This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft File: fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json) Hash identifier: 1I5Dqq57+k/hGyjHg//kctIOp92jdLlTTgAmCHgQfs0= Subject key identifier: C7:E7:0F:44:BC:B2:3D:8A:64:EA:6D:7D:C9:43:8D:E8:7A:1A:9B:C8 Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E Certificate issuer: /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e Certificate serial: 019B397D7FB954A3472BF84473A35E9F32DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft Manifest number: 1719 Signing time: Sat 20 Dec 2025 02:01:24 +0000 Manifest this update: Sat 20 Dec 2025 02:01:24 +0000 Manifest next update: Sun 21 Dec 2025 02:01:24 +0000 Files and hashes: 1: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: 3vJX407ld9akrLuAbW9vLru2sa9M/Dem0phQuO/3XLI=) 2: lAbVacJrgztu_NhHYXWokojqeEc.roa (hash: b5DQ5YmTJodarXLSdRJFMbK2K3dk6jpwFRrIoIXaqxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:7f:b9:54:a3:47:2b:f8:44:73:a3:5e:9f:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e Validity Not Before: Dec 20 02:01:24 2025 GMT Not After : Dec 21 02:01:24 2025 GMT Subject: CN=c7e70f44bcb23d8a64ea6d7dc9438de87a1a9bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d8:3f:6f:79:2b:27:86:cf:7e:24:e1:2c:bd: 53:97:3b:65:f9:fc:c0:88:ee:08:a5:25:1c:93:11: 99:55:9d:c4:b1:7c:68:98:fe:e6:11:73:b7:86:e2: 4b:8b:19:b2:21:07:8f:3a:bc:f0:01:86:4d:fd:a3: fa:fd:48:0c:9c:c8:6d:b9:9a:3d:c9:4d:07:f5:f6: e2:7f:76:20:42:65:b5:5b:4b:07:85:69:a1:c4:2d: 0c:ef:a6:04:da:c4:70:b2:0b:3c:d7:7a:c1:49:14: 10:15:a4:bd:5f:e8:4e:64:3a:84:27:77:1f:53:1f: f2:d5:2f:94:66:67:8e:33:35:3a:66:b6:b9:c5:63: 67:48:dd:7f:b3:13:7f:08:a1:fa:78:3b:37:0f:08: 9d:db:9d:0b:64:df:5d:e3:99:b2:c6:67:af:1f:e1: 9f:1a:51:57:6a:08:06:17:0d:5f:4d:2d:87:de:2d: 52:53:1d:08:6d:0d:fa:aa:f3:e4:01:f2:19:a6:c0: 32:11:1d:00:8e:c4:db:bd:f0:aa:7a:8e:26:ab:70: 31:59:b1:b1:c3:66:8f:a9:17:3e:d6:0b:b5:ac:31: 39:8e:fc:fc:e3:94:a9:b4:6b:de:2e:c7:94:77:b5: d4:7e:33:45:1f:21:68:24:5f:3d:42:36:b4:08:c9: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E7:0F:44:BC:B2:3D:8A:64:EA:6D:7D:C9:43:8D:E8:7A:1A:9B:C8 X509v3 Authority Key Identifier: keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ee:24:4c:98:41:70:72:21:f0:ce:68:a6:c0:6d:04:07:5d: 79:e8:7a:ca:2e:7d:46:a1:fd:5f:26:c3:32:aa:2f:3d:0f:8b: 25:c7:fe:7c:52:98:06:13:14:b3:84:ea:e9:d3:cb:c5:dd:a5: 67:41:0f:df:85:49:47:51:90:a8:e4:ad:12:d0:88:af:92:5c: 8a:0e:e7:9f:62:1c:be:b9:51:e8:46:27:95:90:8e:55:a3:1b: 54:3e:2f:f7:d5:a4:2f:6f:a6:31:6f:f3:bd:b9:e9:54:88:9a: 1b:a0:e7:e2:59:77:c2:31:f3:d3:78:92:e4:ca:1c:1d:af:d9: 47:9d:85:d2:08:b7:ce:5c:d8:44:03:13:29:60:f7:71:06:d7: 82:a3:bc:50:74:71:10:d4:1a:2a:de:71:e8:b4:b8:bb:49:23: 80:ac:e3:3e:dd:ac:44:35:46:87:2c:c7:3a:1d:84:cc:48:88: d4:47:b5:0e:d4:0a:90:1b:3e:87:f8:ff:59:55:04:49:be:59: 42:61:f1:ff:3e:f3:f9:07:88:04:20:27:c2:86:be:07:c1:a5: 69:1b:69:ac:96:ea:e5:cd:30:b7:02:23:40:1a:59:b5:f5:0e: 2c:23:a3:b0:07:07:53:59:18:db:c3:d5:0e:8d:29:05:0e:6c: a6:f7:ae:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fX+5VKNHK/hEc6NenzLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw MTI4MGUwHhcNMjUxMjIwMDIwMTI0WhcNMjUxMjIxMDIwMTI0WjAzMTEwLwYDVQQD EyhjN2U3MGY0NGJjYjIzZDhhNjRlYTZkN2RjOTQzOGRlODdhMWE5YmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59g/b3krJ4bPfiThLL1Tlztl+fzA iO4IpSUckxGZVZ3EsXxomP7mEXO3huJLixmyIQePOrzwAYZN/aP6/UgMnMhtuZo9 yU0H9fbif3YgQmW1W0sHhWmhxC0M76YE2sRwsgs813rBSRQQFaS9X+hOZDqEJ3cf Ux/y1S+UZmeOMzU6Zra5xWNnSN1/sxN/CKH6eDs3Dwid250LZN9d45myxmevH+Gf GlFXaggGFw1fTS2H3i1SUx0IbQ36qvPkAfIZpsAyER0AjsTbvfCqeo4mq3AxWbGx w2aPqRc+1gu1rDE5jvz845SptGveLseUd7XUfjNFHyFoJF89Qja0CMmWEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfnD0S8sj2KZOptfclDjeh6GpvIMB8GA1UdIwQY MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2 LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+4kTJhB cHIh8M5opsBtBAddeeh6yi59RqH9XybDMqovPQ+LJcf+fFKYBhMUs4Tq6dPLxd2l Z0EP34VJR1GQqOStEtCIr5Jcig7nn2IcvrlR6EYnlZCOVaMbVD4v99WkL2+mMW/z vbnpVIiaG6Dn4ll3wjHz03iS5MocHa/ZR52F0gi3zlzYRAMTKWD3cQbXgqO8UHRx ENQaKt5x6LS4u0kjgKzjPt2sRDVGhyzHOh2EzEiI1Ee1DtQKkBs+h/j/WVUESb5Z QmHx/z7z+QeIBCAnwoa+B8GlaRtprJbq5c0wtwIjQBpZtfUOLCOjsAcHU1kY28PV Do0pBQ5spveufg== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:31 2025 by rpki-client