This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json) Hash identifier: 3980DNPRfnUZCS9uBohOdT+wIsCiMSvmIXttsPOhYuE= Subject key identifier: 14:D1:61:B1:03:7F:E2:AC:2E:56:13:58:2B:87:D2:19:70:06:88:2A Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Certificate serial: 019AF2ADD68C5EB12E235AF09F54DABCA4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft Manifest number: 047B Signing time: Sat 06 Dec 2025 08:01:09 +0000 Manifest this update: Sat 06 Dec 2025 08:01:09 +0000 Manifest next update: Sun 07 Dec 2025 08:01:09 +0000 Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: X5WQoWsTjLNePQCGmzDkZqRusdTLeW/EL11GZjhXo2U=) 2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d6:8c:5e:b1:2e:23:5a:f0:9f:54:da:bc:a4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Validity Not Before: Dec 6 08:01:09 2025 GMT Not After : Dec 7 08:01:09 2025 GMT Subject: CN=14d161b1037fe2ac2e5613582b87d2197006882a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:6e:35:3e:ae:77:71:7a:61:5b:29:be:eb: cb:55:86:d6:a3:50:db:ab:8b:ee:2f:47:b5:a2:89: 75:27:ad:bd:8c:29:44:6c:70:59:f4:dd:60:b1:fd: c8:21:8a:d9:23:05:42:43:4e:55:68:bc:55:38:ed: 67:03:d9:1f:d6:e9:29:7a:b0:fd:c1:2e:e8:ce:11: 7f:eb:97:a1:fd:ef:4f:6f:ce:23:b0:8b:ca:f4:8f: 2b:0e:1e:98:d1:85:41:3b:19:c2:a4:82:b9:64:df: b1:ed:d6:b9:62:a3:4e:72:6c:18:f0:67:a9:53:ba: f1:a6:90:3a:e8:58:0d:55:89:02:26:25:66:cc:68: 17:2b:46:be:a9:3f:fd:70:6a:b2:d0:74:61:e1:3a: e7:5f:b9:1e:02:11:65:d2:28:a4:9d:01:02:bd:db: 42:19:98:08:99:1a:50:48:6d:29:7e:61:78:d1:60: b6:d2:48:2f:e9:36:43:e0:85:9d:a9:e0:c5:4f:f1: 45:28:59:92:f8:af:09:fd:5f:58:28:2f:cd:54:a5: 35:ff:22:b2:f3:11:e6:b0:a4:95:9c:c1:52:85:bc: e7:0b:00:bc:d3:72:69:ee:3f:3d:5c:dc:96:5a:0b: be:2a:60:6d:c0:e2:f8:17:3b:d1:bd:49:7c:1f:dc: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D1:61:B1:03:7F:E2:AC:2E:56:13:58:2B:87:D2:19:70:06:88:2A X509v3 Authority Key Identifier: keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:93:75:1a:87:cf:33:2a:b7:89:52:15:3b:e8:3f:f6:ea:c3: fd:2f:90:cb:2a:ad:fc:db:1d:25:53:34:a1:3d:c9:80:0f:29: cf:18:a5:96:26:33:ce:d1:9b:5a:81:d1:69:a4:00:05:d9:69: b4:df:a2:4e:ef:b3:c7:eb:7d:84:62:4b:78:9d:ce:d0:64:c7: e7:12:85:0e:df:4f:07:9a:3b:cd:3c:37:db:a0:9c:1f:d6:a2: 4f:e4:07:2d:8b:c8:a3:42:ba:5e:38:5f:92:cf:29:e2:66:58: f9:bc:9b:f9:2a:db:94:a8:85:19:f7:23:83:b8:d9:99:ca:76: e7:fd:7c:68:f2:77:46:02:87:8a:44:57:2c:27:94:32:75:4a: 83:68:8b:b4:2e:9a:b2:be:67:19:03:d1:3b:57:6e:73:35:36: 0c:3d:4e:97:8d:94:d2:ac:60:86:53:b3:61:39:b6:ea:ad:1b: 3d:a7:20:e6:b0:5d:e9:68:80:11:00:a2:96:a2:ae:9e:b6:6b: 18:09:71:5b:29:eb:4c:91:79:f3:81:c7:d3:45:71:1c:b4:78: e1:b8:ed:e2:2a:42:d1:b9:10:da:4f:87:e9:d1:53:ed:05:b7: 4a:47:4d:6c:d1:14:8e:12:61:ed:b8:fa:23:fa:cd:cb:23:a7: 09:32:3d:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdaMXrEuI1rwn1TavKSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm ZWVmZWIwHhcNMjUxMjA2MDgwMTA5WhcNMjUxMjA3MDgwMTA5WjAzMTEwLwYDVQQD EygxNGQxNjFiMTAzN2ZlMmFjMmU1NjEzNTgyYjg3ZDIxOTcwMDY4ODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S5uNT6ud3F6YVspvuvLVYbWo1Db q4vuL0e1ool1J629jClEbHBZ9N1gsf3IIYrZIwVCQ05VaLxVOO1nA9kf1ukperD9 wS7ozhF/65eh/e9Pb84jsIvK9I8rDh6Y0YVBOxnCpIK5ZN+x7da5YqNOcmwY8Gep U7rxppA66FgNVYkCJiVmzGgXK0a+qT/9cGqy0HRh4TrnX7keAhFl0iiknQECvdtC GZgImRpQSG0pfmF40WC20kgv6TZD4IWdqeDFT/FFKFmS+K8J/V9YKC/NVKU1/yKy 8xHmsKSVnMFShbznCwC803Jp7j89XNyWWgu+KmBtwOL4FzvRvUl8H9wb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTRYbEDf+KsLlYTWCuH0hlwBogqMB8GA1UdIwQY MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1 LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapN1GofP Myq3iVIVO+g/9urD/S+Qyyqt/NsdJVM0oT3JgA8pzxilliYzztGbWoHRaaQABdlp tN+iTu+zx+t9hGJLeJ3O0GTH5xKFDt9PB5o7zTw326CcH9aiT+QHLYvIo0K6Xjhf ks8p4mZY+byb+SrblKiFGfcjg7jZmcp25/18aPJ3RgKHikRXLCeUMnVKg2iLtC6a sr5nGQPRO1duczU2DD1Ol42U0qxghlOzYTm26q0bPacg5rBd6WiAEQCilqKunrZr GAlxWynrTJF584HH00VxHLR44bjt4ipC0bkQ2k+H6dFT7QW3SkdNbNEUjhJh7bj6 I/rNyyOnCTI9Tw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:07 2025 by rpki-client