This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json) Hash identifier: X0Ntq5MUQTVDvclBrbgC1JcpM6kLrFqvkHJacXTixlk= Subject key identifier: 14:CA:2E:0F:8B:33:74:89:F5:A4:26:C6:2B:81:25:4B:2E:EF:AE:C5 Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Certificate serial: 019B41DB28F6534DEF1F4A44C3D599C3F70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft Manifest number: 04A4 Signing time: Sun 21 Dec 2025 17:00:40 +0000 Manifest this update: Sun 21 Dec 2025 17:00:40 +0000 Manifest next update: Mon 22 Dec 2025 17:00:40 +0000 Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: /u+Ok/ulIsjlD06A3+anrrQe5zMnMQmzNL+Gm54ZKsY=) 2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:28:f6:53:4d:ef:1f:4a:44:c3:d5:99:c3:f7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Validity Not Before: Dec 21 17:00:40 2025 GMT Not After : Dec 22 17:00:40 2025 GMT Subject: CN=14ca2e0f8b337489f5a426c62b81254b2eefaec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:c2:90:14:a0:3d:ab:78:b9:60:dc:a7:b8: 68:9f:10:7a:9a:6d:28:d4:08:df:60:5b:5e:71:3f: 5b:b5:89:db:bb:9f:90:ac:fb:31:b4:d4:6b:00:b6: be:73:61:1c:18:27:0b:14:79:d8:03:a0:cf:5f:2b: c5:90:83:42:a9:c0:08:78:d9:0c:7b:66:d4:7e:38: 58:32:de:5c:a4:00:4e:61:b1:17:e6:9c:ee:01:21: c2:af:80:46:31:ff:0e:21:ef:f5:cb:12:e3:ea:fe: df:56:d7:9e:5a:90:65:f6:25:7b:bb:7b:b2:22:13: be:79:c1:37:30:b8:56:11:73:5e:c9:ca:32:6e:95: 9b:94:a5:98:39:e1:21:93:3c:eb:eb:4c:8b:67:f6: 9c:5e:bd:2f:50:8c:61:25:0c:cd:14:45:0d:a3:68: 5e:63:65:95:0e:b1:33:1b:46:49:81:86:cb:92:de: 28:e4:5c:4f:d0:10:42:e0:6a:68:00:b8:4b:03:c8: 12:e3:49:ee:ec:a5:6d:2e:29:70:7a:15:f8:94:09: 8e:4a:da:8a:31:8f:24:cb:18:3e:49:85:54:e2:e7: ce:2a:76:38:fb:00:cc:54:50:62:28:f8:8e:9a:3e: 93:bb:0e:da:fc:15:fb:34:66:be:31:78:8f:d1:c0: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:2E:0F:8B:33:74:89:F5:A4:26:C6:2B:81:25:4B:2E:EF:AE:C5 X509v3 Authority Key Identifier: keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:61:1b:de:db:af:4b:a1:40:f7:55:47:9e:6c:8c:25:62:31: 1a:7f:a5:fb:24:b3:4d:b8:41:bf:63:74:f6:00:ec:ea:88:97: 48:e3:ca:54:dc:ea:af:75:93:02:de:3d:d6:9d:ae:51:ef:24: 13:fa:ed:16:ad:81:6d:a2:15:fa:ce:4e:57:1c:9c:64:02:12: 85:68:3c:69:d1:2c:27:39:fd:5a:2d:53:63:c2:be:8c:10:02: e6:0e:d2:c5:33:2c:e2:6a:f3:88:b1:4e:4f:05:1f:12:bd:e0: d3:74:af:a9:d2:1b:ac:c0:e6:6e:a0:82:e5:87:0d:c3:91:b7: bf:9c:8f:69:28:23:bc:fe:38:bc:fb:42:f3:26:f1:5f:db:c3: f9:d1:49:ae:69:11:c1:99:fd:23:6c:41:95:19:d2:b5:9e:59: 37:b2:f0:8a:e8:43:4f:ed:c8:ac:05:24:01:ce:74:e6:6d:4b: b4:88:b1:43:b6:3b:2b:55:65:cd:36:0a:a0:80:ac:75:d3:d3: 22:b6:8e:9c:ec:99:6d:95:98:46:08:cb:af:a4:fb:e5:b8:1f: ad:c9:55:f9:a9:31:7b:c6:fc:60:a1:ea:60:bc:a7:10:a9:6f: 4c:ca:18:4e:aa:6c:f8:ea:20:db:37:25:99:1e:a5:c4:f7:91: 97:b0:53:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2yj2U03vH0pEw9WZw/cMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm ZWVmZWIwHhcNMjUxMjIxMTcwMDQwWhcNMjUxMjIyMTcwMDQwWjAzMTEwLwYDVQQD EygxNGNhMmUwZjhiMzM3NDg5ZjVhNDI2YzYyYjgxMjU0YjJlZWZhZWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIPCkBSgPat4uWDcp7honxB6mm0o 1AjfYFtecT9btYnbu5+QrPsxtNRrALa+c2EcGCcLFHnYA6DPXyvFkINCqcAIeNkM e2bUfjhYMt5cpABOYbEX5pzuASHCr4BGMf8OIe/1yxLj6v7fVteeWpBl9iV7u3uy IhO+ecE3MLhWEXNeycoybpWblKWYOeEhkzzr60yLZ/acXr0vUIxhJQzNFEUNo2he Y2WVDrEzG0ZJgYbLkt4o5FxP0BBC4GpoALhLA8gS40nu7KVtLilwehX4lAmOStqK MY8kyxg+SYVU4ufOKnY4+wDMVFBiKPiOmj6Tuw7a/BX7NGa+MXiP0cBlDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTKLg+LM3SJ9aQmxiuBJUsu767FMB8GA1UdIwQY MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1 LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmEb3tuv S6FA91VHnmyMJWIxGn+l+ySzTbhBv2N09gDs6oiXSOPKVNzqr3WTAt491p2uUe8k E/rtFq2BbaIV+s5OVxycZAIShWg8adEsJzn9Wi1TY8K+jBAC5g7SxTMs4mrziLFO TwUfEr3g03SvqdIbrMDmbqCC5YcNw5G3v5yPaSgjvP44vPtC8ybxX9vD+dFJrmkR wZn9I2xBlRnStZ5ZN7LwiuhDT+3IrAUkAc505m1LtIixQ7Y7K1VlzTYKoICsddPT IraOnOyZbZWYRgjLr6T75bgfrclV+akxe8b8YKHqYLynEKlvTMoYTqps+Oog2zcl mR6lxPeRl7BTGg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:13 2025 by rpki-client