This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft File: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft (raw, json) Hash identifier: 1nsHTewvIVan+oOkj30ks2PLJx3WUH0rbX9/Q2IrXAA= Subject key identifier: 6D:5B:83:F5:2E:96:84:F2:A6:60:F0:C6:40:5D:FF:F5:2E:9F:BD:FC Authority key identifier: 7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 Certificate issuer: /CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Certificate serial: 019B5F783F07162BB651A2C45A561D321972 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft Manifest number: 1073 Signing time: Sat 27 Dec 2025 11:01:14 +0000 Manifest this update: Sat 27 Dec 2025 11:01:14 +0000 Manifest next update: Sun 28 Dec 2025 11:01:14 +0000 Files and hashes: 1: 1skXawq2SahvYTA2mnEOEbVR1u8.roa (hash: nHycrkajnYAr9VibtJNGtsv2Ftb47ENenxgpTd+DfzI=) 2: fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl (hash: 3yWtOmBUoISi02mH7otqEdxhn1F+ZHc7JyqzGVaMAsY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:3f:07:16:2b:b6:51:a2:c4:5a:56:1d:32:19:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d66d19e5388f12c1d28a16c328d86c364e9cc79 Validity Not Before: Dec 27 11:01:14 2025 GMT Not After : Dec 28 11:01:14 2025 GMT Subject: CN=6d5b83f52e9684f2a660f0c6405dfff52e9fbdfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:e3:66:95:e4:c1:0f:63:12:8d:8e:72:24: 8e:bc:6c:41:81:72:e2:05:96:f0:af:1c:20:b8:12: ae:e9:30:1c:af:c7:81:e7:c7:44:6a:cb:d1:a1:aa: 99:c8:55:96:33:07:6d:a1:cb:8d:c7:ef:4a:7e:a2: 3d:60:af:fb:64:d6:c1:5c:5c:71:4c:d5:19:0a:d6: 0f:75:99:b0:3e:d7:a7:8a:87:db:08:19:09:94:42: 27:e9:ff:52:c3:af:ff:5c:1e:f0:d5:e6:14:e6:52: a2:30:d0:0e:82:3e:0a:99:2c:61:18:8c:81:4e:c5: a5:6f:44:4f:60:39:71:5c:d3:47:da:2b:79:7b:61: 05:c8:69:ff:bb:85:ed:bc:b7:64:5e:7c:bd:a1:1b: 11:20:f3:d1:fd:ef:10:38:62:d7:17:fd:0f:c6:7c: 12:03:23:9b:25:50:dd:37:7c:fd:69:70:2a:e6:41: 64:bc:dd:2d:ad:c2:0c:7a:73:f1:ca:65:e8:cb:ca: f9:81:f2:ec:6b:d3:31:7f:02:a8:73:0b:c9:1f:4b: e6:6c:2c:8a:d2:06:a3:75:5b:54:19:bc:a6:cc:6c: d9:81:c9:89:ab:b2:33:47:ae:fc:5a:dd:e2:90:52: a2:3c:9d:e0:87:e9:8d:ca:60:f5:74:47:13:c6:07: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:83:F5:2E:96:84:F2:A6:60:F0:C6:40:5D:FF:F5:2E:9F:BD:FC X509v3 Authority Key Identifier: keyid:7D:66:D1:9E:53:88:F1:2C:1D:28:A1:6C:32:8D:86:C3:64:E9:CC:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ace9bd-f33d-486e-b394-f0d075a437f1/1/fWbRnlOI8SwdKKFsMo2Gw2TpzHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:f9:fe:9d:ae:bf:8a:36:f1:39:5c:42:7c:95:92:9b:92:2b: 