This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft File: fFdTLhz9MccnMuRONTn_bglsKkc.mft (raw, json) Hash identifier: 1YRhIUBeaKg6EKgA+w6/jYYikyXaWDtCJ+HfrWZ3pIs= Subject key identifier: 80:39:97:55:57:42:CC:CF:C2:9C:34:07:8A:F9:29:FA:0A:75:FE:2F Authority key identifier: 7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47 Certificate issuer: /CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47 Certificate serial: 019AF23FBE28C6CA692ADBC5FA9614C3C0F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: fFdTLhz9MccnMuRONTn_bglsKkc.crl (hash: wRXnwXJR17XiSr8eMTP5w/jhG+Qn8gQBu5kj0IW6z4E=) 2: gq5QbYLmKExu3_jiX8nvuPbkj4s.roa (hash: CUD+O9KICmmQQx1gdUSevF1umi42aYgBLH/jxWWsdAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:be:28:c6:ca:69:2a:db:c5:fa:96:14:c3:c0:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c57532e1cfd31c72732e44e3539ff6e096c2a47 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=803997555742cccfc29c34078af929fa0a75fe2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:93:5f:f2:5c:b3:2c:1d:c1:66:06:b6:65: bd:3c:46:d8:ff:44:27:1e:9f:40:4c:c4:54:24:c0: 15:9e:cc:45:06:c7:01:5f:d4:2d:0e:3b:2d:16:72: 0c:98:7b:18:2f:14:a0:c9:de:5a:6d:e3:20:90:4b: 3b:4b:43:29:d8:c7:5b:4d:23:fc:af:a8:fa:38:9a: 4c:16:17:3a:ef:4d:fe:bf:1a:b2:eb:2c:a7:71:b7: 76:ab:e3:fa:a1:b6:4f:11:2c:ec:2b:88:a7:0f:e5: 7b:ac:a9:fd:79:cc:a9:8e:25:34:fc:7d:fe:6d:cc: 03:98:db:e7:59:f2:ae:0c:10:83:a2:dd:ed:cd:08: b9:97:5b:be:65:80:30:d9:1e:64:91:ea:d8:30:87: c4:5e:16:06:5e:3c:0b:fa:0e:3b:f4:e2:ef:ed:70: f5:9d:37:3a:2d:fb:8a:5d:59:b5:fe:fe:69:be:e3: d8:9b:97:4b:7e:d0:a3:eb:01:4a:c7:d1:79:ab:c6: 28:f9:8f:dc:bb:2e:11:6e:ff:d2:4f:20:d3:e8:50: 4a:38:05:11:4c:66:f6:6d:ea:84:5a:bd:f2:30:7d: c9:b2:54:42:31:99:bc:f8:69:39:0c:22:d0:c9:21: 4f:2a:45:2f:9a:a1:73:a7:aa:e1:e6:57:0e:47:74: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:97:55:57:42:CC:CF:C2:9C:34:07:8A:F9:29:FA:0A:75:FE:2F X509v3 Authority Key Identifier: keyid:7C:57:53:2E:1C:FD:31:C7:27:32:E4:4E:35:39:FF:6E:09:6C:2A:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFdTLhz9MccnMuRONTn_bglsKkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8d9f77-4684-4d82-ae38-31e50bab716e/1/fFdTLhz9MccnMuRONTn_bglsKkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:55:f4:ac:3f:0b:73:3a:75:10:e3:42:da:24:78:03:94:47: 7b:cd:36:1a:4b:56:78:9e:a0:fe:2a:ce:66:0c:1c:bd:fe:80: 90:08:c1:97:f8:9c:b9:58:72:66:29:2f:df:d8:20:36:cd:cc: f1:56:bc:0b:99:27:fe:1b:74:57:d3:32:eb:44:e7:4b:b8:4a: f1:2a:ed:6d:5b:5a:d7:93:dc:3d:a2:88:e0:5d:10:87:0f:e6: 80:56:44:59:52:34:d7:e4:ec:b9:4c:49:4b:6f:e2:58:fd:cb: 2a:a3:f3:8c:cf:c2:5e:04:fc:27:98:cd:cd:f6:3f:41:f0:fd: 0d:aa:30:a8:66:bf:9b:be:a0:a6:98:f8:43:97:18:99:f2:e3: 21:bf:c3:61:be:2a:51:b3:c0:de:5a:96:1a:bd:06:f3:44:a4: 2c:09:05:49:47:0a:7f:4c:f0:4a:5a:bf:57:6e:16:e3:40:1c: a7:33:d8:b6:3d:93:b5:21:28:18:84:ed:59:34:28:41:fb:8a: 6c:d0:5d:a8:27:9a:d7:8e:af:f7:fb:5a:23:57:34:15:4d:59: f6:06:69:2a:82:47:ec:eb:ee:2f:5d:af:46:2b:d0:da:53:dc: 6a:83:2f:0e:67:eb:8d:18:b4:ec:b5:41:11:a6:aa:26:23:72: b7:1e:6a:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP74oxsppKtvF+pYUw8D5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTc1MzJlMWNmZDMxYzcyNzMyZTQ0ZTM1MzlmZjZlMDk2 YzJhNDcwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD Eyg4MDM5OTc1NTU3NDJjY2NmYzI5YzM0MDc4YWY5MjlmYTBhNzVmZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9GTX/JcsywdwWYGtmW9PEbY/0Qn Hp9ATMRUJMAVnsxFBscBX9QtDjstFnIMmHsYLxSgyd5abeMgkEs7S0Mp2MdbTSP8 r6j6OJpMFhc6703+vxqy6yyncbd2q+P6obZPESzsK4inD+V7rKn9ecypjiU0/H3+ bcwDmNvnWfKuDBCDot3tzQi5l1u+ZYAw2R5kkerYMIfEXhYGXjwL+g479OLv7XD1 nTc6LfuKXVm1/v5pvuPYm5dLftCj6wFKx9F5q8Yo+Y/cuy4Rbv/STyDT6FBKOAUR TGb2beqEWr3yMH3JslRCMZm8+Gk5DCLQySFPKkUvmqFzp6rh5lcOR3R7+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA5l1VXQszPwpw0B4r5KfoKdf4vMB8GA1UdIwQY MBaAFHxXUy4c/THHJzLkTjU5/24JbCpHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84ZDlmNzctNDY4NC00ZDgyLWFlMzgt MzFlNTBiYWI3MTZlLzEvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84ZDlmNzctNDY4NC00ZDgyLWFlMzgtMzFlNTBiYWI3MTZl LzEvZkZkVExoejlNY2NuTXVST05Ubl9iZ2xzS2tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZlX0rD8L czp1EONC2iR4A5RHe802GktWeJ6g/irOZgwcvf6AkAjBl/icuVhyZikv39ggNs3M 8Va8C5kn/ht0V9My60TnS7hK8SrtbVta15PcPaKI4F0Qhw/mgFZEWVI01+TsuUxJ S2/iWP3LKqPzjM/CXgT8J5jNzfY/QfD9DaowqGa/m76gppj4Q5cYmfLjIb/DYb4q UbPA3lqWGr0G80SkLAkFSUcKf0zwSlq/V24W40AcpzPYtj2TtSEoGITtWTQoQfuK bNBdqCea146v9/taI1c0FU1Z9gZpKoJH7OvuL12vRivQ2lPcaoMvDmfrjRi07LVB EaaqJiNytx5qSA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:24 2025 by rpki-client