This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json) Hash identifier: 43MPv9nXJJUMFjUsJq8Jbvl/uMK+KM1VJxPV5cSOnj0= Subject key identifier: 6B:08:14:1F:E9:93:AA:31:45:CF:2F:C0:91:EE:C1:62:92:36:D2:56 Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Certificate serial: 019B3D5A3CC0F825D412747DDCE0537CFD7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=) 2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: eFlsagsQ4s0T755Tsnebb8Pa4vws6WfkZRm8Y9TVJ8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3c:c0:f8:25:d4:12:74:7d:dc:e0:53:7c:fd:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16 Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=6b08141fe993aa3145cf2fc091eec1629236d256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:c2:d2:ff:08:0e:42:eb:bd:86:b4:2b:fb: 21:83:6d:78:d9:d5:b9:ec:86:2c:90:26:d3:4a:ab: fc:31:0a:02:ed:9f:01:c5:c2:49:2f:5f:66:fd:4f: b4:58:84:c7:c9:5d:e6:2d:48:55:a4:74:32:8d:dd: 92:09:55:e5:46:c2:2c:af:24:11:e3:d8:03:e7:9e: 1b:e5:28:18:61:6b:47:a1:5a:76:d6:9b:87:55:d6: 0e:49:91:75:fe:af:6f:a4:7a:7c:d9:b8:5e:16:6b: 34:11:ec:94:61:b4:b8:08:ba:25:95:a7:25:63:3a: f5:2e:21:84:93:ab:58:4e:34:16:5f:2e:14:74:06: f8:a9:ee:8a:43:3e:6a:a6:9c:4e:89:c8:b5:7a:81: cc:9b:16:7a:f3:7a:18:c4:17:cf:7c:80:8b:a3:e4: 1f:25:9d:1c:8a:82:5c:a6:56:b6:08:46:0d:52:a8: 85:ef:db:25:0c:d9:1c:1d:89:ba:42:5b:a9:d0:e9: 6e:2b:d4:71:ed:77:35:29:02:19:e1:b0:4f:22:2d: db:a7:ea:35:62:d6:ae:b8:29:13:4b:7e:5f:cc:8d: 1c:d4:a8:1c:f9:fe:58:31:60:3b:fd:c5:42:db:fc: 40:e7:e2:81:f0:ef:dd:6a:8d:ff:f0:43:1e:b6:7e: bd:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:08:14:1F:E9:93:AA:31:45:CF:2F:C0:91:EE:C1:62:92:36:D2:56 X509v3 Authority Key Identifier: keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:e6:11:93:b5:3a:0e:01:a6:c9:60:1e:53:7a:3c:cf:22:9a: 60:49:dc:47:f4:f3:db:00:3d:c9:e3:62:83:a5:b0:ed:b5:22: d5:4d:b8:2e:e2:b8:f4:6d:2d:e9:c3:99:de:76:ee:9b:9d:90: 07:01:07:c6:09:b5:89:6c:e4:53:eb:15:b4:99:3f:ef:db:5a: f0:76:27:87:3d:32:8c:09:06:de:c1:b8:e2:22:e0:85:ea:ac: b3:eb:ea:79:2d:05:6d:b1:c7:9a:f8:e4:7e:ff:c4:d3:de:84: 6c:00:af:28:4c:c6:1d:6d:0a:1d:a6:d1:30:ff:38:9a:30:a4: 25:71:f0:de:a0:5b:4e:e7:fd:d0:4a:dd:36:91:ad:73:02:c9: ad:55:41:ca:c3:24:a3:4f:56:aa:fa:19:81:85:8d:e4:88:26: ad:0b:1c:22:fa:80:96:20:9f:0c:7f:a9:a6:6e:95:2e:b2:73: 7f:35:cd:17:46:bb:6b:e4:0a:c3:0c:e3:37:fe:71:01:d6:dc: b7:76:56:25:6c:35:fb:2c:ef:18:fb:06:b8:db:a5:67:f6:8a: 35:a7:bd:8e:aa:bb:e8:d9:1d:15:3d:bb:30:1f:cd:ab:92:ea: 44:ef:30:5b:be:5b:fe:e2:71:e1:66:87:64:ff:eb:73:e9:ac: 13:34:3a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WjzA+CXUEnR93OBTfP1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTM0MTRiZGMyMzEyNDAwZGZhOWY1MDY1MGQ1MWVlMDQ0 M2RmMTYwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD Eyg2YjA4MTQxZmU5OTNhYTMxNDVjZjJmYzA5MWVlYzE2MjkyMzZkMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWfC0v8IDkLrvYa0K/shg2142dW5 7IYskCbTSqv8MQoC7Z8BxcJJL19m/U+0WITHyV3mLUhVpHQyjd2SCVXlRsIsryQR 49gD554b5SgYYWtHoVp21puHVdYOSZF1/q9vpHp82bheFms0EeyUYbS4CLollacl Yzr1LiGEk6tYTjQWXy4UdAb4qe6KQz5qppxOici1eoHMmxZ683oYxBfPfICLo+Qf JZ0cioJcpla2CEYNUqiF79slDNkcHYm6Qlup0OluK9Rx7Xc1KQIZ4bBPIi3bp+o1 YtauuCkTS35fzI0c1Kgc+f5YMWA7/cVC2/xA5+KB8O/dao3/8EMetn69JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsIFB/pk6oxRc8vwJHuwWKSNtJWMB8GA1UdIwQY MBaAFH4TQUvcIxJADfqfUGUNUe4EQ98WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQt MDRmY2VjYWQ3MGVjLzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi80NGMzNjUtNmNlZC00NWQ5LTg2NWQtMDRmY2VjYWQ3MGVj LzEvZmhOQlM5d2pFa0FOLXA5UVpRMVI3Z1JEM3hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAauYRk7U6 DgGmyWAeU3o8zyKaYEncR/Tz2wA9yeNig6Ww7bUi1U24LuK49G0t6cOZ3nbum52Q BwEHxgm1iWzkU+sVtJk/79ta8HYnhz0yjAkG3sG44iLgheqss+vqeS0FbbHHmvjk fv/E096EbACvKEzGHW0KHabRMP84mjCkJXHw3qBbTuf90ErdNpGtcwLJrVVBysMk o09WqvoZgYWN5IgmrQscIvqAliCfDH+ppm6VLrJzfzXNF0a7a+QKwwzjN/5xAdbc t3ZWJWw1+yzvGPsGuNulZ/aKNae9jqq76NkdFT27MB/Nq5LqRO8wW75b/uJx4WaH ZP/rc+msEzQ6rQ== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:26 2025 by rpki-client