwBEig+dA=) 2: fgX1rbuaqxB5slJG4ju71qF-Ptg.crl (hash: n0y1EFAMKi/E8TU9d1mQREPT0MhxdviW1eaazfxkBJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:8d:22:60:ed:9b:2c:9c:76:c4:5a:99:13:94:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Validity Not Before: Dec 6 01:01:25 2025 GMT Not After : Dec 7 01:01:25 2025 GMT Subject: CN=ee38ed0519bcfeaa141e0aa7bee2cc60a9ea0a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:5d:fe:ad:f9:f3:3f:32:5d:be:c3:a8:7c: d5:70:0a:ea:e0:8d:89:ea:51:f9:70:8c:10:dc:4e: 06:9b:12:5a:8a:3b:af:fc:d3:fc:17:62:76:ef:da: 5f:10:a1:11:c8:91:9c:d9:aa:39:65:a1:43:bf:ef: ae:54:47:81:e2:50:78:1c:b4:8c:99:3a:d0:24:91: 0d:8f:9a:b8:e1:b0:cc:29:c2:69:1c:33:75:3c:04: c5:c0:af:2e:e5:e0:61:72:e9:59:35:4e:77:f5:ba: 16:3b:fd:de:9a:09:68:76:cc:b5:82:64:66:6e:e8: 8a:63:71:4c:b6:f0:5a:04:9a:32:81:7b:1e:2d:9a: a4:f3:7d:d7:d2:00:60:48:12:11:fa:0e:68:45:ea: b9:d3:da:b8:0a:eb:5d:2b:a0:9b:1d:06:a0:14:fa: ba:0c:52:fb:9f:de:6a:de:f9:5c:f5:7b:94:7f:cc: 7c:71:79:70:8c:75:20:28:a4:3e:da:8d:e8:aa:38: e6:24:3a:04:4e:32:f7:8f:59:69:3e:04:cc:19:16: 55:64:b1:e3:b8:86:42:9a:fa:6e:24:55:94:18:10: 82:0c:6a:d5:7f:73:ff:fc:2a:dd:f0:f3:ab:e0:ca: a1:4f:46:6b:7a:df:f8:b4:96:1c:44:eb:e6:92:76: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:38:ED:05:19:BC:FE:AA:14:1E:0A:A7:BE:E2:CC:60:A9:EA:0A:76 X509v3 Authority Key Identifier: keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4e:13:c4:c2:d8:54:f7:59:8d:de:52:0c:6f:19:22:fd:ea: ab:bf:86:fd:46:08:94:8b:eb:8d:09:6f:2d:37:44:99:d1:26: 7c:be:88:6d:b9:bd:eb:6a:88:c2:ad:75:ee:a3:a6:b7:b8:b0: bd:d7:e1:87:ea:79:26:96:5f:8d:04:4e:64:b0:6b:0f:bd:5d: a3:ce:6c:51:22:05:6d:e2:6b:bc:bc:f3:bd:5c:7d:f0:9e:80: 0b:e6:53:08:bb:ef:2e:b5:bb:ea:15:50:a6:3f:f9:e2:44:90: a1:44:c0:93:43:de:d9:65:ea:be:fc:5b:13:ec:b2:21:14:83: 38:25:0a:95:bf:77:6c:64:68:03:53:12:b2:cc:4c:6f:69:e4: fe:a2:d6:ea:50:83:a2:31:14:b1:83:35:45:62:cb:43:16:fa: 91:28:f1:6e:05:3c:d5:e7:ab:fc:ba:80:f0:71:ac:8c:b6:a9: 51:e2:aa:48:8c:a9:0e:e4:91:38:50:74:9b:d9:cd:8e:23:fe: b9:3f:bc:40:da:9e:82:c7:58:f0:16:b1:bd:61:c8:f9:57:6c: 68:3e:1a:d1:a5:b5:70:9a:b8:a1:11:9e:fe:9c:79:84:39:1a: 39:31:bd:f5:b8:d2:65:a1:ee:3d:9b:70:71:0a:2a:5a:b7:d4: 7d:d8:80:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLY0iYO2bLJx2xFqZE5SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDVmNWFkYmI5YWFiMTA3OWIyNTI0NmUyM2JiYmQ2YTE3 ZTNlZDgwHhcNMjUxMjA2MDEwMTI1WhcNMjUxMjA3MDEwMTI1WjAzMTEwLwYDVQQD EyhlZTM4ZWQwNTE5YmNmZWFhMTQxZTBhYTdiZWUyY2M2MGE5ZWEwYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7td/q358z8yXb7DqHzVcArq4I2J 6lH5cIwQ3E4GmxJaijuv/NP8F2J279pfEKERyJGc2ao5ZaFDv++uVEeB4lB4HLSM mTrQJJENj5q44bDMKcJpHDN1PATFwK8u5eBhculZNU539boWO/3emglodsy1gmRm buiKY3FMtvBaBJoygXseLZqk833X0gBgSBIR+g5oReq509q4CutdK6CbHQagFPq6 DFL7n95q3vlc9XuUf8x8cXlwjHUgKKQ+2o3oqjjmJDoETjL3j1lpPgTMGRZVZLHj uIZCmvpuJFWUGBCCDGrVf3P//Crd8POr4MqhT0Zret/4tJYcROvmknbxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO447QUZvP6qFB4Kp77izGCp6gp2MB8GA1UdIwQY MBaAFH4F9a27mqsQebJSRuI7u9ahfj7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2It NGY2Yzg1ZmQ1MGYxLzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2ItNGY2Yzg1ZmQ1MGYx LzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE4TxMLY VPdZjd5SDG8ZIv3qq7+G/UYIlIvrjQlvLTdEmdEmfL6Ibbm962qIwq117qOmt7iw vdfhh+p5JpZfjQROZLBrD71do85sUSIFbeJrvLzzvVx98J6AC+ZTCLvvLrW76hVQ pj/54kSQoUTAk0Pe2WXqvvxbE+yyIRSDOCUKlb93bGRoA1MSssxMb2nk/qLW6lCD ojEUsYM1RWLLQxb6kSjxbgU81eer/LqA8HGsjLapUeKqSIypDuSROFB0m9nNjiP+ uT+8QNqegsdY8BaxvWHI+VdsaD4a0aW1cJq4oRGe/px5hDkaOTG99bjSZaHuPZtw cQoqWrfUfdiA3w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:08 2025 by rpki-client