This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft File: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft (raw, json) Hash identifier: muOVANx0nZXpIrl9DZ+Mj1HbvyeDYumWZ0B3zBoJiwo= Subject key identifier: 4E:B8:9B:A2:7B:22:27:68:A8:A3:B0:56:AC:CD:46:80:81:53:2A:7C Authority key identifier: 7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 Certificate issuer: /CN=7dad62180863d722aaa4f0881e44378e3c808372 Certificate serial: 019B462706CBC582FEA30BBD17FA90949550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft Manifest number: 029D Signing time: Mon 22 Dec 2025 13:02:01 +0000 Manifest this update: Mon 22 Dec 2025 13:02:01 +0000 Manifest next update: Tue 23 Dec 2025 13:02:01 +0000 Files and hashes: 1: C7GNqkgz9p0zOIQbq1hmHpb1k10.roa (hash: Ih5IZ06o7j/AaerWpaiGsplGlhC586fD+XGd+HNQexM=) 2: fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl (hash: hJTzuigNe8dSjw9uP3N1hluoBn4PjrBjpyyl1RldE1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:06:cb:c5:82:fe:a3:0b:bd:17:fa:90:94:95:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dad62180863d722aaa4f0881e44378e3c808372 Validity Not Before: Dec 22 13:02:01 2025 GMT Not After : Dec 23 13:02:01 2025 GMT Subject: CN=4eb89ba27b222768a8a3b056accd468081532a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:bb:75:f1:d4:57:9a:85:e7:3f:b5:63:dd: c6:bd:16:32:8d:9f:c2:3e:b9:c9:14:be:91:86:19: 9c:c7:45:74:48:ab:f4:df:41:90:2a:2e:16:95:82: f9:a0:c9:02:a4:fd:89:30:30:6f:82:48:0b:33:56: 54:b9:53:4c:51:05:c7:bc:35:ce:ba:b7:72:1f:94: 83:5a:4e:8f:34:03:92:53:29:1f:a2:f5:dc:a0:c5: 08:51:a9:a0:48:11:b7:25:c9:33:a8:4e:d7:0a:c5: a2:a1:0b:2a:73:de:d2:ee:eb:98:01:a1:83:1f:78: c2:33:69:94:20:33:d4:29:83:73:05:37:eb:38:3e: 6b:d4:a9:27:3a:f0:e9:2d:48:9d:19:66:ea:4b:95: a8:38:f3:04:6e:a7:ae:ac:e0:63:99:7c:ff:54:5a: 41:14:a4:f9:67:79:09:70:02:f0:f2:5c:7b:fa:07: 49:9b:9a:ff:9f:02:fd:af:f3:bf:33:29:46:84:19: e9:b2:7b:78:3a:33:c2:55:b9:39:ec:53:6d:10:76: 0d:f8:50:fd:ec:3d:20:21:fc:f2:7e:04:2b:2a:4a: 83:a4:43:31:58:0e:8d:ce:c0:ca:2f:74:1e:e6:81: b9:0f:22:25:d3:c6:a3:be:10:01:9c:5a:0d:8a:da: e2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B8:9B:A2:7B:22:27:68:A8:A3:B0:56:AC:CD:46:80:81:53:2A:7C X509v3 Authority Key Identifier: keyid:7D:AD:62:18:08:63:D7:22:AA:A4:F0:88:1E:44:37:8E:3C:80:83:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80ed98-da84-4e4a-b86c-681862a18f0c/1/fa1iGAhj1yKqpPCIHkQ3jjyAg3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ac:3a:7e:0d:24:e7:85:a0:ca:2f:e2:e6:7a:ab:1e:eb:81: 