This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json) Hash identifier: yW1/WTlV+g5GEHbHvlBMcZ7qpow/vDtn0Hh0KKS2xtQ= Subject key identifier: 7D:84:29:2C:12:0A:A3:F8:77:FD:AC:71:30:16:8E:F8:8E:F8:E1:B2 Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b Certificate serial: 019B3AFDE5B807CA5B3EDACC4D6C0EE54D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft Manifest number: 0899 Signing time: Sat 20 Dec 2025 09:01:16 +0000 Manifest this update: Sat 20 Dec 2025 09:01:16 +0000 Manifest next update: Sun 21 Dec 2025 09:01:16 +0000 Files and hashes: 1: TbMjDWj4JjSbzv98od3kf6H3oLQ.roa (hash: 6tue5GmhUL7N95x2Z4BFABU7q9BYKT3YDkCK4sofjnc=) 2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: d79he4idav0CMoRp9IUGeQBSFDUV+3sbCwy0H7RjECM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:e5:b8:07:ca:5b:3e:da:cc:4d:6c:0e:e5:4d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b Validity Not Before: Dec 20 09:01:16 2025 GMT Not After : Dec 21 09:01:16 2025 GMT Subject: CN=7d84292c120aa3f877fdac7130168ef88ef8e1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:c4:fa:55:a7:e1:d3:71:e8:c2:ea:95:d9: 9a:88:de:82:82:23:ea:62:8e:d0:61:e8:dc:a4:a7: f6:20:e6:08:ad:43:d9:57:15:a2:dd:50:18:9d:01: ea:91:51:86:33:02:df:41:d2:fc:2d:23:d3:72:3f: 35:e5:88:90:70:75:d8:1d:2d:81:d9:a6:58:f9:07: 28:8c:2f:9d:4a:6b:ad:3b:76:ad:fa:bf:f7:f4:36: 79:ed:9f:0d:cb:82:27:85:6a:2b:d9:86:32:7e:c0: 72:c1:65:5a:aa:48:86:a8:8a:2d:d2:15:d2:8c:bd: 0a:d3:97:18:28:66:b1:b1:b1:92:0c:43:4c:cb:f8: 56:f8:b1:26:12:f4:b5:30:be:ce:da:ea:fb:12:e2: ce:79:2d:c5:8c:52:a8:87:cb:4d:c6:a7:19:40:50: 1e:10:1a:4d:57:76:0b:07:37:83:8c:1e:88:b4:f2: 40:00:99:10:39:3c:d7:36:2e:c3:98:8c:2a:47:d0: f2:f0:7b:59:80:08:c1:cb:eb:29:49:0e:ff:1e:5d: eb:b3:b0:33:da:75:ce:24:98:f7:30:4f:db:85:c3: e5:87:47:58:dc:58:b4:0e:60:12:6c:4e:f8:99:ae: ce:4c:22:a9:79:69:59:da:ad:4a:85:06:05:08:e9: 66:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:84:29:2C:12:0A:A3:F8:77:FD:AC:71:30:16:8E:F8:8E:F8:E1:B2 X509v3 Authority Key Identifier: keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bf:3d:6f:84:18:fa:1e:4c:4e:5d:f2:b1:94:27:8e:d2:7f: b2:52:33:fa:1d:8f:62:67:d1:86:79:6f:82:2d:4d:a5:40:8b: 0e:25:77:d8:29:77:fd:48:18:ee:d3:13:9a:ac:b4:a6:18:be: 8d:93:8d:20:a3:af:6c:9b:46:2c:2a:b1:65:31:bc:eb:93:7e: 98:05:74:27:82:c6:57:02:d9:c4:b1:16:ca:d3:53:05:d1:ad: 95:dd:70:83:10:67:18:02:b4:08:c3:75:9d:46:64:37:8b:96: fa:e3:2a:21:d0:01:69:18:bf:8d:32:44:b0:9b:66:cd:02:c8: 32:21:4a:bb:5b:6a:01:0b:64:67:87:70:36:74:79:e4:b5:e5: 29:4d:13:06:61:c5:a3:a6:b7:12:d4:af:58:21:9c:6d:92:7d: 21:20:24:72:da:4e:71:ac:3e:17:f9:df:32:4b:d2:5b:8e:fd: 54:f8:f5:02:28:a0:8e:76:28:57:f8:c1:cb:42:31:f7:b0:84: c3:b1:06:95:d2:48:fc:8a:3c:2e:4a:45:6e:e9:df:87:69:f2: 93:4a:c0:b0:f7:83:3c:f1:37:34:cc:f2:1a:e5:b2:1b:20:73: 94:2a:a0:cf:81:c9:5c:7d:7f:f1:e6:f7:fe:83:d0:d7:1f:75: 6a:70:03:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/eW4B8pbPtrMTWwO5U1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4 ZWYyNWIwHhcNMjUxMjIwMDkwMTE2WhcNMjUxMjIxMDkwMTE2WjAzMTEwLwYDVQQD Eyg3ZDg0MjkyYzEyMGFhM2Y4NzdmZGFjNzEzMDE2OGVmODhlZjhlMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPjE+lWn4dNx6MLqldmaiN6CgiPq Yo7QYejcpKf2IOYIrUPZVxWi3VAYnQHqkVGGMwLfQdL8LSPTcj815YiQcHXYHS2B 2aZY+QcojC+dSmutO3at+r/39DZ57Z8Ny4InhWor2YYyfsBywWVaqkiGqIot0hXS jL0K05cYKGaxsbGSDENMy/hW+LEmEvS1ML7O2ur7EuLOeS3FjFKoh8tNxqcZQFAe EBpNV3YLBzeDjB6ItPJAAJkQOTzXNi7DmIwqR9Dy8HtZgAjBy+spSQ7/Hl3rs7Az 2nXOJJj3ME/bhcPlh0dY3Fi0DmASbE74ma7OTCKpeWlZ2q1KhQYFCOlmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2EKSwSCqP4d/2scTAWjviO+OGyMB8GA1UdIwQY MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2 LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKb89b4QY +h5MTl3ysZQnjtJ/slIz+h2PYmfRhnlvgi1NpUCLDiV32Cl3/UgY7tMTmqy0phi+ jZONIKOvbJtGLCqxZTG865N+mAV0J4LGVwLZxLEWytNTBdGtld1wgxBnGAK0CMN1 nUZkN4uW+uMqIdABaRi/jTJEsJtmzQLIMiFKu1tqAQtkZ4dwNnR55LXlKU0TBmHF o6a3EtSvWCGcbZJ9ISAkctpOcaw+F/nfMkvSW479VPj1AiigjnYoV/jBy0Ix97CE w7EGldJI/Io8LkpFbunfh2nyk0rAsPeDPPE3NMzyGuWyGyBzlCqgz4HJXH1/8eb3 /oPQ1x91anADrw== -----END CERTIFICATE-----Generated at Sat Dec 20 16:17:30 2025 by rpki-client