This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft File: fp2uVBo7fD77bdZkadCH6F9179o.mft (raw, json) Hash identifier: N9Lji+orz/sthmS4CbdP9x8DuAECt7GkgDcgQDKQUt8= Subject key identifier: 95:D5:96:64:D4:66:AC:3E:9B:B3:67:21:58:E2:D7:07:98:C4:24:E6 Authority key identifier: 7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA Certificate issuer: /CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda Certificate serial: 019B631E607A79269F88B593C1D2F3EC2AF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft Manifest number: 03FD Signing time: Sun 28 Dec 2025 04:01:33 +0000 Manifest this update: Sun 28 Dec 2025 04:01:33 +0000 Manifest next update: Mon 29 Dec 2025 04:01:33 +0000 Files and hashes: 1: fp2uVBo7fD77bdZkadCH6F9179o.crl (hash: TT90KwBCfNuZUqaG1kw9yL/DFfBxYSxO33Wr1PXfTac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:60:7a:79:26:9f:88:b5:93:c1:d2:f3:ec:2a:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9dae541a3b7c3efb6dd66469d087e85f75efda Validity Not Before: Dec 28 04:01:33 2025 GMT Not After : Dec 29 04:01:33 2025 GMT Subject: CN=95d59664d466ac3e9bb3672158e2d70798c424e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:a8:85:e0:78:ea:90:54:1f:68:42:9a:da: a8:52:6c:89:cd:2b:85:32:28:dd:92:79:ca:2d:ab: ca:de:b2:51:4b:69:1a:ba:57:38:e9:2c:89:15:ce: d8:f0:b5:e7:c7:78:a6:b1:3c:51:e7:f6:15:65:40: f4:49:a0:ad:e9:01:ca:17:ff:22:db:73:e6:d9:81: 7d:f7:62:82:da:e5:26:7a:84:b2:cf:77:77:78:ba: 91:0f:5f:b4:b9:f5:68:d8:e1:11:65:8d:9b:ac:7b: 1e:72:b7:94:79:a1:7e:52:f5:d8:58:a1:31:b4:c5: 8e:34:4b:e3:b9:69:41:ed:f9:25:c0:04:ba:13:8b: 3e:24:b8:27:56:8f:25:66:dd:43:7d:41:4a:f5:61: 3b:5a:a2:a6:e5:4a:32:0d:c0:10:e7:4a:90:29:49: 23:a9:d9:24:f3:1e:c0:aa:07:67:21:30:38:7e:79: 3d:61:fb:47:da:b8:5b:97:35:03:a0:65:2a:92:47: 4f:ff:65:2c:b9:cc:93:39:10:2c:17:94:d9:22:02: 23:e3:f8:ca:cb:80:17:96:ab:96:e8:ce:db:35:04: b1:dc:30:12:7d:32:e0:6f:57:36:8a:43:10:14:ba: 79:9b:f1:19:7f:38:fc:8a:9b:fc:1b:5e:c0:13:9c: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D5:96:64:D4:66:AC:3E:9B:B3:67:21:58:E2:D7:07:98:C4:24:E6 X509v3 Authority Key Identifier: keyid:7E:9D:AE:54:1A:3B:7C:3E:FB:6D:D6:64:69:D0:87:E8:5F:75:EF:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fp2uVBo7fD77bdZkadCH6F9179o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d6a7c8-f5dc-42d3-b908-780171779e50/1/fp2uVBo7fD77bdZkadCH6F9179o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:ac:26:25:91:4e:50:52:41:9d:ab:d0:d9:0d:d4:39:a6:37: 