This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json) Hash identifier: 3VbJ/kniasSN93/d5pBbknV2fiuDeccScGcx27Rk6Jc= Subject key identifier: 20:E0:2D:BC:C2:BB:6F:C0:9A:96:4D:1C:FB:38:FC:C2:0B:28:06:61 Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019AF6F82602243EF95A0BE29EBFE542024F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft Manifest number: 1776 Signing time: Sun 07 Dec 2025 04:00:49 +0000 Manifest this update: Sun 07 Dec 2025 04:00:49 +0000 Manifest next update: Mon 08 Dec 2025 04:00:49 +0000 Files and hashes: 1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=) 2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=) 3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=) 4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=) 5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=) 6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: fdpJd+jRHsSyavZbNS+U7rtpDP5fRLOqDq3o1Nyosdc=) 7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f8:26:02:24:3e:f9:5a:0b:e2:9e:bf:e5:42:02:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Dec 7 04:00:49 2025 GMT Not After : Dec 8 04:00:49 2025 GMT Subject: CN=20e02dbcc2bb6fc09a964d1cfb38fcc20b280661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:8c:cb:bb:0d:59:4c:18:43:a0:61:0f:fc: 42:3f:a8:4b:1b:d1:eb:2d:1f:c4:c5:78:a6:89:4e: 40:2e:7e:38:83:8d:81:ed:2a:db:9f:28:01:c3:34: cd:15:88:3c:ca:26:46:29:7d:01:76:cb:85:49:03: 22:7b:dd:ac:79:96:4c:50:f5:77:dd:85:5d:15:87: d4:31:5c:d9:82:99:68:aa:a0:57:4c:01:c6:ea:65: 82:89:bd:04:ff:c8:12:f5:fd:bc:d8:06:ce:b1:fc: c5:1f:dd:60:3a:ae:56:95:85:79:d6:4a:94:58:60: 05:4f:cf:d7:48:59:58:d6:d1:b7:71:a2:a6:93:9e: ca:68:83:a0:6b:9b:ef:7b:69:24:56:b2:ed:21:00: 5e:bd:f9:08:e2:3b:db:13:46:e8:a5:23:a2:33:0e: 88:1f:48:2b:0e:6b:8c:e2:80:3f:56:08:1c:fb:69: 44:27:3d:a8:c7:9f:ad:94:b1:f0:82:2f:81:6c:76: fb:62:44:fa:d3:f9:a8:dc:55:3f:68:d7:85:ab:c2: 85:37:4b:7d:45:e7:ff:6a:13:a4:5e:b0:89:30:1d: 63:12:ac:7d:41:86:b9:ea:5f:71:e9:67:bf:d5:c4: 5c:28:88:5a:b1:cd:24:d2:3e:30:af:f1:c0:c7:6a: 28:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E0:2D:BC:C2:BB:6F:C0:9A:96:4D:1C:FB:38:FC:C2:0B:28:06:61 X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:75:0d:41:4e:3e:af:fa:7c:32:99:fe:ad:a7:7d:63:29:e3: b1:f6:f7:d1:94:90:01:42:ef:22:70:54:58:7d:e9:bc:4f:45: 7c:88:58:9c:01:3b:38:4b:c4:5e:8a:e1:5e:93:6c:83:98:e6: 81:14:1b:46:40:b4:44:a4:77:e6:98:21:ab:fc:01:62:c9:77: 48:65:44:13:e2:66:b7:58:44:2e:2d:a2:37:9d:fd:a1:ac:df: a9:fc:80:f4:b9:ea:21:14:7e:15:90:cc:4c:8c:60:2f:6f:c4: 26:68:bc:7f:98:2a:68:65:a6:06:31:d5:47:4d:74:61:35:8f: af:20:b6:b0:9a:90:65:87:9b:72:f0:cc:5d:33:3d:d0:88:07: 9b:8f:cf:64:d4:22:a0:14:80:3d:67:2c:b9:a5:13:a3:a2:e7: 6a:f7:00:6f:16:1c:dc:9a:ad:8d:7a:17:6c:70:72:fe:64:fe: 36:e8:dd:df:93:ad:88:fb:40:38:ba:14:87:d4:0e:a4:f8:6c: 26:0d:aa:d5:10:e0:58:2a:c9:c7:da:5b:40:65:01:a4:79:9b: 16:2d:bf:75:3f:48:dd:ab:80:10:2f:0d:70:f7:f8:e3:9d:de: 22:f6:aa:2d:38:db:59:5a:07:e0:8d:13:3e:4f:7e:53:d7:cb: 2c:f3:66:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+CYCJD75Wgvinr/lQgJPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjUxMjA3MDQwMDQ5WhcNMjUxMjA4MDQwMDQ5WjAzMTEwLwYDVQQD EygyMGUwMmRiY2MyYmI2ZmMwOWE5NjRkMWNmYjM4ZmNjMjBiMjgwNjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h2My7sNWUwYQ6BhD/xCP6hLG9Hr LR/ExXimiU5ALn44g42B7SrbnygBwzTNFYg8yiZGKX0BdsuFSQMie92seZZMUPV3 3YVdFYfUMVzZgploqqBXTAHG6mWCib0E/8gS9f282AbOsfzFH91gOq5WlYV51kqU WGAFT8/XSFlY1tG3caKmk57KaIOga5vve2kkVrLtIQBevfkI4jvbE0bopSOiMw6I H0grDmuM4oA/Vggc+2lEJz2ox5+tlLHwgi+BbHb7YkT60/mo3FU/aNeFq8KFN0t9 Ref/ahOkXrCJMB1jEqx9QYa56l9x6We/1cRcKIhasc0k0j4wr/HAx2ooNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDgLbzCu2/AmpZNHPs4/MILKAZhMB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHUNQU4+ r/p8Mpn+rad9Yynjsfb30ZSQAULvInBUWH3pvE9FfIhYnAE7OEvEXorhXpNsg5jm gRQbRkC0RKR35pghq/wBYsl3SGVEE+Jmt1hELi2iN539oazfqfyA9LnqIRR+FZDM TIxgL2/EJmi8f5gqaGWmBjHVR010YTWPryC2sJqQZYebcvDMXTM90IgHm4/PZNQi oBSAPWcsuaUTo6LnavcAbxYc3JqtjXoXbHBy/mT+Nujd35OtiPtAOLoUh9QOpPhs Jg2q1RDgWCrJx9pbQGUBpHmbFi2/dT9I3auAEC8NcPf4453eIvaqLTjbWVoH4I0T Pk9+U9fLLPNmHQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:04 2025 by rpki-client