This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json) Hash identifier: bLKMTN5qIdhKeRlMlAT6assSQJ3dxPwxoHhd8KaLaDg= Subject key identifier: 40:B0:5E:17:45:9C:8D:D5:39:50:00:B5:95:E5:22:2C:C3:5C:5F:0E Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Certificate serial: 019B619D9E5BEB4963CAA868B34F11EFC255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft Manifest number: 0FF5 Signing time: Sat 27 Dec 2025 21:01:18 +0000 Manifest this update: Sat 27 Dec 2025 21:01:18 +0000 Manifest next update: Sun 28 Dec 2025 21:01:18 +0000 Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: M2S16CN7gcdSiMtsKMvKPyQemAZRo+JR6IrTqzMutl8=) 2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:9e:5b:eb:49:63:ca:a8:68:b3:4f:11:ef:c2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Validity Not Before: Dec 27 21:01:18 2025 GMT Not After : Dec 28 21:01:18 2025 GMT Subject: CN=40b05e17459c8dd5395000b595e5222cc35c5f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:04:c4:a2:0c:9b:51:26:9c:e4:8a:33:57: 4b:f8:55:57:a2:ac:55:d6:29:12:dd:c5:54:c6:90: f8:78:58:4b:e1:39:95:16:1b:4b:e6:57:d9:87:5e: f4:33:15:cd:51:9e:15:57:22:c9:8d:4a:14:c8:83: e1:e3:70:37:9d:26:4b:f7:69:b1:17:dc:23:93:da: 43:ab:c0:b3:7d:fb:a9:d1:81:ff:04:87:15:b8:4e: 99:45:4b:5b:7c:18:8b:7d:85:2d:0e:66:16:6f:20: 01:14:41:1f:c9:b6:ad:e9:38:db:fc:e8:63:2c:c3: 04:04:89:1e:80:82:e3:66:b6:c8:0c:ee:e5:c4:4d: 82:f5:90:78:75:3f:9e:5c:6f:94:ee:c9:d0:91:05: d9:3b:0d:6d:2a:ae:f1:4d:65:0d:fe:91:a3:3c:33: 4c:75:a8:db:88:0e:e5:60:96:df:a5:05:a8:3f:80: 6c:f1:e2:32:f5:3e:3d:57:ee:39:b0:fa:f9:2f:98: ab:3a:e3:81:47:08:77:23:61:07:bd:20:ca:97:0e: 33:38:30:2b:50:30:a0:ae:98:f5:d2:4b:e5:67:b3: 7a:f6:91:2c:1d:1f:b6:c4:3b:02:df:bd:55:28:a9: e2:ac:fd:4c:1c:4e:5b:0b:75:6f:b5:be:8b:c7:3d: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:B0:5E:17:45:9C:8D:D5:39:50:00:B5:95:E5:22:2C:C3:5C:5F:0E X509v3 Authority Key Identifier: keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:b0:b0:cf:5a:dc:f4:db:a7:84:da:57:2d:4f:a6:b9:fe: 3b:b5:e1:f7:6d:8c:8f:ca:e9:68:db:d9:bf:4c:c9:e4:66:0d: b2:ed:92:96:be:b8:42:ce:20:4d:6b:c9:11:0c:53:7d:82:df: 32:d0:fe:3a:af:32:86:d5:96:28:f2:61:b4:14:64:6f:5b:6f: 51:10:6a:47:56:bf:9b:ae:1e:dc:49:32:41:75:90:18:45:af: 00:24:57:e0:31:34:9c:f1:cb:83:0e:63:46:f8:23:bd:d5:31: 85:97:8e:8f:ec:77:ac:05:11:c0:cd:88:b4:cc:b9:43:f6:a4: 4b:8e:91:70:9a:80:d6:ff:2b:f1:16:25:8b:8f:22:af:1e:00: 78:6a:2f:d4:0a:18:5c:6a:34:61:23:85:02:39:0c:91:d5:27: e1:64:ab:03:1f:28:01:72:d7:b6:18:0b:5a:64:d3:5c:ea:9b: b0:53:a8:a2:3c:b2:b6:c5:5d:eb:cb:0c:f9:2b:9c:a1:4a:47: a2:79:ae:b3:28:5b:23:71:41:8e:33:4e:17:6c:35:2c:76:b1: 79:6f:8f:1d:fe:e4:69:1f:db:58:73:ff:7b:a8:d2:8a:49:65: b2:3f:31:ab:ff:e6:de:09:2e:7e:4d:a7:34:0e:eb:7c:19:bb: 88:e3:32:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnZ5b60ljyqhos08R78JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi NjEwZGYwHhcNMjUxMjI3MjEwMTE4WhcNMjUxMjI4MjEwMTE4WjAzMTEwLwYDVQQD Eyg0MGIwNWUxNzQ1OWM4ZGQ1Mzk1MDAwYjU5NWU1MjIyY2MzNWM1ZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKkExKIMm1EmnOSKM1dL+FVXoqxV 1ikS3cVUxpD4eFhL4TmVFhtL5lfZh170MxXNUZ4VVyLJjUoUyIPh43A3nSZL92mx F9wjk9pDq8Czffup0YH/BIcVuE6ZRUtbfBiLfYUtDmYWbyABFEEfybat6Tjb/Ohj LMMEBIkegILjZrbIDO7lxE2C9ZB4dT+eXG+U7snQkQXZOw1tKq7xTWUN/pGjPDNM dajbiA7lYJbfpQWoP4Bs8eIy9T49V+45sPr5L5irOuOBRwh3I2EHvSDKlw4zODAr UDCgrpj10kvlZ7N69pEsHR+2xDsC371VKKnirP1MHE5bC3Vvtb6Lxz0vKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECwXhdFnI3VOVAAtZXlIizDXF8OMB8GA1UdIwQY MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL2wsM9a 3PTbp4TaVy1Pprn+O7Xh922Mj8rpaNvZv0zJ5GYNsu2Slr64Qs4gTWvJEQxTfYLf MtD+Oq8yhtWWKPJhtBRkb1tvURBqR1a/m64e3EkyQXWQGEWvACRX4DE0nPHLgw5j RvgjvdUxhZeOj+x3rAURwM2ItMy5Q/akS46RcJqA1v8r8RYli48irx4AeGov1AoY XGo0YSOFAjkMkdUn4WSrAx8oAXLXthgLWmTTXOqbsFOoojyytsVd68sM+SucoUpH onmusyhbI3FBjjNOF2w1LHaxeW+PHf7kaR/bWHP/e6jSikllsj8xq//m3gkufk2n NA7rfBm7iOMy3g== -----END CERTIFICATE-----Generated at Sun Dec 28 06:40:04 2025 by rpki-client