This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft File: fUd7pApydSv1DkLAADdl5NdHPkY.mft (raw, json) Hash identifier: mUCznev1i9rQVeyYBEakK5rNVYMPQsex6chzXQLZ1RM= Subject key identifier: 99:07:19:B8:87:55:34:76:53:34:D7:1C:77:03:4F:95:4A:6D:05:95 Authority key identifier: 7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46 Certificate issuer: /CN=7d477ba40a72752bf50e42c0003765e4d7473e46 Certificate serial: 019B4A0318F02181436CEF9BE37A58F372D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 07:01:15 +0000 Manifest this update: Tue 23 Dec 2025 07:01:15 +0000 Manifest next update: Wed 24 Dec 2025 07:01:15 +0000 Files and hashes: 1: fUd7pApydSv1DkLAADdl5NdHPkY.crl (hash: QO4Mzrv4vcy8Kfay3pVcfav4KEvAxIIAraMzpx0moX4=) 2: txL1fO8y0T0j5IS_C5y7fOIOxHU.roa (hash: kwDxX3obWOhODfrryMMC7f740mdS1jAQgVwH1EYVsHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:18:f0:21:81:43:6c:ef:9b:e3:7a:58:f3:72:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d477ba40a72752bf50e42c0003765e4d7473e46 Validity Not Before: Dec 23 07:01:15 2025 GMT Not After : Dec 24 07:01:15 2025 GMT Subject: CN=990719b8875534765334d71c77034f954a6d0595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:57:ca:50:41:85:b1:91:54:b9:12:41:fe: 6c:8b:cc:97:f2:04:ee:71:8c:5b:96:99:14:95:f6: c7:83:5f:70:88:04:2b:b7:a5:85:d8:25:7c:17:eb: da:39:8c:cf:b1:df:05:10:67:3d:49:48:7b:29:74: 59:3e:ac:b8:d3:fe:42:dd:3e:ae:bc:45:f1:87:b5: 2c:eb:51:62:df:d0:0d:61:be:35:37:32:df:47:f4: aa:b2:aa:f6:07:43:14:d9:7e:61:cf:ae:9b:aa:dc: 8b:93:3a:2b:07:ff:5f:68:cf:1f:37:d0:bd:65:c6: f6:65:05:4a:5c:e2:cd:43:61:bb:51:c9:f3:fb:8d: d2:16:b7:74:fe:4e:f0:e7:95:16:9e:cf:03:14:3d: a3:25:a8:d5:27:b7:a3:19:e8:fe:0d:fa:fc:2a:47: 3e:ec:13:da:30:2a:68:5b:0a:31:c9:d0:46:4a:af: 88:e9:72:21:83:1b:65:cf:b3:88:f7:9c:45:7b:36: 52:0d:d5:2a:0f:55:c2:70:91:a2:84:98:45:b0:82: e6:47:58:c2:83:ef:bb:f9:c4:77:5b:ed:4e:4b:38: e4:1a:55:10:cc:a1:52:6a:ae:5d:8c:20:fe:69:50: 87:9b:c3:58:dc:11:a9:5d:6c:f3:10:c9:e0:c2:ae: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:07:19:B8:87:55:34:76:53:34:D7:1C:77:03:4F:95:4A:6D:05:95 X509v3 Authority Key Identifier: keyid:7D:47:7B:A4:0A:72:75:2B:F5:0E:42:C0:00:37:65:E4:D7:47:3E:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUd7pApydSv1DkLAADdl5NdHPkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ba8c25-40ef-4bab-aa3a-9a7e1464862a/1/fUd7pApydSv1DkLAADdl5NdHPkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:b5:f1:f8:df:b9:53:dd:ef:e4:ae:7d:c0:90:ed:9f:f2:60: 