This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json) Hash identifier: wpeEwnATkWbN9T5nYqafhKF4rWK4cwJF/krO3XTqG5A= Subject key identifier: 41:36:53:00:8B:7D:15:43:99:33:CC:C0:1C:06:72:C2:C5:1A:1C:72 Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Certificate serial: 019B38D87B706C6BB60661E5F2B12587F0C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft Manifest number: 1799 Signing time: Fri 19 Dec 2025 23:01:09 +0000 Manifest this update: Fri 19 Dec 2025 23:01:09 +0000 Manifest next update: Sat 20 Dec 2025 23:01:09 +0000 Files and hashes: 1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: 59PL7U0xPYVbZCzPFPwrWknN+TKITfxthq/Da4bRCN4=) 2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:7b:70:6c:6b:b6:06:61:e5:f2:b1:25:87:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Validity Not Before: Dec 19 23:01:09 2025 GMT Not After : Dec 20 23:01:09 2025 GMT Subject: CN=413653008b7d15439933ccc01c0672c2c51a1c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d4:da:b3:9f:06:f5:92:d0:63:e9:1a:f9:c1: 44:a3:e0:97:c1:9e:eb:7a:2a:66:97:a6:68:67:eb: 1c:78:32:65:0b:ba:38:80:28:4c:aa:22:00:1c:c1: e0:9d:17:74:be:0d:3b:3f:81:ec:27:8f:39:6f:f0: 16:ca:50:fb:cf:48:f5:2c:48:3c:12:6e:f8:41:6b: 92:ee:d4:4a:c9:49:b3:9e:bd:a3:e1:a8:3b:c5:86: 96:94:51:06:dc:2d:81:02:9d:df:d1:83:5a:1f:59: 28:d2:62:d0:3d:1e:f7:e6:3c:d6:e9:01:7b:de:5e: 67:bf:2b:99:a6:30:ba:9e:9a:51:ed:3b:c2:f6:ce: ca:5d:9a:5a:54:e3:46:2d:b9:f7:95:3c:24:40:73: e5:ce:ce:50:0f:1e:59:24:03:67:ae:28:4c:d5:56: ce:93:8e:0c:e7:81:a1:5a:27:13:b9:08:e4:ad:5b: e4:b2:f1:18:3b:7a:62:e4:a8:e0:7c:34:b3:1d:97: 35:8a:1e:81:ef:c7:5d:be:41:95:00:0d:2b:65:1d: 7c:b1:40:64:e5:2b:07:df:07:1a:b6:c3:21:9f:ac: f1:c9:86:a9:17:17:29:17:d0:97:56:eb:61:80:58: 52:13:1b:1d:74:9c:cb:aa:6f:f4:df:fc:ba:f9:e8: 17:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:36:53:00:8B:7D:15:43:99:33:CC:C0:1C:06:72:C2:C5:1A:1C:72 X509v3 Authority Key Identifier: keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:16:8f:c4:27:64:35:b7:f2:0f:4d:1c:f1:67:e9:b7:1e:22: 48:c7:f9:88:b4:95:81:01:56:31:5d:d5:33:3d:6e:a2:94:4d: 3f:d5:b7:1f:11:c6:c6:1b:d1:77:94:a8:96:3b:15:02:a6:1d: 5d:a3:46:09:c4:6b:d0:ad:a4:55:2c:f3:67:24:47:32:ac:9b: 29:fe:92:93:7e:c3:5d:8b:55:a6:51:23:6c:6c:84:e9:c5:9f: b8:ad:a2:d5:2f:70:cd:33:57:f7:93:66:91:88:46:db:1c:43: 44:62:a0:c3:22:3a:40:5f:86:c8:1e:8a:82:67:c3:d3:90:66: 4b:16:c6:3d:d2:bb:af:9a:d1:ad:f0:5c:4b:e7:54:1a:d7:b2: 13:fe:73:fa:9e:d4:cc:c0:1f:24:5c:20:b8:d7:15:d6:d7:d0: b6:30:cd:60:1a:f7:68:cf:56:73:f6:40:eb:4d:b4:d9:01:4f: 79:be:ce:fa:43:9d:e0:ae:f9:74:a3:f6:04:9c:69:bf:2f:25: 04:2c:74:65:b7:ed:fb:f2:37:e4:e2:f9:27:14:7e:c6:d9:c0: 8e:5f:22:38:ad:48:f9:a5:45:1e:8b:b6:8b:dc:13:c0:50:b6: a7:3b:be:e2:10:7a:30:fb:85:e5:81:70:44:b3:5d:20:67:44: 99:d8:98:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42HtwbGu2BmHl8rElh/DBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0 OGQ2Y2QwHhcNMjUxMjE5MjMwMTA5WhcNMjUxMjIwMjMwMTA5WjAzMTEwLwYDVQQD Eyg0MTM2NTMwMDhiN2QxNTQzOTkzM2NjYzAxYzA2NzJjMmM1MWExYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tTas58G9ZLQY+ka+cFEo+CXwZ7r eipml6ZoZ+sceDJlC7o4gChMqiIAHMHgnRd0vg07P4HsJ485b/AWylD7z0j1LEg8 Em74QWuS7tRKyUmznr2j4ag7xYaWlFEG3C2BAp3f0YNaH1ko0mLQPR735jzW6QF7 3l5nvyuZpjC6nppR7TvC9s7KXZpaVONGLbn3lTwkQHPlzs5QDx5ZJANnrihM1VbO k44M54GhWicTuQjkrVvksvEYO3pi5KjgfDSzHZc1ih6B78ddvkGVAA0rZR18sUBk 5SsH3wcatsMhn6zxyYapFxcpF9CXVuthgFhSExsddJzLqm/03/y6+egX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE2UwCLfRVDmTPMwBwGcsLFGhxyMB8GA1UdIwQY MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt ZDE2ZTRhZTYxZjgwLzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhaPxCdk NbfyD00c8Wfptx4iSMf5iLSVgQFWMV3VMz1uopRNP9W3HxHGxhvRd5SoljsVAqYd XaNGCcRr0K2kVSzzZyRHMqybKf6Sk37DXYtVplEjbGyE6cWfuK2i1S9wzTNX95Nm kYhG2xxDRGKgwyI6QF+GyB6KgmfD05BmSxbGPdK7r5rRrfBcS+dUGteyE/5z+p7U zMAfJFwguNcV1tfQtjDNYBr3aM9Wc/ZA60202QFPeb7O+kOd4K75dKP2BJxpvy8l BCx0Zbft+/I35OL5JxR+xtnAjl8iOK1I+aVFHou2i9wTwFC2pzu+4hB6MPuF5YFw RLNdIGdEmdiYhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 08:04:21 2025 by rpki-client