This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: KGp+YGPWlYFP0gu+Por7awLHVYgRF1Dee1Z3YTQPCsU= Subject key identifier: B3:E5:BF:A8:5F:0C:30:CA:9A:8B:4B:0B:0B:C1:A9:02:C8:56:9C:00 Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B69FBE2E70C19A882BB4C46DEBD1FF320 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 02B9 Signing time: Mon 29 Dec 2025 12:01:13 +0000 Manifest this update: Mon 29 Dec 2025 12:01:13 +0000 Manifest next update: Tue 30 Dec 2025 12:01:13 +0000 Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=) 2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=) 3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: cjXTYDc7PWAcuBX+aSrKZJW0S27K8fiCMBiD0E1+6V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:e2:e7:0c:19:a8:82:bb:4c:46:de:bd:1f:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Dec 29 12:01:13 2025 GMT Not After : Dec 30 12:01:13 2025 GMT Subject: CN=b3e5bfa85f0c30ca9a8b4b0b0bc1a902c8569c00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:02:eb:7d:94:0f:9e:4d:24:14:ce:95:70:b2: db:30:a3:e4:3a:55:43:cc:b3:0c:b7:38:d5:f9:f1: 40:54:8e:29:b7:fa:ae:8e:4a:1e:65:41:7c:24:fe: a3:a3:f9:72:aa:0e:48:13:be:47:f5:ac:ed:43:f5: d3:bb:5d:d8:2e:18:39:53:77:bd:20:a5:83:f2:28: a4:c4:0e:58:86:9b:76:b3:bb:86:cd:16:ba:17:a7: f4:26:7e:0d:b9:91:69:42:a9:58:48:2b:d9:95:9c: 08:b3:be:55:d4:f8:77:e6:95:25:5a:c6:6f:26:e9: 66:95:03:5c:a1:6f:01:ac:bc:5c:97:e3:8d:75:1a: ab:da:bf:5a:26:11:11:12:0f:09:c0:36:aa:fd:9d: 31:3a:ca:1b:88:f3:ae:b1:4d:d1:04:e3:71:7c:22: b9:00:03:fd:1f:71:01:86:c2:60:86:dc:54:cb:ae: 9a:73:8d:96:0c:05:d9:3b:a5:dc:fe:82:4d:e3:f0: 5f:aa:30:6f:cb:f3:e1:ff:21:79:2e:04:cd:92:ca: 37:96:bf:d1:b1:f9:7c:a4:b0:9d:ee:ad:0a:24:9e: 1f:0c:15:59:1a:be:89:b9:23:61:32:4b:4b:51:1e: ce:95:a6:14:a4:9f:85:a9:4b:f4:5b:53:bd:0f:80: b6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E5:BF:A8:5F:0C:30:CA:9A:8B:4B:0B:0B:C1:A9:02:C8:56:9C:00 X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:74:c2:e7:04:8a:59:5d:03:9f:a1:61:91:cc:17:45:3b:19: 36:0e:d7:84:10:1a:c2:d3:8a:09:e9:16:5b:3e:a1:17:a4:a7: f6:7a:8f:f7:5a:46:65:4f:6e:22:00:c9:24:39:ee:86:50:7f: 34:ad:1b:6d:e1:ff:70:15:69:da:e0:39:7d:a0:89:6c:f4:a4: ba:95:a3:1f:96:09:50:3b:98:c7:d5:49:90:6e:03:1f:25:e2: 0f:7b:3e:d4:7c:ab:8c:ca:47:68:ba:36:a1:fa:16:19:d2:04: f5:fd:20:c7:4f:2a:ba:49:fa:a6:8c:18:67:0b:ec:0b:5c:23: ef:fd:df:c5:e1:92:81:b1:31:52:0f:b2:aa:0f:86:ec:cc:bb: d6:8e:01:a4:60:32:69:ad:3b:3d:a5:21:c1:aa:b8:45:dc:0c: 60:af:03:99:63:7e:06:bc:26:18:55:d3:64:1e:0c:5c:d4:5c: 9a:21:9a:81:4e:7d:49:a1:c6:87:e7:40:04:70:fc:67:c5:0e: c0:11:84:78:cc:c9:29:4e:7d:7d:47:ee:9d:b4:af:b1:ef:cb: a5:9a:9c:31:89:a4:ad:d1:49:09:cc:9f:b4:43:45:8c:9d:3d: 37:61:ef:49:29:fc:c0:26:6e:c1:04:37:22:a9:ce:e0:94:9c: fd:7e:8a:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp++LnDBmogrtMRt69H/MgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjUxMjI5MTIwMTEzWhcNMjUxMjMwMTIwMTEzWjAzMTEwLwYDVQQD EyhiM2U1YmZhODVmMGMzMGNhOWE4YjRiMGIwYmMxYTkwMmM4NTY5YzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5QLrfZQPnk0kFM6VcLLbMKPkOlVD zLMMtzjV+fFAVI4pt/qujkoeZUF8JP6jo/lyqg5IE75H9aztQ/XTu13YLhg5U3e9 IKWD8iikxA5Yhpt2s7uGzRa6F6f0Jn4NuZFpQqlYSCvZlZwIs75V1Ph35pUlWsZv JulmlQNcoW8BrLxcl+ONdRqr2r9aJhEREg8JwDaq/Z0xOsobiPOusU3RBONxfCK5 AAP9H3EBhsJghtxUy66ac42WDAXZO6Xc/oJN4/BfqjBvy/Ph/yF5LgTNkso3lr/R sfl8pLCd7q0KJJ4fDBVZGr6JuSNhMktLUR7OlaYUpJ+FqUv0W1O9D4C2rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPlv6hfDDDKmotLCwvBqQLIVpwAMB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL3TC5wSK WV0Dn6FhkcwXRTsZNg7XhBAawtOKCekWWz6hF6Sn9nqP91pGZU9uIgDJJDnuhlB/ NK0bbeH/cBVp2uA5faCJbPSkupWjH5YJUDuYx9VJkG4DHyXiD3s+1HyrjMpHaLo2 ofoWGdIE9f0gx08qukn6powYZwvsC1wj7/3fxeGSgbExUg+yqg+G7My71o4BpGAy aa07PaUhwaq4RdwMYK8DmWN+BrwmGFXTZB4MXNRcmiGagU59SaHGh+dABHD8Z8UO wBGEeMzJKU59fUfunbSvse/LpZqcMYmkrdFJCcyftENFjJ09N2HvSSn8wCZuwQQ3 IqnO4JSc/X6KiQ== -----END CERTIFICATE-----Generated at Mon Dec 29 19:54:13 2025 by rpki-client