This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft File: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft (raw, json) Hash identifier: DSkcrwRFEv4bHAMgaAelsIEBm9qYRlp/eMXOZwUR6NM= Subject key identifier: BD:C7:E6:AB:9D:80:97:C1:66:F1:AA:D4:26:7F:5D:85:9A:08:3D:CC Authority key identifier: 7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 Certificate issuer: /CN=7db8248601e33b83c01405f9be14793614859bd6 Certificate serial: 019AF1D1942C3770BE7FA0D12E6A830533E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft Manifest number: 0121 Signing time: Sat 06 Dec 2025 04:00:35 +0000 Manifest this update: Sat 06 Dec 2025 04:00:35 +0000 Manifest next update: Sun 07 Dec 2025 04:00:35 +0000 Files and hashes: 1: fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl (hash: R55pxK8iAZey5UoIpM6gROvNC7ctaF0xhyfTti3dZvI=) 2: nRkMhAwrEmIGFSo5KtkPI4Qo5Co.roa (hash: DqkhFi8/nJkoAICivrur3pXP8/0mP1960uQN7oDPzao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:94:2c:37:70:be:7f:a0:d1:2e:6a:83:05:33:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db8248601e33b83c01405f9be14793614859bd6 Validity Not Before: Dec 6 04:00:35 2025 GMT Not After : Dec 7 04:00:35 2025 GMT Subject: CN=bdc7e6ab9d8097c166f1aad4267f5d859a083dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:25:b9:be:1b:e3:9e:7c:07:aa:b5:ec:9f: 1c:fe:bc:92:ff:ec:78:e1:00:5d:b6:b0:d1:23:cf: 67:2e:71:46:2e:7a:82:de:65:2c:58:3a:65:ae:88: a4:10:6f:8e:8f:6d:1d:35:bd:12:9c:9e:ac:51:1b: cc:0d:e9:a9:05:13:f0:3d:38:ac:af:06:ad:8d:49: 6b:bf:c5:fb:3d:98:b5:90:04:48:48:f1:a3:87:af: 70:a5:6c:c6:e6:5d:e2:2b:88:b6:13:a3:a8:25:33: 9a:7c:32:14:17:8e:eb:0d:9a:54:1c:0d:f4:c7:67: b8:2f:b3:8d:ba:d3:ac:a1:92:cd:b8:24:50:5f:6c: 3b:f1:9d:14:49:28:86:bb:2d:a5:3f:2a:57:9a:3c: 0e:e8:d5:74:09:a4:e1:c9:2d:28:cd:37:1e:79:07: 5d:ca:26:97:e4:ea:09:76:a3:cf:0f:db:37:95:83: db:d5:27:a7:c0:41:ed:70:e2:af:ed:34:fa:96:74: c1:72:fe:d0:6a:de:2e:55:1c:5f:47:62:ae:d6:86: b4:02:74:9f:3e:22:8e:2e:17:86:60:5e:50:dc:fb: 17:85:d3:6b:1f:2b:c5:eb:e0:c1:e3:b8:df:eb:f3: 37:4e:ca:07:ad:b3:ee:d4:17:aa:2b:ec:94:9e:75: 37:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C7:E6:AB:9D:80:97:C1:66:F1:AA:D4:26:7F:5D:85:9A:08:3D:CC X509v3 Authority Key Identifier: keyid:7D:B8:24:86:01:E3:3B:83:C0:14:05:F9:BE:14:79:36:14:85:9B:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/86eb81-f362-4f76-83a5-0e2df9695592/1/fbgkhgHjO4PAFAX5vhR5NhSFm9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:53:7b:03:6f:40:62:15:cb:c3:93:48:a2:d1:c6:8c:b3:fe: 