This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json) Hash identifier: +ODD+qFhgU5ScI6CF432mWKQRgHaOnJITIcOJlDVLVw= Subject key identifier: DE:F2:19:07:4C:77:25:7F:C8:96:0D:8E:28:B3:FE:7A:F4:D6:54:C5 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019B3C46D44C645C924892D1D10A05AC72F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft Manifest number: 0219 Signing time: Sat 20 Dec 2025 15:00:33 +0000 Manifest this update: Sat 20 Dec 2025 15:00:33 +0000 Manifest next update: Sun 21 Dec 2025 15:00:33 +0000 Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=) 2: LDoP5Dfl1mKROHPXAg7g52U96wY.roa (hash: zTokmzR2O1Fhpl59w3s7zzWY51T7sYMdoDy4HTwa7WM=) 3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: RRj73t7IR5SDhI7HpaBew7VaVApcXsiQDOkxMjpEM9w=) 4: lur7LLaprCF9vuUpmH2EDiL7-NI.roa (hash: tuwH5AM3gmMcWOq6gRBrX3IhB6gIQd7IZ9AP/juvN3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:d4:4c:64:5c:92:48:92:d1:d1:0a:05:ac:72:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Dec 20 15:00:33 2025 GMT Not After : Dec 21 15:00:33 2025 GMT Subject: CN=def219074c77257fc8960d8e28b3fe7af4d654c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:08:7f:ae:df:4f:32:31:07:53:8d:c9:d7:7d: 1b:24:4c:b8:e6:5b:43:10:2b:f7:2f:8c:3b:6f:a5: dd:7b:ed:31:51:92:0b:05:0d:83:a5:0f:8e:ff:cb: 57:d4:7a:7a:7c:5c:35:bc:05:15:ec:7d:4d:6c:61: 68:b0:61:25:d3:5d:a9:2a:b9:92:18:3c:6b:1d:be: 97:45:84:0e:6c:6d:21:d2:c9:76:3d:07:39:d6:a6: 73:5a:f1:e4:5e:e1:9d:48:a6:64:68:46:4d:ce:6f: be:ac:94:ba:ac:95:c9:69:b5:9f:d0:ae:d5:bb:b2: fc:71:f4:31:2d:54:cd:01:4f:be:94:68:7b:69:1e: 6d:4c:c9:f5:86:ec:a0:89:da:59:71:bd:3c:5a:e0: 91:66:14:ae:5b:08:5d:d9:56:15:24:bf:38:de:ca: 17:6f:e0:c2:1b:32:df:df:3b:45:71:cd:b7:4f:65: b2:57:70:f0:43:ba:5c:24:89:3f:45:37:6a:fa:39: ff:da:8a:50:95:d7:82:2d:de:47:27:93:8f:ff:7a: a5:08:8b:67:df:c5:66:67:9e:18:b3:2d:3a:6e:94: 90:81:b5:b3:0b:65:7e:e4:09:1e:23:f2:90:c0:32: 44:f4:6b:fe:f0:87:65:72:79:ed:2a:31:ca:cc:d4: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F2:19:07:4C:77:25:7F:C8:96:0D:8E:28:B3:FE:7A:F4:D6:54:C5 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:06:31:88:b6:8f:91:bf:29:0d:69:5a:4d:32:d9:10:9a:30: 7b:6d:04:96:64:c2:a8:7b:a5:72:ba:52:3f:55:61:c2:f1:09: 60:5a:8f:64:4f:ae:0d:d5:cf:83:b0:cc:29:a2:92:9c:b2:32: 65:96:15:46:8d:09:81:0c:38:23:f1:9b:d8:df:03:c2:69:3d: 18:96:06:65:80:0e:b9:76:d8:e8:15:dd:30:2a:28:b8:c5:2b: be:13:5c:96:89:15:15:9c:05:e6:92:46:f8:4b:b3:fb:0d:d9: b4:f6:1f:ef:36:0f:c7:98:38:c9:48:5a:e8:fa:f1:23:18:55: 42:42:dd:c8:44:ae:5a:9e:a7:5c:b7:f4:fd:f0:f4:12:b0:01: cb:c1:0d:44:13:66:94:80:62:83:1b:7e:4e:ff:26:b6:34:fb: 4e:89:81:df:aa:de:8a:dc:c1:14:10:69:8d:a9:f8:16:11:0d: f6:b4:ef:8a:36:83:8a:49:cb:9a:65:c2:0e:8b:bd:66:39:44: e5:5c:45:98:97:a8:84:fb:48:b7:4a:1f:ed:23:a6:52:15:9e: fa:1b:8a:74:29:31:87:58:4c:84:6a:ee:90:86:de:60:0c:03: eb:4d:b9:0d:a7:a7:d3:c7:ac:e7:bf:e5:b1:54:04:d5:2b:0c: c9:4c:2d:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RtRMZFySSJLR0QoFrHL5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjUxMjIwMTUwMDMzWhcNMjUxMjIxMTUwMDMzWjAzMTEwLwYDVQQD EyhkZWYyMTkwNzRjNzcyNTdmYzg5NjBkOGUyOGIzZmU3YWY0ZDY1NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywh/rt9PMjEHU43J130bJEy45ltD ECv3L4w7b6Xde+0xUZILBQ2DpQ+O/8tX1Hp6fFw1vAUV7H1NbGFosGEl012pKrmS GDxrHb6XRYQObG0h0sl2PQc51qZzWvHkXuGdSKZkaEZNzm++rJS6rJXJabWf0K7V u7L8cfQxLVTNAU++lGh7aR5tTMn1huygidpZcb08WuCRZhSuWwhd2VYVJL843soX b+DCGzLf3ztFcc23T2WyV3DwQ7pcJIk/RTdq+jn/2opQldeCLd5HJ5OP/3qlCItn 38VmZ54Ysy06bpSQgbWzC2V+5AkeI/KQwDJE9Gv+8IdlcnntKjHKzNR/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN7yGQdMdyV/yJYNjiiz/nr01lTFMB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgYxiLaP kb8pDWlaTTLZEJowe20ElmTCqHulcrpSP1VhwvEJYFqPZE+uDdXPg7DMKaKSnLIy ZZYVRo0JgQw4I/Gb2N8Dwmk9GJYGZYAOuXbY6BXdMCoouMUrvhNclokVFZwF5pJG +Euz+w3ZtPYf7zYPx5g4yUha6PrxIxhVQkLdyESuWp6nXLf0/fD0ErABy8ENRBNm lIBigxt+Tv8mtjT7TomB36reitzBFBBpjan4FhEN9rTvijaDiknLmmXCDou9ZjlE 5VxFmJeohPtIt0of7SOmUhWe+huKdCkxh1hMhGrukIbeYAwD6025Daen08es57/l sVQE1SsMyUwtmg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:59:31 2025 by rpki-client