This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json) Hash identifier: 27o5nkWhKvnxnPmubSAfc9xH0RfPqqIMoFVWHhD74ks= Subject key identifier: 42:3E:2A:F4:AA:F9:C6:46:55:6E:E0:0F:FA:6C:E1:6D:00:3E:ED:E3 Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Certificate serial: 019AF42DFC1E06FB50236E790EFD6B67BCA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 15:00:45 +0000 Manifest this update: Sat 06 Dec 2025 15:00:45 +0000 Manifest next update: Sun 07 Dec 2025 15:00:45 +0000 Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=) 2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: bZBdB+v+a+yApsu+1CK2FiTcWJJiCqK6F4SlNrJMY4Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:fc:1e:06:fb:50:23:6e:79:0e:fd:6b:67:bc:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f Validity Not Before: Dec 6 15:00:45 2025 GMT Not After : Dec 7 15:00:45 2025 GMT Subject: CN=423e2af4aaf9c646556ee00ffa6ce16d003eede3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:ac:0e:19:47:24:9c:d9:2f:e4:70:29:c5: 69:0d:7a:b2:50:33:28:c7:d2:a8:03:80:c8:ce:92: 6c:d4:e6:1d:1f:2d:58:09:f0:cf:ed:09:18:f3:cf: 60:bf:1b:a7:58:d2:d9:a1:de:d6:64:0e:5c:05:35: 53:e8:70:6a:da:21:93:f9:71:50:ab:6a:51:50:99: 76:24:a6:fa:d4:cf:80:d0:91:e8:2e:41:16:b1:3b: 3e:d4:06:16:68:e4:15:c3:54:59:5e:b7:a9:65:61: 81:45:b0:9d:9c:11:28:6b:5d:27:a4:35:1b:12:1a: 8f:ca:7e:59:a8:14:fe:7d:f4:a3:8b:7c:3d:bd:9a: 4f:d5:17:48:f7:0d:41:8f:06:cd:13:4d:fc:ea:e0: b3:90:3c:53:3e:06:38:9d:4a:82:c5:6b:7e:97:04: 18:2b:f1:7f:e2:5d:ce:c7:7f:9c:bf:bd:a0:dd:5e: c2:a5:2e:c6:ed:69:bd:07:2b:26:7d:29:da:d2:5b: 64:dc:0e:6d:82:e5:8d:74:ff:8a:c8:07:60:eb:69: 0e:61:3b:a9:79:bc:21:e5:c3:69:b5:d8:c3:e8:92: 65:cb:26:94:83:2f:26:b0:da:ba:49:d0:a1:ff:90: 5a:7d:58:aa:8c:33:62:e6:6c:ca:85:14:68:02:e2: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:2A:F4:AA:F9:C6:46:55:6E:E0:0F:FA:6C:E1:6D:00:3E:ED:E3 X509v3 Authority Key Identifier: keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c7:af:a7:2d:ba:3b:71:06:d8:7c:6b:2f:18:3d:45:3e:a3: c4:24:f5:0f:a5:e4:50:db:22:30:a8:f7:2d:51:5d:89:33:fe: 92:43:cd:d2:93:82:84:be:d2:e3:fa:80:db:f1:89:b2:62:46: 63:ae:b2:f6:c8:2c:89:c1:26:8a:5f:03:7c:a5:ca:36:86:d0: 6d:c8:7b:bc:92:29:58:7f:81:30:fa:d4:cf:14:e1:d1:9b:9f: 25:9b:aa:d0:bc:8d:3b:25:42:94:ce:48:69:21:7c:81:94:e0: ef:61:e1:84:e3:ae:82:e3:c9:bf:66:8f:1c:2c:1b:5f:3d:27: 6f:71:d6:d3:7f:b6:a3:24:52:23:c4:1f:60:46:7a:1d:9c:ed: d8:5a:6f:d6:b6:4f:97:91:ed:7a:bf:85:4e:5d:47:cc:96:ca: 05:9d:2b:bb:0c:64:ee:49:b3:6f:53:34:8b:6b:d0:70:7e:0d: 99:13:11:63:4d:01:e7:69:d6:69:59:d0:76:90:e8:d1:d0:da: 9b:8c:18:92:73:b9:df:9f:bf:d0:0c:42:52:64:30:6e:04:37: 7d:62:b1:56:26:db:a9:fd:df:be:60:ca:aa:64:05:c6:20:62: 5e:3c:93:a3:f5:24:25:a7:55:81:27:a3:04:59:b6:dd:e5:76: 97:52:2a:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LfweBvtQI255Dv1rZ7ypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzYxMGQyMTVkMzg5MTM0MmJjMzI4NzJhNTBmNGQwY2Zh OWRjOWYwHhcNMjUxMjA2MTUwMDQ1WhcNMjUxMjA3MTUwMDQ1WjAzMTEwLwYDVQQD Eyg0MjNlMmFmNGFhZjljNjQ2NTU2ZWUwMGZmYTZjZTE2ZDAwM2VlZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthasDhlHJJzZL+RwKcVpDXqyUDMo x9KoA4DIzpJs1OYdHy1YCfDP7QkY889gvxunWNLZod7WZA5cBTVT6HBq2iGT+XFQ q2pRUJl2JKb61M+A0JHoLkEWsTs+1AYWaOQVw1RZXrepZWGBRbCdnBEoa10npDUb EhqPyn5ZqBT+ffSji3w9vZpP1RdI9w1BjwbNE0386uCzkDxTPgY4nUqCxWt+lwQY K/F/4l3Ox3+cv72g3V7CpS7G7Wm9BysmfSna0ltk3A5tguWNdP+KyAdg62kOYTup ebwh5cNptdjD6JJlyyaUgy8msNq6SdCh/5BafViqjDNi5mzKhRRoAuIzwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI+KvSq+cZGVW7gD/ps4W0APu3jMB8GA1UdIwQY MBaAFH7GENIV04kTQrwyhypQ9NDPqdyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2Yt ZTg1NjYxM2QyYjEwLzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8yMjkxMWMtY2U1MS00MzhiLTg2Y2YtZTg1NjYxM2QyYjEw LzEvZnNZUTBoWFRpUk5DdkRLSEtsRDAwTS1wM0o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcevpy26 O3EG2HxrLxg9RT6jxCT1D6XkUNsiMKj3LVFdiTP+kkPN0pOChL7S4/qA2/GJsmJG Y66y9sgsicEmil8DfKXKNobQbch7vJIpWH+BMPrUzxTh0ZufJZuq0LyNOyVClM5I aSF8gZTg72HhhOOuguPJv2aPHCwbXz0nb3HW03+2oyRSI8QfYEZ6HZzt2Fpv1rZP l5Hter+FTl1HzJbKBZ0ruwxk7kmzb1M0i2vQcH4NmRMRY00B52nWaVnQdpDo0dDa m4wYknO535+/0AxCUmQwbgQ3fWKxVibbqf3fvmDKqmQFxiBiXjyTo/UkJadVgSej BFm23eV2l1IqAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:12 2025 by rpki-client