This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json) Hash identifier: fWLZ+nLqlkmeQWZduvLDLiinQgHRDmDd0e5gG4FQ6+o= Subject key identifier: C4:32:1A:C1:D9:14:36:3C:65:6C:41:15:42:9A:70:E4:FC:0A:01:2C Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Certificate serial: 019B3079921A1E08ED9AF28962EDF861B27B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft Manifest number: 049B Signing time: Thu 18 Dec 2025 08:00:32 +0000 Manifest this update: Thu 18 Dec 2025 08:00:32 +0000 Manifest next update: Fri 19 Dec 2025 08:00:32 +0000 Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: DpflChf+EubnrVUZHkCsSpS/MiHtqWyV+dHHZirV7e8=) 2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:92:1a:1e:08:ed:9a:f2:89:62:ed:f8:61:b2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Validity Not Before: Dec 18 08:00:32 2025 GMT Not After : Dec 19 08:00:32 2025 GMT Subject: CN=c4321ac1d914363c656c4115429a70e4fc0a012c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:66:b6:8d:04:57:69:9b:a8:ec:7b:36:2f: f4:68:74:0f:d3:be:9c:fc:21:3e:32:47:06:c8:0a: c9:d9:52:6d:e3:eb:5d:a1:af:21:71:ce:d3:fb:6d: 0d:e8:6c:cd:a6:24:eb:a8:98:8b:8c:e3:c9:69:2d: 3b:13:cb:62:0c:0e:04:64:c2:96:b2:14:27:eb:e0: 06:56:77:11:4e:31:32:fe:ca:0d:92:6f:45:69:66: 05:64:db:93:c4:b0:57:94:06:07:a3:03:96:58:a3: ef:b6:02:3e:ef:bd:a6:da:cf:f2:c9:f9:61:e1:37: 77:a7:86:3b:cf:39:fa:11:1d:34:db:39:56:13:fe: 10:08:07:a1:06:ef:38:a9:3c:00:f6:e3:c1:10:05: 08:80:11:2e:ef:23:26:11:1a:7b:15:1a:bd:ab:44: ba:a3:df:ae:12:36:57:27:22:eb:ec:90:bf:81:8c: a6:f4:3e:a9:4b:c1:3c:c6:8d:65:32:68:9e:8d:ca: ca:1f:9c:7f:52:0d:9f:92:b2:c8:4d:6c:0e:84:0a: 6d:04:76:67:78:cf:fc:d3:34:d8:e7:10:e1:68:fe: 67:69:f7:88:a7:16:ee:84:8a:9a:ed:a7:bb:8f:ea: 38:08:b6:0a:3d:28:64:e9:b6:59:c8:02:9d:56:d2: ad:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:32:1A:C1:D9:14:36:3C:65:6C:41:15:42:9A:70:E4:FC:0A:01:2C X509v3 Authority Key Identifier: keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:46:a3:81:03:4c:74:8f:a5:d6:3b:3c:e3:d0:b3:49:df:92: bd:24:44:bf:26:88:35:0a:d3:30:32:b1:02:94:1b:78:26:bb: 65:b3:f5:a3:0f:12:01:c1:b1:e4:8f:3b:c8:1d:56:63:bc:0a: ac:96:90:a3:86:93:f4:b1:ef:1d:99:b5:4f:e0:e1:71:e4:c7: 60:1f:6d:4c:68:44:f0:83:52:63:2b:b3:25:43:4f:d8:27:79: 8e:5a:65:08:8e:59:9f:17:e8:9d:51:ee:01:70:82:ec:52:35: 9c:b7:5e:86:9e:16:99:20:58:37:7d:53:7f:65:71:e4:bf:3c: fe:3c:28:40:04:e0:b1:2e:62:d5:0f:f6:9e:1e:87:68:5b:2e: 75:d7:af:cb:b7:4f:20:a4:fb:90:45:d6:0c:1d:d3:0b:e3:2f: ca:65:78:33:fe:8b:f1:3c:38:e2:00:d8:e5:62:d9:ca:79:ed: fd:52:81:7f:c8:f3:83:4f:50:1d:fa:af:46:ef:4e:2f:a5:98: 9f:3c:04:27:f6:19:52:1d:0c:6e:a0:cc:bb:26:44:5d:01:1e: 9b:96:26:75:d8:11:81:84:4d:22:49:8d:92:0c:08:4e:aa:0c: de:dd:13:6e:34:e0:95:79:4c:79:94:3a:57:e4:c9:dd:bf:9b: 35:02:24:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsweZIaHgjtmvKJYu34YbJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm ZWVmZWIwHhcNMjUxMjE4MDgwMDMyWhcNMjUxMjE5MDgwMDMyWjAzMTEwLwYDVQQD EyhjNDMyMWFjMWQ5MTQzNjNjNjU2YzQxMTU0MjlhNzBlNGZjMGEwMTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9Rmto0EV2mbqOx7Ni/0aHQP076c /CE+MkcGyArJ2VJt4+tdoa8hcc7T+20N6GzNpiTrqJiLjOPJaS07E8tiDA4EZMKW shQn6+AGVncRTjEy/soNkm9FaWYFZNuTxLBXlAYHowOWWKPvtgI+772m2s/yyflh 4Td3p4Y7zzn6ER002zlWE/4QCAehBu84qTwA9uPBEAUIgBEu7yMmERp7FRq9q0S6 o9+uEjZXJyLr7JC/gYym9D6pS8E8xo1lMmiejcrKH5x/Ug2fkrLITWwOhAptBHZn eM/80zTY5xDhaP5nafeIpxbuhIqa7ae7j+o4CLYKPShk6bZZyAKdVtKtCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQyGsHZFDY8ZWxBFUKacOT8CgEsMB8GA1UdIwQY MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1 LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0ajgQNM dI+l1js849CzSd+SvSREvyaINQrTMDKxApQbeCa7ZbP1ow8SAcGx5I87yB1WY7wK rJaQo4aT9LHvHZm1T+DhceTHYB9tTGhE8INSYyuzJUNP2Cd5jlplCI5ZnxfonVHu AXCC7FI1nLdehp4WmSBYN31Tf2Vx5L88/jwoQATgsS5i1Q/2nh6HaFsuddevy7dP IKT7kEXWDB3TC+MvymV4M/6L8Tw44gDY5WLZynnt/VKBf8jzg09QHfqvRu9OL6WY nzwEJ/YZUh0MbqDMuyZEXQEem5YmddgRgYRNIkmNkgwITqoM3t0TbjTglXlMeZQ6 V+TJ3b+bNQIkIA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:51:35 2025 by rpki-client