This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft File: fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json) Hash identifier: kNzWP21qc43kkWdXA727UCfuEtBt02KNS0bNdEGaqh8= Subject key identifier: F4:55:6B:59:94:98:A3:C3:98:3A:C0:B8:73:F0:55:17:74:7C:AA:67 Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F Certificate issuer: /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f Certificate serial: 019B544FA72D03986F42B9A4DFDE15BD7410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft Manifest number: 1697 Signing time: Thu 25 Dec 2025 07:01:04 +0000 Manifest this update: Thu 25 Dec 2025 07:01:04 +0000 Manifest next update: Fri 26 Dec 2025 07:01:04 +0000 Files and hashes: 1: NicO7X1eeOmGxSSK_nbDJZV9Pdo.roa (hash: brCTvgHrTley7WUwp/kIypsM1wDTrMGgNla9liJHlp4=) 2: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: BRL3WsVCzkPjpv9ZpnqhReMbNZ4EbVtSM3RQSjFFwlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:a7:2d:03:98:6f:42:b9:a4:df:de:15:bd:74:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f Validity Not Before: Dec 25 07:01:04 2025 GMT Not After : Dec 26 07:01:04 2025 GMT Subject: CN=f4556b599498a3c3983ac0b873f05517747caa67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c9:fc:44:a0:d7:73:cf:70:2e:a3:c8:1a:6d: 5f:f6:b7:fa:6f:95:6d:c4:99:67:e4:bf:58:01:c3: c4:b2:85:a1:46:b7:f7:ca:3c:7c:b5:04:a0:68:9c: 06:e1:04:1c:e9:2c:16:4f:fb:a8:71:16:98:37:2f: ad:bb:ea:cf:b5:84:de:12:37:13:71:78:57:52:16: 52:d1:f0:8e:df:0d:b5:63:a0:f3:dd:47:18:12:eb: 97:35:7e:14:af:94:a6:48:9b:dc:b8:cd:19:38:ec: 24:0e:8c:2e:36:84:89:8b:dc:4b:9f:c1:32:98:79: bb:e2:b6:b5:c8:37:d2:89:f1:5b:21:75:4c:6a:45: a9:d0:b0:12:0a:40:8a:f2:c1:44:fd:3d:77:58:53: 4e:bf:9a:15:87:6b:44:91:57:de:c1:4d:c4:a5:b9: 49:06:72:06:92:8e:f2:82:24:cf:06:24:d7:7e:a9: ad:06:f5:24:69:25:aa:47:57:ed:b7:1b:57:4b:84: 00:12:9c:63:b8:16:5c:0b:28:0d:ee:99:57:54:e8: 8a:aa:2b:76:7d:c4:9e:2d:94:50:e9:72:d1:6f:1b: 7b:18:88:cf:4d:52:f2:a8:26:2e:41:ff:38:31:3e: fc:74:c9:98:a3:c8:c7:5f:94:34:cf:7d:f4:23:14: f5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:55:6B:59:94:98:A3:C3:98:3A:C0:B8:73:F0:55:17:74:7C:AA:67 X509v3 Authority Key Identifier: keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:51:e5:3b:40:fe:71:56:12:e2:4a:49:99:90:ad:f8:ad:04: 83:f3:b4:44:f2:b1:75:7c:79:a2:54:b9:39:32:af:85:99:88: be:ba:09:9d:63:3d:f9:0f:b0:46:12:85:42:51:67:24:5e:97: 7f:3e:e3:73:76:19:97:f0:e5:3d:a4:da:d3:7a:a7:39:8b:e2: 8c:8f:c7:89:81:30:d8:94:6f:47:b8:12:00:57:49:27:ee:e8: a4:a4:b9:cf:31:61:26:c5:03:46:7d:f0:7a:09:2b:d0:07:5a: 50:01:0c:91:5c:55:c7:7c:5c:12:a3:22:ff:69:fd:92:3a:ce: 7b:1a:b2:c9:ae:76:31:1a:f8:10:e8:b6:ec:72:0c:12:a7:e9: d6:6e:3f:25:ae:de:27:29:ba:c4:5d:58:9e:1a:2f:e3:8a:8e: c3:68:d2:fa:59:5d:1c:f0:03:b9:fa:7e:e2:90:1b:a4:ca:b9: c5:f7:88:d0:56:74:4e:74:05:02:79:4f:87:55:d2:e7:5e:5c: ae:c3:c2:47:df:2f:55:98:7d:bb:40:1a:6c:bd:e3:dc:c9:72: 7f:11:21:a3:1a:46:2b:07:91:e9:ef:af:6f:20:c3:3d:cf:8d: 6b:0c:0e:b3:77:6f:bc:0b:a5:c2:63:59:2b:89:32:71:14:c8: 75:8c:e6:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT6ctA5hvQrmk394VvXQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm NjgwNGYwHhcNMjUxMjI1MDcwMTA0WhcNMjUxMjI2MDcwMTA0WjAzMTEwLwYDVQQD EyhmNDU1NmI1OTk0OThhM2MzOTgzYWMwYjg3M2YwNTUxNzc0N2NhYTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8n8RKDXc89wLqPIGm1f9rf6b5Vt xJln5L9YAcPEsoWhRrf3yjx8tQSgaJwG4QQc6SwWT/uocRaYNy+tu+rPtYTeEjcT cXhXUhZS0fCO3w21Y6Dz3UcYEuuXNX4Ur5SmSJvcuM0ZOOwkDowuNoSJi9xLn8Ey mHm74ra1yDfSifFbIXVMakWp0LASCkCK8sFE/T13WFNOv5oVh2tEkVfewU3EpblJ BnIGko7ygiTPBiTXfqmtBvUkaSWqR1fttxtXS4QAEpxjuBZcCygN7plXVOiKqit2 fcSeLZRQ6XLRbxt7GIjPTVLyqCYuQf84MT78dMmYo8jHX5Q0z330IxT19QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRVa1mUmKPDmDrAuHPwVRd0fKpnMB8GA1UdIwQY MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2 LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFHlO0D+ cVYS4kpJmZCt+K0Eg/O0RPKxdXx5olS5OTKvhZmIvroJnWM9+Q+wRhKFQlFnJF6X fz7jc3YZl/DlPaTa03qnOYvijI/HiYEw2JRvR7gSAFdJJ+7opKS5zzFhJsUDRn3w egkr0AdaUAEMkVxVx3xcEqMi/2n9kjrOexqyya52MRr4EOi27HIMEqfp1m4/Ja7e Jym6xF1Ynhov44qOw2jS+lldHPADufp+4pAbpMq5xfeI0FZ0TnQFAnlPh1XS515c rsPCR98vVZh9u0AabL3j3MlyfxEhoxpGKweR6e+vbyDDPc+NawwOs3dvvAulwmNZ K4kycRTIdYzmRA== -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:01 2025 by rpki-client