This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft File: rFPL63FQhLMioaFJyW4JxA7W2IM.mft (raw, json) Hash identifier: cwrAiYVNs49/F5ZjpQ7QhCLgnpoDvlfU+xBf4Q0bxB0= Subject key identifier: D7:A1:77:F5:A3:09:4D:04:88:60:76:B8:35:9B:45:A9:65:B0:27:C4 Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83 Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883 Certificate serial: 019B3F11A4610CCF1F92F94DC278FDF9B439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft Manifest number: 13B0 Signing time: Sun 21 Dec 2025 04:01:19 +0000 Manifest this update: Sun 21 Dec 2025 04:01:19 +0000 Manifest next update: Mon 22 Dec 2025 04:01:19 +0000 Files and hashes: 1: Wfce3ZtHFc99tmFyN64Q-vZ2RpA.roa (hash: Y3X9Ri7kJ6o/ebs+JUXNiJ+ZA7lhHw1uv9ydtQHMGRI=) 2: rFPL63FQhLMioaFJyW4JxA7W2IM.crl (hash: qtF95RXfBV0npUXKVIv0IgcHS1E0HLDXw3plS6bTKtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:a4:61:0c:cf:1f:92:f9:4d:c2:78:fd:f9:b4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883 Validity Not Before: Dec 21 04:01:19 2025 GMT Not After : Dec 22 04:01:19 2025 GMT Subject: CN=d7a177f5a3094d04886076b8359b45a965b027c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:f2:dc:27:c0:9a:25:b7:25:38:5e:28:72: 09:2b:b4:4a:99:22:80:1e:ed:cc:ce:c9:1a:90:68: 73:94:88:6f:63:7a:fa:54:43:bf:a9:a6:c3:17:5f: 70:4c:07:09:bc:7e:ca:9e:2c:5b:57:57:48:74:75: 26:b9:cf:c3:3c:81:eb:5e:cb:f1:fd:c3:fd:b8:b7: b7:bd:60:db:1c:3b:15:15:6e:df:de:2d:d0:07:41: 88:37:d6:b6:eb:03:16:c1:0f:4c:be:a3:af:75:aa: 0a:c1:db:3e:56:1b:ce:21:d5:5c:10:64:45:85:ca: 63:f8:2e:71:70:f1:d1:90:81:b9:ce:cb:a6:34:9e: 13:54:9f:6a:b6:f6:c8:f7:1b:ad:c5:52:6c:04:74: 8f:da:4f:0f:3b:e6:55:94:34:44:38:85:bb:6f:dc: 25:e6:42:8b:42:47:79:6b:45:ba:9e:77:44:41:55: 54:fa:d1:4d:e1:8b:4f:2f:2d:d0:e6:b7:7c:a7:cd: e3:e8:ce:9d:45:e7:7d:7e:94:0a:3e:0c:0f:2c:c9: 2a:e1:1b:be:78:ef:f2:ed:58:87:41:c7:84:8c:ec: c7:1b:4f:21:da:47:22:b4:4a:66:31:98:3a:46:18: bb:39:d5:e7:a5:ed:3d:f0:10:8c:1c:2a:53:23:95: d4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A1:77:F5:A3:09:4D:04:88:60:76:B8:35:9B:45:A9:65:B0:27:C4 X509v3 Authority Key Identifier: keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:5b:85:b9:78:7f:6c:03:47:a1:97:46:8f:a7:a1:25:e2:b3: 77:e2:81:1f:40:45:07:8c:3a:bc:cb:ec:04:86:ef:4d:6f:f3: 57:0f:12:17:ac:e1:bd:67:59:e6:e7:ac:44:a4:18:16:39:84: fd:41:9f:aa:5f:e6:21:ab:71:f3:ba:b0:0d:95:7a:35:8f:e3: ff:b0:5d:64:b2:ad:03:15:f8:c0:9a:89:80:60:53:18:b0:76: dd:38:ab:66:7c:32:1f:a3:38:ab:f4:62:52:06:56:a9:a9:da: ce:12:96:61:24:ad:a1:a4:e2:1c:34:2d:41:5c:5b:0f:e1:12: 76:3f:53:11:75:b5:28:b6:17:5c:6e:d8:35:07:5e:94:3e:77: 1a:5a:8d:1e:51:49:fb:0b:ed:f7:31:cb:f1:40:78:fd:4c:9c: 4e:b8:7d:96:45:59:eb:52:1c:f2:8a:83:ba:3b:42:3c:51:eb: 06:5a:1a:1d:9d:80:fb:25:7b:95:66:2e:80:22:c2:0d:ec:47: d7:0d:8b:5a:99:6f:c7:2c:5c:87:cf:ec:25:8a:42:1c:e0:b5: 41:b0:96:0b:f1:29:87:f3:03:5b:ed:ca:db:fb:7c:9b:8d:d4: 10:ef:c3:3a:dc:1f:3a:a1:f0:4b:ed:03:cf:1a:cd:e0:15:1a: 02:23:30:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EaRhDM8fkvlNwnj9+bQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNTNjYmViNzE1MDg0YjMyMmExYTE0OWM5NmUwOWM0MGVk NmQ4ODMwHhcNMjUxMjIxMDQwMTE5WhcNMjUxMjIyMDQwMTE5WjAzMTEwLwYDVQQD EyhkN2ExNzdmNWEzMDk0ZDA0ODg2MDc2YjgzNTliNDVhOTY1YjAyN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3/y3CfAmiW3JTheKHIJK7RKmSKA Hu3MzskakGhzlIhvY3r6VEO/qabDF19wTAcJvH7KnixbV1dIdHUmuc/DPIHrXsvx /cP9uLe3vWDbHDsVFW7f3i3QB0GIN9a26wMWwQ9MvqOvdaoKwds+VhvOIdVcEGRF hcpj+C5xcPHRkIG5zsumNJ4TVJ9qtvbI9xutxVJsBHSP2k8PO+ZVlDREOIW7b9wl 5kKLQkd5a0W6nndEQVVU+tFN4YtPLy3Q5rd8p83j6M6dRed9fpQKPgwPLMkq4Ru+ eO/y7ViHQceEjOzHG08h2kcitEpmMZg6Rhi7OdXnpe098BCMHCpTI5XUTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNehd/WjCU0EiGB2uDWbRallsCfEMB8GA1UdIwQY MBaAFKxTy+txUISzIqGhScluCcQO1tiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQt N2FlYWRiNDVhMjM3LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi83ZWM4Y2ItMzY5ZS00YmJiLWI4YjQtN2FlYWRiNDVhMjM3 LzEvckZQTDYzRlFoTE1pb2FGSnlXNEp4QTdXMklNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1uFuXh/ bANHoZdGj6ehJeKzd+KBH0BFB4w6vMvsBIbvTW/zVw8SF6zhvWdZ5uesRKQYFjmE /UGfql/mIatx87qwDZV6NY/j/7BdZLKtAxX4wJqJgGBTGLB23TirZnwyH6M4q/Ri UgZWqanazhKWYSStoaTiHDQtQVxbD+ESdj9TEXW1KLYXXG7YNQdelD53GlqNHlFJ +wvt9zHL8UB4/UycTrh9lkVZ61Ic8oqDujtCPFHrBloaHZ2A+yV7lWYugCLCDexH 1w2LWplvxyxch8/sJYpCHOC1QbCWC/Eph/MDW+3K2/t8m43UEO/DOtwfOqHwS+0D zxrN4BUaAiMwJg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:01 2025 by rpki-client