This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft File: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft (raw, json) Hash identifier: W2VG8hZJBZuyVnFLAH04ZEcvHsrdCSP8PCQdIwPqlWI= Subject key identifier: 27:FD:7C:D5:A8:15:51:DA:F8:9A:4C:2C:59:78:26:44:6A:9F:84:62 Authority key identifier: 7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 Certificate issuer: /CN=7e9360205b48af4954566314230e6b1296d9aec4 Certificate serial: 019B2C2F098F5C9DB81935A722BAF9A3729E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft Manifest number: 063E Signing time: Wed 17 Dec 2025 12:00:38 +0000 Manifest this update: Wed 17 Dec 2025 12:00:38 +0000 Manifest next update: Thu 18 Dec 2025 12:00:38 +0000 Files and hashes: 1: 6Hs21ZDEU36A7XzHFbni9nG1_gs.roa (hash: uHRCtaCqTT6lc9BE9eOvMv5KtMPToXYAuWUFVX2JuWU=) 2: fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl (hash: wwMZJ45qFy048pIugysdVWZtY4GK3dFjRRmyr3BqeYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:09:8f:5c:9d:b8:19:35:a7:22:ba:f9:a3:72:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e9360205b48af4954566314230e6b1296d9aec4 Validity Not Before: Dec 17 12:00:38 2025 GMT Not After : Dec 18 12:00:38 2025 GMT Subject: CN=27fd7cd5a81551daf89a4c2c597826446a9f8462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e1:66:92:1c:5f:8e:d2:3e:bc:6c:7f:4f:6c: ed:aa:80:cb:e7:d7:59:ae:85:dc:f1:fb:32:f4:46: ab:5f:17:f8:01:4e:65:a4:65:b2:57:56:77:61:80: 9d:e7:19:b2:9e:71:c3:d5:9f:be:e5:fd:2c:92:e4: 9a:47:b5:97:f2:dd:b4:25:0c:82:f2:24:6d:b2:36: a0:05:a2:0e:98:f6:2f:a4:de:a1:c8:a8:70:ba:a1: b1:b9:5f:57:b7:ee:73:8f:71:b2:ca:2a:09:87:35: 84:10:f3:d0:db:63:d5:81:7a:32:c2:17:fb:9f:d9: bf:1a:b2:f7:fb:ba:10:95:5e:32:ad:d3:45:3c:1f: 2d:aa:17:ed:d3:9f:7e:64:50:e6:6c:d9:57:2e:38: 2d:ba:33:38:20:2b:73:cf:25:3e:32:22:99:99:b2: 40:dc:78:eb:42:73:1d:42:d0:90:fc:12:9d:c2:2f: e9:8a:9d:8f:5d:c8:b5:dc:a6:6f:86:63:be:88:61: de:6d:d3:81:71:17:a8:4c:9e:42:8a:bf:04:ce:04: 1d:39:1f:2c:8f:12:7f:3e:98:40:63:a5:55:6a:7f: 37:c5:a9:6d:07:81:53:21:17:77:72:6c:a1:34:43: 09:89:bf:1e:a1:bb:fb:a2:1a:76:35:a3:a4:55:b1: fa:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:7C:D5:A8:15:51:DA:F8:9A:4C:2C:59:78:26:44:6A:9F:84:62 X509v3 Authority Key Identifier: keyid:7E:93:60:20:5B:48:AF:49:54:56:63:14:23:0E:6B:12:96:D9:AE:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8a22f1-e4ff-4469-82eb-d30ea968bfa7/1/fpNgIFtIr0lUVmMUIw5rEpbZrsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:bf:94:5d:bd:69:8f:bf:28:4a:07:28:a4:ea:af:6f:89:ef: 