This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft File: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json) Hash identifier: oDW0OMR7HWx+pWekkDdVuc+r6P9PdwszS0Iga6Xa8g0= Subject key identifier: 97:F0:CF:E3:15:F9:F4:9D:EA:E2:32:B2:C7:18:CA:A7:DE:04:D7:FA Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4 Certificate issuer: /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4 Certificate serial: 019B3BA299F01FD1986E0BED1011DA6C0FA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft Manifest number: 07B2 Signing time: Sat 20 Dec 2025 12:01:10 +0000 Manifest this update: Sat 20 Dec 2025 12:01:10 +0000 Manifest next update: Sun 21 Dec 2025 12:01:10 +0000 Files and hashes: 1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: RgwA/ixmgIQVkLiqJsTXNVJe1rUnh+tsXTue2m6LiWo=) 2: gZtu_mvpfnIEYpfX3O3Zhm8l3oY.roa (hash: eNPnQnlHd8yy83e7BBZ3vW4/qWGTiwqTNCUFgABwjBU=) 3: tJp6RAZ2Y3Z3o2R75yur_W5Ex-w.roa (hash: GGPR+7RZv9vuHEdD+t//WBPxSiCJToRwFhnk1FKFqWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:99:f0:1f:d1:98:6e:0b:ed:10:11:da:6c:0f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4 Validity Not Before: Dec 20 12:01:10 2025 GMT Not After : Dec 21 12:01:10 2025 GMT Subject: CN=97f0cfe315f9f49deae232b2c718caa7de04d7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:2b:ba:83:94:fe:74:6d:f4:49:3d:b5:6d: b0:d0:97:2e:3c:ff:42:32:11:58:d5:8d:3d:69:7f: 0c:35:e1:4e:d4:b0:0c:ea:2d:1e:df:69:66:95:27: 79:f4:a1:f6:68:87:17:17:4e:e9:c8:7c:2d:91:fc: 1d:3a:39:3d:a5:e4:d1:56:10:46:c0:9b:03:55:2e: 70:c0:a8:04:d9:7f:25:47:29:01:c3:47:a1:63:55: e2:56:03:58:78:0d:8d:83:f5:b5:49:4b:7c:4f:cd: 41:65:33:4a:43:ee:98:6c:6c:b7:b3:ed:3e:5b:8d: c3:40:f5:2d:6a:18:f4:94:d7:0f:54:22:5a:79:1b: 26:7a:59:8c:f5:e8:83:49:42:4f:90:10:05:06:bb: fd:10:0f:b5:4b:2b:1b:d7:cb:48:4c:36:07:ac:2d: 12:09:19:aa:0c:87:6a:89:3e:3f:e0:fa:ac:0e:42: 5f:eb:e1:d0:a5:52:1e:a3:ae:d9:21:97:02:98:35: 36:c7:48:26:10:49:fd:20:b9:e9:83:23:5c:c0:41: eb:d0:17:b5:de:be:dd:4a:7d:39:f4:26:f1:42:2c: 31:05:ed:59:89:7f:98:9d:3a:4d:94:d7:ed:82:75: b5:a7:2c:46:9a:d5:cb:b4:44:9b:66:28:16:b2:7e: 3d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F0:CF:E3:15:F9:F4:9D:EA:E2:32:B2:C7:18:CA:A7:DE:04:D7:FA X509v3 Authority Key Identifier: keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2d:3c:7e:6f:9d:53:52:af:76:ce:f7:40:9f:50:d4:ff:95: c7:10:88:80:d3:65:d6:0d:6f:86:55:73:e4:ba:25:05:02:91: 19:10:47:c2:f5:f8:6b:a5:f3:2b:58:18:83:59:9b:fb:96:e2: ce:be:81:a9:ec:16:f0:4d:03:90:a5:3c:29:f9:38:2a:de:30: ec:cc:11:99:f3:9a:98:bd:58:f3:d2:0c:80:da:1a:47:5e:42: 6d:09:c6:03:b0:da:64:38:cf:47:cd:5e:d9:6e:08:d2:96:ab: 93:23:24:21:cf:1a:1c:dd:06:5b:a8:3c:d6:c1:9d:2c:55:c1: 34:d9:ce:8c:e9:30:30:b7:d4:d5:d3:02:1a:8d:cc:bb:d4:78: cb:bb:f2:ba:b7:66:81:60:07:ea:5e:38:b6:6a:ff:8a:ef:19: 29:15:9a:ea:65:b4:7f:b4:07:40:d3:9e:e2:00:90:ce:70:57: e6:0f:c4:bd:30:97:17:9a:af:87:35:ca:4e:cc:61:db:6b:de: 23:ce:43:43:f7:50:c2:a6:e4:53:3f:cc:97:27:c9:cf:94:36: 6d:d2:ae:b7:e3:21:5c:f4:20:d5:67:28:a0:1d:95:20:1f:b0: 20:87:c6:2b:ad:5d:45:f7:8a:95:fe:44:ad:0d:0b:00:0b:26: 37:9a:c5:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7opnwH9GYbgvtEBHabA+gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZTE0MzI5YjZjMWU2OTUwMTFhODI0MDZmN2FmNDhmNGJi MTBhZDQwHhcNMjUxMjIwMTIwMTEwWhcNMjUxMjIxMTIwMTEwWjAzMTEwLwYDVQQD Eyg5N2YwY2ZlMzE1ZjlmNDlkZWFlMjMyYjJjNzE4Y2FhN2RlMDRkN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDMruoOU/nRt9Ek9tW2w0JcuPP9C MhFY1Y09aX8MNeFO1LAM6i0e32lmlSd59KH2aIcXF07pyHwtkfwdOjk9peTRVhBG wJsDVS5wwKgE2X8lRykBw0ehY1XiVgNYeA2Ng/W1SUt8T81BZTNKQ+6YbGy3s+0+ W43DQPUtahj0lNcPVCJaeRsmelmM9eiDSUJPkBAFBrv9EA+1Sysb18tITDYHrC0S CRmqDIdqiT4/4PqsDkJf6+HQpVIeo67ZIZcCmDU2x0gmEEn9ILnpgyNcwEHr0Be1 3r7dSn059CbxQiwxBe1ZiX+YnTpNlNftgnW1pyxGmtXLtESbZigWsn49GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfwz+MV+fSd6uIysscYyqfeBNf6MB8GA1UdIwQY MBaAFD/hQym2weaVARqCQG969I9LsQrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQt YzNkNTdlMjM4N2NhLzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMGM2YzQtYWIyOC00NDA1LWI2OTQtYzNkNTdlMjM4N2Nh LzEvUC1GREtiYkI1cFVCR29KQWIzcjBqMHV4Q3RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC08fm+d U1Kvds73QJ9Q1P+VxxCIgNNl1g1vhlVz5LolBQKRGRBHwvX4a6XzK1gYg1mb+5bi zr6BqewW8E0DkKU8Kfk4Kt4w7MwRmfOamL1Y89IMgNoaR15CbQnGA7DaZDjPR81e 2W4I0parkyMkIc8aHN0GW6g81sGdLFXBNNnOjOkwMLfU1dMCGo3Mu9R4y7vyurdm gWAH6l44tmr/iu8ZKRWa6mW0f7QHQNOe4gCQznBX5g/EvTCXF5qvhzXKTsxh22ve I85DQ/dQwqbkUz/MlyfJz5Q2bdKut+MhXPQg1WcooB2VIB+wIIfGK61dRfeKlf5E rQ0LAAsmN5rFPQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:03 2025 by rpki-client