This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json) Hash identifier: SVYJI90SRdiGjZlrjm2SBCMh3UjuvRaorMdacN7HfS0= Subject key identifier: 79:26:B4:DD:D8:C7:5E:3D:2F:5E:64:02:8D:9E:D0:98:A8:E7:F7:12 Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Certificate serial: 019B3DFE5E171591017389E991551DA11928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 23:00:38 +0000 Manifest this update: Sat 20 Dec 2025 23:00:38 +0000 Manifest next update: Sun 21 Dec 2025 23:00:38 +0000 Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=) 2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: iBx7K5eQ+pyNILeaXgeLfmuh0DzPi0/NO5Zu+mTxCa4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:5e:17:15:91:01:73:89:e9:91:55:1d:a1:19:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Validity Not Before: Dec 20 23:00:38 2025 GMT Not After : Dec 21 23:00:38 2025 GMT Subject: CN=7926b4ddd8c75e3d2f5e64028d9ed098a8e7f712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:96:14:7d:5f:8f:6f:18:fa:85:74:d5:79: 1c:59:59:84:e4:3b:52:2d:44:1a:87:16:bf:76:be: b9:a9:c0:26:2d:21:a7:e0:70:fc:49:71:1c:51:b6: b2:fe:76:e4:bb:76:a3:21:20:2d:13:ed:3d:29:b7: a1:7c:29:7e:9b:2a:39:bf:18:ad:12:1f:17:34:a7: c8:28:e3:64:04:4f:df:c9:57:1b:56:d8:5c:b4:5d: 0a:2c:63:2e:e6:93:d4:1b:c4:46:79:0d:52:20:f5: b6:7f:ca:db:81:11:54:fb:29:62:6e:26:4f:59:19: 6a:45:33:4c:59:de:7b:d5:25:9a:b3:af:ae:f9:4e: 0b:01:31:5b:45:d5:9a:cc:48:7e:5c:1e:c7:64:a7: 14:db:06:29:8e:61:94:14:b2:9f:51:82:f7:a2:1a: ac:66:53:fe:2a:40:2e:c4:1b:2e:d4:62:38:33:e5: 86:84:ee:45:fb:af:ab:86:51:87:f2:2c:0a:12:1a: 60:a5:4b:c5:1a:c9:8e:09:d9:ef:cc:c1:cd:2f:b7: 46:1b:16:e2:7a:40:e6:11:32:a1:bd:4e:22:14:df: 79:76:63:ad:ca:ed:15:b6:02:98:b5:75:81:28:7d: 3d:34:4f:bd:84:d7:66:f3:fd:9f:7d:93:0c:f9:28: e6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:26:B4:DD:D8:C7:5E:3D:2F:5E:64:02:8D:9E:D0:98:A8:E7:F7:12 X509v3 Authority Key Identifier: keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ba:a7:10:68:0e:09:45:01:f2:ab:f5:94:38:da:c5:b7:a0: 5e:58:10:2c:f2:5e:36:fe:86:45:e5:e1:c1:3e:4d:f3:19:be: 73:71:d6:4c:64:7f:6e:bb:77:d0:9d:f2:b6:6c:4a:0f:34:e0: 7a:0b:64:8b:85:37:06:7f:1a:05:77:f8:c2:f7:1a:60:f8:ee: 58:84:3d:78:62:5b:2b:1d:3e:40:2e:20:32:a3:cc:4c:14:1d: b0:8b:04:a6:d7:37:7a:d2:22:18:5e:ca:12:fe:b3:b4:7e:df: fc:33:56:6c:a4:7a:47:5c:fb:53:27:4e:ec:a2:bd:22:b2:21: 2c:b4:71:a8:56:33:71:6a:c8:a3:48:ef:0d:d1:ef:37:b8:54: 33:89:73:61:cc:16:e5:b9:67:9b:98:4e:14:cc:ae:4f:c6:b7: 05:7d:6a:6b:47:ec:d5:04:ba:76:77:65:9f:95:38:e0:ff:5f: 8c:ae:f3:cf:07:7a:0f:6e:e4:ad:58:c6:b6:c9:d7:38:d3:0a: 1c:e8:d5:d0:36:97:0a:8e:a5:05:76:0d:d6:49:66:0f:57:96: d1:0b:8a:6d:c2:c8:56:86:90:21:11:9d:bd:fd:b3:03:b6:0a: 7f:29:93:8a:bd:7f:32:81:91:fd:26:f7:11:8a:73:d2:4b:fe: cd:e8:2d:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/l4XFZEBc4npkVUdoRkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk NTUyMWIwHhcNMjUxMjIwMjMwMDM4WhcNMjUxMjIxMjMwMDM4WjAzMTEwLwYDVQQD Eyg3OTI2YjRkZGQ4Yzc1ZTNkMmY1ZTY0MDI4ZDllZDA5OGE4ZTdmNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1uWFH1fj28Y+oV01XkcWVmE5DtS LUQahxa/dr65qcAmLSGn4HD8SXEcUbay/nbku3ajISAtE+09KbehfCl+myo5vxit Eh8XNKfIKONkBE/fyVcbVthctF0KLGMu5pPUG8RGeQ1SIPW2f8rbgRFU+ylibiZP WRlqRTNMWd571SWas6+u+U4LATFbRdWazEh+XB7HZKcU2wYpjmGUFLKfUYL3ohqs ZlP+KkAuxBsu1GI4M+WGhO5F+6+rhlGH8iwKEhpgpUvFGsmOCdnvzMHNL7dGGxbi ekDmETKhvU4iFN95dmOtyu0VtgKYtXWBKH09NE+9hNdm8/2ffZMM+SjmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHkmtN3Yx149L15kAo2e0Jio5/cSMB8GA1UdIwQY MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrqnEGgO CUUB8qv1lDjaxbegXlgQLPJeNv6GReXhwT5N8xm+c3HWTGR/brt30J3ytmxKDzTg egtki4U3Bn8aBXf4wvcaYPjuWIQ9eGJbKx0+QC4gMqPMTBQdsIsEptc3etIiGF7K Ev6ztH7f/DNWbKR6R1z7UydO7KK9IrIhLLRxqFYzcWrIo0jvDdHvN7hUM4lzYcwW 5blnm5hOFMyuT8a3BX1qa0fs1QS6dndln5U44P9fjK7zzwd6D27krVjGtsnXONMK HOjV0DaXCo6lBXYN1klmD1eW0QuKbcLIVoaQIRGdvf2zA7YKfymTir1/MoGR/Sb3 EYpz0kv+zegt0g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:06:34 2025 by rpki-client