This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json) Hash identifier: GMjag/wJjo1R0u7oH1OO+wS8g/V76IkAiL7qEOyO838= Subject key identifier: 50:4B:68:B0:59:5D:DE:59:BE:1E:2D:A3:23:C9:73:E1:E6:E1:86:78 Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73 Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073 Certificate serial: 019AF38A0965841A03554000FD0655DDF1E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 12:01:41 +0000 Manifest this update: Sat 06 Dec 2025 12:01:41 +0000 Manifest next update: Sun 07 Dec 2025 12:01:41 +0000 Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=) 2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: DtVS2iTsLyIfbiFeN+vlM1ng5y2/fQ9YMVleJYZV6uM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:09:65:84:1a:03:55:40:00:fd:06:55:dd:f1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073 Validity Not Before: Dec 6 12:01:41 2025 GMT Not After : Dec 7 12:01:41 2025 GMT Subject: CN=504b68b0595dde59be1e2da323c973e1e6e18678 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:3a:54:a2:e7:75:6c:28:56:aa:14:6e:09: e7:76:2d:30:3b:73:51:0c:2f:3b:a2:93:df:92:4c: eb:6c:c8:35:eb:10:76:72:54:61:98:18:e4:3e:bc: fb:c3:75:7e:53:6d:d1:14:58:95:6a:2a:8a:a3:42: 75:32:35:a5:db:03:00:3a:36:4b:cf:37:ff:7a:35: db:b8:fd:c6:8b:28:b2:50:12:12:6c:be:68:1b:b2: b6:42:a6:0b:a4:a5:60:d4:25:2a:35:f8:dd:7a:a8: 29:37:96:bc:77:4e:e1:00:85:3f:ba:53:fb:9d:7f: 25:4a:55:d3:9a:4a:19:81:84:3d:fa:03:ec:12:48: 1a:b1:8d:3d:61:41:71:47:f2:83:6e:40:74:bd:54: 27:de:15:10:72:b5:48:f7:bc:1e:62:f0:ab:ac:49: 92:16:4a:1f:0d:eb:f9:91:08:36:60:80:2a:7a:dc: 7d:53:8d:b9:9c:05:47:d4:2e:bf:c0:2e:ff:7c:8e: 69:bf:4f:9a:bc:0c:64:c9:84:98:ff:5d:bb:18:d2: 47:bf:62:d2:ff:5f:10:39:09:77:d6:32:51:fb:2b: df:34:38:d5:49:55:83:77:cf:7d:cb:bc:1c:b6:9c: b9:c8:02:9a:1e:20:bc:09:3d:7e:48:d8:7f:45:99: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4B:68:B0:59:5D:DE:59:BE:1E:2D:A3:23:C9:73:E1:E6:E1:86:78 X509v3 Authority Key Identifier: keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:92:1b:80:b1:2d:46:af:2a:3b:f3:a9:3f:74:1c:da:48:20: ed:f3:ee:ca:57:f4:82:57:6f:ef:51:ab:c6:e5:6b:64:6a:7d: 1f:86:7e:df:e9:47:38:e6:54:b3:17:22:43:ed:75:52:5f:b6: b0:4f:7f:55:36:72:c6:05:2f:79:c4:46:a7:54:f3:f4:58:40: 8b:1c:d6:5d:7e:81:dd:61:7c:8e:a3:50:d1:e5:d3:67:24:30: e0:4a:5d:f9:5f:3d:b8:75:74:d9:9b:66:ac:fd:b8:19:fc:fd: 31:57:40:b0:1b:d6:b7:60:12:1f:42:b6:20:f3:c8:71:d6:8e: fb:bd:7b:4f:15:6a:2c:7f:e1:27:0e:a9:e7:9d:d0:6e:fd:ea: 4b:b0:0c:8e:04:7c:58:90:8d:f8:78:63:01:22:bb:d4:75:4d: ba:4f:b5:fa:64:6d:7f:95:3d:8f:62:25:fd:cd:01:5b:80:87: ba:11:4f:d2:ff:a7:57:6c:b1:64:bc:35:8f:8a:b9:3b:c3:b8: 41:12:ee:1f:4c:38:43:90:1b:ae:89:48:f5:39:78:7b:e4:fc: a8:10:4c:0d:ae:ef:04:72:31:0a:d6:3b:7d:0b:a6:37:8c:c9: 68:97:ae:9c:74:7b:aa:4f:7d:e4:0a:9c:a9:48:34:8f:e6:45: 24:14:1b:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigllhBoDVUAA/QZV3fHgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDJhOTYxYjAzNzVkNzIxOTFiZDk3MDgxNWQ2YjE1ZjQy N2QwNzMwHhcNMjUxMjA2MTIwMTQxWhcNMjUxMjA3MTIwMTQxWjAzMTEwLwYDVQQD Eyg1MDRiNjhiMDU5NWRkZTU5YmUxZTJkYTMyM2M5NzNlMWU2ZTE4Njc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mA6VKLndWwoVqoUbgnndi0wO3NR DC87opPfkkzrbMg16xB2clRhmBjkPrz7w3V+U23RFFiVaiqKo0J1MjWl2wMAOjZL zzf/ejXbuP3GiyiyUBISbL5oG7K2QqYLpKVg1CUqNfjdeqgpN5a8d07hAIU/ulP7 nX8lSlXTmkoZgYQ9+gPsEkgasY09YUFxR/KDbkB0vVQn3hUQcrVI97weYvCrrEmS FkofDev5kQg2YIAqetx9U425nAVH1C6/wC7/fI5pv0+avAxkyYSY/127GNJHv2LS /18QOQl31jJR+yvfNDjVSVWDd899y7wctpy5yAKaHiC8CT1+SNh/RZmfMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBLaLBZXd5Zvh4toyPJc+Hm4YZ4MB8GA1UdIwQY MBaAFH4CqWGwN11yGRvZcIFdaxX0J9BzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQt Y2M0N2MxZGUwMWJkLzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQtY2M0N2MxZGUwMWJk LzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpIbgLEt Rq8qO/OpP3Qc2kgg7fPuylf0gldv71GrxuVrZGp9H4Z+3+lHOOZUsxciQ+11Ul+2 sE9/VTZyxgUvecRGp1Tz9FhAixzWXX6B3WF8jqNQ0eXTZyQw4Epd+V89uHV02Ztm rP24Gfz9MVdAsBvWt2ASH0K2IPPIcdaO+717TxVqLH/hJw6p553Qbv3qS7AMjgR8 WJCN+HhjASK71HVNuk+1+mRtf5U9j2Il/c0BW4CHuhFP0v+nV2yxZLw1j4q5O8O4 QRLuH0w4Q5AbrolI9Tl4e+T8qBBMDa7vBHIxCtY7fQumN4zJaJeunHR7qk995Aqc qUg0j+ZFJBQboA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:04 2025 by rpki-client