This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json) Hash identifier: 0fiFLbpPwpGYFKt+sPxyhu54aMePavuF+6oJpbFEsFE= Subject key identifier: 7A:F7:6B:0A:34:09:50:82:6D:25:23:4B:A8:19:B4:36:CA:FB:CB:29 Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Certificate serial: 019B3A2222655841F43CEF3F0F8E9543C485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft Manifest number: 09E6 Signing time: Sat 20 Dec 2025 05:01:14 +0000 Manifest this update: Sat 20 Dec 2025 05:01:14 +0000 Manifest next update: Sun 21 Dec 2025 05:01:14 +0000 Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=) 2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=) 3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: X1SXu8CBaiuRD39KNw6jn4syJUfTuHtW34WZ0qCapR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:22:65:58:41:f4:3c:ef:3f:0f:8e:95:43:c4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Validity Not Before: Dec 20 05:01:14 2025 GMT Not After : Dec 21 05:01:14 2025 GMT Subject: CN=7af76b0a340950826d25234ba819b436cafbcb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:07:e0:00:f1:69:0e:48:39:9b:81:27:49: 25:9c:20:e2:08:41:6f:6d:c6:32:0e:e3:12:e3:69: 89:43:75:d5:f9:9e:c7:09:24:39:59:13:c5:76:18: 27:3b:eb:9d:01:d2:a1:cb:86:9c:6e:99:cc:5c:c7: 22:35:7f:5c:ba:11:69:8b:0e:aa:85:42:71:2f:d1: 96:4c:7a:fc:c8:38:af:fa:51:fb:db:58:04:6a:08: 2c:f6:06:24:6b:e1:2b:e8:64:63:ba:fa:75:58:5a: 1e:8b:6c:74:93:ab:f0:e5:aa:d6:ae:66:c6:cf:7b: 1f:5c:d5:93:e0:b6:12:2b:dc:05:b7:e1:db:6d:c5: 93:5a:5b:40:8b:85:1a:98:2c:d2:83:4c:ac:f7:fd: 74:38:27:dd:0f:9f:0b:37:db:56:0f:3e:64:4f:c0: ce:ce:24:91:24:53:75:77:99:20:5a:ba:41:34:b1: 0c:77:b5:ce:1c:e0:af:03:89:9e:2f:b9:2a:65:61: e8:71:7b:8b:9f:12:79:4d:b9:f0:f3:ba:c6:5a:07: 4e:33:78:83:ce:da:2b:13:b1:a8:d8:99:18:0e:fd: 4d:75:a7:95:1e:e7:05:08:aa:43:fe:fc:d7:17:26: ac:93:32:35:01:73:05:45:70:ab:67:2a:0d:27:4e: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F7:6B:0A:34:09:50:82:6D:25:23:4B:A8:19:B4:36:CA:FB:CB:29 X509v3 Authority Key Identifier: keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:ba:00:19:78:ad:a1:00:ae:b8:a7:8f:87:4a:ab:66:5e:b1: 39:61:0a:6f:e0:ad:8b:93:d5:33:57:67:02:e4:e0:16:7a:ba: 5c:db:b3:53:71:50:78:18:92:f2:cd:fb:fb:c1:31:56:45:20: 5c:ce:3f:72:81:1d:df:5f:be:f1:20:65:86:9e:06:3e:5a:5b: 79:84:30:67:cd:d6:3d:80:9b:8c:01:6a:e4:fc:46:84:d9:1d: fa:94:08:3f:c0:8d:8c:5c:ca:b9:74:b4:ee:c6:40:ed:4d:62: 53:7f:a3:e3:b0:d5:6f:cd:a2:00:92:70:89:6f:91:54:49:db: f4:74:5f:04:ed:b2:ef:cd:9e:f2:da:43:d8:b8:d0:25:2a:d2: 90:b8:5d:55:af:fe:c1:d6:35:fd:c2:f3:4e:f3:5b:bb:bb:71: 03:db:24:24:25:e9:4a:5d:db:f4:87:7d:de:29:3a:67:08:c9: c3:a9:1e:fb:9e:d1:43:42:ef:c1:82:4f:b1:8c:2f:6f:71:d5: 42:8f:f4:d1:d3:62:25:75:55:6b:a6:85:cb:0f:1c:4d:e3:2f: 37:92:24:3a:3b:70:eb:78:cd:3b:3d:72:bd:db:8a:61:c3:8b: 44:cc:38:50:7d:de:46:31:b9:b0:cc:76:a8:25:e5:62:3e:e9: 50:f3:53:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IiJlWEH0PO8/D46VQ8SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl MGIxODMwHhcNMjUxMjIwMDUwMTE0WhcNMjUxMjIxMDUwMTE0WjAzMTEwLwYDVQQD Eyg3YWY3NmIwYTM0MDk1MDgyNmQyNTIzNGJhODE5YjQzNmNhZmJjYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mwH4ADxaQ5IOZuBJ0klnCDiCEFv bcYyDuMS42mJQ3XV+Z7HCSQ5WRPFdhgnO+udAdKhy4acbpnMXMciNX9cuhFpiw6q hUJxL9GWTHr8yDiv+lH721gEaggs9gYka+Er6GRjuvp1WFoei2x0k6vw5arWrmbG z3sfXNWT4LYSK9wFt+HbbcWTWltAi4UamCzSg0ys9/10OCfdD58LN9tWDz5kT8DO ziSRJFN1d5kgWrpBNLEMd7XOHOCvA4meL7kqZWHocXuLnxJ5Tbnw87rGWgdOM3iD ztorE7Go2JkYDv1NdaeVHucFCKpD/vzXFyaskzI1AXMFRXCrZyoNJ05PXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr3awo0CVCCbSUjS6gZtDbK+8spMB8GA1UdIwQY MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2 LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7oAGXit oQCuuKePh0qrZl6xOWEKb+Cti5PVM1dnAuTgFnq6XNuzU3FQeBiS8s37+8ExVkUg XM4/coEd31++8SBlhp4GPlpbeYQwZ83WPYCbjAFq5PxGhNkd+pQIP8CNjFzKuXS0 7sZA7U1iU3+j47DVb82iAJJwiW+RVEnb9HRfBO2y782e8tpD2LjQJSrSkLhdVa/+ wdY1/cLzTvNbu7txA9skJCXpSl3b9Id93ik6ZwjJw6ke+57RQ0LvwYJPsYwvb3HV Qo/00dNiJXVVa6aFyw8cTeMvN5IkOjtw63jNOz1yvduKYcOLRMw4UH3eRjG5sMx2 qCXlYj7pUPNTRQ== -----END CERTIFICATE-----Generated at Sat Dec 20 14:12:21 2025 by rpki-client