This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json) Hash identifier: eI4tXf1Qo2KmgdcgKqMMQidqEnnNjvwnk9p5N339/V4= Subject key identifier: E2:D1:B1:A6:1D:37:57:3B:C8:B0:6B:1F:ED:6A:AA:BF:71:74:86:0C Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Certificate serial: 019B3BD956BFC4F7996617E01C433D5588C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft Manifest number: 14C8 Signing time: Sat 20 Dec 2025 13:00:57 +0000 Manifest this update: Sat 20 Dec 2025 13:00:57 +0000 Manifest next update: Sun 21 Dec 2025 13:00:57 +0000 Files and hashes: 1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=) 2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: sscCfmig8XYPrkmoVO9alUHWHZmvR/KlPZ97mIhaoDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:56:bf:c4:f7:99:66:17:e0:1c:43:3d:55:88:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Validity Not Before: Dec 20 13:00:57 2025 GMT Not After : Dec 21 13:00:57 2025 GMT Subject: CN=e2d1b1a61d37573bc8b06b1fed6aaabf7174860c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:37:4d:c5:7e:8e:af:f7:f1:89:13:7f:94:77: 6d:69:df:44:01:77:9c:4c:ab:a9:78:67:c0:06:89: 13:bc:c8:5c:05:14:ff:35:8d:37:8d:3b:83:47:e3: 2f:6d:71:ff:1c:73:c5:e0:c3:f9:76:88:ac:3d:59: 2a:b3:06:f9:cd:f7:92:f6:fc:79:cd:5b:6a:c3:a8: e2:91:ff:0e:00:48:35:7a:b3:46:35:f5:d4:4a:01: 80:74:ee:13:de:08:48:68:10:3f:cb:40:8b:18:53: b8:4e:28:2c:06:5c:be:a5:8e:e4:f8:1f:48:1a:39: 68:18:fb:c0:c9:b6:a1:ca:cc:22:a4:91:e3:81:15: d3:09:d9:75:86:18:d2:d2:73:b8:8c:3a:52:59:61: 90:c5:bc:7c:87:88:6d:0b:45:f6:9d:7f:65:38:89: 1e:83:39:0a:02:ff:12:d8:80:31:df:c1:47:dd:2a: 7d:dd:87:2d:b1:30:62:28:66:06:ce:c8:6c:5d:0f: 34:06:22:7f:8a:0f:b4:dd:3e:fd:62:f7:8b:f7:89: 0f:60:eb:56:58:73:cd:70:c2:06:a6:c1:30:fe:38: 47:16:44:ed:50:2f:26:59:9a:19:3b:2d:48:2d:ab: 6a:50:0a:af:d7:ee:cf:c1:60:b3:a0:39:9a:5c:f1: 12:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:D1:B1:A6:1D:37:57:3B:C8:B0:6B:1F:ED:6A:AA:BF:71:74:86:0C X509v3 Authority Key Identifier: keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:34:3e:68:e7:c6:b2:d0:b2:96:25:0c:50:46:c5:dd:42:76: d3:2c:89:76:49:df:5c:0d:ef:50:2b:48:52:23:ba:47:d9:e1: 45:05:f2:be:8c:95:70:b3:fd:aa:d2:e7:b9:ef:11:d9:61:87: 04:f7:15:0e:50:88:45:d4:f1:6b:61:64:58:f1:ae:3e:3f:0b: 73:86:b3:e8:d7:48:46:b9:94:76:81:5c:e1:fe:21:3e:0c:09: c4:a9:3b:b6:e3:2d:01:5c:63:03:3c:5a:45:c2:a4:5d:5e:03: 55:33:36:08:f2:5a:08:73:d8:b6:17:9e:29:eb:5a:08:ad:08: 5b:06:ec:ad:18:03:93:b2:16:b6:bd:40:70:04:22:b1:03:6e: cf:26:0e:19:71:72:df:61:71:d5:bf:41:44:8e:f9:23:4d:61: 61:cd:29:75:27:a1:00:be:2e:4e:ff:07:8e:64:f8:5f:f8:a6: 4f:ca:8a:f5:5d:ce:f3:81:97:a0:4e:00:b4:88:a9:1e:4c:51: 89:e7:8a:c9:0b:95:48:9d:5a:54:08:17:b4:4f:7b:86:ab:6d: b4:bb:8a:7e:35:8c:36:b4:96:35:fd:69:1c:26:a8:5b:ac:83: c7:df:d4:ed:f6:25:6c:65:a7:cb:09:57:eb:d1:35:35:6d:ce: 65:2b:68:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Va/xPeZZhfgHEM9VYjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh NmFhMjQwHhcNMjUxMjIwMTMwMDU3WhcNMjUxMjIxMTMwMDU3WjAzMTEwLwYDVQQD EyhlMmQxYjFhNjFkMzc1NzNiYzhiMDZiMWZlZDZhYWFiZjcxNzQ4NjBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDdNxX6Or/fxiRN/lHdtad9EAXec TKupeGfABokTvMhcBRT/NY03jTuDR+MvbXH/HHPF4MP5doisPVkqswb5zfeS9vx5 zVtqw6jikf8OAEg1erNGNfXUSgGAdO4T3ghIaBA/y0CLGFO4TigsBly+pY7k+B9I GjloGPvAybahyswipJHjgRXTCdl1hhjS0nO4jDpSWWGQxbx8h4htC0X2nX9lOIke gzkKAv8S2IAx38FH3Sp93YctsTBiKGYGzshsXQ80BiJ/ig+03T79YveL94kPYOtW WHPNcMIGpsEw/jhHFkTtUC8mWZoZOy1ILatqUAqv1+7PwWCzoDmaXPESXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLRsaYdN1c7yLBrH+1qqr9xdIYMMB8GA1UdIwQY MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5 LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDQ+aOfG stCyliUMUEbF3UJ20yyJdknfXA3vUCtIUiO6R9nhRQXyvoyVcLP9qtLnue8R2WGH BPcVDlCIRdTxa2FkWPGuPj8Lc4az6NdIRrmUdoFc4f4hPgwJxKk7tuMtAVxjAzxa RcKkXV4DVTM2CPJaCHPYtheeKetaCK0IWwbsrRgDk7IWtr1AcAQisQNuzyYOGXFy 32Fx1b9BRI75I01hYc0pdSehAL4uTv8HjmT4X/imT8qK9V3O84GXoE4AtIipHkxR ieeKyQuVSJ1aVAgXtE97hqtttLuKfjWMNrSWNf1pHCaoW6yDx9/U7fYlbGWnywlX 69E1NW3OZStoMA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:43 2025 by rpki-client