This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json) Hash identifier: yNYNAA0A3970IvLqTlNeH+KbEKUFDcliEP1r2WDs0Xk= Subject key identifier: 73:11:B0:32:B1:CC:9E:4E:3C:31:77:35:8F:3F:45:CE:8F:1A:60:F8 Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Certificate serial: 019AF2768AFFFAB412E6C61F03DAE90B2F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft Manifest number: 0187 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=) 2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: wSIaHhs4iFH1LRihRVB0A2Dh669qEIkP/O0EoYEUMS8=) 3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:ff:fa:b4:12:e6:c6:1f:03:da:e9:0b:2f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=7311b032b1cc9e4e3c3177358f3f45ce8f1a60f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7e:7b:db:69:15:f7:d4:43:fd:2c:2f:b4:16: a5:04:76:79:77:d9:83:a7:7e:2f:f6:ea:88:81:2d: c8:5a:60:86:de:e9:31:55:c0:44:8a:5e:a0:6d:e1: 99:97:05:60:56:90:d4:0f:95:08:ad:89:66:4f:f4: bb:02:98:c2:66:73:de:67:f9:76:cf:ba:44:65:00: b1:de:21:66:55:65:27:95:8d:68:96:ec:78:4f:eb: 8e:5e:2d:0a:b3:0f:48:74:73:0c:2a:8b:3e:34:b1: 2c:81:ad:dd:64:7d:91:ee:05:1f:74:ec:fc:84:a1: 1c:d0:40:f1:fe:88:88:91:9d:21:b2:a1:a7:22:7f: d5:cd:5a:7c:0d:e4:47:66:21:5c:88:3f:2b:60:f2: 31:64:35:75:81:10:2f:e5:19:dc:0e:df:dd:b0:b6: 79:80:36:6d:e8:a2:75:8a:de:42:eb:66:6c:3c:f6: d6:d2:02:78:ff:b7:c4:56:fc:48:a5:92:5f:94:ab: 0e:3a:8c:d6:12:45:3a:5a:37:e2:8a:4e:6e:47:1b: 75:3d:ca:34:27:99:15:7a:a5:9c:52:36:dc:38:57: a3:90:0d:5f:3d:91:15:b6:fb:08:38:1a:b4:da:9d: c9:4c:90:0e:69:b5:12:02:d2:7a:51:4c:47:86:16: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:11:B0:32:B1:CC:9E:4E:3C:31:77:35:8F:3F:45:CE:8F:1A:60:F8 X509v3 Authority Key Identifier: keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:bd:30:39:21:f1:1d:3d:b3:be:fd:dd:74:94:27:d8:70: 03:4d:76:5b:ae:4c:0d:fb:13:3c:97:82:78:92:98:ea:e2:70: 5b:85:43:21:1a:39:8e:31:c6:c5:c9:2f:0f:5c:f4:85:cb:97: a7:3a:f6:cf:ef:70:9e:22:9e:dc:59:20:fd:c5:16:27:ac:4f: 37:7e:25:b6:38:7a:12:2f:52:bd:38:d0:8d:11:aa:68:83:e2: 1f:19:a7:85:b2:80:c7:02:94:0d:c7:16:8c:19:f3:05:49:41: 5e:3c:69:4c:25:7c:7b:98:da:ed:70:8b:89:b9:ef:84:0a:19: ef:51:53:98:f5:29:50:62:84:2f:57:2c:19:d8:a5:98:79:91: ec:2c:01:79:4d:ea:cb:29:7c:31:e4:36:58:a3:96:28:db:26: b8:e9:d1:93:2e:b9:3f:cf:7b:c9:14:20:00:92:6a:86:45:c2: 3c:de:e3:93:b9:fd:3f:f0:fb:ba:88:07:e9:bd:50:00:e3:c9: ba:ff:b2:e4:62:f9:ef:e3:7b:f5:34:d8:9e:11:7c:83:07:f6: a9:8a:14:44:44:7a:80:14:61:0f:80:81:6f:f6:5f:71:c8:28: b7:3e:52:a0:4e:a3:6b:ee:50:54:85:d8:d1:e6:25:68:86:d3: 99:e7:dd:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydor/+rQS5sYfA9rpCy85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi ZGIzYjkwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg3MzExYjAzMmIxY2M5ZTRlM2MzMTc3MzU4ZjNmNDVjZThmMWE2MGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn5722kV99RD/SwvtBalBHZ5d9mD p34v9uqIgS3IWmCG3ukxVcBEil6gbeGZlwVgVpDUD5UIrYlmT/S7ApjCZnPeZ/l2 z7pEZQCx3iFmVWUnlY1olux4T+uOXi0Ksw9IdHMMKos+NLEsga3dZH2R7gUfdOz8 hKEc0EDx/oiIkZ0hsqGnIn/VzVp8DeRHZiFciD8rYPIxZDV1gRAv5RncDt/dsLZ5 gDZt6KJ1it5C62ZsPPbW0gJ4/7fEVvxIpZJflKsOOozWEkU6Wjfiik5uRxt1Pco0 J5kVeqWcUjbcOFejkA1fPZEVtvsIOBq02p3JTJAOabUSAtJ6UUxHhhaCewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMRsDKxzJ5OPDF3NY8/Rc6PGmD4MB8GA1UdIwQY MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizi9MDkh 8R09s7793XSUJ9hwA012W65MDfsTPJeCeJKY6uJwW4VDIRo5jjHGxckvD1z0hcuX pzr2z+9wniKe3Fkg/cUWJ6xPN34ltjh6Ei9SvTjQjRGqaIPiHxmnhbKAxwKUDccW jBnzBUlBXjxpTCV8e5ja7XCLibnvhAoZ71FTmPUpUGKEL1csGdilmHmR7CwBeU3q yyl8MeQ2WKOWKNsmuOnRky65P897yRQgAJJqhkXCPN7jk7n9P/D7uogH6b1QAOPJ uv+y5GL57+N79TTYnhF8gwf2qYoURER6gBRhD4CBb/Zfccgotz5SoE6ja+5QVIXY 0eYlaIbTmefdug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:38:56 2025 by rpki-client