41:49:57:cf:5e:0b:60:05:83:6e:a4:2f:30:45:d0:90:1c:f0: b8:96:44:61:e0:53:11:9b:74:a2:3d:f5:ed:51:e2:8d:05:6a: 8e:cb:14:cc:af:bc:dd:2a:c9:e4:ed:31:46:68:21:91:94:99: 7e:1e:1b:34:24:8e:b6:66:a7:ed:f0:75:89:3f:a3:9f:8a:a7: 73:fb:a5:b8:45:a1:ec:9f:b0:08:c7:59:81:3b:a6:7b:52:7c: e2:9a:06:c8:20:3f:56:c7:a3:a4:99:bb:5a:93:20:7c:23:ca: 13:77:b6:70:1e:dd:70:2d:66:ae:a3:f5:f1:c8:dc:be:21:b6: 30:ba:1f:f6:46:22:31:0d:04:45:f5:3e:f7:dc:59:a6:fb:c8: 50:71:c0:a9:85:ad:73:28:5e:dc:e4:3d:cb:eb:84:d6:58:28: 06:63:b4:a4:96:5e:d6:8d:62:ba:f5:ca:f1:e0:10:5d:7e:5f: ff:8c:9e:4d:78:6a:8f:ae:1c:9a:49:3a:4c:12:26:23:ab:b8: 16:fa:22:3d:83:e5:45:86:21:a7:79:1f:fd:71:48:10:9b:07: 70:b6:6b:70:43:99:73:46:b3:eb:fe:c2:1d:3b:97:06:2a:57: 22:d5:35:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJwbLxYL+owu9F/qQlJVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYWQ2MjE4MDg2M2Q3MjJhYWE0ZjA4ODFlNDQzNzhlM2M4 MDgzNzIwHhcNMjUxMjIyMTMwMjAxWhcNMjUxMjIzMTMwMjAxWjAzMTEwLwYDVQQD Eyg0ZWI4OWJhMjdiMjIyNzY4YThhM2IwNTZhY2NkNDY4MDgxNTMyYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr027dfHUV5qF5z+1Y93GvRYyjZ/C PrnJFL6Rhhmcx0V0SKv030GQKi4WlYL5oMkCpP2JMDBvgkgLM1ZUuVNMUQXHvDXO urdyH5SDWk6PNAOSUykfovXcoMUIUamgSBG3JckzqE7XCsWioQsqc97S7uuYAaGD H3jCM2mUIDPUKYNzBTfrOD5r1KknOvDpLUidGWbqS5WoOPMEbqeurOBjmXz/VFpB FKT5Z3kJcALw8lx7+gdJm5r/nwL9r/O/MylGhBnpsnt4OjPCVbk57FNtEHYN+FD9 7D0gIfzyfgQrKkqDpEMxWA6NzsDKL3Qe5oG5DyIl08ajvhABnFoNitri/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE64m6J7IidoqKOwVqzNRoCBUyp8MB8GA1UdIwQY MBaAFH2tYhgIY9ciqqTwiB5EN448gINyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmExaUdBaGoxeUtxcFBDSUhrUTNqanlBZzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84MGVkOTgtZGE4NC00ZTRhLWI4NmMt NjgxODYyYTE4ZjBjLzEvZmExaUdBaGoxeUtxcFBDSUhrUTNqanlBZzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84MGVkOTgtZGE4NC00ZTRhLWI4NmMtNjgxODYyYTE4ZjBj LzEvZmExaUdBaGoxeUtxcFBDSUhrUTNqanlBZzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKaw6fg0k 54Wgyi/i5nqrHuuBQUlXz14LYAWDbqQvMEXQkBzwuJZEYeBTEZt0oj317VHijQVq jssUzK+83SrJ5O0xRmghkZSZfh4bNCSOtman7fB1iT+jn4qnc/uluEWh7J+wCMdZ gTume1J84poGyCA/VsejpJm7WpMgfCPKE3e2cB7dcC1mrqP18cjcviG2MLof9kYi MQ0ERfU+99xZpvvIUHHAqYWtcyhe3OQ9y+uE1lgoBmO0pJZe1o1iuvXK8eAQXX5f /4yeTXhqj64cmkk6TBImI6u4FvoiPYPlRYYhp3kf/XFIEJsHcLZrcEOZc0az6/7C HTuXBipXItU1kQ== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:59 2025 by rpki-client