This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json) Hash identifier: bvH8gJ9nc5zKKHm5kr7+J8A3dasQEjypNpgFGEQTx9w= Subject key identifier: FD:B5:3B:80:96:58:D1:F0:2F:CA:E4:D6:83:35:C5:6D:09:8B:1A:AB Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Certificate serial: 019AF12DD4A3F1E764824BCBF4D4916495EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=) 2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: GvGvkD55HpX4z/nBm4NtfguK4ciR67iXBdjNp/DoHxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d4:a3:f1:e7:64:82:4b:cb:f4:d4:91:64:95:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=fdb53b809658d1f02fcae4d68335c56d098b1aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:3f:26:80:81:89:46:a4:75:ed:70:5f:b6: 18:cf:be:0b:b8:03:f3:f1:7e:32:bf:03:2d:96:b7: 0e:72:b3:af:3d:11:b9:34:d6:c1:4d:0a:cc:64:e9: a2:97:36:75:ef:0b:8b:ea:9d:39:24:c5:c5:d2:a5: 43:50:5b:43:b6:fa:cf:1b:48:68:e0:e7:f0:42:50: 80:4d:70:7c:83:10:ee:be:51:43:dc:1f:6a:a6:24: 6c:e7:fe:a8:34:5c:eb:76:ef:ed:c5:c6:79:ce:1b: 5a:58:20:9b:bb:e6:20:e4:4a:7a:d7:3f:71:7e:b6: c2:a9:ad:b0:5f:9f:68:c1:17:30:bb:32:2b:47:d9: 16:f4:d7:6c:c7:01:97:c8:9d:17:c1:9e:2b:f8:80: 88:a0:25:bb:08:58:06:f8:8e:00:3a:4b:27:5d:e1: c6:62:a2:da:2d:83:8c:1c:97:8a:89:7d:56:9c:e5: 37:bb:22:08:1b:08:d3:de:d7:94:47:20:7b:e6:3a: a0:6c:ee:50:4a:f2:e4:1d:53:aa:cc:8c:d9:4d:80: 8d:a5:7c:9b:2c:8b:14:52:66:8e:0d:65:8d:ab:e6: 69:89:3c:ad:27:90:47:bd:f1:08:6b:92:83:76:7f: 91:b8:8b:f7:40:5b:f9:c2:ba:dd:fc:d3:25:5d:31: bf:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B5:3B:80:96:58:D1:F0:2F:CA:E4:D6:83:35:C5:6D:09:8B:1A:AB X509v3 Authority Key Identifier: keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:1c:47:0e:35:d0:0c:62:eb:ac:e1:fe:6a:5e:80:45:e7:78: 4e:71:fc:10:2b:c7:bd:ba:8c:35:cc:f8:7f:ac:30:7f:c6:0f: e1:b7:2d:1c:60:7b:61:de:24:d7:01:20:3f:49:10:c6:3c:72: d1:c7:9d:09:08:64:7d:46:45:e8:fe:7e:75:5d:17:24:b5:08: 9b:d2:f7:53:83:06:57:54:dc:5a:3e:ae:86:87:f6:f2:75:0e: 26:24:59:4e:a3:0f:84:fa:ee:95:de:c2:bd:e2:73:e5:97:bf: 5b:e0:98:fc:a1:f8:91:06:18:d6:f4:2b:d1:dd:18:d4:cf:bb: 49:17:20:a3:f8:75:5e:26:af:b3:a5:8a:43:9c:af:91:a0:25: e1:01:1e:ff:79:48:74:ef:e0:ff:dc:5d:79:b4:ce:99:55:89: 21:6c:57:bc:b1:15:03:82:0e:31:5a:44:94:8e:85:b3:7d:7f: a8:3d:36:c4:5b:c2:3e:8d:e3:57:b4:02:9b:de:07:ec:2b:97: 82:08:14:57:59:e2:a4:08:5c:88:30:06:7f:66:0f:86:bc:4a: aa:6f:13:b1:13:b0:94:8b:c5:6a:3f:d7:5c:71:53:97:67:57: d3:5e:9b:95:ce:67:b8:31:bb:84:0b:e7:a5:62:36:7e:4f:01: cb:03:8c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdSj8edkgkvL9NSRZJXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz YTYxMmYwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhmZGI1M2I4MDk2NThkMWYwMmZjYWU0ZDY4MzM1YzU2ZDA5OGIxYWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjo/JoCBiUakde1wX7YYz74LuAPz 8X4yvwMtlrcOcrOvPRG5NNbBTQrMZOmilzZ17wuL6p05JMXF0qVDUFtDtvrPG0ho 4OfwQlCATXB8gxDuvlFD3B9qpiRs5/6oNFzrdu/txcZ5zhtaWCCbu+Yg5Ep61z9x frbCqa2wX59owRcwuzIrR9kW9NdsxwGXyJ0XwZ4r+ICIoCW7CFgG+I4AOksnXeHG YqLaLYOMHJeKiX1WnOU3uyIIGwjT3teURyB75jqgbO5QSvLkHVOqzIzZTYCNpXyb LIsUUmaODWWNq+ZpiTytJ5BHvfEIa5KDdn+RuIv3QFv5wrrd/NMlXTG/kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP21O4CWWNHwL8rk1oM1xW0JixqrMB8GA1UdIwQY MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhxHDjXQ DGLrrOH+al6ARed4TnH8ECvHvbqMNcz4f6wwf8YP4bctHGB7Yd4k1wEgP0kQxjxy 0cedCQhkfUZF6P5+dV0XJLUIm9L3U4MGV1TcWj6uhof28nUOJiRZTqMPhPruld7C veJz5Ze/W+CY/KH4kQYY1vQr0d0Y1M+7SRcgo/h1Xiavs6WKQ5yvkaAl4QEe/3lI dO/g/9xdebTOmVWJIWxXvLEVA4IOMVpElI6Fs31/qD02xFvCPo3jV7QCm94H7CuX gggUV1nipAhciDAGf2YPhrxKqm8TsROwlIvFaj/XXHFTl2dX016blc5nuDG7hAvn pWI2fk8BywOM6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:20 2025 by rpki-client