This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft File: fhNA7SMjqShumA9mRpmQqaHjB10.mft (raw, json) Hash identifier: bRJkZn9f7UEYl79PzjIrkEVTSkwY5Z+1rkIF54CLzx0= Subject key identifier: C3:5B:C8:54:EF:4A:11:B3:43:82:15:6C:88:E1:94:69:F3:8A:49:F9 Authority key identifier: 7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D Certificate issuer: /CN=7e1340ed2323a9286e980f66469990a9a1e3075d Certificate serial: 019B72C7EC42D443432AA13EFA903761F29C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft Manifest number: 035C Signing time: Wed 31 Dec 2025 05:01:03 +0000 Manifest this update: Wed 31 Dec 2025 05:01:03 +0000 Manifest next update: Thu 01 Jan 2026 05:01:03 +0000 Files and hashes: 1: NwE-Q3U5NROLLw8YZo5SdVq6prU.roa (hash: 4nK8pCzkjFWGecL8LPoOkleHLxc20BBIlahc8LVNGkQ=) 2: fhNA7SMjqShumA9mRpmQqaHjB10.crl (hash: U9aviLoydq7HA5QucYtrLGCJcqzWZLDfJnxa1nFnINM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:c7:ec:42:d4:43:43:2a:a1:3e:fa:90:37:61:f2:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1340ed2323a9286e980f66469990a9a1e3075d Validity Not Before: Dec 31 05:01:03 2025 GMT Not After : Jan 1 05:01:03 2026 GMT Subject: CN=c35bc854ef4a11b34382156c88e19469f38a49f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:35:05:2c:65:23:48:2f:93:07:c7:0e:7b: 61:12:4c:a2:16:6c:5b:df:2c:56:8f:4d:79:b2:00: 69:eb:19:1f:5a:cd:7b:2f:24:f0:8a:29:74:47:81: 1b:21:50:4b:d4:09:a7:03:27:34:b5:25:a4:9d:4c: ce:e5:e7:b4:2d:f3:bd:26:35:b2:92:d1:e1:e5:e8: d5:80:20:d3:ae:fc:a2:95:82:2a:12:9a:1c:74:85: 3a:d3:84:7e:a8:0f:eb:0d:c4:e7:10:75:b6:52:09: 27:c8:75:a1:38:ff:98:c1:56:4a:dc:69:a6:7a:3d: fa:07:f3:61:d5:93:ea:76:b0:6e:2b:51:5c:98:ac: 4b:bc:1d:05:85:64:2d:d1:10:28:7f:ea:ba:ea:72: b4:fc:be:75:70:ea:c8:8b:28:d8:5c:c4:0e:77:e5: b1:eb:3f:3e:11:04:8b:b2:e8:12:4a:71:ef:d2:1e: f2:db:48:d3:b2:a0:e9:8e:56:13:a3:86:57:7f:27: bf:7c:5e:e0:54:04:b3:c6:d1:97:e4:44:2a:f3:74: e5:d6:1f:c5:46:da:20:14:01:a6:18:37:cf:41:0c: ce:9e:2d:e0:96:2a:60:b5:d3:ad:83:ac:af:6a:bf: 92:af:ba:7b:4c:73:d7:7e:fd:00:90:43:87:2f:41: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5B:C8:54:EF:4A:11:B3:43:82:15:6C:88:E1:94:69:F3:8A:49:F9 X509v3 Authority Key Identifier: keyid:7E:13:40:ED:23:23:A9:28:6E:98:0F:66:46:99:90:A9:A1:E3:07:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNA7SMjqShumA9mRpmQqaHjB10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/19fcc9-cb33-4255-8883-fe027a034449/1/fhNA7SMjqShumA9mRpmQqaHjB10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:c4:ac:20:98:f7:20:20:92:f5:06:21:81:07:9f:5e:c1:49: e3:7d:71:ee:a7:3f:d8:66:9a:85:76:bd:24:f1:3d:ba:ae:9c: f2:c0:8f:92:9f:ae:d7:d3:f1:a2:30:7d:df:de:68:43:ad:cd: db:3f:37:a0:52:aa:76:b2:4b:17:70:e0:c3:0b:7a:57:81:78: bb:65:2d:3b:95:66:4b:c4:76:e7:ac:61:10:ca:ec:39:c0:ee: bf:47:47:0d:4b:7e:39:88:a1:33:c2:c3:04:b9:8b:36:6a:85: a3:b1:67:cf:1b:4a:18:a9:11:25:75:25:7d:d5:38:03:31:94: de:85:57:ed:6e:5d:6b:61:70:3e:f6:cb:de:f9:59:75:b5:fa: d7:19:63:fb:09:ef:a6:0f:a6:ed:16:d6:da:85:96:8e:45:09: 48:b8:e6:66:15:fa:d2:61:42:74:bc:34:fe:0d:cb:d4:f6:8c: 01:29:d6:2f:c2:7e:8b:ca:bb:ba:c5:f2:80:d4:81:1f:30:38: 6d:8b:5d:8d:f9:ed:bf:53:b5:04:60:f7:2e:15:a1:da:28:4a: 6d:83:64:e9:58:a0:45:94:f8:5e:88:db:c8:b7:ab:1e:16:9d: da:5e:01:f0:17:d6:f2:c0:a8:42:b3:45:52:10:82:9a:b7:ea: 9a:66:8f:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyx+xC1ENDKqE++pA3YfKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MGVkMjMyM2E5Mjg2ZTk4MGY2NjQ2OTk5MGE5YTFl MzA3NWQwHhcNMjUxMjMxMDUwMTAzWhcNMjYwMTAxMDUwMTAzWjAzMTEwLwYDVQQD EyhjMzViYzg1NGVmNGExMWIzNDM4MjE1NmM4OGUxOTQ2OWYzOGE0OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY41BSxlI0gvkwfHDnthEkyiFmxb 3yxWj015sgBp6xkfWs17LyTwiil0R4EbIVBL1AmnAyc0tSWknUzO5ee0LfO9JjWy ktHh5ejVgCDTrvyilYIqEpocdIU604R+qA/rDcTnEHW2UgknyHWhOP+YwVZK3Gmm ej36B/Nh1ZPqdrBuK1FcmKxLvB0FhWQt0RAof+q66nK0/L51cOrIiyjYXMQOd+Wx 6z8+EQSLsugSSnHv0h7y20jTsqDpjlYTo4ZXfye/fF7gVASzxtGX5EQq83Tl1h/F RtogFAGmGDfPQQzOni3glipgtdOtg6yvar+Sr7p7THPXfv0AkEOHL0FnEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNbyFTvShGzQ4IVbIjhlGnzikn5MB8GA1UdIwQY MBaAFH4TQO0jI6kobpgPZkaZkKmh4wddMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMt ZmUwMjdhMDM0NDQ5LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8xOWZjYzktY2IzMy00MjU1LTg4ODMtZmUwMjdhMDM0NDQ5 LzEvZmhOQTdTTWpxU2h1bUE5bVJwbVFxYUhqQjEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsSsIJj3 ICCS9QYhgQefXsFJ431x7qc/2GaahXa9JPE9uq6c8sCPkp+u19PxojB9395oQ63N 2z83oFKqdrJLF3Dgwwt6V4F4u2UtO5VmS8R256xhEMrsOcDuv0dHDUt+OYihM8LD BLmLNmqFo7FnzxtKGKkRJXUlfdU4AzGU3oVX7W5da2FwPvbL3vlZdbX61xlj+wnv pg+m7RbW2oWWjkUJSLjmZhX60mFCdLw0/g3L1PaMASnWL8J+i8q7usXygNSBHzA4 bYtdjfntv1O1BGD3LhWh2ihKbYNk6VigRZT4XojbyLerHhad2l4B8BfW8sCoQrNF UhCCmrfqmmaP3g== -----END CERTIFICATE-----Generated at Wed Dec 31 11:55:21 2025 by rpki-client