This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json) Hash identifier: KJeEMTDMOp4c8QRGGEDhcUS95DP5Gl+ZqYoFEoJP9PM= Subject key identifier: DE:6B:79:41:C7:E8:93:1D:DB:4C:E0:C7:74:E4:E4:0F:7A:48:5C:F7 Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276 Certificate serial: 019B3CB516665AAC7F39ECE2D414B2CD6E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft Manifest number: 1052 Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: pr1CH5j4s1Ctcy43pIZKuznrqEqz+CqtoQjSWk8f9sw=) 2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:16:66:5a:ac:7f:39:ec:e2:d4:14:b2:cd:6e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276 Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=de6b7941c7e8931ddb4ce0c774e4e40f7a485cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:e8:5b:64:97:d8:19:02:1e:10:6e:2f:71: f2:6a:15:ca:72:63:58:27:da:15:d1:cc:ec:69:81: c4:07:81:fd:d4:d3:20:82:76:25:c9:cc:c7:18:3d: c3:67:eb:b5:48:a8:71:07:55:f8:9f:76:34:2c:98: 32:a9:ae:26:3d:6c:98:05:1e:3e:6d:ca:09:c1:1b: fd:7e:bf:fa:37:31:97:c6:ea:ef:50:68:82:66:35: e3:fa:ef:4f:e8:a1:20:37:41:61:1f:91:00:82:57: 1b:e4:4c:39:ed:4d:43:f4:35:a0:50:30:01:68:a1: e7:c1:21:6e:fa:49:29:66:98:21:4d:2b:f0:08:41: 8a:4c:73:a0:cc:38:49:1f:4b:fd:4c:3e:36:1d:18: 2b:cd:7e:4c:1a:00:8f:64:a9:82:5e:cf:91:90:85: 70:7c:dc:50:6f:c6:c7:b5:0d:71:af:99:dc:04:09: b8:04:c2:26:eb:bc:69:a7:b8:f5:98:06:25:8d:d1: c4:7d:54:6a:b1:d0:b7:c7:57:09:c1:ee:38:cd:47: ee:a4:59:88:13:ca:ba:6d:1d:fe:b3:cb:fe:95:dd: 83:c7:d8:cb:1f:61:e2:93:1b:62:26:fe:33:b0:42: 53:58:95:d8:d2:1e:87:ec:1c:56:cd:b4:bf:d0:5c: f6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:6B:79:41:C7:E8:93:1D:DB:4C:E0:C7:74:E4:E4:0F:7A:48:5C:F7 X509v3 Authority Key Identifier: keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:1a:48:39:7e:48:ce:5a:34:fb:20:31:7f:0d:5f:97:ca:d7: 30:96:8b:20:b7:d3:40:98:ce:d3:f9:44:40:3a:88:d0:ef:95: b9:1d:7e:c9:08:62:e6:37:48:30:9c:99:c7:f8:28:a6:af:80: 18:50:99:ee:37:55:50:5c:13:dc:43:13:2c:84:ff:c9:86:0f: 04:aa:8e:cb:42:f9:40:66:a2:97:1e:e2:14:86:94:38:3f:46: ea:d4:d1:1c:61:6f:f7:d1:45:47:25:58:20:07:94:16:41:cd: ed:69:68:60:be:98:2b:8a:94:31:be:5d:ff:6e:10:94:e7:28: 81:8e:32:8a:9a:e3:1c:61:87:93:a7:5f:d5:d8:a1:72:4e:48: d8:97:12:e3:76:ee:7f:a5:68:29:83:a4:fb:71:02:f6:f3:2d: 72:a7:5d:21:53:bd:98:67:b0:20:43:30:51:b2:98:6a:78:5f: b8:55:99:d0:4a:b6:be:b7:d1:3d:f3:f2:c7:2f:75:2f:20:a9: 6a:65:3f:38:aa:e3:74:df:90:7f:53:6f:2d:b4:ac:0f:9b:c6: 78:5e:5e:31:f3:79:91:2e:d2:7a:fc:73:57:01:2e:04:06:30: 6e:47:e9:13:d8:4e:f6:71:63:f2:f8:ef:1b:eb:16:5b:8b:dd: 3a:a9:15:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRZmWqx/Oezi1BSyzW4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJiYjA4MDM3YTg3NjIzMDQwNmZhNjczNzlmOTgwYjVh YjMyNzYwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD EyhkZTZiNzk0MWM3ZTg5MzFkZGI0Y2UwYzc3NGU0ZTQwZjdhNDg1Y2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCPoW2SX2BkCHhBuL3HyahXKcmNY J9oV0czsaYHEB4H91NMggnYlyczHGD3DZ+u1SKhxB1X4n3Y0LJgyqa4mPWyYBR4+ bcoJwRv9fr/6NzGXxurvUGiCZjXj+u9P6KEgN0FhH5EAglcb5Ew57U1D9DWgUDAB aKHnwSFu+kkpZpghTSvwCEGKTHOgzDhJH0v9TD42HRgrzX5MGgCPZKmCXs+RkIVw fNxQb8bHtQ1xr5ncBAm4BMIm67xpp7j1mAYljdHEfVRqsdC3x1cJwe44zUfupFmI E8q6bR3+s8v+ld2Dx9jLH2HikxtiJv4zsEJTWJXY0h6H7BxWzbS/0Fz2ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5reUHH6JMd20zgx3Tk5A96SFz3MB8GA1UdIwQY MBaAFHwbuwgDeodiMEBvpnN5+YC1qzJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5Njct MDhkNWNkMTZmNTQ5LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5NjctMDhkNWNkMTZmNTQ5 LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhpIOX5I zlo0+yAxfw1fl8rXMJaLILfTQJjO0/lEQDqI0O+VuR1+yQhi5jdIMJyZx/gopq+A GFCZ7jdVUFwT3EMTLIT/yYYPBKqOy0L5QGailx7iFIaUOD9G6tTRHGFv99FFRyVY IAeUFkHN7WloYL6YK4qUMb5d/24QlOcogY4yiprjHGGHk6df1dihck5I2JcS43bu f6VoKYOk+3EC9vMtcqddIVO9mGewIEMwUbKYanhfuFWZ0Eq2vrfRPfPyxy91LyCp amU/OKrjdN+Qf1NvLbSsD5vGeF5eMfN5kS7SevxzVwEuBAYwbkfpE9hO9nFj8vjv G+sWW4vdOqkVzg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:10 2025 by rpki-client