This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft File: fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft (raw, json) Hash identifier: WobhjjkpYHqSES1uaMQF0AYA0rTn5wpwhmDqyA+tc9M= Subject key identifier: 12:C4:CC:B6:E8:2D:3B:35:8B:3C:CB:6D:B7:64:E3:96:26:B0:4D:95 Authority key identifier: 7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 Certificate issuer: /CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Certificate serial: 019B39B43813C3E9CEA22DC2F27FC00D8007 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft Manifest number: 173E Signing time: Sat 20 Dec 2025 03:01:10 +0000 Manifest this update: Sat 20 Dec 2025 03:01:10 +0000 Manifest next update: Sun 21 Dec 2025 03:01:10 +0000 Files and hashes: 1: AA9TTBVuFWslCy5vvjpWPMn0jio.roa (hash: 4UWYCe5hkyOUoqYXrj1KodMiu0qNyY7mLnSAc6dVCQ0=) 2: f1fNFkBRt-hhuPfzrsFbbzHHoAw.roa (hash: TUaEgYF8HOYQXV5OcuKeh9gLJYrnrHID59aFsya07FY=) 3: fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl (hash: JjzqKlsTzO5DCeDroGsc/gBbs9XQVMAQrTsV56dZNBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b4:38:13:c3:e9:ce:a2:2d:c2:f2:7f:c0:0d:80:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f03a1f8c334fdbf4b78def0c592ff0490ddf4b0 Validity Not Before: Dec 20 03:01:10 2025 GMT Not After : Dec 21 03:01:10 2025 GMT Subject: CN=12c4ccb6e82d3b358b3ccb6db764e39626b04d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:f1:ac:3b:37:7b:57:f3:72:9a:0c:69:b6: aa:e7:7b:83:37:01:fc:e6:ec:0c:09:e5:bb:8c:14: 83:5f:2f:a6:62:e8:26:6c:f6:e3:20:71:39:6a:0d: 3a:8f:03:7b:ba:81:cf:f4:b4:84:04:66:a1:e3:ea: f1:c6:c6:84:37:02:cf:cb:a6:c8:50:cb:12:f1:29: 22:92:31:2b:8d:d2:ca:43:82:53:b1:92:b4:ba:c9: f5:b3:79:0a:5e:66:38:3b:1a:4a:b1:6b:23:5a:db: 07:be:03:e0:27:1b:13:12:43:fe:97:62:9b:f7:8d: 16:05:81:82:a4:90:0b:08:92:cf:63:a9:c1:57:22: 7a:dd:d1:a1:8b:58:d3:16:4f:5b:11:96:4c:4b:29: 93:69:63:ca:b1:6e:de:c5:ec:4a:37:aa:55:59:68: 41:a7:3b:fa:d7:52:76:36:d1:84:60:40:e2:ab:d0: 24:3a:59:32:68:9b:79:c5:04:93:3a:66:08:c1:d1: 01:5c:51:ee:ef:48:8d:48:b3:ba:61:09:34:44:0d: 18:b9:a3:cf:d4:63:ee:e9:43:6d:1b:89:4b:db:05: f0:18:65:c5:51:3e:6e:ea:43:dd:3d:42:f3:8c:f7: fd:91:cb:ce:5d:1d:38:40:df:eb:d0:d5:ef:a8:7d: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C4:CC:B6:E8:2D:3B:35:8B:3C:CB:6D:B7:64:E3:96:26:B0:4D:95 X509v3 Authority Key Identifier: