This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json) Hash identifier: ivgupBdZnbk8lo6tDuXjO9PZEnLehIeM7BBF9LLuMu0= Subject key identifier: 7B:D9:2E:7C:8A:5B:41:6A:53:5F:2F:4E:EF:B1:F7:00:1C:4E:2D:DF Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Certificate serial: 019AF19A908FD4A635B4A93D0750A44F592E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft Manifest number: 0224 Signing time: Sat 06 Dec 2025 03:00:29 +0000 Manifest this update: Sat 06 Dec 2025 03:00:29 +0000 Manifest next update: Sun 07 Dec 2025 03:00:29 +0000 Files and hashes: 1: 5lQnFnU-84I8pBL0bmtu_5E7JBE.roa (hash: choN2tt2VLbw64yYa4mcGxM9D/1eWfgY0Zlzr2QBz8I=) 2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: 5Mo8IvBA9FBQbYsQNh6GpOjrqmUKErgqkNPY84c431U=) 3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:90:8f:d4:a6:35:b4:a9:3d:07:50:a4:4f:59:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Validity Not Before: Dec 6 03:00:29 2025 GMT Not After : Dec 7 03:00:29 2025 GMT Subject: CN=7bd92e7c8a5b416a535f2f4eefb1f7001c4e2ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:bc:3b:84:e4:f7:e5:f3:b9:ea:06:27:50: 53:e4:9e:70:8c:b6:57:95:b3:a0:a8:8f:50:5c:a3: 00:16:7d:58:09:f1:7c:ca:88:d5:e5:b8:98:b9:dc: d3:b2:0c:e1:39:77:9e:13:c7:a6:a4:8e:cb:c4:d3: 60:0b:24:cc:eb:19:83:fe:72:67:df:e7:f7:d6:41: b6:69:95:92:94:24:47:7a:5e:a5:28:5c:83:26:cb: 10:d0:cc:e8:6a:2a:32:97:e3:08:86:cf:66:36:5c: 55:7c:f0:4b:5b:7f:21:d0:4c:fc:bd:fa:a0:5f:03: 36:e9:57:a8:58:b0:61:84:7b:79:45:3b:76:6f:a1: 47:1c:44:77:a9:e9:75:d9:18:13:e4:b6:88:c3:c7: 6f:30:18:83:d5:1f:2c:fc:7a:90:38:bd:a3:34:52: 75:1f:fd:c9:18:85:d7:16:7e:dd:78:70:90:39:17: 3a:40:a6:d6:c4:8a:9f:38:2b:bd:c8:84:b9:c2:b6: 72:d5:e1:4f:58:57:c9:a3:54:dd:6b:8e:69:0c:40: 51:c8:22:66:ec:54:73:a2:b3:74:53:39:04:aa:28: 58:7d:70:64:8b:3f:70:d0:79:b7:4e:59:62:f0:93: 22:b2:71:25:0b:59:3f:bb:9e:fd:30:d0:cd:91:18: 33:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D9:2E:7C:8A:5B:41:6A:53:5F:2F:4E:EF:B1:F7:00:1C:4E:2D:DF X509v3 Authority Key Identifier: keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e5:96:9e:59:63:c7:4a:7c:35:12:11:41:f2:30:e5:dd:76: 46:a1:3e:fa:6d:b9:f9:76:fe:a5:9e:c3:44:9c:7a:b7:7e:db: d4:41:67:b7:9c:97:5e:7e:58:e0:36:f3:11:98:78:fc:de:c6: bd:5b:16:86:fa:f5:41:48:3a:1f:1f:39:93:31:ca:b5:ff:10: be:94:54:b0:1a:a7:7f:7a:89:a0:17:59:78:38:84:76:c1:67: db:82:0e:02:e8:b0:48:cf:24:9c:d4:5d:3d:39:08:1e:a9:74: 17:05:c6:fa:0e:5f:b0:8c:8e:f2:92:9b:6d:a9:13:84:a1:3b: 34:64:5e:c7:c1:be:a7:0f:91:c7:84:52:46:7a:c2:91:e1:30: 56:5e:5d:db:2d:4a:68:45:e1:19:a6:35:33:62:ff:d6:4f:20: 76:b5:36:5d:86:80:bd:7c:01:27:24:14:8b:3e:08:1f:37:9b: 61:52:4a:73:74:72:78:c2:e9:6d:b7:cb:18:8f:ca:97:2e:1e: 90:79:7f:2a:68:e2:31:09:4d:10:e6:33:f7:26:61:d3:3a:1c: fe:02:15:6b:e1:a9:9e:83:d6:e9:9a:e3:66:84:29:2f:d6:ba: f4:c2:17:f2:76:31:8a:81:63:8e:2d:2b:a0:d1:86:a0:89:4d: 3c:c7:cb:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpCP1KY1tKk9B1CkT1kuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk MGFjYTEwHhcNMjUxMjA2MDMwMDI5WhcNMjUxMjA3MDMwMDI5WjAzMTEwLwYDVQQD Eyg3YmQ5MmU3YzhhNWI0MTZhNTM1ZjJmNGVlZmIxZjcwMDFjNGUyZGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF28O4Tk9+XzueoGJ1BT5J5wjLZX lbOgqI9QXKMAFn1YCfF8yojV5biYudzTsgzhOXeeE8empI7LxNNgCyTM6xmD/nJn 3+f31kG2aZWSlCRHel6lKFyDJssQ0Mzoaioyl+MIhs9mNlxVfPBLW38h0Ez8vfqg XwM26VeoWLBhhHt5RTt2b6FHHER3qel12RgT5LaIw8dvMBiD1R8s/HqQOL2jNFJ1 H/3JGIXXFn7deHCQORc6QKbWxIqfOCu9yIS5wrZy1eFPWFfJo1Tda45pDEBRyCJm 7FRzorN0UzkEqihYfXBkiz9w0Hm3Tlli8JMisnElC1k/u579MNDNkRgzAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvZLnyKW0FqU18vTu+x9wAcTi3fMB8GA1UdIwQY MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt NzExODZlMmI1MTZhLzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuWWnllj x0p8NRIRQfIw5d12RqE++m25+Xb+pZ7DRJx6t37b1EFnt5yXXn5Y4DbzEZh4/N7G vVsWhvr1QUg6Hx85kzHKtf8QvpRUsBqnf3qJoBdZeDiEdsFn24IOAuiwSM8knNRd PTkIHql0FwXG+g5fsIyO8pKbbakThKE7NGRex8G+pw+Rx4RSRnrCkeEwVl5d2y1K aEXhGaY1M2L/1k8gdrU2XYaAvXwBJyQUiz4IHzebYVJKc3RyeMLpbbfLGI/Kly4e kHl/KmjiMQlNEOYz9yZh0zoc/gIVa+GpnoPW6ZrjZoQpL9a69MIX8nYxioFjji0r oNGGoIlNPMfLSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:20 2025 by rpki-client