4a:17:ec:22:cd:77:ce:4a:56:21:19:3a:73:d1:7b:ad:fc:cc: f3:b4:bd:3b:a3:35:3e:0c:28:22:e3:14:d7:f0:94:ce:0f:de: b5:2a:a5:d8:36:82:77:77:6c:6b:c8:52:38:55:1b:67:0c:7f: 1a:d2:4e:33:0b:ce:e9:99:67:54:97:04:5d:a1:a5:a3:d4:35: f5:fe:f6:b4:75:5c:b4:96:12:f6:ec:05:0a:0e:8b:db:83:95: 8b:ab:d6:a5:70:d1:07:8e:b8:6e:38:2d:48:da:a8:bb:30:4a: 7a:49:fb:a8:25:7f:fa:c7:5a:3c:81:c0:13:96:19:af:1b:29: cb:bd:2b:a0:ab:d2:82:b0:32:66:b4:a3:30:e7:cb:66:01:67: 58:fe:44:bf:5b:30:5f:d6:52:7e:02:70:14:73:25:f2:88:18: b7:b5:ec:e1:41:14:3f:d2:a6:b1:a2:5c:57:54:7a:57:ac:b2: 8b:44:ac:70:46:10:b5:95:19:34:f9:0a:76:ae:40:50:50:15: 60:f1:be:84:d1:c4:8a:0a:40:5c:0e:d3:b3:d9:a5:8d:a3:d7: 14:5b:0a:08:35:a5:6a:b7:b1:d0:b1:25:1c:cb:5b:5f:2b:9b: 64:77:da:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZQsN3C+f6DRLmqDBTPkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjgyNDg2MDFlMzNiODNjMDE0MDVmOWJlMTQ3OTM2MTQ4 NTliZDYwHhcNMjUxMjA2MDQwMDM1WhcNMjUxMjA3MDQwMDM1WjAzMTEwLwYDVQQD EyhiZGM3ZTZhYjlkODA5N2MxNjZmMWFhZDQyNjdmNWQ4NTlhMDgzZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq90lub4b4558B6q17J8c/ryS/+x4 4QBdtrDRI89nLnFGLnqC3mUsWDplroikEG+Oj20dNb0SnJ6sURvMDempBRPwPTis rwatjUlrv8X7PZi1kARISPGjh69wpWzG5l3iK4i2E6OoJTOafDIUF47rDZpUHA30 x2e4L7ONutOsoZLNuCRQX2w78Z0USSiGuy2lPypXmjwO6NV0CaThyS0ozTceeQdd yiaX5OoJdqPPD9s3lYPb1SenwEHtcOKv7TT6lnTBcv7Qat4uVRxfR2Ku1oa0AnSf PiKOLheGYF5Q3PsXhdNrHyvF6+DB47jf6/M3TsoHrbPu1BeqK+yUnnU33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3H5qudgJfBZvGq1CZ/XYWaCD3MMB8GA1UdIwQY MBaAFH24JIYB4zuDwBQF+b4UeTYUhZvWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUt MGUyZGY5Njk1NTkyLzEvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84NmViODEtZjM2Mi00Zjc2LTgzYTUtMGUyZGY5Njk1NTky LzEvZmJna2hnSGpPNFBBRkFYNXZoUjVOaFNGbTlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFN7A29A YhXLw5NIotHGjLP+ShfsIs13zkpWIRk6c9F7rfzM87S9O6M1PgwoIuMU1/CUzg/e tSql2DaCd3dsa8hSOFUbZwx/GtJOMwvO6ZlnVJcEXaGlo9Q19f72tHVctJYS9uwF Cg6L24OVi6vWpXDRB464bjgtSNqouzBKekn7qCV/+sdaPIHAE5YZrxspy70roKvS grAyZrSjMOfLZgFnWP5Ev1swX9ZSfgJwFHMl8ogYt7Xs4UEUP9KmsaJcV1R6V6yy i0SscEYQtZUZNPkKdq5AUFAVYPG+hNHEigpAXA7Ts9mljaPXFFsKCDWlarex0LEl HMtbXyubZHfahg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:52 2025 by rpki-client