This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json) Hash identifier: XeBoya2MVvptC9bLcQ5UO79uErBB4rvJk780Lkwpwy0= Subject key identifier: F3:C6:6E:B8:03:D7:59:16:DE:BE:00:2A:39:E5:05:4B:26:B3:BC:AF Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Certificate serial: 019B41DB78B91147227EF830A274044A37C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft Manifest number: 06F9 Signing time: Sun 21 Dec 2025 17:01:00 +0000 Manifest this update: Sun 21 Dec 2025 17:01:00 +0000 Manifest next update: Mon 22 Dec 2025 17:01:00 +0000 Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: SXzY2w07k0oFZ+oLgVzdNpPBf62N1B4wtBN3+jaRDIg=) 2: jXBUCLrGPcb5J_lVILF4CB21e-I.roa (hash: dGKplm/JNC81Y01bHZhHHlwu7oIXFhOtp/y83oreUvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:78:b9:11:47:22:7e:f8:30:a2:74:04:4a:37:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Validity Not Before: Dec 21 17:01:00 2025 GMT Not After : Dec 22 17:01:00 2025 GMT Subject: CN=f3c66eb803d75916debe002a39e5054b26b3bcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:b0:ce:fd:e6:37:59:3d:c7:9a:ce:cf:d3: b0:9c:86:47:3d:5c:8a:ea:dc:55:52:9f:35:d6:44: b6:9c:15:a5:83:bf:f8:24:1e:37:97:5f:59:d6:d0: a3:2d:7f:db:60:0d:73:9e:2d:82:da:7e:e2:68:87: b7:f1:f1:93:3a:74:96:a0:0e:32:f4:d8:f0:78:3f: ee:b9:a3:ae:0d:b4:96:a1:6f:2a:8a:dd:d4:db:66: 3d:01:76:77:b0:8e:19:d1:3f:43:0f:e1:38:38:b9: d4:9a:d7:d7:38:5f:97:a6:1f:55:5f:43:d9:11:34: 39:55:81:24:c8:91:32:6c:77:bf:45:6f:fa:44:ba: 0e:34:76:b5:47:a2:9f:11:65:03:20:53:9f:ab:01: f8:a5:75:bc:a4:74:56:b2:61:97:3c:93:4c:4b:79: 5a:44:fe:67:99:0b:6d:f0:ca:54:a0:69:0a:f9:f8: 07:a0:20:a1:4e:fc:d7:c9:3c:7d:f2:e8:f4:73:ac: 4e:c8:92:7c:e7:a8:cb:b9:47:03:eb:dd:09:45:dc: be:b0:fe:46:50:2c:44:8a:94:88:16:27:c8:03:77: d5:95:de:6f:0b:89:e4:c8:0f:4b:20:1d:1b:34:94: fb:64:da:93:46:58:26:c4:32:ac:cf:19:40:4c:8b: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:6E:B8:03:D7:59:16:DE:BE:00:2A:39:E5:05:4B:26:B3:BC:AF X509v3 Authority Key Identifier: keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:e4:92:8f:ee:7f:62:36:ec:c7:12:7f:22:41:af:66:d4: 75:1e:e2:fc:57:31:1b:e5:ea:59:59:c6:e8:44:45:6b:d6:14: f0:5c:51:03:88:c4:f6:6d:89:cf:26:dc:f5:82:7e:b4:cd:bb: 47:b6:d6:87:a4:5d:9b:fc:e4:00:fe:51:49:6a:ff:4c:da:bb: 66:9d:1e:f8:38:ad:80:c8:cb:40:1b:bb:36:d9:31:92:7f:cc: 4e:4f:2a:f7:ec:b2:e1:e7:31:f3:2a:23:69:89:c9:91:91:53: 6b:5b:95:26:85:ca:23:d0:2c:69:e5:66:3e:98:87:4e:ce:54: 96:0e:f1:25:de:fc:3a:11:6d:3d:0d:ca:80:01:34:f5:7f:31: 37:40:e4:0e:42:10:e0:1c:fa:b0:83:db:26:c5:a4:52:a9:45: 2c:b7:00:93:d2:ed:33:6a:65:4e:c6:47:25:c2:50:dc:f6:6d: fa:19:83:87:30:af:30:90:01:ad:ca:96:3d:17:1b:0b:59:c5: 1e:25:48:59:88:a9:49:2e:60:62:be:05:59:62:c7:98:af:13: 18:7f:e9:12:e8:8e:83:89:84:95:3c:4f:64:80:fd:1b:db:24: 9c:c4:a1:20:93:62:e4:96:43:98:79:d9:f8:1c:61:37:0e:a5: 01:4b:45:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB23i5EUcifvgwonQESjfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0 YjlhY2UwHhcNMjUxMjIxMTcwMTAwWhcNMjUxMjIyMTcwMTAwWjAzMTEwLwYDVQQD EyhmM2M2NmViODAzZDc1OTE2ZGViZTAwMmEzOWU1MDU0YjI2YjNiY2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCwzv3mN1k9x5rOz9OwnIZHPVyK 6txVUp811kS2nBWlg7/4JB43l19Z1tCjLX/bYA1zni2C2n7iaIe38fGTOnSWoA4y 9NjweD/uuaOuDbSWoW8qit3U22Y9AXZ3sI4Z0T9DD+E4OLnUmtfXOF+Xph9VX0PZ ETQ5VYEkyJEybHe/RW/6RLoONHa1R6KfEWUDIFOfqwH4pXW8pHRWsmGXPJNMS3la RP5nmQtt8MpUoGkK+fgHoCChTvzXyTx98uj0c6xOyJJ856jLuUcD690JRdy+sP5G UCxEipSIFifIA3fVld5vC4nkyA9LIB0bNJT7ZNqTRlgmxDKszxlATItUzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPGbrgD11kW3r4AKjnlBUsms7yvMB8GA1UdIwQY MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJPkko/u f2I27McSfyJBr2bUdR7i/FcxG+XqWVnG6ERFa9YU8FxRA4jE9m2Jzybc9YJ+tM27 R7bWh6Rdm/zkAP5RSWr/TNq7Zp0e+DitgMjLQBu7Ntkxkn/MTk8q9+yy4ecx8yoj aYnJkZFTa1uVJoXKI9AsaeVmPpiHTs5Ulg7xJd78OhFtPQ3KgAE09X8xN0DkDkIQ 4Bz6sIPbJsWkUqlFLLcAk9LtM2plTsZHJcJQ3PZt+hmDhzCvMJABrcqWPRcbC1nF HiVIWYipSS5gYr4FWWLHmK8TGH/pEuiOg4mElTxPZID9G9sknMShIJNi5JZDmHnZ +BxhNw6lAUtFZg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:07:49 2025 by rpki-client