This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json) Hash identifier: nPBnIJ3N+gzxH/7F0I+BBsTpRrwibW39MZJ9MRlA5gc= Subject key identifier: 49:47:D5:FE:48:B0:2E:0B:9D:29:DB:9B:DC:C9:2B:D5:81:48:DF:44 Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019B5297FC2E7586F0DFF09CA3021ADAA68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft Manifest number: 065B Signing time: Wed 24 Dec 2025 23:00:50 +0000 Manifest this update: Wed 24 Dec 2025 23:00:50 +0000 Manifest next update: Thu 25 Dec 2025 23:00:50 +0000 Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 0cNvn8QLA3c3CX4aesu/XQzg4QLOTneuw2ZdpGSkxYk=) 2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=) 3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=) 4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:97:fc:2e:75:86:f0:df:f0:9c:a3:02:1a:da:a6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Dec 24 23:00:50 2025 GMT Not After : Dec 25 23:00:50 2025 GMT Subject: CN=4947d5fe48b02e0b9d29db9bdcc92bd58148df44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2d:35:e3:b5:91:75:29:01:10:31:97:9f:50: 84:78:d7:f5:08:6c:6b:ee:70:e2:6d:c5:98:e0:d3: 7e:b4:6f:2b:35:72:2a:28:37:6d:c7:5a:e0:6d:f0: 98:4a:cf:22:89:e4:9d:f9:5f:a9:41:d2:65:c2:9b: 59:e5:e2:e0:33:53:fc:dc:15:cd:16:f3:8c:fd:cf: 08:35:53:71:89:b4:21:49:b4:01:a9:46:53:de:e4: 0a:cd:35:b3:b1:e6:6d:56:3f:74:f5:bd:84:57:b6: e2:d8:69:31:ff:0f:8d:69:8d:68:03:c7:0b:3e:5c: a9:76:3d:11:5a:d9:4c:a3:bd:7a:11:e0:65:99:b4: 03:47:9e:74:8e:92:ed:5e:d5:ee:47:a9:72:07:7b: 41:0e:b1:08:9a:56:4d:b8:a6:96:40:1a:36:28:d9: ad:f7:27:e3:74:87:45:d9:b0:f3:c8:3a:f0:30:6b: a0:56:9a:fa:11:78:aa:b4:6f:13:7a:c8:0c:86:c8: 71:a7:71:16:26:a8:f1:7b:b2:96:9c:84:43:53:8d: bc:2e:85:12:79:e4:06:33:c3:b4:c4:62:4b:b0:37: 2e:3a:33:fe:2a:3e:76:d2:e9:fb:d2:9c:94:1b:59: 73:72:70:75:20:87:70:f2:d1:c7:ce:9b:6c:9d:7b: 47:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:D5:FE:48:B0:2E:0B:9D:29:DB:9B:DC:C9:2B:D5:81:48:DF:44 X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:56:06:6d:bb:f0:05:53:ad:2c:00:4e:08:15:6a:53:55:28: ea:88:9c:52:fd:9a:ec:3c:2d:95:b1:03:62:36:6f:c6:7e:f6: d4:7a:b6:b8:6d:81:19:ee:59:85:b4:0e:39:27:47:05:5e:65: 9e:12:a6:51:ed:b6:73:ab:e4:4d:94:89:eb:c8:f0:e5:b5:6f: c3:59:39:01:10:12:0e:ad:d2:09:85:b2:3a:74:03:73:fa:45: 16:d2:54:95:a4:e7:68:4e:23:5f:b8:1d:99:ee:50:82:75:7e: 14:e7:8b:1e:a6:b3:c6:5e:c1:39:cb:f0:68:8d:ae:3f:af:4f: 27:7a:d6:03:fd:91:da:a7:06:2f:ff:24:4b:91:17:48:b3:7c: 78:47:4a:ad:2f:09:4a:40:5c:4a:c4:8a:46:f6:0e:c4:ff:84: 82:d0:14:fa:1a:56:28:2f:98:dc:85:02:ee:06:76:8c:4b:65: ad:c9:28:63:5f:50:cf:b1:f8:a3:17:76:22:53:c8:c6:1c:a5: 62:f7:30:c1:1f:30:00:24:45:36:b3:2e:2c:54:fc:25:17:68: c7:5e:db:dc:b3:f8:2f:c0:a6:da:08:28:1a:c6:19:a4:e5:1c: e9:f8:a1:11:ff:bb:7b:33:10:da:bb:3d:1e:bc:df:53:7d:6b: 78:4e:fd:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSl/wudYbw3/CcowIa2qaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjUxMjI0MjMwMDUwWhcNMjUxMjI1MjMwMDUwWjAzMTEwLwYDVQQD Eyg0OTQ3ZDVmZTQ4YjAyZTBiOWQyOWRiOWJkY2M5MmJkNTgxNDhkZjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS0147WRdSkBEDGXn1CEeNf1CGxr 7nDibcWY4NN+tG8rNXIqKDdtx1rgbfCYSs8iieSd+V+pQdJlwptZ5eLgM1P83BXN FvOM/c8INVNxibQhSbQBqUZT3uQKzTWzseZtVj909b2EV7bi2Gkx/w+NaY1oA8cL Plypdj0RWtlMo716EeBlmbQDR550jpLtXtXuR6lyB3tBDrEImlZNuKaWQBo2KNmt 9yfjdIdF2bDzyDrwMGugVpr6EXiqtG8TesgMhshxp3EWJqjxe7KWnIRDU428LoUS eeQGM8O0xGJLsDcuOjP+Kj520un70pyUG1lzcnB1IIdw8tHHzptsnXtHDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElH1f5IsC4LnSnbm9zJK9WBSN9EMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1YGbbvw BVOtLABOCBVqU1Uo6oicUv2a7DwtlbEDYjZvxn721Hq2uG2BGe5ZhbQOOSdHBV5l nhKmUe22c6vkTZSJ68jw5bVvw1k5ARASDq3SCYWyOnQDc/pFFtJUlaTnaE4jX7gd me5QgnV+FOeLHqazxl7BOcvwaI2uP69PJ3rWA/2R2qcGL/8kS5EXSLN8eEdKrS8J SkBcSsSKRvYOxP+EgtAU+hpWKC+Y3IUC7gZ2jEtlrckoY19Qz7H4oxd2IlPIxhyl YvcwwR8wACRFNrMuLFT8JRdox17b3LP4L8Cm2ggoGsYZpOUc6fihEf+7ezMQ2rs9 HrzfU31reE792Q== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:24 2025 by rpki-client