keyid:7F:03:A1:F8:C3:34:FD:BF:4B:78:DE:F0:C5:92:FF:04:90:DD:F4:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fwOh-MM0_b9LeN7wxZL_BJDd9LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/3fe1a0-c6fd-4bc4-aae1-9ee006942b4b/1/fwOh-MM0_b9LeN7wxZL_BJDd9LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:29:40:e5:6b:14:a6:3f:55:90:07:5f:3d:cc:41:e0:58: f1:ae:5a:46:a1:15:b5:5f:df:33:6e:34:af:93:ba:4a:3e:cd: 00:b9:93:5e:8c:f2:a3:8a:ac:5a:08:e0:9a:84:59:ad:5b:b5: 46:88:06:ac:9d:36:be:ac:77:f0:be:53:87:bf:43:87:01:4d: ab:97:2d:1d:7b:7d:49:e5:a5:93:73:5c:79:f4:44:91:68:f5: f7:e2:3a:2a:df:81:2a:f8:ba:4c:79:bb:58:69:e2:a8:05:89: 11:dc:c5:e9:a6:35:f0:f7:b8:2c:1d:67:a5:80:a8:2b:03:dd: 0e:4e:da:90:94:fa:ed:74:7b:fe:85:e0:cf:e6:75:f4:88:c7: 9c:b0:8c:34:7d:4f:f6:85:d0:3c:61:c6:91:bd:67:22:a5:4d: 47:cf:58:2b:33:b2:e8:dc:11:05:eb:75:80:77:06:22:7a:47: 03:4c:a5:d0:cb:e5:d5:3b:1d:aa:a0:01:ed:d4:5d:c0:36:35: c8:c9:0e:5a:bb:87:c0:53:6d:78:7f:19:e7:92:18:de:3e:1e: 5b:b3:97:e0:1e:73:4b:ea:12:a8:9c:23:52:7c:04:9c:33:5b: a3:1b:4e:0f:de:1b:3b:71:0d:a3:70:d3:3e:c3:af:f3:3f:40: b9:e7:08:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5tDgTw+nOoi3C8n/ADYAHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMDNhMWY4YzMzNGZkYmY0Yjc4ZGVmMGM1OTJmZjA0OTBk ZGY0YjAwHhcNMjUxMjIwMDMwMTEwWhcNMjUxMjIxMDMwMTEwWjAzMTEwLwYDVQQD EygxMmM0Y2NiNmU4MmQzYjM1OGIzY2NiNmRiNzY0ZTM5NjI2YjA0ZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroHxrDs3e1fzcpoMabaq53uDNwH8 5uwMCeW7jBSDXy+mYugmbPbjIHE5ag06jwN7uoHP9LSEBGah4+rxxsaENwLPy6bI UMsS8SkikjErjdLKQ4JTsZK0usn1s3kKXmY4OxpKsWsjWtsHvgPgJxsTEkP+l2Kb 940WBYGCpJALCJLPY6nBVyJ63dGhi1jTFk9bEZZMSymTaWPKsW7exexKN6pVWWhB pzv611J2NtGEYEDiq9AkOlkyaJt5xQSTOmYIwdEBXFHu70iNSLO6YQk0RA0YuaPP 1GPu6UNtG4lL2wXwGGXFUT5u6kPdPULzjPf9kcvOXR04QN/r0NXvqH2pGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLEzLboLTs1izzLbbdk45YmsE2VMB8GA1UdIwQY MBaAFH8DofjDNP2/S3je8MWS/wSQ3fSwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEt OWVlMDA2OTQyYjRiLzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8zZmUxYTAtYzZmZC00YmM0LWFhZTEtOWVlMDA2OTQyYjRi LzEvZndPaC1NTTBfYjlMZU43d3haTF9CSkRkOUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU0pQOVr FKY/VZAHXz3MQeBY8a5aRqEVtV/fM240r5O6Sj7NALmTXozyo4qsWgjgmoRZrVu1 RogGrJ02vqx38L5Th79DhwFNq5ctHXt9SeWlk3NcefREkWj19+I6Kt+BKvi6THm7 WGniqAWJEdzF6aY18Pe4LB1npYCoKwPdDk7akJT67XR7/oXgz+Z19IjHnLCMNH1P 9oXQPGHGkb1nIqVNR89YKzOy6NwRBet1gHcGInpHA0yl0Mvl1TsdqqAB7dRdwDY1 yMkOWruHwFNteH8Z55IY3j4eW7OX4B5zS+oSqJwjUnwEnDNboxtOD94bO3ENo3DT PsOv8z9AuecIdg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:02:38 2025 by rpki-client