This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json) Hash identifier: tSfJ5WzDBEUNQd43K6JVu0+tgSqRVWu2srvMws3YlFU= Subject key identifier: 2A:9B:72:BF:A0:88:8A:5C:1B:49:5C:EF:F4:39:65:A7:7D:78:43:D5 Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Certificate serial: 019B38D84B38E08590EEBB1F8D975780EBD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 23:00:57 +0000 Manifest this update: Fri 19 Dec 2025 23:00:57 +0000 Manifest next update: Sat 20 Dec 2025 23:00:57 +0000 Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=) 2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=) 3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: tlyUP9HdZgWYjkwMguLfml4yU1z2wu3xOhFDTZk3lRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:4b:38:e0:85:90:ee:bb:1f:8d:97:57:80:eb:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Validity Not Before: Dec 19 23:00:57 2025 GMT Not After : Dec 20 23:00:57 2025 GMT Subject: CN=2a9b72bfa0888a5c1b495ceff43965a77d7843d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cb:13:6f:a8:6a:3c:66:e8:57:77:e5:7c:e3: 1e:7c:d1:de:4c:1a:54:bb:6f:cf:bb:cd:d7:4b:fd: fd:d3:61:37:fe:8e:7e:75:16:c2:9a:5f:f3:b5:62: 7f:6e:1c:bd:65:63:dd:05:53:50:d8:9b:27:75:95: 8d:c4:c0:25:f0:60:8d:1c:13:78:48:48:99:6e:3b: e9:cb:e9:34:54:8f:34:36:b7:07:ba:91:dd:46:b6: a0:67:ca:1d:ef:f7:7c:ce:0e:d3:a1:bc:ab:92:70: 37:5c:0e:c5:87:30:36:a8:3c:33:5e:ae:25:7a:bf: ef:d7:47:25:49:e2:85:9d:57:e5:e0:9c:00:bc:28: be:56:4f:45:cc:dc:b6:13:48:66:20:b9:94:c4:73: e7:64:6f:9c:45:7b:ea:b5:15:94:fe:74:67:9b:03: d3:b1:5e:1d:79:07:75:a8:bd:06:26:01:e0:f7:57: 1d:e3:cd:b4:30:1e:d0:66:18:6a:83:41:67:24:80: 9f:c9:9a:dd:13:4e:a9:d8:55:bb:45:ee:93:ce:65: 57:4c:a6:af:eb:6a:bd:1c:b3:2b:6b:d8:0d:67:9c: 82:3b:a8:72:93:49:d3:8d:2b:f6:0b:2c:cc:35:07: da:25:a5:de:ad:15:b5:da:76:27:d1:fd:a5:e2:cf: a2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:72:BF:A0:88:8A:5C:1B:49:5C:EF:F4:39:65:A7:7D:78:43:D5 X509v3 Authority Key Identifier: keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:25:dd:29:31:34:45:48:5c:11:db:5a:6f:03:7a:ae:15:55: 45:05:18:1a:d2:8e:21:8a:37:21:e0:a9:1d:a5:53:b2:3b:af: 33:15:5e:74:dd:47:23:18:b9:62:cc:e0:31:f2:23:b7:0a:7e: 10:73:3c:86:78:a5:ab:28:aa:5a:9d:8f:d4:26:72:ed:d0:d3: db:be:75:fe:6a:7d:2e:2c:f4:56:ab:12:10:65:15:25:eb:50: d2:e4:96:9b:b7:1e:d9:a3:70:af:d4:6e:74:c4:02:af:52:95: 8d:82:bf:bf:db:00:a7:a5:25:6e:10:1c:be:f1:64:41:d3:ce: 82:cb:b3:6c:b4:c4:5a:dc:57:f5:0d:74:3a:dc:46:56:f7:09: e7:49:2c:d7:bf:8f:18:7b:38:9e:0b:e4:f8:5b:02:48:ae:89: f4:b0:6c:dc:44:d0:f9:69:96:c6:6a:d0:f8:05:83:b8:47:ab: e8:c3:73:44:d6:46:bb:ed:42:9c:4c:e2:65:0b:ea:c4:8f:7e: d9:a1:9d:99:a0:98:f8:e6:a2:ef:03:40:07:6b:66:df:44:2c: 6f:0f:70:0c:d7:c8:5b:bd:6f:7d:f7:d0:64:e2:37:0b:df:9d: 17:aa:b2:35:df:eb:69:6d:9d:26:9f:dd:8a:82:bb:40:46:88: f6:08:52:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Es44IWQ7rsfjZdXgOvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2 YmYwYmQwHhcNMjUxMjE5MjMwMDU3WhcNMjUxMjIwMjMwMDU3WjAzMTEwLwYDVQQD EygyYTliNzJiZmEwODg4YTVjMWI0OTVjZWZmNDM5NjVhNzdkNzg0M2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08sTb6hqPGboV3flfOMefNHeTBpU u2/Pu83XS/3902E3/o5+dRbCml/ztWJ/bhy9ZWPdBVNQ2JsndZWNxMAl8GCNHBN4 SEiZbjvpy+k0VI80NrcHupHdRragZ8od7/d8zg7TobyrknA3XA7FhzA2qDwzXq4l er/v10clSeKFnVfl4JwAvCi+Vk9FzNy2E0hmILmUxHPnZG+cRXvqtRWU/nRnmwPT sV4deQd1qL0GJgHg91cd4820MB7QZhhqg0FnJICfyZrdE06p2FW7Re6TzmVXTKav 62q9HLMra9gNZ5yCO6hyk0nTjSv2CyzMNQfaJaXerRW12nYn0f2l4s+ioQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqbcr+giIpcG0lc7/Q5Zad9eEPVMB8GA1UdIwQY MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt NmY4MzZmMzVmNTk0LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0 LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCXdKTE0 RUhcEdtabwN6rhVVRQUYGtKOIYo3IeCpHaVTsjuvMxVedN1HIxi5YszgMfIjtwp+ EHM8hnilqyiqWp2P1CZy7dDT2751/mp9Liz0VqsSEGUVJetQ0uSWm7ce2aNwr9Ru dMQCr1KVjYK/v9sAp6UlbhAcvvFkQdPOgsuzbLTEWtxX9Q10OtxGVvcJ50ks17+P GHs4ngvk+FsCSK6J9LBs3ETQ+WmWxmrQ+AWDuEer6MNzRNZGu+1CnEziZQvqxI9+ 2aGdmaCY+Oai7wNAB2tm30Qsbw9wDNfIW71vfffQZOI3C9+dF6qyNd/raW2dJp/d ioK7QEaI9ghSmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:23:50 2025 by rpki-client