This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft File: fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json) Hash identifier: shbzcq543yZM9YvmMQxdZjiDcuImMYd5rkruhkHIqrM= Subject key identifier: D4:BD:6C:39:6B:21:C8:11:19:10:67:3C:A9:C5:4B:C0:96:00:26:29 Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Certificate serial: 019B42EEC80D9F9E53EA6A52D55C3492EBE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft Manifest number: 1794 Signing time: Sun 21 Dec 2025 22:01:43 +0000 Manifest this update: Sun 21 Dec 2025 22:01:43 +0000 Manifest next update: Mon 22 Dec 2025 22:01:43 +0000 Files and hashes: 1: Wtm1hEu0EgTyGMBa9juYIdQh6Nk.roa (hash: q80H+45kJPLamUKd1bgH9ekpSHDPYqKcau/SDD5wQoY=) 2: cxuyRDMfEel2xMdXfA507tWQBuw.roa (hash: aYQJT5pNCQ74S3OgYSZ2fAV4rTt5FQE1ow7omRFYshk=) 3: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: SF+k1MNSj5D/L4Y0k9MPTwiRReCCZp+puXu2HGoaD5s=) 4: nfoKwQ2m4-pqtnkuZ0FBhe4zHtg.roa (hash: T6MxLdRLuaXJD0ruS8Amwko5rPAMgelrkEY/tEezDSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:c8:0d:9f:9e:53:ea:6a:52:d5:5c:34:92:eb:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Validity Not Before: Dec 21 22:01:43 2025 GMT Not After : Dec 22 22:01:43 2025 GMT Subject: CN=d4bd6c396b21c8111910673ca9c54bc096002629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:49:40:85:0f:f4:ee:13:72:96:11:e6:5a: cf:c0:f3:19:26:67:1e:65:b8:3b:9d:b2:5f:25:97: bb:c9:db:2d:84:93:2d:ef:4f:b0:db:86:1c:60:6a: ca:4a:d5:3f:b5:2d:6d:ff:97:8b:d5:67:f4:c7:07: ae:1c:42:d7:54:54:b5:9d:73:2e:04:c7:71:51:c7: 11:46:93:74:bd:91:df:3b:79:cd:30:78:c4:10:18: 61:cc:59:36:2a:20:ac:93:b0:05:1f:35:02:ce:68: 45:6c:dd:8c:2c:3d:75:3d:33:61:7e:bc:8f:a5:0f: ff:ae:c6:ac:da:fd:e7:32:ce:68:e1:92:11:39:44: b1:ac:d0:46:be:ba:a5:37:a3:45:c5:4c:07:85:46: 0a:fc:0a:c3:a2:aa:13:df:45:b1:40:94:57:9f:d3: e8:4f:e4:5d:3f:6f:6e:6e:2b:8b:bc:a2:8e:52:48: e1:c3:f2:89:af:f2:6c:71:1a:a7:77:ff:e6:d9:55: 62:c2:bd:48:71:8e:9f:09:ee:e1:10:20:93:00:0a: 83:89:d2:0f:b7:d7:b1:c2:b6:a2:f4:a1:57:72:11: 5a:4c:64:91:67:34:62:10:c9:f9:f5:5b:6f:ec:45: 52:bb:69:59:fb:fa:56:c0:75:43:e3:91:a6:4b:01: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BD:6C:39:6B:21:C8:11:19:10:67:3C:A9:C5:4B:C0:96:00:26:29 X509v3 Authority Key Identifier: keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:97:1c:a9:39:2b:d0:d8:4c:03:19:2b:6b:11:be:7f:46:5b: 5f:ca:25:93:72:1f:e8:d2:11:5c:d6:5f:50:80:7c:f3:00:68: b6:c5:b2:8d:0c:c9:e5:83:0c:bd:37:c9:41:63:fb:b5:2e:a0: a9:ab:54:85:4c:53:56:a9:4f:f7:33:54:ee:20:54:6f:0b:c4: c3:23:7d:21:74:f5:35:fd:d2:8f:e6:25:5a:7b:d7:de:46:22: 3a:eb:fa:8e:98:a3:63:76:e2:ed:5b:70:93:f9:d2:08:19:b0: dc:ea:30:2d:30:ab:3d:53:4f:ac:c8:a2:d7:f4:ec:0d:f8:b4: cc:3f:e8:eb:7e:51:02:9f:98:1c:9f:5d:ea:ea:f4:77:b0:e7: 9e:8d:80:53:84:bb:dd:00:58:06:1a:45:14:e3:8f:ce:ff:bd: 14:a2:a9:33:ad:60:b2:a1:bd:43:22:10:80:a3:fc:75:60:a1: 0c:24:bb:49:73:1e:c5:2e:97:6b:e7:83:78:b7:22:af:b3:c2: 5a:d2:2b:28:8d:c0:3b:0b:5b:eb:fe:82:2c:e4:4d:c2:d8:76: 4e:7c:6a:b2:06:8e:e6:ee:63:b0:e6:10:c9:4f:d5:11:98:e1: ac:bd:65:f6:09:05:e5:91:0c:80:28:9e:98:36:c7:8a:96:f1: 6e:c8:cb:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7sgNn55T6mpS1Vw0kuviMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjdlZTNkZTg4MTU2MmVlYTdkZjJlMzIzMmNkYjMyYjU0 ZmUwMzcwHhcNMjUxMjIxMjIwMTQzWhcNMjUxMjIyMjIwMTQzWjAzMTEwLwYDVQQD EyhkNGJkNmMzOTZiMjFjODExMTkxMDY3M2NhOWM1NGJjMDk2MDAyNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuahJQIUP9O4TcpYR5lrPwPMZJmce Zbg7nbJfJZe7ydsthJMt70+w24YcYGrKStU/tS1t/5eL1Wf0xweuHELXVFS1nXMu BMdxUccRRpN0vZHfO3nNMHjEEBhhzFk2KiCsk7AFHzUCzmhFbN2MLD11PTNhfryP pQ//rsas2v3nMs5o4ZIROUSxrNBGvrqlN6NFxUwHhUYK/ArDoqoT30WxQJRXn9Po T+RdP29ubiuLvKKOUkjhw/KJr/JscRqnd//m2VViwr1IcY6fCe7hECCTAAqDidIP t9exwrai9KFXchFaTGSRZzRiEMn59Vtv7EVSu2lZ+/pWwHVD45GmSwF49QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNS9bDlrIcgRGRBnPKnFS8CWACYpMB8GA1UdIwQY MBaAFHxn7j3ogVYu6n3y4yMs2zK1T+A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQt M2VkMmVjZWI0ZjZjLzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQtM2VkMmVjZWI0ZjZj LzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpccqTkr 0NhMAxkraxG+f0ZbX8olk3If6NIRXNZfUIB88wBotsWyjQzJ5YMMvTfJQWP7tS6g qatUhUxTVqlP9zNU7iBUbwvEwyN9IXT1Nf3Sj+YlWnvX3kYiOuv6jpijY3bi7Vtw k/nSCBmw3OowLTCrPVNPrMii1/TsDfi0zD/o635RAp+YHJ9d6ur0d7Dnno2AU4S7 3QBYBhpFFOOPzv+9FKKpM61gsqG9QyIQgKP8dWChDCS7SXMexS6Xa+eDeLcir7PC WtIrKI3AOwtb6/6CLORNwth2TnxqsgaO5u5jsOYQyU/VEZjhrL1l9gkF5ZEMgCie mDbHipbxbsjLUg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:06:38 2025 by rpki-client