This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json) Hash identifier: C1wiMAdAAFBwOHMiFnP6SPUoYq/eCXxcFM03E94OmgU= Subject key identifier: 64:A5:6E:3E:54:8A:7D:55:19:B0:CA:B6:27:57:88:37:9E:DF:A9:11 Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494 Certificate serial: 019B3DC7BABB2A660AEDD25C8E2C22435B04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft Manifest number: 0850 Signing time: Sat 20 Dec 2025 22:00:58 +0000 Manifest this update: Sat 20 Dec 2025 22:00:58 +0000 Manifest next update: Sun 21 Dec 2025 22:00:58 +0000 Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=) 2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: /KmOBiIadvnuiZo+urndCmA2kEATp/2p6c9uQhc8Hb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:ba:bb:2a:66:0a:ed:d2:5c:8e:2c:22:43:5b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494 Validity Not Before: Dec 20 22:00:58 2025 GMT Not After : Dec 21 22:00:58 2025 GMT Subject: CN=64a56e3e548a7d5519b0cab6275788379edfa911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:f7:af:f3:39:c9:6a:84:9d:87:62:9b:c1: a9:54:6c:b2:5b:dc:f2:02:7a:5e:92:2f:e8:1c:15: c4:77:54:95:ef:1c:4e:6f:f8:54:c2:4f:5e:81:57: ce:40:62:27:85:a7:b0:23:28:68:3e:df:2c:0f:8f: 0f:96:43:7b:a3:da:d9:47:8d:ab:75:d4:0b:b8:50: 58:5d:2e:e6:29:f6:0e:39:f7:c9:87:47:46:08:96: 77:62:27:b4:2c:46:8e:b4:d4:00:77:33:22:7f:53: 9d:23:d2:82:39:23:7a:ed:36:49:18:0c:82:93:6a: 9e:09:bd:37:61:a0:26:df:aa:06:23:d8:ca:9b:9d: 83:d0:b6:c2:f7:1d:76:ad:f4:3c:51:9e:43:1f:42: 30:19:b4:5d:30:a8:bc:13:80:a7:37:e6:15:25:c2: c2:59:68:94:67:9b:81:ff:0d:5b:52:72:2f:16:07: 56:bf:3c:f6:27:83:d1:ca:92:8b:46:36:1c:f8:79: 5e:32:69:9f:11:b0:33:16:89:ad:7d:92:de:94:a0: b2:78:c0:3a:34:eb:7c:82:4e:e3:82:ba:23:ec:11: 0c:e2:ba:bc:b9:76:2c:b8:cc:89:d1:8b:30:92:61: 41:38:e1:61:92:09:ba:14:e9:b1:89:67:e6:13:d1: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:A5:6E:3E:54:8A:7D:55:19:B0:CA:B6:27:57:88:37:9E:DF:A9:11 X509v3 Authority Key Identifier: keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:42:d8:d3:38:80:28:49:8f:4d:c7:cd:5a:2d:23:18:67:36: 7c:c9:1e:a3:d2:b2:ff:ef:3d:9e:b3:af:5d:e8:ab:dd:76:e8: 18:0c:23:63:c3:4e:c2:c0:51:bd:29:a1:3d:e0:a8:df:85:b5: 4f:5a:7d:3f:74:d5:0b:0e:37:49:25:10:1c:01:5d:d5:f0:f4: b6:c2:0d:1d:79:13:1e:9b:f2:3f:d7:48:0a:41:38:06:3d:83: 12:37:0b:03:8c:e7:94:3f:f6:08:6c:c9:33:f3:bf:46:66:c7: 3a:0a:ab:bb:22:ac:00:10:29:19:02:3c:3d:8b:d5:b3:3a:b4: f7:74:49:3e:a2:72:05:26:57:7c:8d:44:73:e6:8c:e7:86:4d: c5:b8:07:39:e4:8f:b8:47:50:94:59:81:d4:bb:72:91:db:00: 1a:10:46:f6:5f:82:b6:60:14:49:fd:6e:d1:9c:8c:36:79:7b: 28:2f:f7:e1:38:72:62:f6:a4:5d:1e:d9:2f:56:f6:fe:88:d2: ba:24:e4:26:cf:fd:75:06:12:ae:58:62:d9:a0:05:9e:02:a6: 02:48:5b:4e:3b:fd:00:67:aa:d5:81:39:da:e9:e2:12:50:54: 1a:a6:d7:02:45:71:cf:cd:4d:ad:ad:e2:e0:6f:3f:ff:77:9d: 5a:42:99:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x7q7KmYK7dJcjiwiQ1sEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1 NWI0OTQwHhcNMjUxMjIwMjIwMDU4WhcNMjUxMjIxMjIwMDU4WjAzMTEwLwYDVQQD Eyg2NGE1NmUzZTU0OGE3ZDU1MTliMGNhYjYyNzU3ODgzNzllZGZhOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO73r/M5yWqEnYdim8GpVGyyW9zy Anpeki/oHBXEd1SV7xxOb/hUwk9egVfOQGInhaewIyhoPt8sD48PlkN7o9rZR42r ddQLuFBYXS7mKfYOOffJh0dGCJZ3Yie0LEaOtNQAdzMif1OdI9KCOSN67TZJGAyC k2qeCb03YaAm36oGI9jKm52D0LbC9x12rfQ8UZ5DH0IwGbRdMKi8E4CnN+YVJcLC WWiUZ5uB/w1bUnIvFgdWvzz2J4PRypKLRjYc+HleMmmfEbAzFomtfZLelKCyeMA6 NOt8gk7jgroj7BEM4rq8uXYsuMyJ0YswkmFBOOFhkgm6FOmxiWfmE9FcDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSlbj5Uin1VGbDKtidXiDee36kRMB8GA1UdIwQY MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZELY0ziA KEmPTcfNWi0jGGc2fMkeo9Ky/+89nrOvXeir3XboGAwjY8NOwsBRvSmhPeCo34W1 T1p9P3TVCw43SSUQHAFd1fD0tsINHXkTHpvyP9dICkE4Bj2DEjcLA4znlD/2CGzJ M/O/RmbHOgqruyKsABApGQI8PYvVszq093RJPqJyBSZXfI1Ec+aM54ZNxbgHOeSP uEdQlFmB1LtykdsAGhBG9l+CtmAUSf1u0ZyMNnl7KC/34ThyYvakXR7ZL1b2/ojS uiTkJs/9dQYSrlhi2aAFngKmAkhbTjv9AGeq1YE52uniElBUGqbXAkVxz81Nra3i 4G8//3edWkKZAw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:43 2025 by rpki-client