This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json) Hash identifier: gHk267KM+Eupc1dFTKVfszVEvq4mr3q0OnSOhycb96s= Subject key identifier: 4E:73:31:7A:B0:D8:B6:05:06:DF:03:68:CE:A7:5F:E5:E2:0F:CA:CA Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5 Certificate serial: 019AF276CE0D665D70195C0269C3662D47CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:03 +0000 Manifest this update: Sat 06 Dec 2025 07:01:03 +0000 Manifest next update: Sun 07 Dec 2025 07:01:03 +0000 Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=) 2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: TyfNxu1h3hXmjmmk3CZZnjfEhLTQHUEUFpznZn/BjwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ce:0d:66:5d:70:19:5c:02:69:c3:66:2d:47:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5 Validity Not Before: Dec 6 07:01:03 2025 GMT Not After : Dec 7 07:01:03 2025 GMT Subject: CN=4e73317ab0d8b60506df0368cea75fe5e20fcaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b6:3e:31:31:39:50:52:63:d8:ec:03:1c:32: c5:52:29:b2:5d:6c:03:65:c0:1e:2b:4f:9d:42:96: ed:0f:82:94:fb:3f:9a:5a:b0:df:a0:37:c5:3a:7b: f0:71:71:40:90:af:6d:a4:01:5b:79:c4:80:19:c5: 0f:62:c8:53:e4:3f:a3:21:7d:af:45:68:4c:9b:60: f8:54:f0:80:2d:a9:77:b5:37:77:bb:9d:8c:ba:27: 29:2f:a7:d0:99:41:75:df:0d:d9:d8:5d:30:d2:67: 09:8b:e0:b3:13:94:72:fd:fb:22:23:cd:6d:38:e2: 9a:fc:6a:fe:26:c4:ef:fa:f4:1a:a5:2f:67:b7:23: e5:6d:f5:7b:87:5b:91:d3:b3:b7:07:ec:f8:35:0b: 53:a5:3b:1d:4e:04:56:e4:ef:e0:d9:6b:92:b6:09: 3a:4a:fa:b0:7a:83:42:d3:df:15:ed:9f:a5:b1:a4: c1:1e:5f:4d:b4:4c:e8:ea:2b:08:8d:8b:56:f1:bc: 23:73:ec:9d:db:27:26:7f:f7:64:2f:42:6a:d2:65: 04:79:16:fb:80:a6:db:bc:47:22:6b:d2:71:42:93: 49:9c:37:ec:d9:e7:36:11:46:d0:70:f1:ad:59:f6: 7e:ab:07:60:58:8a:9d:a4:af:ab:75:0f:93:de:49: a0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:73:31:7A:B0:D8:B6:05:06:DF:03:68:CE:A7:5F:E5:E2:0F:CA:CA X509v3 Authority Key Identifier: keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:9c:e9:0e:e0:88:f7:1d:39:23:1c:21:15:a9:89:51:3c:51: 44:0c:55:e7:13:de:38:33:11:0e:e0:af:6f:ab:d1:8b:fd:5c: 0e:18:10:bc:ce:e4:3f:40:d3:91:09:d0:ca:48:63:26:36:ee: a9:8b:95:a3:5d:a8:00:9b:e6:31:c1:ff:9f:61:df:a2:d2:79: ea:7c:c6:6c:b7:c4:7c:2d:62:45:69:1a:5e:f2:39:c7:5c:91: 66:00:91:35:63:52:78:ba:41:4c:c4:74:7b:d5:40:52:25:3a: 10:cb:ed:1e:0c:9e:fe:09:e6:4a:10:f3:bd:da:f1:70:50:c8: d6:f4:98:dc:13:ac:3e:25:c6:23:20:9c:bf:b2:31:26:b7:b6: 9e:c3:b5:83:83:be:55:42:aa:12:75:49:5d:43:60:ea:0f:62: db:9b:c8:e1:d5:fa:d8:0e:4e:3f:c6:02:34:09:cf:9b:6d:9e: df:d0:e5:cd:7b:8b:1e:f2:f3:f0:3c:5c:e3:f4:88:b7:1c:af: 30:4b:25:ed:fb:3b:f7:b7:76:8e:49:24:20:3d:3c:1f:52:83: 94:26:89:c3:e5:4b:39:a9:71:b6:69:6c:d7:24:37:55:28:5b: 63:c4:09:0e:38:ed:74:ee:27:9e:19:13:0f:e3:04:4b:ff:30: 69:4c:71:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds4NZl1wGVwCacNmLUfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx ZDE5YjUwHhcNMjUxMjA2MDcwMTAzWhcNMjUxMjA3MDcwMTAzWjAzMTEwLwYDVQQD Eyg0ZTczMzE3YWIwZDhiNjA1MDZkZjAzNjhjZWE3NWZlNWUyMGZjYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprY+MTE5UFJj2OwDHDLFUimyXWwD ZcAeK0+dQpbtD4KU+z+aWrDfoDfFOnvwcXFAkK9tpAFbecSAGcUPYshT5D+jIX2v RWhMm2D4VPCALal3tTd3u52MuicpL6fQmUF13w3Z2F0w0mcJi+CzE5Ry/fsiI81t OOKa/Gr+JsTv+vQapS9ntyPlbfV7h1uR07O3B+z4NQtTpTsdTgRW5O/g2WuStgk6 SvqweoNC098V7Z+lsaTBHl9NtEzo6isIjYtW8bwjc+yd2ycmf/dkL0Jq0mUEeRb7 gKbbvEcia9JxQpNJnDfs2ec2EUbQcPGtWfZ+qwdgWIqdpK+rdQ+T3kmgBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5zMXqw2LYFBt8DaM6nX+XiD8rKMB8GA1UdIwQY MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5zpDuCI 9x05IxwhFamJUTxRRAxV5xPeODMRDuCvb6vRi/1cDhgQvM7kP0DTkQnQykhjJjbu qYuVo12oAJvmMcH/n2HfotJ56nzGbLfEfC1iRWkaXvI5x1yRZgCRNWNSeLpBTMR0 e9VAUiU6EMvtHgye/gnmShDzvdrxcFDI1vSY3BOsPiXGIyCcv7IxJre2nsO1g4O+ VUKqEnVJXUNg6g9i25vI4dX62A5OP8YCNAnPm22e39DlzXuLHvLz8Dxc4/SItxyv MEsl7fs797d2jkkkID08H1KDlCaJw+VLOalxtmls1yQ3VShbY8QJDjjtdO4nnhkT D+MES/8waUxxSA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:37 2025 by rpki-client