49:aa:81:e5:a3:7e:e3:5f:57:a3:f1:61:1d:ce:50:e3:fc:3d: f8:df:09:d6:fe:f1:0a:b2:af:f5:cd:54:02:1a:85:df:73:ce: 43:e5:84:8c:bd:72:9c:68:e8:a6:83:10:da:62:e8:6c:55:8e: 35:12:02:29:65:8e:28:5f:99:a6:d8:f9:9c:ad:5c:ec:43:c0: 53:52:65:57:2c:89:49:05:ed:f8:d5:29:77:b2:e4:db:69:35: 1a:cd:f0:d5:1f:76:4f:f2:19:a0:a7:cc:38:16:e2:ac:00:11: 85:05:56:c4:a5:0e:e0:4a:13:59:4c:1e:5a:15:74:72:30:56: 3a:66:53:15:05:62:8b:38:c2:0a:43:14:71:fb:35:2a:d8:e2: 8b:3d:da:bd:f2:72:b7:f0:78:16:d8:17:28:2d:b8:ee:a1:d1: f3:35:1d:4f:77:2d:fb:15:df:5b:9d:50:69:a8:18:d1:49:4b: c2:f6:a8:c8:72:41:12:39:f6:0a:35:fd:3c:d8:0a:5c:1b:ec: b1:a2:26:db:a1:d5:93:48:b2:f5:60:48:c9:a6:87:e7:1d:01: 6c:4e:73:11:7d:1b:ad:36:3d:3a:4e:56:4f:a3:7b:ba:77:1e: 35:dd:98:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKAxjwIYFDbO+b43pY83LSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDc3YmE0MGE3Mjc1MmJmNTBlNDJjMDAwMzc2NWU0ZDc0 NzNlNDYwHhcNMjUxMjIzMDcwMTE1WhcNMjUxMjI0MDcwMTE1WjAzMTEwLwYDVQQD Eyg5OTA3MTliODg3NTUzNDc2NTMzNGQ3MWM3NzAzNGY5NTRhNmQwNTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVdXylBBhbGRVLkSQf5si8yX8gTu cYxblpkUlfbHg19wiAQrt6WF2CV8F+vaOYzPsd8FEGc9SUh7KXRZPqy40/5C3T6u vEXxh7Us61Fi39ANYb41NzLfR/Sqsqr2B0MU2X5hz66bqtyLkzorB/9faM8fN9C9 Zcb2ZQVKXOLNQ2G7Ucnz+43SFrd0/k7w55UWns8DFD2jJajVJ7ejGej+Dfr8Kkc+ 7BPaMCpoWwoxydBGSq+I6XIhgxtlz7OI95xFezZSDdUqD1XCcJGihJhFsILmR1jC g++7+cR3W+1OSzjkGlUQzKFSaq5djCD+aVCHm8NY3BGpXWzzEMngwq5K0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkHGbiHVTR2UzTXHHcDT5VKbQWVMB8GA1UdIwQY MBaAFH1He6QKcnUr9Q5CwAA3ZeTXRz5GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2Et OWE3ZTE0NjQ4NjJhLzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9iYThjMjUtNDBlZi00YmFiLWFhM2EtOWE3ZTE0NjQ4NjJh LzEvZlVkN3BBcHlkU3YxRGtMQUFEZGw1TmRIUGtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd7Xx+N+5 U93v5K59wJDtn/JgSaqB5aN+419Xo/FhHc5Q4/w9+N8J1v7xCrKv9c1UAhqF33PO Q+WEjL1ynGjopoMQ2mLobFWONRICKWWOKF+Zptj5nK1c7EPAU1JlVyyJSQXt+NUp d7Lk22k1Gs3w1R92T/IZoKfMOBbirAARhQVWxKUO4EoTWUweWhV0cjBWOmZTFQVi izjCCkMUcfs1Ktjiiz3avfJyt/B4FtgXKC247qHR8zUdT3ct+xXfW51QaagY0UlL wvaoyHJBEjn2CjX9PNgKXBvssaIm26HVk0iy9WBIyaaH5x0BbE5zEX0brTY9Ok5W T6N7unceNd2YaQ== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:42 2025 by rpki-client