This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json) Hash identifier: e0agqmtYCyvqA1uDz/5W8dbO56S8SO5PcyFuoG6OXow= Subject key identifier: 86:5C:5F:A3:94:73:DC:F4:C4:F6:64:00:05:3F:C0:82:65:BA:CB:E2 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019AF2E4326B396C8488B6C85AE2ABB0AA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft Manifest number: 01F3 Signing time: Sat 06 Dec 2025 09:00:32 +0000 Manifest this update: Sat 06 Dec 2025 09:00:32 +0000 Manifest next update: Sun 07 Dec 2025 09:00:32 +0000 Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=) 2: LDoP5Dfl1mKROHPXAg7g52U96wY.roa (hash: zTokmzR2O1Fhpl59w3s7zzWY51T7sYMdoDy4HTwa7WM=) 3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: FNCGrlS0Aq00fqsbBi98XXCdWzopIbYWvCpG544g+xA=) 4: lur7LLaprCF9vuUpmH2EDiL7-NI.roa (hash: tuwH5AM3gmMcWOq6gRBrX3IhB6gIQd7IZ9AP/juvN3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 09:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:32:6b:39:6c:84:88:b6:c8:5a:e2:ab:b0:aa:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Dec 6 09:00:32 2025 GMT Not After : Dec 7 09:00:32 2025 GMT Subject: CN=865c5fa39473dcf4c4f66400053fc08265bacbe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:f6:fd:27:e1:1c:b5:37:2c:01:58:1b:0f: cf:5e:c2:48:c0:54:70:e1:34:2d:37:1b:67:93:0b: b1:55:07:b5:b2:d8:51:5a:62:27:6f:ce:8b:ae:f1: d9:ee:56:b4:ac:15:7a:8b:37:96:70:27:9c:8e:83: 47:f5:15:75:5a:66:c4:fd:2d:a2:80:c2:39:ca:6d: 07:7c:f8:e0:3b:d0:e0:16:f2:be:04:9a:5b:44:1d: 0f:5c:67:02:82:1d:1c:09:0e:b5:1f:46:92:83:96: d6:b7:17:63:46:fb:c6:09:2c:1b:d0:1a:93:19:81: f4:ba:66:28:ad:17:b8:74:82:14:4e:4f:80:d6:b1: 28:79:1f:df:c2:6c:62:03:ca:a0:3d:6b:79:17:db: ab:c4:c1:cd:b7:55:3d:e3:df:10:a6:84:ee:a0:e8: bd:91:cf:1b:9b:df:07:ff:03:72:65:45:39:b4:1c: df:09:57:bd:0a:25:ff:c7:a3:c3:3c:0c:f0:39:40: 44:80:04:ce:b3:23:de:6d:06:69:dc:60:85:0e:49: a0:b6:27:c5:27:c4:91:cf:b4:c3:64:52:64:0b:69: d6:63:92:e1:16:bf:45:a0:12:76:e5:28:c6:90:5d: bf:d3:d4:46:d4:19:d8:56:58:06:f5:10:2a:9e:19: fe:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5C:5F:A3:94:73:DC:F4:C4:F6:64:00:05:3F:C0:82:65:BA:CB:E2 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:e2:c5:46:7a:4e:ef:ae:36:81:6c:a2:5d:3e:c2:96:b9:39: de:c5:75:80:41:b8:ac:5f:79:da:95:96:5c:d6:c7:e1:9b:ab: 00:93:6f:79:eb:0f:f1:12:d8:11:94:7f:be:41:b7:7f:4e:0c: 3e:bb:cd:e8:01:9c:52:8e:6d:5f:23:78:5a:e4:d9:e2:1a:db: 4a:b8:59:6f:e8:19:a9:7c:ac:2b:b2:25:bb:41:b6:08:93:ce: 71:b8:f9:63:26:0b:0a:56:6c:c3:7b:9c:a3:96:ab:86:a8:ad: 1b:30:64:16:81:dd:65:54:71:f3:0d:90:6b:05:d3:cb:71:89: 2b:c3:da:6f:e4:f8:da:bb:b8:6f:16:d8:93:92:0d:25:71:86: 87:bf:68:d2:d8:aa:f5:31:01:96:31:45:a4:43:09:bd:17:e9: 7c:56:1f:31:a6:56:3a:b8:14:c2:dd:b9:c4:5e:3d:b2:39:07: ed:b4:c5:33:61:89:5b:b6:03:71:30:a2:80:8e:c9:9b:c4:d3: da:af:84:59:2b:bf:8e:a9:c9:52:ee:da:a7:eb:df:a8:a6:7d: 0e:fd:6e:d8:3b:9f:4b:c9:b2:0a:b4:58:e3:2b:aa:e2:a7:ec: 9e:d6:47:d1:34:e4:c7:79:48:11:3b:e1:52:8f:87:23:f5:b8: 5d:c2:8d:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5DJrOWyEiLbIWuKrsKpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjUxMjA2MDkwMDMyWhcNMjUxMjA3MDkwMDMyWjAzMTEwLwYDVQQD Eyg4NjVjNWZhMzk0NzNkY2Y0YzRmNjY0MDAwNTNmYzA4MjY1YmFjYmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn72/SfhHLU3LAFYGw/PXsJIwFRw 4TQtNxtnkwuxVQe1sthRWmInb86LrvHZ7la0rBV6izeWcCecjoNH9RV1WmbE/S2i gMI5ym0HfPjgO9DgFvK+BJpbRB0PXGcCgh0cCQ61H0aSg5bWtxdjRvvGCSwb0BqT GYH0umYorRe4dIIUTk+A1rEoeR/fwmxiA8qgPWt5F9urxMHNt1U9498QpoTuoOi9 kc8bm98H/wNyZUU5tBzfCVe9CiX/x6PDPAzwOUBEgATOsyPebQZp3GCFDkmgtifF J8SRz7TDZFJkC2nWY5LhFr9FoBJ25SjGkF2/09RG1BnYVlgG9RAqnhn+hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZcX6OUc9z0xPZkAAU/wIJlusviMB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeLFRnpO 7642gWyiXT7Clrk53sV1gEG4rF952pWWXNbH4ZurAJNveesP8RLYEZR/vkG3f04M PrvN6AGcUo5tXyN4WuTZ4hrbSrhZb+gZqXysK7Ilu0G2CJPOcbj5YyYLClZsw3uc o5arhqitGzBkFoHdZVRx8w2QawXTy3GJK8Pab+T42ru4bxbYk5INJXGGh79o0tiq 9TEBljFFpEMJvRfpfFYfMaZWOrgUwt25xF49sjkH7bTFM2GJW7YDcTCigI7Jm8TT 2q+EWSu/jqnJUu7ap+vfqKZ9Dv1u2DufS8myCrRY4yuq4qfsntZH0TTkx3lIETvh Uo+HI/W4XcKNow== -----END CERTIFICATE-----Generated at Sat Dec 6 17:20:34 2025 by rpki-client