This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft File: fggLq1W_NHMYjCDHNmpssETHGVw.mft (raw, json) Hash identifier: cQwItiGClsOJL++xLicXN/yT4QHkrcEV8Nr9g0Bulxk= Subject key identifier: 5E:70:FE:35:0D:9D:FB:F9:CC:C8:CD:6A:8B:DD:1E:37:48:2C:97:44 Authority key identifier: 7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C Certificate issuer: /CN=7e080bab55bf3473188c20c7366a6cb044c7195c Certificate serial: 019B49954761E213B1D5A78748B03A6839E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft Manifest number: 1233 Signing time: Tue 23 Dec 2025 05:01:18 +0000 Manifest this update: Tue 23 Dec 2025 05:01:18 +0000 Manifest next update: Wed 24 Dec 2025 05:01:18 +0000 Files and hashes: 1: 8m52WXmC6DqVDLH9lI-6WR69u6s.roa (hash: 0BZo5xqp89NE8ExAG9qblE2VcBVND0AxeF/zdrSRKa8=) 2: fggLq1W_NHMYjCDHNmpssETHGVw.crl (hash: Ino251NhRFc1CTAy+bg3W1nXk/1EO5U1GMc6ZkyCnR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:47:61:e2:13:b1:d5:a7:87:48:b0:3a:68:39:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e080bab55bf3473188c20c7366a6cb044c7195c Validity Not Before: Dec 23 05:01:18 2025 GMT Not After : Dec 24 05:01:18 2025 GMT Subject: CN=5e70fe350d9dfbf9ccc8cd6a8bdd1e37482c9744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:2a:03:f2:b1:4a:6b:db:e0:2e:7b:71:16: 51:21:06:f6:70:9e:87:7f:d9:b4:d0:4e:94:74:e2: 22:6b:f5:06:38:96:7a:1a:81:b3:ad:fa:12:1e:34: 74:29:dd:0c:a0:1c:cc:85:f8:52:55:5a:c6:4d:83: 64:51:83:f4:31:60:73:9c:a0:f2:5f:a7:5f:f2:55: ac:16:b9:66:df:b9:e3:1c:72:32:be:84:b8:3b:67: a3:5d:96:d2:74:27:82:7b:51:33:85:1f:ea:cf:8a: f6:c8:24:f7:51:ee:7d:68:aa:1f:18:e9:58:20:e1: 28:d9:3a:8e:c3:09:63:16:f9:77:5c:1b:28:8f:80: 69:4c:74:99:d8:4e:57:ba:d8:1a:e5:5d:5a:ab:da: 45:6f:80:a4:84:b4:85:5b:39:a1:67:70:2e:6e:19: 73:ac:37:e5:28:84:a7:e3:bb:41:8c:da:51:b1:3b: 6f:9f:b6:66:6b:ee:3d:2f:fa:b1:bd:0f:4f:46:26: 42:4b:1c:d9:dd:c2:91:d9:37:d9:cc:ad:bd:21:62: b2:b3:a9:c9:72:a7:1a:0b:0b:c6:ab:e9:50:fc:7f: 5d:c5:ab:f5:ae:9d:85:72:96:e2:87:9e:8a:6a:67: 89:a3:eb:c2:e7:b5:ed:56:b2:82:6e:8c:a7:8d:71: da:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:70:FE:35:0D:9D:FB:F9:CC:C8:CD:6A:8B:DD:1E:37:48:2C:97:44 X509v3 Authority Key Identifier: keyid:7E:08:0B:AB:55:BF:34:73:18:8C:20:C7:36:6A:6C:B0:44:C7:19:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fggLq1W_NHMYjCDHNmpssETHGVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fda8c9-6efa-4954-a5c3-630bd73ce267/1/fggLq1W_NHMYjCDHNmpssETHGVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:74:7f:74:49:ea:f9:8b:0d:e3:84:42:66:8b:c4:71:76:5b: 