This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json) Hash identifier: +kKll8I8nxvu4+Wu+jAwGhpimum0tOxiur+IBGtq0BQ= Subject key identifier: E1:28:DE:1B:CB:16:EC:96:A2:7D:0B:A1:81:4D:61:48:28:55:2B:25 Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Certificate serial: 019B47387757516F342123DCC438A954F936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft Manifest number: 1460 Signing time: Mon 22 Dec 2025 18:00:41 +0000 Manifest this update: Mon 22 Dec 2025 18:00:41 +0000 Manifest next update: Tue 23 Dec 2025 18:00:41 +0000 Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: 6WpYa2YCBbGEcqkypzNmkbCuZJ82AQcpagv7oxfoKmA=) 2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:77:57:51:6f:34:21:23:dc:c4:38:a9:54:f9:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Validity Not Before: Dec 22 18:00:41 2025 GMT Not After : Dec 23 18:00:41 2025 GMT Subject: CN=e128de1bcb16ec96a27d0ba1814d614828552b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:af:d1:84:00:98:32:60:57:82:18:0e:51: ec:3f:cf:d0:96:00:e6:b3:7f:fb:97:34:c0:cb:83: 4c:88:95:d6:53:e9:07:99:bd:99:4b:16:fa:c0:5f: 3a:ee:76:84:f5:6d:0b:02:68:23:64:fb:f4:be:d3: ec:9d:49:ec:07:24:0e:e1:5c:ab:5b:82:54:b9:dc: 4d:02:aa:a1:e7:5e:d1:58:95:62:3f:36:67:d9:6d: 68:6f:48:5a:ba:a3:f4:4c:46:2f:ee:2f:ff:8c:fb: a4:ae:e1:dc:bf:93:af:ea:72:ef:d4:00:69:c9:c5: 87:e1:ad:ef:c1:e6:c8:d3:6b:84:33:cd:7d:e3:ab: 02:f2:d4:1c:d9:2e:41:08:65:9f:63:e3:36:df:39: 2e:4c:70:fc:fe:23:db:d1:c1:15:c7:90:3a:2c:59: de:65:ca:8b:01:2c:64:3a:67:28:85:e2:14:87:7d: be:86:8d:63:92:ed:f1:61:02:9c:c5:bf:d6:87:e3: f0:90:82:7a:0a:66:59:c5:11:5a:de:b1:1b:23:49: 99:af:39:8e:e4:8a:8b:c7:fa:1f:4d:76:bf:f1:67: a7:bf:ea:33:bc:4a:be:9d:67:9e:c8:17:f5:88:2b: 7c:9a:73:10:f8:3f:33:ce:41:53:c8:70:e8:8e:12: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:DE:1B:CB:16:EC:96:A2:7D:0B:A1:81:4D:61:48:28:55:2B:25 X509v3 Authority Key Identifier: keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:64:ec:ca:5d:c3:8e:65:e6:a0:2c:24:8d:3e:ab:f3:82:e9: 4f:be:47:5a:99:f5:c2:45:00:21:b8:c0:36:02:55:70:01:49: ab:53:aa:85:5a:e8:00:7e:90:5e:54:23:bd:ec:9f:9c:0c:79: e4:1b:ff:0f:81:82:34:14:7e:f6:05:37:fe:5d:71:cf:2c:dd: 58:ab:94:e2:be:e9:18:ff:df:a9:f6:01:be:26:c3:66:05:29: 86:90:74:97:f0:47:dc:3b:f2:74:d4:26:e9:37:87:ef:89:84: 49:ef:60:f7:61:3d:de:30:87:e2:2e:7a:43:bf:aa:48:6c:ab: da:ac:b7:66:0b:ab:ac:e4:f0:2c:18:00:99:83:32:5e:a9:98: 36:10:b0:48:0d:21:7a:1d:a5:63:25:24:64:78:83:19:54:55: 6e:31:fb:9e:d2:e1:ee:fa:60:90:d6:51:7c:f2:a9:8a:c6:db: 3f:1a:d6:3f:ef:2b:c3:b6:e1:40:e0:fc:1e:1e:e0:3a:b4:c9: 47:43:49:7c:16:bb:5c:a3:31:23:da:b2:44:2b:6c:f2:72:64: 9f:f0:6d:02:3b:0c:b8:2d:9b:88:ea:a2:a3:b1:55:8d:c1:72: c6:46:0d:df:6b:a0:9d:db:e8:6c:a3:05:62:c7:55:59:21:21: a8:dc:ac:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHOHdXUW80ISPcxDipVPk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi ZWQ2NTAwHhcNMjUxMjIyMTgwMDQxWhcNMjUxMjIzMTgwMDQxWjAzMTEwLwYDVQQD EyhlMTI4ZGUxYmNiMTZlYzk2YTI3ZDBiYTE4MTRkNjE0ODI4NTUyYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Uuv0YQAmDJgV4IYDlHsP8/QlgDm s3/7lzTAy4NMiJXWU+kHmb2ZSxb6wF867naE9W0LAmgjZPv0vtPsnUnsByQO4Vyr W4JUudxNAqqh517RWJViPzZn2W1ob0hauqP0TEYv7i//jPukruHcv5Ov6nLv1ABp ycWH4a3vwebI02uEM81946sC8tQc2S5BCGWfY+M23zkuTHD8/iPb0cEVx5A6LFne ZcqLASxkOmcoheIUh32+ho1jku3xYQKcxb/Wh+PwkIJ6CmZZxRFa3rEbI0mZrzmO 5IqLx/ofTXa/8Wenv+ozvEq+nWeeyBf1iCt8mnMQ+D8zzkFTyHDojhJteQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEo3hvLFuyWon0LoYFNYUgoVSslMB8GA1UdIwQY MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0 LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWTsyl3D jmXmoCwkjT6r84LpT75HWpn1wkUAIbjANgJVcAFJq1OqhVroAH6QXlQjveyfnAx5 5Bv/D4GCNBR+9gU3/l1xzyzdWKuU4r7pGP/fqfYBvibDZgUphpB0l/BH3DvydNQm 6TeH74mESe9g92E93jCH4i56Q7+qSGyr2qy3ZgurrOTwLBgAmYMyXqmYNhCwSA0h eh2lYyUkZHiDGVRVbjH7ntLh7vpgkNZRfPKpisbbPxrWP+8rw7bhQOD8Hh7gOrTJ R0NJfBa7XKMxI9qyRCts8nJkn/BtAjsMuC2biOqio7FVjcFyxkYN32ugndvobKMF YsdVWSEhqNyssQ== -----END CERTIFICATE-----Generated at Mon Dec 22 23:01:08 2025 by rpki-client