This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json) Hash identifier: 3BPypgoSvlIz4Jt/uyqF5ZrshEAJw311AGtw3LlagZE= Subject key identifier: 39:51:38:F1:E2:3E:EB:79:52:C8:C7:B7:BA:E5:64:76:B6:B9:4B:46 Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019B631DC0436750701FAD48CD4AC2CEBA1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft Manifest number: 0FB6 Signing time: Sun 28 Dec 2025 04:00:52 +0000 Manifest this update: Sun 28 Dec 2025 04:00:52 +0000 Manifest next update: Mon 29 Dec 2025 04:00:52 +0000 Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: iTNcDQtfmvR6DXsVrFvWSmKz3YiEtxCY6QIK5S2l2pM=) 2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1d:c0:43:67:50:70:1f:ad:48:cd:4a:c2:ce:ba:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Dec 28 04:00:52 2025 GMT Not After : Dec 29 04:00:52 2025 GMT Subject: CN=395138f1e23eeb7952c8c7b7bae56476b6b94b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:01:f0:82:4f:d6:5e:cf:8c:e2:c2:02:c5: fd:61:ca:9a:04:a9:68:ef:b6:f9:a5:b5:44:04:c6: 27:77:21:4f:f8:dc:30:60:9b:90:fe:47:17:4d:1a: 06:b0:bb:9d:78:df:f0:59:94:ab:57:c5:3a:1d:e9: eb:67:2e:c3:b4:c4:f1:8d:1b:b6:03:42:63:01:9e: 6d:a6:32:91:ac:dd:56:34:95:26:05:a3:c0:49:b4: 4c:d5:40:ed:79:30:5e:c2:5f:5f:6d:d2:9b:2e:62: 39:5b:24:2f:21:42:d0:91:c6:45:c3:1a:28:f0:7c: dc:21:36:70:33:89:8a:66:73:0c:5a:e4:44:81:a9: 01:2f:f8:ba:ce:17:1f:e2:02:05:0b:6c:bf:51:69: df:9f:41:97:67:67:65:57:75:8a:79:04:59:23:da: 4a:9b:fa:63:9b:ad:53:db:40:a1:11:ad:7f:94:7e: 82:9a:d5:dc:35:68:4c:8a:64:e6:c7:7b:8e:3e:ed: ac:2c:6a:9f:4c:26:21:a6:54:a6:17:37:41:85:c9: 18:0e:28:48:0f:35:40:84:7f:41:dc:12:22:a5:b9: 06:05:ee:be:09:60:45:61:e8:97:a4:08:b6:ae:19: a2:da:0c:cf:ea:c9:ce:42:dd:1d:9d:e3:4d:ae:d1: 90:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:38:F1:E2:3E:EB:79:52:C8:C7:B7:BA:E5:64:76:B6:B9:4B:46 X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:d2:af:0d:5c:4f:d7:33:92:40:79:1b:ff:7f:b0:00:1f:55: 43:d8:ec:2b:64:7d:d3:e8:e2:f1:83:ec:37:65:87:64:8b:01: 69:b6:04:ed:36:a5:c6:00:c9:bd:11:e9:ae:86:fd:23:78:0a: 9d:19:66:1a:12:f5:71:17:d0:82:ec:c0:4a:5e:23:7d:f4:99: 6a:f2:15:79:ca:f8:45:99:27:23:6f:26:8a:8b:28:32:67:d8: 45:82:e4:65:d2:eb:0a:24:80:5f:a1:31:7d:fe:40:16:f2:03: ec:f9:27:68:35:ff:eb:2e:68:93:81:19:99:5c:12:ce:ab:50: d9:d1:79:93:40:55:27:8e:01:e9:a5:8b:d4:70:83:76:b6:af: 30:6d:5a:bd:ed:fe:e2:1b:9f:46:77:01:f8:16:16:fa:f8:99: c0:f6:c8:24:31:96:69:d2:02:42:7f:e5:d0:18:50:b9:fe:93: aa:84:31:d4:1d:29:55:ca:92:e8:12:b1:89:c6:5c:f9:77:f1: 7d:1d:50:aa:03:5c:ea:3d:d9:38:01:e6:48:ad:88:af:9b:8c: 30:ea:2a:c0:56:ea:b1:08:0a:13:42:41:05:3f:b8:34:1f:c8: 6b:9a:86:aa:cf:8c:e0:71:8f:fd:b4:db:21:18:5b:e4:ea:8a: 2d:ac:f0:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHcBDZ1BwH61IzUrCzrodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjUxMjI4MDQwMDUyWhcNMjUxMjI5MDQwMDUyWjAzMTEwLwYDVQQD EygzOTUxMzhmMWUyM2VlYjc5NTJjOGM3YjdiYWU1NjQ3NmI2Yjk0YjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNgB8IJP1l7PjOLCAsX9YcqaBKlo 77b5pbVEBMYndyFP+NwwYJuQ/kcXTRoGsLudeN/wWZSrV8U6HenrZy7DtMTxjRu2 A0JjAZ5tpjKRrN1WNJUmBaPASbRM1UDteTBewl9fbdKbLmI5WyQvIULQkcZFwxoo 8HzcITZwM4mKZnMMWuREgakBL/i6zhcf4gIFC2y/UWnfn0GXZ2dlV3WKeQRZI9pK m/pjm61T20ChEa1/lH6CmtXcNWhMimTmx3uOPu2sLGqfTCYhplSmFzdBhckYDihI DzVAhH9B3BIipbkGBe6+CWBFYeiXpAi2rhmi2gzP6snOQt0dneNNrtGQjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlROPHiPut5UsjHt7rlZHa2uUtGMB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9KvDVxP 1zOSQHkb/3+wAB9VQ9jsK2R90+ji8YPsN2WHZIsBabYE7TalxgDJvRHprob9I3gK nRlmGhL1cRfQguzASl4jffSZavIVecr4RZknI28miosoMmfYRYLkZdLrCiSAX6Ex ff5AFvID7PknaDX/6y5ok4EZmVwSzqtQ2dF5k0BVJ44B6aWL1HCDdravMG1ave3+ 4hufRncB+BYW+viZwPbIJDGWadICQn/l0BhQuf6TqoQx1B0pVcqS6BKxicZc+Xfx fR1QqgNc6j3ZOAHmSK2Ir5uMMOoqwFbqsQgKE0JBBT+4NB/Ia5qGqs+M4HGP/bTb IRhb5OqKLazw6g== -----END CERTIFICATE-----Generated at Sun Dec 28 08:00:32 2025 by rpki-client