25:3a:65:63:21:38:15:bb:9e:5d:81:f0:6c:c5:f6:5d:ff:f6: 99:07:49:57:f2:1c:20:1e:a5:cf:d0:c0:08:38:6c:6e:d0:05: 80:62:61:d6:7f:1c:69:5e:95:f1:ff:b8:f5:af:1f:c2:b9:1c: 76:4b:c5:72:7e:f6:69:88:51:42:3f:dd:2e:4a:87:5d:56:38: d7:20:32:f8:c1:57:bb:9a:9a:74:0d:48:ea:96:17:20:6f:6a: 7f:d2:4f:b6:97:5e:61:26:e3:4e:7d:2f:64:59:7e:f2:25:98: db:8e:26:c4:8c:5a:fa:a7:05:af:d7:72:60:f9:d7:88:37:4a: 63:1e:fd:ce:a1:b3:2e:fa:ba:bd:41:14:7e:2c:e3:ca:ec:33: 23:c1:14:66:a3:f5:bb:a8:ba:d7:ef:ce:ea:27:8a:59:ac:a7: 2d:6e:9d:de:cf:de:d5:c0:4c:f5:3d:f7:51:d2:bc:4c:29:5e: a5:30:19:5b:4c:eb:7b:e2:1c:6a:ed:20:d7:cf:b2:ee:ba:f6: b0:3c:f3:52:d4:87:a5:7a:9e:b8:4a:1a:21:d2:a9:82:09:e1: 1f:9a:5c:f4:02:5f:95:9f:04:c1:89:20:ef:15:c3:80:43:8e: 83:08:fe:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlUdh4hOx1aeHSLA6aDnpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDgwYmFiNTViZjM0NzMxODhjMjBjNzM2NmE2Y2IwNDRj NzE5NWMwHhcNMjUxMjIzMDUwMTE4WhcNMjUxMjI0MDUwMTE4WjAzMTEwLwYDVQQD Eyg1ZTcwZmUzNTBkOWRmYmY5Y2NjOGNkNmE4YmRkMWUzNzQ4MmM5NzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluoqA/KxSmvb4C57cRZRIQb2cJ6H f9m00E6UdOIia/UGOJZ6GoGzrfoSHjR0Kd0MoBzMhfhSVVrGTYNkUYP0MWBznKDy X6df8lWsFrlm37njHHIyvoS4O2ejXZbSdCeCe1EzhR/qz4r2yCT3Ue59aKofGOlY IOEo2TqOwwljFvl3XBsoj4BpTHSZ2E5Xutga5V1aq9pFb4CkhLSFWzmhZ3Aubhlz rDflKISn47tBjNpRsTtvn7Zma+49L/qxvQ9PRiZCSxzZ3cKR2TfZzK29IWKys6nJ cqcaCwvGq+lQ/H9dxav1rp2Fcpbih56KameJo+vC57XtVrKCboynjXHa4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5w/jUNnfv5zMjNaovdHjdILJdEMB8GA1UdIwQY MBaAFH4IC6tVvzRzGIwgxzZqbLBExxlcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMt NjMwYmQ3M2NlMjY3LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9mZGE4YzktNmVmYS00OTU0LWE1YzMtNjMwYmQ3M2NlMjY3 LzEvZmdnTHExV19OSE1ZakNESE5tcHNzRVRIR1Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3R/dEnq +YsN44RCZovEcXZbJTplYyE4FbueXYHwbMX2Xf/2mQdJV/IcIB6lz9DACDhsbtAF gGJh1n8caV6V8f+49a8fwrkcdkvFcn72aYhRQj/dLkqHXVY41yAy+MFXu5qadA1I 6pYXIG9qf9JPtpdeYSbjTn0vZFl+8iWY244mxIxa+qcFr9dyYPnXiDdKYx79zqGz Lvq6vUEUfizjyuwzI8EUZqP1u6i61+/O6ieKWaynLW6d3s/e1cBM9T33UdK8TCle pTAZW0zre+Icau0g18+y7rr2sDzzUtSHpXqeuEoaIdKpggnhH5pc9AJflZ8EwYkg 7xXDgEOOgwj+0A== -----END CERTIFICATE-----Generated at Tue Dec 23 13:55:32 2025 by rpki-client