6b:55:e0:54:60:d0:05:cb:c4:73:37:8e:93:ae:f8:c2:5f:c6: 12:3d:d3:51:d9:c0:40:28:b5:6f:d8:63:0d:d4:4c:a8:1a:27: fa:37:00:44:43:28:e7:58:6b:dc:f7:bb:09:e0:04:6b:68:fc: 7c:d6:c8:ca:50:55:20:15:bb:7e:32:8f:83:0c:ce:64:e0:51: c8:7f:f0:ef:c5:75:fa:03:89:5b:56:c3:af:1d:c6:06:91:01: 0f:1b:d6:e6:02:3e:ed:aa:2d:0e:41:dc:c6:64:10:c2:9b:cf: d6:93:ff:6e:3d:53:67:6d:97:40:ef:99:21:0a:e2:db:9d:82: 94:9a:5e:26:a4:99:81:09:08:89:5b:8a:10:71:c5:c5:6b:40: f8:4f:f2:12:5a:14:f9:fb:e4:8d:f2:d4:94:cc:78:cd:be:7f: 09:0a:01:bd:bc:e6:3b:51:0c:8e:43:88:2e:82:40:d5:ef:55: 82:b1:cd:74:42:dc:84:7a:8f:1b:50:d0:76:15:e9:06:34:48: 24:0d:16:22:53:cc:4a:15:50:7b:f2:d1:38:72:43:6f:a3:8f: db:c9:4b:31:c3:33:63:07:09:d5:93:94:e1:89:91:96:9d:0a: b2:2c:ca:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwmPXJ24GTWnIrr5o3KeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTM2MDIwNWI0OGFmNDk1NDU2NjMxNDIzMGU2YjEyOTZk OWFlYzQwHhcNMjUxMjE3MTIwMDM4WhcNMjUxMjE4MTIwMDM4WjAzMTEwLwYDVQQD EygyN2ZkN2NkNWE4MTU1MWRhZjg5YTRjMmM1OTc4MjY0NDZhOWY4NDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOFmkhxfjtI+vGx/T2ztqoDL59dZ roXc8fsy9EarXxf4AU5lpGWyV1Z3YYCd5xmynnHD1Z++5f0skuSaR7WX8t20JQyC 8iRtsjagBaIOmPYvpN6hyKhwuqGxuV9Xt+5zj3GyyioJhzWEEPPQ22PVgXoywhf7 n9m/GrL3+7oQlV4yrdNFPB8tqhft059+ZFDmbNlXLjgtujM4ICtzzyU+MiKZmbJA 3HjrQnMdQtCQ/BKdwi/pip2PXci13KZvhmO+iGHebdOBcReoTJ5Cir8EzgQdOR8s jxJ/PphAY6VVan83xaltB4FTIRd3cmyhNEMJib8eobv7ohp2NaOkVbH6zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf9fNWoFVHa+JpMLFl4JkRqn4RiMB8GA1UdIwQY MBaAFH6TYCBbSK9JVFZjFCMOaxKW2a7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWIt ZDMwZWE5NjhiZmE3LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS84YTIyZjEtZTRmZi00NDY5LTgyZWItZDMwZWE5NjhiZmE3 LzEvZnBOZ0lGdElyMGxVVm1NVUl3NXJFcGJacnNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7+UXb1p j78oSgcopOqvb4nva1XgVGDQBcvEczeOk674wl/GEj3TUdnAQCi1b9hjDdRMqBon +jcAREMo51hr3Pe7CeAEa2j8fNbIylBVIBW7fjKPgwzOZOBRyH/w78V1+gOJW1bD rx3GBpEBDxvW5gI+7aotDkHcxmQQwpvP1pP/bj1TZ22XQO+ZIQri252ClJpeJqSZ gQkIiVuKEHHFxWtA+E/yEloU+fvkjfLUlMx4zb5/CQoBvbzmO1EMjkOILoJA1e9V grHNdELchHqPG1DQdhXpBjRIJA0WIlPMShVQe/LROHJDb6OP28lLMcMzYwcJ1ZOU 4YmRlp0KsizK8g== -----END CERTIFICATE-----Generated at Wed Dec 17 15:14:35 2025 by rpki-client