32:af:95:85:87:9e:12:b4:a5:a2:e7:81:8f:28:39:93:2a:c6: 6f:49:14:47:2b:3c:10:9e:8f:df:b4:39:f5:f8:20:14:27:72: fb:dc:d8:2f:b6:88:d8:44:61:bc:4a:bf:17:a4:73:ba:a4:33: 37:5b:f3:fa:fd:2d:8d:3b:fd:e5:1c:fd:ac:99:87:8c:cc:c2: 27:2a:19:8a:7c:2d:a6:e3:1f:d3:75:d7:32:00:d4:df:4b:45: 80:49:e8:ff:5a:d1:cb:6c:ee:2b:ef:7d:89:14:13:b3:2f:e0: a7:7d:b0:b6:15:d7:72:86:83:e7:09:9f:56:6a:d3:93:35:87: 8d:bc:dd:32:29:50:ed:c2:78:0c:36:bb:a8:41:b8:c4:6b:45: 7c:11:8b:96:d6:71:4e:91:97:c3:c1:e9:70:20:17:ed:13:36: 6d:cd:58:14:a7:90:85:1c:c5:c8:f5:25:f2:21:fe:59:49:a3: d5:c9:29:48:42:cd:c3:fd:6e:d3:6c:f5:56:2c:8b:95:f9:f0: cc:02:c7:0a:64:43:99:79:2d:57:06:7c:5f:bd:29:56:6e:76: d5:96:16:d6:cb:cb:e0:b5:7a:6a:27:15:28:25:ad:10:85:83: 94:e4:72:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHmB6eSafiLWTwdLz7Cr2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOWRhZTU0MWEzYjdjM2VmYjZkZDY2NDY5ZDA4N2U4NWY3 NWVmZGEwHhcNMjUxMjI4MDQwMTMzWhcNMjUxMjI5MDQwMTMzWjAzMTEwLwYDVQQD Eyg5NWQ1OTY2NGQ0NjZhYzNlOWJiMzY3MjE1OGUyZDcwNzk4YzQyNGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJmoheB46pBUH2hCmtqoUmyJzSuF MijdknnKLavK3rJRS2kaulc46SyJFc7Y8LXnx3imsTxR5/YVZUD0SaCt6QHKF/8i 23Pm2YF992KC2uUmeoSyz3d3eLqRD1+0ufVo2OERZY2brHsecreUeaF+UvXYWKEx tMWONEvjuWlB7fklwAS6E4s+JLgnVo8lZt1DfUFK9WE7WqKm5UoyDcAQ50qQKUkj qdkk8x7AqgdnITA4fnk9YftH2rhblzUDoGUqkkdP/2UsucyTORAsF5TZIgIj4/jK y4AXlquW6M7bNQSx3DASfTLgb1c2ikMQFLp5m/EZfzj8ipv8G17AE5w+vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXVlmTUZqw+m7NnIVji1weYxCTmMB8GA1UdIwQY MBaAFH6drlQaO3w++23WZGnQh+hfde/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgt NzgwMTcxNzc5ZTUwLzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNmE3YzgtZjVkYy00MmQzLWI5MDgtNzgwMTcxNzc5ZTUw LzEvZnAydVZCbzdmRDc3YmRaa2FkQ0g2RjkxNzlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKwmJZFO UFJBnavQ2Q3UOaY3Mq+VhYeeErSloueBjyg5kyrGb0kURys8EJ6P37Q59fggFCdy +9zYL7aI2ERhvEq/F6RzuqQzN1vz+v0tjTv95Rz9rJmHjMzCJyoZinwtpuMf03XX MgDU30tFgEno/1rRy2zuK+99iRQTsy/gp32wthXXcoaD5wmfVmrTkzWHjbzdMilQ 7cJ4DDa7qEG4xGtFfBGLltZxTpGXw8HpcCAX7RM2bc1YFKeQhRzFyPUl8iH+WUmj 1ckpSELNw/1u02z1ViyLlfnwzALHCmRDmXktVwZ8X70pVm521ZYW1svL4LV6aicV KCWtEIWDlORySg== -----END CERTIFICATE-----Generated at Sun Dec 28 11:23:43 2025 by rpki-client