This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json) Hash identifier: SIEeXNrZNHDTa60acAyWJ0OB0/opIapEDmMkHzUwfsE= Subject key identifier: 94:F0:2C:E7:D9:B2:ED:B4:E6:50:5A:22:C1:33:AF:1D:20:66:A1:CA Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39 Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39 Certificate serial: 019B367BEFB109B49492E9158FBCDFBA15FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft Manifest number: 178A Signing time: Fri 19 Dec 2025 12:00:50 +0000 Manifest this update: Fri 19 Dec 2025 12:00:50 +0000 Manifest next update: Sat 20 Dec 2025 12:00:50 +0000 Files and hashes: 1: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: jfk/JBhM+93ebU8IJBg6Y7H8OVALQDdXecIgneAQ66s=) 2: jtLIKZheIJbw9TwyWl-fpzVLvnE.roa (hash: IhEUym2kurgLTl3Vw4ZlxqTomcA/YLaDzPHSwrVgpmI=) 3: pIC-whUriXBZUStrVpAYvl470Dw.roa (hash: P8U8HyziEmzl2lHRrN+KrJgIgKMcwZzkigHQuPfUZ+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:7b:ef:b1:09:b4:94:92:e9:15:8f:bc:df:ba:15:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39 Validity Not Before: Dec 19 12:00:50 2025 GMT Not After : Dec 20 12:00:50 2025 GMT Subject: CN=94f02ce7d9b2edb4e6505a22c133af1d2066a1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:c6:f8:b5:90:9b:b6:6a:44:3a:71:1a:ca: bd:d8:63:c6:41:20:47:2c:92:ce:12:f0:c6:e4:89: 54:e7:49:5d:ce:62:0c:e0:1d:71:9d:31:94:fc:c2: 46:77:57:62:33:0e:3f:2a:51:96:0d:95:58:4b:25: 13:68:c7:fe:b3:13:b4:e2:c0:8d:a3:98:48:99:dc: 63:69:99:92:18:57:56:f4:24:69:f3:23:58:2c:19: a3:cb:c9:be:d4:6d:32:c0:c7:46:09:53:a2:5e:c5: e2:49:44:9f:08:4d:3f:64:91:e1:cd:2b:9c:24:40: 5b:f4:bb:d2:7a:e3:0f:cb:7d:d0:fb:50:3c:f4:70: ca:b2:97:10:1e:a0:a6:2c:d6:f7:ef:3a:31:fc:b1: 1e:41:63:d1:e1:4e:8e:d9:b4:44:1e:87:f7:d5:cb: 32:e1:ce:d5:aa:8b:86:c9:84:bc:5e:5e:e2:81:4e: 71:07:5d:e6:29:8c:0c:b9:0c:ad:d0:70:00:16:2a: 94:8d:fd:a5:6f:c7:ac:1c:a8:54:a3:37:72:42:dc: 97:f2:b4:aa:15:a9:7f:1f:12:36:ca:06:c9:88:6c: ef:56:af:6f:3e:41:a7:87:ed:f6:1e:0b:0d:cd:74: f3:e7:0a:38:e1:d4:96:82:da:1a:1c:ce:da:10:1e: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F0:2C:E7:D9:B2:ED:B4:E6:50:5A:22:C1:33:AF:1D:20:66:A1:CA X509v3 Authority Key Identifier: keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b4:2e:66:34:ab:d5:66:65:32:a2:3b:fc:92:ca:c8:c5:bb: d1:c2:72:98:b1:6b:c1:b6:01:87:77:28:ef:d4:19:68:72:82: 9d:fd:f5:ac:2c:c7:68:ac:f0:b4:da:14:f0:42:42:79:9f:34: b7:c6:a8:eb:64:23:c3:8c:8d:06:5a:3b:1c:70:71:05:0f:0b: 6b:aa:18:3e:ac:e1:bb:ca:2a:0d:be:32:0c:42:73:3d:14:0c: fc:c1:10:8d:bb:08:46:db:a6:73:9c:33:2c:34:2c:b1:46:1d: 51:be:16:c4:c8:81:5d:e7:d4:41:6b:37:ab:57:c7:f6:9f:bf: 53:30:0b:0f:31:50:f5:26:b4:b3:da:7a:a9:ba:90:61:ec:38: 98:de:b0:fa:7b:c2:bb:e6:fb:ae:04:20:6f:8f:6b:74:67:d5: 44:1a:77:df:52:0d:92:40:94:0a:dd:a5:78:1e:e8:ff:f9:87: b5:9d:fa:a4:ae:c0:35:ba:b7:74:50:f5:af:52:a4:ba:f3:77: b9:9c:fe:33:c4:b9:6d:c6:27:e8:9f:58:e6:ac:f7:00:b6:f2: 03:2c:6c:b5:b0:ea:28:ca:c6:84:e2:91:91:ef:7a:31:44:cd: 8a:4b:6e:ce:24:b1:69:f7:ce:5d:c2:a9:c6:40:5c:51:29:95: c2:59:fa:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2e++xCbSUkukVj7zfuhX7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTAyZTJkMjRiMWYyMTY5MTMwODgyMDdhMjY4ZTY2MjZi MGNlMzkwHhcNMjUxMjE5MTIwMDUwWhcNMjUxMjIwMTIwMDUwWjAzMTEwLwYDVQQD Eyg5NGYwMmNlN2Q5YjJlZGI0ZTY1MDVhMjJjMTMzYWYxZDIwNjZhMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPXG+LWQm7ZqRDpxGsq92GPGQSBH LJLOEvDG5IlU50ldzmIM4B1xnTGU/MJGd1diMw4/KlGWDZVYSyUTaMf+sxO04sCN o5hImdxjaZmSGFdW9CRp8yNYLBmjy8m+1G0ywMdGCVOiXsXiSUSfCE0/ZJHhzSuc JEBb9LvSeuMPy33Q+1A89HDKspcQHqCmLNb37zox/LEeQWPR4U6O2bREHof31csy 4c7VqouGyYS8Xl7igU5xB13mKYwMuQyt0HAAFiqUjf2lb8esHKhUozdyQtyX8rSq Fal/HxI2ygbJiGzvVq9vPkGnh+32HgsNzXTz5wo44dSWgtoaHM7aEB4lNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTwLOfZsu205lBaIsEzrx0gZqHKMB8GA1UdIwQY MBaAFH1QLi0ksfIWkTCIIHomjmYmsM45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMt NTFkNzU1NjhhOWUzLzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9hYTUzY2YtZjk4OC00MGViLTgwODMtNTFkNzU1NjhhOWUz LzEvZlZBdUxTU3g4aGFSTUlnZ2VpYU9aaWF3emprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwrQuZjSr 1WZlMqI7/JLKyMW70cJymLFrwbYBh3co79QZaHKCnf31rCzHaKzwtNoU8EJCeZ80 t8ao62Qjw4yNBlo7HHBxBQ8La6oYPqzhu8oqDb4yDEJzPRQM/MEQjbsIRtumc5wz LDQssUYdUb4WxMiBXefUQWs3q1fH9p+/UzALDzFQ9Sa0s9p6qbqQYew4mN6w+nvC u+b7rgQgb49rdGfVRBp331INkkCUCt2leB7o//mHtZ36pK7ANbq3dFD1r1KkuvN3 uZz+M8S5bcYn6J9Y5qz3ALbyAyxstbDqKMrGhOKRke96MUTNiktuziSxaffOXcKp xkBcUSmVwln6vw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:58:16 2025 by rpki-client