This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json) Hash identifier: 9pVCOIkPOI7zgskOl7jOwbLFKGDndd4bo3Skz6QWQaA= Subject key identifier: B0:C1:97:C0:0F:8B:0E:9E:79:65:BB:42:8F:42:5E:7E:FC:D7:FF:AA Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Certificate serial: 019B35A040746A5D3F96C9B4B708A3C0E455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 08:00:53 +0000 Manifest this update: Fri 19 Dec 2025 08:00:53 +0000 Manifest next update: Sat 20 Dec 2025 08:00:53 +0000 Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=) 2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=) 3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: 8Ytiwh8YDbWaeP+bsvl8q7o2kLrXmV0XUkRZdJ2G2V4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:40:74:6a:5d:3f:96:c9:b4:b7:08:a3:c0:e4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Validity Not Before: Dec 19 08:00:53 2025 GMT Not After : Dec 20 08:00:53 2025 GMT Subject: CN=b0c197c00f8b0e9e7965bb428f425e7efcd7ffaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:ac:1c:67:79:47:72:c5:d1:e4:00:95:92: 1a:1f:5f:e9:05:9d:25:90:48:a7:94:0c:1f:4d:84: 58:35:29:6f:eb:e4:e2:17:96:80:25:1c:a5:4c:74: b8:e8:8f:f8:46:9b:5c:56:ff:56:d2:89:e2:e0:a0: 72:e1:ae:0c:5b:9c:1e:c4:c3:e2:8c:cd:0f:99:02: 93:cd:55:c3:58:3a:b1:9c:2e:68:c8:40:a4:26:6c: 86:51:75:b1:a1:2f:b2:20:48:fd:27:85:48:c2:56: b1:b8:8e:1b:33:01:4f:ea:f8:f6:5a:e3:30:1e:f0: 29:77:3a:5c:26:27:9f:fa:72:a3:15:c1:b4:3e:16: 91:93:db:e5:33:3e:cb:ed:ff:08:c6:35:fd:1e:10: f4:21:31:a4:58:d6:2e:85:17:5f:44:41:a9:d0:c2: 81:66:98:96:bd:2a:16:5b:97:5a:60:dc:b0:1e:5d: e7:68:d7:8f:0c:6a:e4:21:94:dd:bb:83:de:fd:df: 21:79:59:79:99:c9:1d:3a:79:ea:e8:97:59:38:1c: 43:09:9e:65:f7:56:bf:43:50:98:c1:fb:da:34:d7: aa:e9:82:29:6a:48:52:94:bb:b7:46:ff:ca:83:cb: 1e:fb:8f:82:4d:85:ff:e0:ac:7f:16:6a:d2:e2:6d: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C1:97:C0:0F:8B:0E:9E:79:65:BB:42:8F:42:5E:7E:FC:D7:FF:AA X509v3 Authority Key Identifier: keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:47:99:bd:60:d0:57:e0:1d:e8:6f:ed:c4:94:f4:60:08:89: 88:38:02:60:91:9c:52:61:9c:af:cb:cf:5c:98:a6:82:6c:7b: e2:30:9c:eb:b0:c8:26:af:e0:24:4f:bb:80:e0:6d:2d:cc:c9: c9:69:f6:e3:c6:68:ae:c7:eb:ad:6b:5e:22:b4:a4:95:42:55: 42:10:94:09:3f:59:e5:00:18:d6:ca:98:5c:0a:33:e8:d9:f0: f5:71:f8:35:59:be:93:9e:9c:dc:db:cc:62:be:b9:0b:10:3c: e4:b3:c8:c8:d0:31:c6:96:74:22:e0:fb:5e:82:5d:18:83:ec: c9:72:0c:7c:50:da:a1:e6:d4:c3:80:cb:56:82:c2:de:fe:9c: ff:76:5e:be:aa:91:25:62:af:52:d9:d2:f0:01:1d:67:8f:e7: 4b:7c:dd:85:54:76:4b:eb:84:1b:bb:4f:72:ae:bb:f4:bc:d0: 34:fa:85:c0:d0:9e:66:e6:4f:9d:3d:df:3b:26:11:9a:b5:15: de:20:ef:8f:22:60:92:31:55:92:24:b9:1f:8a:96:c4:fe:61: ad:56:b1:57:6e:b6:00:05:1a:29:82:2b:00:7c:b8:df:d0:2a: b5:b7:98:92:0e:5a:56:47:b4:c8:4e:34:90:b8:87:d5:e4:8c: 33:91:24:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEB0al0/lsm0twijwORVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi NjNlZTYwHhcNMjUxMjE5MDgwMDUzWhcNMjUxMjIwMDgwMDUzWjAzMTEwLwYDVQQD EyhiMGMxOTdjMDBmOGIwZTllNzk2NWJiNDI4ZjQyNWU3ZWZjZDdmZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUOsHGd5R3LF0eQAlZIaH1/pBZ0l kEinlAwfTYRYNSlv6+TiF5aAJRylTHS46I/4RptcVv9W0oni4KBy4a4MW5wexMPi jM0PmQKTzVXDWDqxnC5oyECkJmyGUXWxoS+yIEj9J4VIwlaxuI4bMwFP6vj2WuMw HvApdzpcJief+nKjFcG0PhaRk9vlMz7L7f8IxjX9HhD0ITGkWNYuhRdfREGp0MKB ZpiWvSoWW5daYNywHl3naNePDGrkIZTdu4Pe/d8heVl5mckdOnnq6JdZOBxDCZ5l 91a/Q1CYwfvaNNeq6YIpakhSlLu3Rv/Kg8se+4+CTYX/4Kx/FmrS4m1vRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDBl8APiw6eeWW7Qo9CXn781/+qMB8GA1UdIwQY MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUeZvWDQ V+Ad6G/txJT0YAiJiDgCYJGcUmGcr8vPXJimgmx74jCc67DIJq/gJE+7gOBtLczJ yWn248ZorsfrrWteIrSklUJVQhCUCT9Z5QAY1sqYXAoz6Nnw9XH4NVm+k56c3NvM Yr65CxA85LPIyNAxxpZ0IuD7XoJdGIPsyXIMfFDaoebUw4DLVoLC3v6c/3ZevqqR JWKvUtnS8AEdZ4/nS3zdhVR2S+uEG7tPcq679LzQNPqFwNCeZuZPnT3fOyYRmrUV 3iDvjyJgkjFVkiS5H4qWxP5hrVaxV262AAUaKYIrAHy439AqtbeYkg5aVke0yE40 kLiH1eSMM5Ek3Q== -----END CERTIFICATE-----Generated at Fri Dec 19 10:21:21 2025 by rpki-client