This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json) Hash identifier: 1NbZbiosgDAXWHyUcnRoDNg10SSJktCjoONbjq6KKEo= Subject key identifier: 30:76:41:F4:AD:85:C4:46:90:45:3B:A1:BD:ED:65:71:10:8E:39:D7 Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Certificate serial: 019AF19AD637C5A9BCF87FF6B52D77005944 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft Manifest number: 0FBB Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: s9cwhNTECNHJ/poMjQz/RsnqmgNqdN+cnFCvH7q0Ajo=) 2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d6:37:c5:a9:bc:f8:7f:f6:b5:2d:77:00:59:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=307641f4ad85c44690453ba1bded6571108e39d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:05:c0:82:bb:37:5c:e4:59:2e:29:8a:c4:00: 74:ac:2f:75:ca:b7:01:f5:54:16:83:7a:6d:ce:27: 01:cf:d2:fe:30:67:d4:27:97:c9:22:45:71:d1:2f: 52:9d:24:0e:de:75:6c:ed:a2:f5:fe:45:da:11:44: 52:ea:3f:a6:81:96:6d:98:42:c3:70:f7:16:3d:07: 2d:8f:20:21:c7:f6:5b:bf:17:71:2b:58:59:97:a4: b0:eb:87:cb:cd:05:5c:85:b7:79:b9:0f:f6:c0:fc: 39:d5:1d:a7:aa:96:9b:0b:be:64:08:2f:30:da:df: 12:ca:ec:16:e6:96:20:b3:69:41:6f:ff:71:8f:c3: 8d:fb:45:98:f2:e0:91:ad:15:53:ef:56:4d:54:7c: 1f:09:30:c8:85:4a:5e:32:5c:14:c5:6c:ec:88:95: 40:30:ca:ea:83:57:79:ac:56:85:aa:d4:0e:31:f8: f2:cb:07:83:e3:34:a4:60:15:28:b6:b5:6b:bd:76: 28:bf:73:04:05:e9:23:27:e9:00:59:4e:6f:31:1e: 29:3f:a7:77:db:29:7a:bf:70:ed:c0:49:9c:1f:9f: d3:17:f3:54:7c:7c:60:89:71:cf:6f:a9:f3:c2:69: 0f:89:c3:2c:45:e3:da:65:a4:57:d9:f8:07:4d:cd: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:76:41:F4:AD:85:C4:46:90:45:3B:A1:BD:ED:65:71:10:8E:39:D7 X509v3 Authority Key Identifier: keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:36:a4:20:7c:bf:fe:0d:6d:be:56:41:11:cb:a6:ab:81:00: b0:74:3d:32:61:19:45:68:f7:05:12:7c:ce:43:33:96:11:22: 50:47:9e:b8:40:c9:9e:b1:d1:af:f6:3e:90:70:c0:73:71:93: c8:02:35:30:fe:37:43:c1:20:42:d6:0f:1b:4d:b1:31:3a:7a: 31:17:84:57:99:2c:e3:06:07:db:3f:3a:86:ac:37:69:b1:43: 8b:a7:1d:78:69:0c:a6:6b:ae:f7:fd:63:83:a8:ae:a3:0f:a1: a7:d3:7a:fc:43:d8:86:24:eb:3e:a6:1e:b2:75:75:a7:e2:d9: 5a:8b:35:06:b8:81:15:90:86:b8:39:36:16:68:fd:20:21:7a: 61:7c:89:5a:f0:18:67:24:a7:f7:23:ab:3d:68:af:e0:77:34: 3c:d8:74:19:11:76:38:8e:e3:97:4d:07:5a:1d:4e:fe:92:d7: 54:fa:d1:8b:57:52:d9:3e:07:9a:ab:77:bc:c9:2b:e2:31:bc: e2:c1:05:6a:b3:6c:6c:b9:9c:25:85:5c:eb:51:4b:17:68:f7: 42:58:80:4d:eb:55:08:f4:e8:a7:83:64:3d:12:7a:08:55:a5: 8c:cc:f0:68:09:81:dc:ec:f3:9e:2f:75:7e:aa:0a:27:9c:55: cd:3c:6b:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtY3xam8+H/2tS13AFlEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi NjEwZGYwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EygzMDc2NDFmNGFkODVjNDQ2OTA0NTNiYTFiZGVkNjU3MTEwOGUzOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAXAgrs3XORZLimKxAB0rC91yrcB 9VQWg3ptzicBz9L+MGfUJ5fJIkVx0S9SnSQO3nVs7aL1/kXaEURS6j+mgZZtmELD cPcWPQctjyAhx/ZbvxdxK1hZl6Sw64fLzQVchbd5uQ/2wPw51R2nqpabC75kCC8w 2t8SyuwW5pYgs2lBb/9xj8ON+0WY8uCRrRVT71ZNVHwfCTDIhUpeMlwUxWzsiJVA MMrqg1d5rFaFqtQOMfjyyweD4zSkYBUotrVrvXYov3MEBekjJ+kAWU5vMR4pP6d3 2yl6v3DtwEmcH5/TF/NUfHxgiXHPb6nzwmkPicMsRePaZaRX2fgHTc3PRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB2QfSthcRGkEU7ob3tZXEQjjnXMB8GA1UdIwQY MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjakIHy/ /g1tvlZBEcumq4EAsHQ9MmEZRWj3BRJ8zkMzlhEiUEeeuEDJnrHRr/Y+kHDAc3GT yAI1MP43Q8EgQtYPG02xMTp6MReEV5ks4wYH2z86hqw3abFDi6cdeGkMpmuu9/1j g6iuow+hp9N6/EPYhiTrPqYesnV1p+LZWos1BriBFZCGuDk2Fmj9ICF6YXyJWvAY ZySn9yOrPWiv4Hc0PNh0GRF2OI7jl00HWh1O/pLXVPrRi1dS2T4Hmqt3vMkr4jG8 4sEFarNsbLmcJYVc61FLF2j3QliATetVCPTop4NkPRJ6CFWljMzwaAmB3Ozzni91 fqoKJ5xVzTxryw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:28:46 2025 by rpki-client