This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft File: fz4LJ7jk15j5K53hV_HaWkPNSeU.mft (raw, json) Hash identifier: KI5/+J3Mf44Whfu2Va40Ukj+nYaqYjAUx3vdIbnZQcs= Subject key identifier: FF:C3:B6:38:DA:C7:4C:86:6D:A0:20:4F:80:84:31:65:B6:9D:F0:85 Authority key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 Certificate issuer: /CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Certificate serial: 019B45B83C4A087D1C376E32A790AD12A840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft Manifest number: 11C9 Signing time: Mon 22 Dec 2025 11:01:00 +0000 Manifest this update: Mon 22 Dec 2025 11:01:00 +0000 Manifest next update: Tue 23 Dec 2025 11:01:00 +0000 Files and hashes: 1: Bb4Upmts5_u6jsKp_pTK9JEbd5w.roa (hash: /xAZrEK6lSJ0oZp7dB09JdfrnnnAZq0xrYuyvDE06Ps=) 2: L9AVUKjVgjcjBjCh3XKgvGTA1hk.roa (hash: MRdftqqKSbxUqqyJAk4X82kFe7zRmWPvMYuMjvwKsdI=) 3: QV4GiX-_NmB8bXeYFpiPeoYvPgs.roa (hash: ExzZIsYL5CpNKY2xKGueRJzqSweDgaHE92K03gK5p6M=) 4: T3OhLBOAw7e0wv44p_23R0s8qHo.roa (hash: 8DuBuaHSGCknynomXt614XNhRxVs83fH+JHNcKSNBiQ=) 5: fz4LJ7jk15j5K53hV_HaWkPNSeU.crl (hash: mppiHXYCvGbmNSNtJtG3czysdVDHMvnZ6eb7XYf7w7Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:3c:4a:08:7d:1c:37:6e:32:a7:90:ad:12:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5 Validity Not Before: Dec 22 11:01:00 2025 GMT Not After : Dec 23 11:01:00 2025 GMT Subject: CN=ffc3b638dac74c866da0204f80843165b69df085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:bb:44:a5:2f:93:63:78:83:ce:eb:8b:d5: 49:83:fe:2d:c5:6b:d0:ef:a0:c3:a8:2c:4b:08:dc: 8e:1b:b5:a4:41:bc:c8:5f:d3:8a:22:22:c6:53:24: 1e:6f:f6:ad:c2:01:65:47:1b:c5:c4:a5:82:35:7d: 92:69:1e:2f:eb:2d:34:c5:26:cd:a3:94:55:0e:23: a9:f7:8b:13:1a:52:6f:78:f0:41:1e:6c:7b:cc:f6: 2b:e6:8b:1e:52:53:b1:9d:c1:24:b7:2a:c3:bd:f9: 8d:41:6d:d7:e4:29:61:c1:4f:ef:f0:3a:c0:a7:fb: 23:f8:c3:d5:9a:84:3f:b3:bd:37:5d:bd:2f:8d:27: 60:0f:25:9f:03:1c:92:63:2b:59:cb:c2:ab:2a:4f: 0e:c9:d0:9b:74:0f:76:af:42:e9:3e:a8:70:39:0f: 59:d5:fe:b7:d6:95:5d:b7:e6:c4:d0:7a:5f:b0:35: e8:f6:07:3c:7d:8e:85:9c:7c:cb:b5:c7:d7:0f:11: 43:31:23:b9:44:cc:17:99:94:cb:56:14:34:1a:48: b8:32:7d:e2:48:30:f8:93:58:a6:d2:bd:ce:64:eb: 25:44:95:5d:96:6c:b3:2f:cc:9b:da:60:31:d2:d8: ad:5f:c8:cc:8a:e5:89:37:5e:e7:17:69:6a:42:3d: 0a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C3:B6:38:DA:C7:4C:86:6D:A0:20:4F:80:84:31:65:B6:9D:F0:85 X509v3 