This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json) Hash identifier: W4j0+r5HbhSI4oDO84ns0382qB+/a5NwYrXKi5dl5L0= Subject key identifier: 42:74:0A:04:C4:AC:8B:0B:2C:28:7D:87:C2:06:DE:AF:8B:85:8E:18 Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9 Certificate serial: 019B54F4BAD2ED402C07B6C188B863204C98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 10:01:23 +0000 Manifest this update: Thu 25 Dec 2025 10:01:23 +0000 Manifest next update: Fri 26 Dec 2025 10:01:23 +0000 Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=) 2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: PKG45ZM0/8Lpr2RHTOQ/Uwq7BsdKyAEexJH62VLjKuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:ba:d2:ed:40:2c:07:b6:c1:88:b8:63:20:4c:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9 Validity Not Before: Dec 25 10:01:23 2025 GMT Not After : Dec 26 10:01:23 2025 GMT Subject: CN=42740a04c4ac8b0b2c287d87c206deaf8b858e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e1:43:0f:39:2b:3d:0b:28:67:06:01:3f:4e: 6c:e2:c8:53:c3:d1:5f:c4:23:2d:ce:e1:d6:f8:2a: c5:f4:98:78:5d:d4:df:85:8e:2e:70:1e:00:c1:3f: c9:26:af:a7:47:8e:e0:40:a8:55:fe:13:ec:ef:16: 6a:65:37:79:05:48:95:54:b4:7e:b9:0a:f0:9f:00: 40:0d:17:c6:65:97:82:46:76:58:d0:ea:c4:1c:4e: 80:03:1b:cf:93:5d:07:42:5b:79:a6:6a:e2:d9:6b: dd:f6:d3:62:74:f7:45:95:56:60:44:9b:a8:6d:44: 05:e8:15:ff:0a:9e:79:f5:f6:1d:2a:60:2e:b1:cf: a9:94:cc:c1:06:a9:cd:50:ac:b0:d3:cc:1d:18:2c: 31:3a:67:ad:1e:92:5a:d5:6e:7a:d6:a5:b7:7c:f4: db:52:1c:c7:ca:57:c0:75:d9:a7:b6:5e:26:23:b2: 1e:0d:93:38:aa:59:00:de:be:78:b1:bc:3d:34:e4: 24:fe:f1:3d:e8:fc:86:d9:be:ab:0a:f7:6b:ca:8b: 0b:b9:3a:d9:74:04:ea:0b:ac:3e:00:01:9b:b0:cb: ca:d5:1c:29:7c:96:b1:de:42:67:37:c1:c4:df:4f: 8b:56:fa:58:43:ed:84:68:f5:8d:5b:ba:38:9c:92: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:74:0A:04:C4:AC:8B:0B:2C:28:7D:87:C2:06:DE:AF:8B:85:8E:18 X509v3 Authority Key Identifier: keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:25:47:e7:b1:5a:76:9e:74:c4:1c:24:f3:06:14:8d:bc:6f: c0:82:f9:19:f9:b9:e1:42:58:65:f5:34:e1:60:60:e8:59:d0: 71:d8:37:9f:ef:c5:a0:72:58:b3:40:55:03:e8:9c:71:d6:e1: 5f:90:e4:60:1f:2a:2c:73:b5:20:2a:8e:19:47:90:82:c9:5e: 4f:cd:9c:42:74:87:69:c1:a0:eb:d6:9a:24:d0:db:ec:3b:70: 69:af:45:1d:31:18:2f:28:10:8f:43:5b:d0:e2:57:da:c6:08: 5e:9d:96:60:c5:8c:b4:b9:4c:68:6a:f8:b3:43:cc:3f:21:4a: 3f:0e:2e:b2:14:1a:53:e6:5f:aa:0a:41:78:37:78:2a:61:55: cc:99:3b:c1:fc:5c:46:9a:9f:4e:71:00:6f:91:25:39:9f:d9: 08:5e:a8:1d:e5:e4:93:cf:7b:5c:bb:58:3a:0f:e5:79:59:78: 1d:c8:ac:de:fa:d1:c3:60:54:91:4c:37:9a:f2:d8:47:de:46: 27:73:e7:ce:2b:6b:1c:aa:93:73:96:aa:58:97:5e:8a:48:e8: ec:82:1f:67:9d:71:d4:2e:0d:aa:37:9d:ac:e1:c7:a3:b7:c9: 0c:98:59:7d:92:ea:f0:65:7d:cd:57:e8:45:7b:31:55:90:1c: 11:3b:81:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9LrS7UAsB7bBiLhjIEyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjQ1NjVhMzJkYjNjOWM4YjhiMGY3YjRjMTFiZDExNTRl MjBkZTkwHhcNMjUxMjI1MTAwMTIzWhcNMjUxMjI2MTAwMTIzWjAzMTEwLwYDVQQD Eyg0Mjc0MGEwNGM0YWM4YjBiMmMyODdkODdjMjA2ZGVhZjhiODU4ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleFDDzkrPQsoZwYBP05s4shTw9Ff xCMtzuHW+CrF9Jh4XdTfhY4ucB4AwT/JJq+nR47gQKhV/hPs7xZqZTd5BUiVVLR+ uQrwnwBADRfGZZeCRnZY0OrEHE6AAxvPk10HQlt5pmri2Wvd9tNidPdFlVZgRJuo bUQF6BX/Cp559fYdKmAusc+plMzBBqnNUKyw08wdGCwxOmetHpJa1W561qW3fPTb UhzHylfAddmntl4mI7IeDZM4qlkA3r54sbw9NOQk/vE96PyG2b6rCvdryosLuTrZ dATqC6w+AAGbsMvK1RwpfJax3kJnN8HE30+LVvpYQ+2EaPWNW7o4nJL5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ0CgTErIsLLCh9h8IG3q+LhY4YMB8GA1UdIwQY MBaAFH60Vloy2zyci4sPe0wRvRFU4g3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgt MGU3OTQ5OTM1ZDgxLzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgtMGU3OTQ5OTM1ZDgx LzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiVH57Fa dp50xBwk8wYUjbxvwIL5Gfm54UJYZfU04WBg6FnQcdg3n+/FoHJYs0BVA+iccdbh X5DkYB8qLHO1ICqOGUeQgsleT82cQnSHacGg69aaJNDb7Dtwaa9FHTEYLygQj0Nb 0OJX2sYIXp2WYMWMtLlMaGr4s0PMPyFKPw4ushQaU+ZfqgpBeDd4KmFVzJk7wfxc RpqfTnEAb5ElOZ/ZCF6oHeXkk897XLtYOg/leVl4Hcis3vrRw2BUkUw3mvLYR95G J3PnzitrHKqTc5aqWJdeikjo7IIfZ51x1C4NqjedrOHHo7fJDJhZfZLq8GV9zVfo RXsxVZAcETuBNA== -----END CERTIFICATE-----Generated at Thu Dec 25 16:01:27 2025 by rpki-client