This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json) Hash identifier: LlCuMLpDjtoGVzIcNVhcRvVNKsAllgJVYz4xzLTHVME= Subject key identifier: EE:15:1D:CD:37:DF:0E:75:71:DD:92:92:2B:E1:6C:39:E8:46:C5:14 Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd Certificate serial: 019B631FA8A9EAC1575BB8C79E1B2668A1F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft Manifest number: 0B2C Signing time: Sun 28 Dec 2025 04:02:57 +0000 Manifest this update: Sun 28 Dec 2025 04:02:57 +0000 Manifest next update: Mon 29 Dec 2025 04:02:57 +0000 Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: zQtpYyjdNvY9tdQwstNmbq9HTi3BdgvJ+Mv2EzsKWFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:a8:a9:ea:c1:57:5b:b8:c7:9e:1b:26:68:a1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd Validity Not Before: Dec 28 04:02:57 2025 GMT Not After : Dec 29 04:02:57 2025 GMT Subject: CN=ee151dcd37df0e7571dd92922be16c39e846c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b8:6c:96:e3:e4:c9:dd:66:5b:f4:3b:ec:ce: 45:c0:09:2b:7d:c5:72:19:56:b1:eb:8d:ca:b2:6d: 49:1f:83:92:79:50:ef:06:51:24:b1:c3:eb:f4:c0: 93:fe:f3:d8:ac:d8:27:61:34:c0:68:1f:cc:fb:b1: ca:07:ca:57:65:36:9d:b7:50:16:0c:3f:33:c2:d5: 4d:70:c9:42:f6:46:84:2d:40:46:b8:da:e1:81:5f: 4a:20:f6:29:e1:39:08:1c:26:4a:9e:72:2a:e0:23: 67:07:d1:f0:48:8d:b9:8a:95:35:08:0a:ca:4f:96: c3:2b:48:ae:de:98:6b:f0:40:05:df:5c:d9:c5:b8: 8a:74:6b:e5:05:89:01:2c:e2:72:d9:21:1d:3b:18: 6f:bf:4b:2a:85:14:31:1b:dd:e1:3e:ea:c3:eb:c7: d2:11:4d:27:80:2e:1c:39:f4:f2:86:7d:5f:7c:9f: c7:50:db:a5:ae:31:43:9c:f7:ce:0a:66:39:5c:e7: d2:89:f2:4e:7e:f7:7e:6e:0f:bc:45:f3:84:7f:e6: 0d:92:40:04:3e:f2:99:0a:50:3f:18:35:f5:f5:3e: 90:9e:dd:57:f9:4a:05:21:29:58:c9:cf:00:9f:e0: b7:d6:de:68:08:2b:c7:03:f6:f6:2a:29:b6:6d:73: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:15:1D:CD:37:DF:0E:75:71:DD:92:92:2B:E1:6C:39:E8:46:C5:14 X509v3 Authority Key Identifier: keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:67:ee:4d:5d:22:c1:06:fb:30:57:aa:fd:9c:5e:de:56:d6: e1:cc:29:b5:89:4b:ae:68:f3:d6:21:bf:b6:9e:f2:c4:88:69: 98:af:f6:e9:f0:c0:f3:9f:09:3a:fa:6e:fa:63:bb:2f:5f:b7: 7c:9f:d7:ac:f0:23:83:cf:a7:81:51:8a:bc:69:4b:32:75:5d: a0:a7:17:30:da:94:66:10:16:6e:b8:d3:c2:e1:db:b9:1c:d7: ac:3f:63:44:aa:eb:47:7d:ad:4b:1d:28:56:cf:34:38:87:fa: 21:ad:f7:97:1a:af:b0:e8:93:02:91:0b:51:21:4d:30:e3:39: 16:67:0a:0f:4c:36:9a:67:0d:8c:42:de:7e:e0:70:28:51:12: 0b:36:14:04:30:d7:ef:67:7d:aa:e5:ab:7d:1f:2c:6e:f0:87: 65:ee:86:96:31:bb:6d:a8:41:9c:00:97:2b:19:bf:24:5d:a1: 55:cf:90:cc:be:66:e0:07:87:90:56:b1:77:bd:45:47:4c:c7: e0:ca:ef:fe:9c:f1:3d:e7:d7:f4:ce:56:52:47:9d:7e:80:35: 6d:0e:5b:89:fd:c5:82:d9:28:7a:34:47:f1:67:19:be:a4:d9: d5:9c:ce:5b:63:00:6f:69:a3:65:e6:dd:68:ff:2e:de:64:e5: 1b:4e:1b:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjH6ip6sFXW7jHnhsmaKHxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm NjQ0ZmQwHhcNMjUxMjI4MDQwMjU3WhcNMjUxMjI5MDQwMjU3WjAzMTEwLwYDVQQD EyhlZTE1MWRjZDM3ZGYwZTc1NzFkZDkyOTIyYmUxNmMzOWU4NDZjNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrhsluPkyd1mW/Q77M5FwAkrfcVy GVax643Ksm1JH4OSeVDvBlEkscPr9MCT/vPYrNgnYTTAaB/M+7HKB8pXZTadt1AW DD8zwtVNcMlC9kaELUBGuNrhgV9KIPYp4TkIHCZKnnIq4CNnB9HwSI25ipU1CArK T5bDK0iu3phr8EAF31zZxbiKdGvlBYkBLOJy2SEdOxhvv0sqhRQxG93hPurD68fS EU0ngC4cOfTyhn1ffJ/HUNulrjFDnPfOCmY5XOfSifJOfvd+bg+8RfOEf+YNkkAE PvKZClA/GDX19T6Qnt1X+UoFISlYyc8An+C31t5oCCvHA/b2Kim2bXMfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4VHc033w51cd2SkivhbDnoRsUUMB8GA1UdIwQY MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWfuTV0i wQb7MFeq/Zxe3lbW4cwptYlLrmjz1iG/tp7yxIhpmK/26fDA858JOvpu+mO7L1+3 fJ/XrPAjg8+ngVGKvGlLMnVdoKcXMNqUZhAWbrjTwuHbuRzXrD9jRKrrR32tSx0o Vs80OIf6Ia33lxqvsOiTApELUSFNMOM5FmcKD0w2mmcNjELefuBwKFESCzYUBDDX 72d9quWrfR8sbvCHZe6GljG7bahBnACXKxm/JF2hVc+QzL5m4AeHkFaxd71FR0zH 4Mrv/pzxPefX9M5WUkedfoA1bQ5bif3FgtkoejRH8WcZvqTZ1ZzOW2MAb2mjZebd aP8u3mTlG04biQ== -----END CERTIFICATE-----Generated at Sun Dec 28 04:59:47 2025 by rpki-client