Authority Key Identifier: keyid:7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:65:33:bd:f4:11:bc:f6:17:18:03:f7:37:f4:be:e8:25:dc: 3e:82:31:89:6e:bc:31:7d:cd:94:9f:da:c6:d9:ae:02:19:25: d0:1e:a4:c1:a1:61:7b:90:82:2d:b3:12:86:b6:1f:6d:d6:a0: 16:48:cc:68:03:1c:65:dc:72:04:4d:2c:8d:14:91:1a:95:b3: b0:6b:99:e2:2d:f8:e6:39:3b:92:f5:3b:4f:6a:8d:b6:c1:0b: 45:54:4e:15:ae:87:09:af:0c:0b:f5:ab:26:85:c0:62:82:0d: f8:64:6c:00:74:0c:73:fa:72:4f:75:ca:0a:a1:0f:d6:ee:53: f1:bf:ab:e4:4d:0d:55:ef:fd:5b:5f:fa:8f:68:f0:0d:b0:46: ea:ef:47:fa:74:2c:1a:a2:08:6f:51:05:88:d3:9b:4f:22:84: 0a:7c:79:ea:f6:5b:b8:48:e4:9d:31:90:00:e1:a2:d2:b3:a3: 1a:db:f7:72:14:01:9d:2c:7d:c1:4c:65:6a:45:15:b0:3b:aa: e1:37:4c:c5:a3:9d:a2:8f:70:a5:e8:6d:2c:4b:ab:5f:3f:b6: 91:60:ab:f4:eb:0f:3b:d2:68:b5:96:54:7b:4d:d9:6b:ac:a2: 41:11:45:2a:5d:32:78:5f:08:33:93:ae:10:c9:95:f1:ee:0b: 6a:6d:98:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuDxKCH0cN24yp5CtEqhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwYjI3YjhlNGQ3OThmOTJiOWRlMTU3ZjFkYTVhNDNj ZDQ5ZTUwHhcNMjUxMjIyMTEwMTAwWhcNMjUxMjIzMTEwMTAwWjAzMTEwLwYDVQQD EyhmZmMzYjYzOGRhYzc0Yzg2NmRhMDIwNGY4MDg0MzE2NWI2OWRmMDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjq7RKUvk2N4g87ri9VJg/4txWvQ 76DDqCxLCNyOG7WkQbzIX9OKIiLGUyQeb/atwgFlRxvFxKWCNX2SaR4v6y00xSbN o5RVDiOp94sTGlJvePBBHmx7zPYr5oseUlOxncEktyrDvfmNQW3X5ClhwU/v8DrA p/sj+MPVmoQ/s703Xb0vjSdgDyWfAxySYytZy8KrKk8OydCbdA92r0LpPqhwOQ9Z 1f631pVdt+bE0HpfsDXo9gc8fY6FnHzLtcfXDxFDMSO5RMwXmZTLVhQ0Gki4Mn3i SDD4k1im0r3OZOslRJVdlmyzL8yb2mAx0titX8jMiuWJN17nF2lqQj0K8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/Dtjjax0yGbaAgT4CEMWW2nfCFMB8GA1UdIwQY MBaAFH8+Cye45NeY+Sud4Vfx2lpDzUnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUt YTQyZWM4Nzc2ZmJiLzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hMGM5YWMtM2E0Ny00ZDZjLWFhMTUtYTQyZWM4Nzc2ZmJi LzEvZno0TEo3amsxNWo1SzUzaFZfSGFXa1BOU2VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWUzvfQR vPYXGAP3N/S+6CXcPoIxiW68MX3NlJ/axtmuAhkl0B6kwaFhe5CCLbMShrYfbdag FkjMaAMcZdxyBE0sjRSRGpWzsGuZ4i345jk7kvU7T2qNtsELRVROFa6HCa8MC/Wr JoXAYoIN+GRsAHQMc/pyT3XKCqEP1u5T8b+r5E0NVe/9W1/6j2jwDbBG6u9H+nQs GqIIb1EFiNObTyKECnx56vZbuEjknTGQAOGi0rOjGtv3chQBnSx9wUxlakUVsDuq 4TdMxaOdoo9wpehtLEurXz+2kWCr9OsPO9JotZZUe03Za6yiQRFFKl0yeF8IM5Ou EMmV8e4Lam2Y9Q== -----END CERTIFICATE-----Generated at Mon Dec 22 14:18:39 2025 by rpki-client