This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft File: fUOw7HmVHV1VgBM-UympDy_uHFs.mft (raw, json) Hash identifier: 4ehlFsBC2pTbRdjLTZiVuYRQYpwTNEkS6VCsUxflqZk= Subject key identifier: 81:EC:FE:06:83:A4:A3:83:AA:92:91:9A:9A:05:E4:98:40:A9:B3:F0 Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B Certificate issuer: /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b Certificate serial: 019B3C7E9C7F0C9A82D3C2F08A52B136D09C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft Manifest number: 1791 Signing time: Sat 20 Dec 2025 16:01:29 +0000 Manifest this update: Sat 20 Dec 2025 16:01:29 +0000 Manifest next update: Sun 21 Dec 2025 16:01:29 +0000 Files and hashes: 1: fUOw7HmVHV1VgBM-UympDy_uHFs.crl (hash: TG0krlL2GCPI9Q1LnZlyKMq1RzdjPZcHe29GvLEjNI4=) 2: xgmy0sqwA2aGVF5twml3PF6jHVs.roa (hash: TiGnF5pl1wlg4dnvVcdyr5lG9rpTWjsJi0mQ3O+Hoq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:9c:7f:0c:9a:82:d3:c2:f0:8a:52:b1:36:d0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b Validity Not Before: Dec 20 16:01:29 2025 GMT Not After : Dec 21 16:01:29 2025 GMT Subject: CN=81ecfe0683a4a383aa92919a9a05e49840a9b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:d0:59:e4:92:83:ff:8b:3d:9b:8a:6f:31: 68:de:48:f2:8b:bb:25:68:6f:35:1c:5f:7f:23:65: 2e:f6:64:ed:6d:5d:c4:03:63:f4:c7:13:a2:88:d5: fa:00:0a:13:22:83:0b:b9:8b:73:85:f4:32:3b:da: 9f:79:08:e7:f9:53:04:ce:a2:bc:10:bf:b4:41:62: f9:42:30:02:46:2d:67:36:73:cb:89:79:89:8c:3a: 4b:a8:5b:e9:b5:8e:7a:2f:53:01:f8:2a:1c:6e:7e: 1f:ac:de:6a:cd:a8:e9:92:c1:ac:ea:16:55:5b:56: 6d:1a:f7:f9:01:a3:1f:09:6c:7e:83:91:b5:cf:06: a6:0d:0a:2b:a2:fb:cf:4d:4f:f4:1b:ea:86:05:84: 2a:aa:b8:d2:8f:a5:c2:6d:36:e1:69:92:33:c7:a6: 2c:47:60:18:00:25:f4:ca:58:24:e7:b8:c7:41:68: 3e:f1:02:0a:63:bd:9b:08:28:06:12:4e:18:4a:6f: 18:c0:94:b5:89:97:9d:97:b1:57:b8:04:b8:5c:6f: 9d:bd:35:72:1e:8a:8e:13:38:fc:85:e1:8e:3d:b8: 37:78:1d:7a:00:44:30:d3:c1:82:d7:a6:76:a7:e7: 41:22:e7:f9:a0:e3:fb:8c:90:9f:4b:14:49:30:9a: fa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EC:FE:06:83:A4:A3:83:AA:92:91:9A:9A:05:E4:98:40:A9:B3:F0 X509v3 Authority Key Identifier: keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:20:70:5b:b5:ea:59:ca:c0:13:d3:f5:dc:ce:a8:a2:ea:ca: 31:67:e1:4b:07:7b:78:24:49:4b:60:86:75:3c:0a:70:3f:79: e8:dc:c6:3e:fb:a9:47:00:37:c1:bd:d4:33:28:a2:6d:f9:5e: 12:69:f0:a8:9b:c8:35:97:94:d3:f5:b8:6e:b0:22:bb:60:4c: bb:a8:98:b4:20:e5:4c:ff:4d:64:df:5c:b4:11:31:05:d9:39: ef:83:a5:b4:c2:8e:17:21:f0:da:f6:52:56:42:ff:81:d9:e6: f2:0d:96:dc:db:42:c2:b2:c9:8a:92:11:88:b3:d9:fa:6d:a9: 84:a3:e5:2c:e2:39:1d:70:a4:d2:69:0f:6f:35:e5:1f:82:04: eb:8e:f0:68:9c:26:2e:d9:dd:f4:7c:06:8d:e7:b7:3b:a8:67: 6a:a1:ff:83:f0:f7:b0:07:36:d2:be:64:9d:64:2e:83:70:17: 98:25:79:08:43:19:42:ce:96:c7:53:7c:15:bc:e5:ec:98:7d: e2:13:75:7d:6c:11:ee:d4:e6:4d:fb:5e:49:77:7a:5a:38:11: 2d:93:a5:9e:a2:e4:c4:11:29:db:8b:ae:63:11:66:10:0d:8d: a0:58:61:84:e8:8e:78:ea:fc:20:7f:74:ef:30:46:80:da:20: b5:b1:d4:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fpx/DJqC08LwilKxNtCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDNiMGVjNzk5NTFkNWQ1NTgwMTMzZTUzMjlhOTBmMmZl ZTFjNWIwHhcNMjUxMjIwMTYwMTI5WhcNMjUxMjIxMTYwMTI5WjAzMTEwLwYDVQQD Eyg4MWVjZmUwNjgzYTRhMzgzYWE5MjkxOWE5YTA1ZTQ5ODQwYTliM2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEjQWeSSg/+LPZuKbzFo3kjyi7sl aG81HF9/I2Uu9mTtbV3EA2P0xxOiiNX6AAoTIoMLuYtzhfQyO9qfeQjn+VMEzqK8 EL+0QWL5QjACRi1nNnPLiXmJjDpLqFvptY56L1MB+Cocbn4frN5qzajpksGs6hZV W1ZtGvf5AaMfCWx+g5G1zwamDQorovvPTU/0G+qGBYQqqrjSj6XCbTbhaZIzx6Ys R2AYACX0ylgk57jHQWg+8QIKY72bCCgGEk4YSm8YwJS1iZedl7FXuAS4XG+dvTVy HoqOEzj8heGOPbg3eB16AEQw08GC16Z2p+dBIuf5oOP7jJCfSxRJMJr6nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHs/gaDpKODqpKRmpoF5JhAqbPwMB8GA1UdIwQY MBaAFH1DsOx5lR1dVYATPlMpqQ8v7hxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgt OTNhNjE5MmIxNzg1LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yNjA0ZTAtOTFmYS00ZmU5LWJiMjgtOTNhNjE5MmIxNzg1 LzEvZlVPdzdIbVZIVjFWZ0JNLVV5bXBEeV91SEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyBwW7Xq WcrAE9P13M6oourKMWfhSwd7eCRJS2CGdTwKcD956NzGPvupRwA3wb3UMyiibfle EmnwqJvINZeU0/W4brAiu2BMu6iYtCDlTP9NZN9ctBExBdk574OltMKOFyHw2vZS VkL/gdnm8g2W3NtCwrLJipIRiLPZ+m2phKPlLOI5HXCk0mkPbzXlH4IE647waJwm Ltnd9HwGjee3O6hnaqH/g/D3sAc20r5knWQug3AXmCV5CEMZQs6Wx1N8Fbzl7Jh9 4hN1fWwR7tTmTfteSXd6WjgRLZOlnqLkxBEp24uuYxFmEA2NoFhhhOiOeOr8IH90 7zBGgNogtbHUnA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:56:25 2025 by rpki-client