This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json) Hash identifier: 4EGTldsHlBBGA5mTgda8odhmY28ISp2nYAAG3Te1I/0= Subject key identifier: 23:A6:74:96:F6:10:C5:15:8C:99:A8:C2:C1:6D:FA:33:F1:8E:DD:74 Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Certificate serial: 019AF276A0F26546D3D86DDD5DA937D51E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=) 2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: mLRSfoSjB8R3US1fK8P1Isosnz81hVk5po/yYXxxy8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a0:f2:65:46:d3:d8:6d:dd:5d:a9:37:d5:1e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=23a67496f610c5158c99a8c2c16dfa33f18edd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f2:1d:5c:06:9c:fe:7f:4e:34:5d:fb:36:3a: b1:f8:cf:4e:68:cd:5d:5b:0f:82:a5:e4:3f:19:b2: ff:dd:b0:17:6e:da:8f:84:48:12:25:6c:24:ca:7d: 96:ed:6b:e9:f4:db:06:50:fd:9d:7a:b3:f3:bf:2a: 53:d3:87:57:e8:ad:77:75:11:7d:a2:66:09:71:0a: da:25:b3:4d:8d:1a:49:80:d3:20:90:02:61:f6:00: b4:b5:1a:9f:f0:ff:ce:48:53:37:60:a3:c4:84:8b: 48:c0:57:9e:75:a9:a4:e0:88:c3:e9:cb:ae:3a:4b: 84:12:1a:6d:4c:9d:45:40:40:04:35:26:f3:bd:b6: 32:3e:d4:6e:5c:b5:4f:b5:d0:36:05:65:d4:73:4e: 25:0c:ed:ca:4a:09:f2:57:32:3f:9e:c3:6b:44:fa: 50:56:41:0a:df:d2:2b:b1:03:d6:20:f4:9d:bb:50: 4d:15:88:bd:5d:ba:0c:23:35:1a:7b:8b:fb:e6:6d: 48:36:ee:c3:8f:b7:89:dc:b6:9d:83:2f:f3:e6:bf: 66:45:ef:6e:6a:ac:a8:5a:73:94:e8:b5:78:90:74: 07:ac:0d:fa:22:28:5c:83:75:e6:9f:65:3a:c8:3b: 66:bf:65:cc:89:b6:c0:e9:d0:c3:e9:1f:92:ca:be: 9d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:74:96:F6:10:C5:15:8C:99:A8:C2:C1:6D:FA:33:F1:8E:DD:74 X509v3 Authority Key Identifier: keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:89:ea:e4:60:6e:4c:32:7d:c0:73:8f:6b:d1:85:d0:f7:e9: c8:41:77:48:fb:f0:96:77:b4:a1:e3:5f:3c:5f:16:89:b6:16: c6:b8:34:33:7d:b3:4d:f3:8e:ad:0e:5f:b2:73:c9:da:e9:41: 54:41:84:a3:d6:9b:b6:15:93:06:80:72:4e:54:72:c5:ca:c3: 54:d7:8c:da:81:4e:84:ca:9a:e8:21:b3:ce:9c:7c:a7:2b:b4: b6:b1:b3:6c:10:3a:25:10:1a:8a:f1:6a:c2:29:a7:39:ac:fd: 84:b4:d2:9c:89:d6:aa:30:bd:65:51:0e:ff:c4:32:e4:9b:43: 5e:c4:8c:2c:07:8e:24:00:22:f0:fb:89:45:b8:ae:c5:5d:3a: 6e:1f:a7:06:aa:de:64:de:76:dc:e6:8f:26:73:75:4e:a8:cb: fa:f4:98:16:ab:02:a0:a8:2c:2e:16:cd:13:0f:c5:83:e3:27: 20:43:d4:d2:12:da:5e:ec:71:bf:54:3f:2d:f9:0f:cf:70:d7: 37:58:28:3a:68:24:40:2f:c0:08:5d:36:bc:8e:a4:95:c6:59: 4b:a3:16:d3:51:6c:68:39:90:a8:d6:25:99:3e:de:d6:67:cd: d3:ad:25:00:e8:eb:a7:e6:de:54:4c:9b:e1:eb:b1:63:ba:fa: f2:a6:39:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqDyZUbT2G3dXak31R4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh NmFhMjQwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD EygyM2E2NzQ5NmY2MTBjNTE1OGM5OWE4YzJjMTZkZmEzM2YxOGVkZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PIdXAac/n9ONF37Njqx+M9OaM1d Ww+CpeQ/GbL/3bAXbtqPhEgSJWwkyn2W7Wvp9NsGUP2derPzvypT04dX6K13dRF9 omYJcQraJbNNjRpJgNMgkAJh9gC0tRqf8P/OSFM3YKPEhItIwFeedamk4IjD6cuu OkuEEhptTJ1FQEAENSbzvbYyPtRuXLVPtdA2BWXUc04lDO3KSgnyVzI/nsNrRPpQ VkEK39IrsQPWIPSdu1BNFYi9XboMIzUae4v75m1INu7Dj7eJ3Ladgy/z5r9mRe9u aqyoWnOU6LV4kHQHrA36Iihcg3Xmn2U6yDtmv2XMibbA6dDD6R+Syr6dWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOmdJb2EMUVjJmowsFt+jPxjt10MB8GA1UdIwQY MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5 LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKInq5GBu TDJ9wHOPa9GF0PfpyEF3SPvwlne0oeNfPF8WibYWxrg0M32zTfOOrQ5fsnPJ2ulB VEGEo9abthWTBoByTlRyxcrDVNeM2oFOhMqa6CGzzpx8pyu0trGzbBA6JRAaivFq wimnOaz9hLTSnInWqjC9ZVEO/8Qy5JtDXsSMLAeOJAAi8PuJRbiuxV06bh+nBqre ZN523OaPJnN1TqjL+vSYFqsCoKgsLhbNEw/Fg+MnIEPU0hLaXuxxv1Q/LfkPz3DX N1goOmgkQC/ACF02vI6klcZZS6MW01FsaDmQqNYlmT7e1mfN060lAOjrp+beVEyb 4euxY7r68qY54g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:44 2025 by rpki-client