This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json) Hash identifier: aXUN9CAY6XFJCnBYDBsoc6w+LhfOdosNlhQay4Gx6ek= Subject key identifier: 32:A6:64:4D:C9:71:69:C4:71:E2:72:0E:72:C1:6A:37:8A:BD:17:11 Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Certificate serial: 019AF209AA3631F419395AFC02337E8281A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=) 2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: rE05TD3o5ZqlqHJyD4C2ElXjYWJuaDNaT/vJ/NWMCI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:aa:36:31:f4:19:39:5a:fc:02:33:7e:82:81:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=32a6644dc97169c471e2720e72c16a378abd1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6b:88:2d:72:b2:e5:cc:89:0f:04:52:85:bc: e9:52:e9:85:06:9e:12:5f:fc:c9:12:f8:8b:46:f2: 18:e5:69:1d:89:a4:cc:4a:87:a6:ca:48:fa:6c:c1: 66:33:ea:b0:2c:fd:c5:aa:60:b1:dd:de:85:db:e0: e0:8a:49:b2:3a:90:80:86:91:26:1b:a1:6c:05:2f: 66:59:5b:93:3c:80:d5:dd:d8:d8:c3:ec:1f:55:b9: a4:8a:e5:47:8e:f3:55:55:92:2d:d7:1d:5c:23:8e: f8:5a:f5:92:be:d0:95:7f:cc:0a:b6:5b:80:26:cf: dc:e2:c5:35:6e:27:04:13:04:03:4b:18:d2:f8:2d: 50:8a:e4:98:41:52:46:4c:f2:1a:67:94:04:a1:aa: 8c:04:92:74:f9:01:08:8b:7d:7a:ba:c1:a8:f2:b2: 02:57:7b:c7:93:ad:bc:6a:07:64:57:1d:17:0d:0c: dd:f6:7d:b9:01:32:e5:e0:16:67:61:e9:a7:84:b3: 73:a0:c2:99:d6:0f:b8:85:75:57:9d:7e:2b:56:73: ff:3b:44:e7:c7:d5:27:c2:bc:11:56:23:22:01:eb: cf:af:83:d0:dd:b5:d0:53:aa:89:32:ce:5e:60:4c: 98:29:9d:47:f1:45:b8:34:b0:ae:a7:3b:cb:6a:e1: 28:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A6:64:4D:C9:71:69:C4:71:E2:72:0E:72:C1:6A:37:8A:BD:17:11 X509v3 Authority Key Identifier: keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:91:da:d3:6c:f4:24:b3:ba:a0:56:22:04:15:5b:63:60:0d: 22:83:8b:a4:b5:a5:92:66:b9:c5:10:4c:be:08:bb:7c:8e:a9: 5c:97:52:89:23:08:63:9d:6f:e3:ca:8e:79:0f:6e:16:16:af: 63:07:0c:14:ef:9d:71:47:0b:fc:ce:24:fc:48:81:44:d4:7c: 31:8d:0e:30:52:72:7d:f3:22:2b:13:02:80:a7:9d:a1:8b:71: 0a:74:d0:d8:25:1b:e2:ac:1f:6d:cb:bc:e7:10:1f:0e:06:68: 96:a3:4d:cb:4e:82:cc:b2:9f:66:fa:36:12:be:06:f2:1c:3c: ef:10:b6:15:1e:8a:18:97:6c:7a:0d:d0:2b:76:fe:09:da:a2: 8a:1a:7b:92:8b:47:9e:1c:e6:ae:77:ea:86:c1:3c:82:5f:39: 32:85:af:c4:b4:ee:51:e4:dd:9c:bc:1f:fe:7f:ef:06:d6:c1: 46:2d:98:95:d8:b2:5a:c2:70:7b:a3:ee:41:62:00:bc:00:de: 33:1c:1d:b5:4b:b3:8c:dd:2d:e7:fd:ef:99:7d:2d:6b:f6:f8: 42:81:85:af:ae:69:39:f8:7e:35:8f:bd:ad:d3:a2:4c:6f:52: 02:bc:52:e1:1c:f3:ab:c1:10:39:92:7f:d0:da:79:7c:3a:e7: cd:1b:2e:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCao2MfQZOVr8AjN+goGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MTRiZGMyMzEyNDAwZGZhOWY1MDY1MGQ1MWVlMDQ0 M2RmMTYwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD EygzMmE2NjQ0ZGM5NzE2OWM0NzFlMjcyMGU3MmMxNmEzNzhhYmQxNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGuILXKy5cyJDwRShbzpUumFBp4S X/zJEviLRvIY5WkdiaTMSoemykj6bMFmM+qwLP3FqmCx3d6F2+DgikmyOpCAhpEm G6FsBS9mWVuTPIDV3djYw+wfVbmkiuVHjvNVVZIt1x1cI474WvWSvtCVf8wKtluA Js/c4sU1bicEEwQDSxjS+C1QiuSYQVJGTPIaZ5QEoaqMBJJ0+QEIi316usGo8rIC V3vHk628agdkVx0XDQzd9n25ATLl4BZnYemnhLNzoMKZ1g+4hXVXnX4rVnP/O0Tn x9UnwrwRViMiAevPr4PQ3bXQU6qJMs5eYEyYKZ1H8UW4NLCupzvLauEoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKmZE3JcWnEceJyDnLBajeKvRcRMB8GA1UdIwQY MBaAFH4TQUvcIxJADfqfUGUNUe4EQ98WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQt MDRmY2VjYWQ3MGVjLzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQtMDRmY2VjYWQ3MGVj LzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5Ha02z0 JLO6oFYiBBVbY2ANIoOLpLWlkma5xRBMvgi7fI6pXJdSiSMIY51v48qOeQ9uFhav YwcMFO+dcUcL/M4k/EiBRNR8MY0OMFJyffMiKxMCgKedoYtxCnTQ2CUb4qwfbcu8 5xAfDgZolqNNy06CzLKfZvo2Er4G8hw87xC2FR6KGJdseg3QK3b+Cdqiihp7kotH nhzmrnfqhsE8gl85MoWvxLTuUeTdnLwf/n/vBtbBRi2YldiyWsJwe6PuQWIAvADe MxwdtUuzjN0t5/3vmX0ta/b4QoGFr65pOfh+NY+9rdOiTG9SArxS4Rzzq8EQOZJ/ 0Np5fDrnzRsuGw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:22 2025 by rpki-client