This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft File: fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json) Hash identifier: FugJqZO71HxPrueDGazvemjvfDZUbza42GDTCyy7QTQ= Subject key identifier: B7:33:A6:C9:D1:0C:03:C6:BF:4E:CD:ED:0C:27:DF:E2:C9:F6:18:4C Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63 Certificate issuer: /CN=7e909fea81e398fed93049dd7a007efd69735563 Certificate serial: 019B2B8B268333938C5EA83E911243F46311 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft Manifest number: 0D72 Signing time: Wed 17 Dec 2025 09:01:37 +0000 Manifest this update: Wed 17 Dec 2025 09:01:37 +0000 Manifest next update: Thu 18 Dec 2025 09:01:37 +0000 Files and hashes: 1: WCe1OXd2fAiJz2bGRLY2dHMiVAs.roa (hash: XasTDlDBbIh1cL69G7L/yxnH5MsXPkwslxjCA22OVkQ=) 2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: QzlJzZJZNFTIRC6tSZCTPjeAcFoCy2RCRIOYoEeeCBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8b:26:83:33:93:8c:5e:a8:3e:91:12:43:f4:63:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563 Validity Not Before: Dec 17 09:01:37 2025 GMT Not After : Dec 18 09:01:37 2025 GMT Subject: CN=b733a6c9d10c03c6bf4ecded0c27dfe2c9f6184c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:62:a5:dd:6b:5e:06:a8:e1:63:19:3d:8a:fe: c7:25:92:dd:21:64:71:47:17:f3:68:f5:50:3d:d6: 78:07:29:c6:15:58:5e:d2:70:89:04:78:90:2d:d3: 64:22:50:aa:5d:ee:cb:a9:65:e3:75:ff:33:10:b9: 06:b1:ee:eb:81:80:ba:47:58:9e:fb:4b:89:2d:7a: 9f:d2:28:99:d7:25:7c:b3:18:5b:3a:60:86:e6:fe: c5:14:d9:47:07:f1:20:58:2a:84:67:ea:e1:20:ab: c7:d1:a1:fb:d9:45:8b:fb:0d:a4:6a:b2:73:0b:d3: 06:0a:da:a1:cc:c7:d4:d6:67:da:8f:a6:b0:a4:ec: 67:cf:60:1b:71:c7:e0:79:b4:ba:66:75:d6:bc:16: b9:a4:91:a6:2f:b7:6d:8e:56:84:c6:5e:c4:b9:d9: 7d:0c:d5:02:17:6a:7e:cd:e7:35:ea:c7:04:c6:b9: f7:ed:d8:4e:6d:5f:ef:83:b1:5a:2d:62:e9:ba:f2: 58:e7:bc:c7:9c:0d:f1:fb:aa:47:84:b6:1a:cd:b1: 5c:75:d9:83:c9:7e:5f:57:01:e5:a4:44:b9:ec:ea: ee:b6:da:1e:97:8b:bc:f2:c3:48:1c:a6:c1:8f:18: e1:4c:05:bd:32:0a:b0:1c:24:94:85:37:a4:5f:08: 9c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:33:A6:C9:D1:0C:03:C6:BF:4E:CD:ED:0C:27:DF:E2:C9:F6:18:4C X509v3 Authority Key Identifier: keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:25:f2:f9:e6:7d:3c:07:48:a6:80:3d:e6:30:e7:58:80:cb: 7f:9a:02:95:5b:7b:57:ab:55:a9:ae:e5:98:26:bb:bb:9f:bb: 72:2d:6e:92:c4:01:57:ea:35:4c:1f:fd:4e:93:58:10:c1:62: 12:d9:8f:cd:07:1c:79:a3:62:42:d6:2d:d9:dd:73:47:5f:8f: 6c:0a:d6:90:ea:6a:4e:71:85:26:a4:72:ed:8d:42:a5:f6:4e: 48:95:fb:45:e3:88:33:5f:e8:12:ab:1c:74:6d:d2:b3:96:a4: 5e:a6:53:40:ce:67:c7:f7:5c:3b:8d:4a:1f:2e:2b:71:fc:82: 71:55:df:26:92:9f:e3:a7:92:d3:da:c8:5e:ce:14:e3:22:6a: 9b:28:13:79:7c:60:f1:97:52:e8:30:69:a0:ac:ac:78:d9:4e: e9:83:ff:8e:87:d6:9f:af:51:56:b7:ab:d3:b2:28:af:bd:42: 1d:92:8f:20:07:c5:0a:63:a1:99:93:1e:d2:76:d6:49:12:f6: 51:3b:65:77:cf:89:40:c8:7e:04:a4:88:3e:41:16:19:38:02: 7a:65:a8:f9:dd:5a:2a:66:62:ef:e8:89:03:d4:f4:e3:b5:85: 82:54:f4:28:ab:42:1c:15:49:97:46:27:c7:ed:82:56:dc:d3: 29:50:27:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriyaDM5OMXqg+kRJD9GMRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTA5ZmVhODFlMzk4ZmVkOTMwNDlkZDdhMDA3ZWZkNjk3 MzU1NjMwHhcNMjUxMjE3MDkwMTM3WhcNMjUxMjE4MDkwMTM3WjAzMTEwLwYDVQQD EyhiNzMzYTZjOWQxMGMwM2M2YmY0ZWNkZWQwYzI3ZGZlMmM5ZjYxODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWKl3WteBqjhYxk9iv7HJZLdIWRx RxfzaPVQPdZ4BynGFVhe0nCJBHiQLdNkIlCqXe7LqWXjdf8zELkGse7rgYC6R1ie +0uJLXqf0iiZ1yV8sxhbOmCG5v7FFNlHB/EgWCqEZ+rhIKvH0aH72UWL+w2karJz C9MGCtqhzMfU1mfaj6awpOxnz2AbccfgebS6ZnXWvBa5pJGmL7dtjlaExl7Eudl9 DNUCF2p+zec16scExrn37dhObV/vg7FaLWLpuvJY57zHnA3x+6pHhLYazbFcddmD yX5fVwHlpES57Oruttoel4u88sNIHKbBjxjhTAW9MgqwHCSUhTekXwic6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLczpsnRDAPGv07N7Qwn3+LJ9hhMMB8GA1UdIwQY MBaAFH6Qn+qB45j+2TBJ3XoAfv1pc1VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYt ODM3MDYzNzhjNTc2LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYtODM3MDYzNzhjNTc2 LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtiXy+eZ9 PAdIpoA95jDnWIDLf5oClVt7V6tVqa7lmCa7u5+7ci1uksQBV+o1TB/9TpNYEMFi EtmPzQcceaNiQtYt2d1zR1+PbArWkOpqTnGFJqRy7Y1CpfZOSJX7ReOIM1/oEqsc dG3Ss5akXqZTQM5nx/dcO41KHy4rcfyCcVXfJpKf46eS09rIXs4U4yJqmygTeXxg 8ZdS6DBpoKyseNlO6YP/jofWn69RVrer07Ior71CHZKPIAfFCmOhmZMe0nbWSRL2 UTtld8+JQMh+BKSIPkEWGTgCemWo+d1aKmZi7+iJA9T047WFglT0KKtCHBVJl0Yn x+2CVtzTKVAnMg== -----END CERTIFICATE-----Generated at Wed Dec 17 16:49:31 2025 by rpki-client