This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json) Hash identifier: lF+Rxou1SW8ZpDHhgySfVfUcWE9LiX2Odrjrbx0RzIU= Subject key identifier: EE:8D:F3:C8:3F:7D:4E:BA:E2:09:58:25:E6:D6:EB:CD:10:71:B5:94 Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Certificate serial: 019B2552FC8D7D89FAB239CC91DFB52D9645 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft Manifest number: 10A7 Signing time: Tue 16 Dec 2025 04:02:34 +0000 Manifest this update: Tue 16 Dec 2025 04:02:34 +0000 Manifest next update: Wed 17 Dec 2025 04:02:34 +0000 Files and hashes: 1: dY8PRHODabkygNlq6-JaDEHqZls.asa (hash: wO6s5irr+VwBuwHpzpyaBiPqP7VqY55H1NCOsRyEv68=) 2: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: hLmu6Rw5VHREXFQNlYIJLCVigo1cx113Ja493jC4VkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:fc:8d:7d:89:fa:b2:39:cc:91:df:b5:2d:96:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Validity Not Before: Dec 16 04:02:34 2025 GMT Not After : Dec 17 04:02:34 2025 GMT Subject: CN=ee8df3c83f7d4ebae2095825e6d6ebcd1071b594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4e:12:29:36:61:51:1a:71:a4:18:ae:0d:80: 08:44:59:c6:8f:51:44:0d:26:2e:82:93:cb:b7:dc: 67:1a:46:9d:0e:d0:e1:7a:d4:26:1b:a7:ec:11:88: f1:e3:94:45:ce:2d:c7:45:f5:c6:f3:0c:f0:35:a8: 6e:73:7c:32:1f:cb:1d:be:49:72:9c:ef:5e:b7:69: fd:ae:47:c7:2e:f5:60:24:e8:0c:d5:e7:f9:3a:17: 85:0a:e2:62:29:bb:f2:eb:fe:12:e3:1b:90:c9:81: 5f:6d:1e:1c:09:b6:72:b6:42:c4:84:83:79:9d:18: 55:81:61:c7:7b:3a:59:e9:31:c5:b5:bc:49:b4:43: 6e:0a:31:a1:02:90:ec:96:b3:9f:34:6d:78:bb:e7: 78:18:35:87:1e:c1:d7:68:3b:7d:3a:0f:2c:24:1b: f1:2c:b6:86:97:b6:72:e4:67:50:6c:4c:25:2a:d5: 72:b2:df:0f:b2:b0:68:f1:32:f5:01:09:23:8c:63: 74:ee:f6:53:d7:f8:23:63:35:ce:de:d3:d9:c1:81: 5f:2d:35:eb:d0:7a:f5:e0:30:58:11:5e:13:29:77: 34:38:61:e3:11:dd:fd:c9:25:c8:db:38:21:47:3c: fe:d2:3e:95:ee:15:d8:64:23:c0:b0:a9:f6:3f:03: ec:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:8D:F3:C8:3F:7D:4E:BA:E2:09:58:25:E6:D6:EB:CD:10:71:B5:94 X509v3 Authority Key Identifier: keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e8:b3:40:22:e0:24:43:45:bf:26:0f:5c:f0:47:47:6c:e1: 63:e1:e2:cb:9e:6b:a5:a8:da:60:d1:bd:32:79:8f:d3:71:a5: ab:1c:c6:1d:1e:b1:ca:c0:98:51:98:31:6d:b8:18:cc:e3:12: 40:d0:b7:40:4e:51:05:6b:b8:93:88:97:61:9b:53:44:38:ad: 3f:d9:bd:dd:35:12:e1:dd:24:44:88:e5:c5:a7:cb:cb:d1:3a: a0:a4:90:68:39:55:64:31:c7:d9:cd:19:90:17:cb:25:30:3d: 9c:35:de:c6:05:a8:66:c3:e9:b9:09:e4:71:5e:fd:3d:7a:a7: 42:e7:44:97:73:6e:ae:73:b1:9b:da:7f:37:47:43:13:a1:01: 69:96:a5:23:7a:9d:86:d8:09:b9:2f:94:2d:30:2f:9f:5d:6f: b8:1a:f1:3f:94:e1:90:cb:d1:19:e3:22:7f:b9:02:52:92:a8: d4:05:80:66:46:3f:d0:8e:21:ef:b4:d2:78:91:c4:9d:3a:5a: d4:bf:0d:19:bb:c6:f6:8b:d4:0e:6a:7c:c7:8f:df:f7:5b:ba: 34:1a:25:7d:af:29:de:5a:17:bd:90:4f:6f:96:3b:ae:bc:4b: f3:51:20:48:b4:f4:de:9f:fa:9c:c1:b0:d7:a0:a5:77:90:66: 6e:67:d8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUvyNfYn6sjnMkd+1LZZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1 ZGJiMjQwHhcNMjUxMjE2MDQwMjM0WhcNMjUxMjE3MDQwMjM0WjAzMTEwLwYDVQQD EyhlZThkZjNjODNmN2Q0ZWJhZTIwOTU4MjVlNmQ2ZWJjZDEwNzFiNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk4SKTZhURpxpBiuDYAIRFnGj1FE DSYugpPLt9xnGkadDtDhetQmG6fsEYjx45RFzi3HRfXG8wzwNahuc3wyH8sdvkly nO9et2n9rkfHLvVgJOgM1ef5OheFCuJiKbvy6/4S4xuQyYFfbR4cCbZytkLEhIN5 nRhVgWHHezpZ6THFtbxJtENuCjGhApDslrOfNG14u+d4GDWHHsHXaDt9Og8sJBvx LLaGl7Zy5GdQbEwlKtVyst8PsrBo8TL1AQkjjGN07vZT1/gjYzXO3tPZwYFfLTXr 0Hr14DBYEV4TKXc0OGHjEd39ySXI2zghRzz+0j6V7hXYZCPAsKn2PwPsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6N88g/fU664glYJebW680QcbWUMB8GA1UdIwQY MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt ODdhNjJlMGZjNDhjLzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOizQCLg JENFvyYPXPBHR2zhY+Hiy55rpajaYNG9MnmP03GlqxzGHR6xysCYUZgxbbgYzOMS QNC3QE5RBWu4k4iXYZtTRDitP9m93TUS4d0kRIjlxafLy9E6oKSQaDlVZDHH2c0Z kBfLJTA9nDXexgWoZsPpuQnkcV79PXqnQudEl3NurnOxm9p/N0dDE6EBaZalI3qd htgJuS+ULTAvn11vuBrxP5ThkMvRGeMif7kCUpKo1AWAZkY/0I4h77TSeJHEnTpa 1L8NGbvG9ovUDmp8x4/f91u6NBolfa8p3loXvZBPb5Y7rrxL81EgSLT03p/6nMGw 16Cld5BmbmfYjg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:49:02 2025 by rpki-client