4b:3a:f5:b7:09:df:e9:63:fb:75:0c:3b:a7:cd:be:8f:91:4d: 9f:9f:e7:d8:65:1a:86:e7:58:6f:64:ce:60:82:3e:7d:94:73: 3c:e8:08:0f:96:6e:1a:d6:de:c4:93:5d:c3:14:c1:f3:6f:cb: 50:38:92:79:e3:1f:12:51:2b:8c:63:c8:2e:d7:ec:17:75:ee: 56:b6:e6:db:46:0e:81:2f:78:c8:01:04:82:7f:dd:60:bc:b7: 76:07:6c:14:44:e6:16:03:f8:7d:fd:2a:20:3c:5b:6b:42:ff: d0:90:76:cd:60:23:7a:71:1e:b2:d5:86:1d:30:0c:c2:39:c6: b6:21:b7:1b:e7:5f:94:aa:b4:7f:f3:ff:f3:9c:ea:14:c6:36: 44:ed:17:51:a6:d5:90:6c:22:51:13:7d:71:b4:34:c6:b0:08: 92:bc:33:90:df:63:40:ff:4b:b2:f9:f2:4f:e2:37:fa:25:d8: d2:74:95:a2:43:37:c2:a0:61:73:72:54:03:05:10:40:38:59: 07:73:46:0b:6f:09:49:4b:e9:01:52:b6:58:10:73:15:a4:29: 28:dd:57:77:f4:e7:98:39:43:c9:f7:d3:b8:08:3a:8c:1e:20: 2d:83:cb:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeD8HFiu2UaLEWlYdMhlyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjZkMTllNTM4OGYxMmMxZDI4YTE2YzMyOGQ4NmMzNjRl OWNjNzkwHhcNMjUxMjI3MTEwMTE0WhcNMjUxMjI4MTEwMTE0WjAzMTEwLwYDVQQD Eyg2ZDViODNmNTJlOTY4NGYyYTY2MGYwYzY0MDVkZmZmNTJlOWZiZGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAronjZpXkwQ9jEo2OciSOvGxBgXLi BZbwrxwguBKu6TAcr8eB58dEasvRoaqZyFWWMwdtocuNx+9KfqI9YK/7ZNbBXFxx TNUZCtYPdZmwPteniofbCBkJlEIn6f9Sw6//XB7w1eYU5lKiMNAOgj4KmSxhGIyB TsWlb0RPYDlxXNNH2it5e2EFyGn/u4XtvLdkXny9oRsRIPPR/e8QOGLXF/0PxnwS AyObJVDdN3z9aXAq5kFkvN0trcIMenPxymXoy8r5gfLsa9MxfwKocwvJH0vmbCyK 0gajdVtUGbymzGzZgcmJq7IzR678Wt3ikFKiPJ3gh+mNymD1dEcTxgfmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1bg/UuloTypmDwxkBd//Uun738MB8GA1UdIwQY MBaAFH1m0Z5TiPEsHSihbDKNhsNk6cx5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQt ZjBkMDc1YTQzN2YxLzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hY2U5YmQtZjMzZC00ODZlLWIzOTQtZjBkMDc1YTQzN2Yx LzEvZldiUm5sT0k4U3dkS0tGc01vMkd3MlRwekhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/n+na6/ ijbxOVxCfJWSm5IrSzr1twnf6WP7dQw7p82+j5FNn5/n2GUahudYb2TOYII+fZRz POgID5ZuGtbexJNdwxTB82/LUDiSeeMfElErjGPILtfsF3XuVrbm20YOgS94yAEE gn/dYLy3dgdsFETmFgP4ff0qIDxba0L/0JB2zWAjenEestWGHTAMwjnGtiG3G+df lKq0f/P/85zqFMY2RO0XUabVkGwiURN9cbQ0xrAIkrwzkN9jQP9LsvnyT+I3+iXY 0nSVokM3wqBhc3JUAwUQQDhZB3NGC28JSUvpAVK2WBBzFaQpKN1Xd/TnmDlDyffT uAg6jB4gLYPLCA== -----END CERTIFICATE-----Generated at Sat Dec 27 19:26:58 2025 by rpki-client