This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json) Hash identifier: V0ZeqxOC7/NDfusRxitOOePjUBgSjgkprwqgk4tQCAU= Subject key identifier: A6:87:14:DD:F5:E0:4D:A7:C8:7A:33:BC:44:03:0A:63:79:82:15:9E Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Certificate serial: 019B5298205C1277AB1B1C81EECC30BC3672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft Manifest number: 0C09 Signing time: Wed 24 Dec 2025 23:01:00 +0000 Manifest this update: Wed 24 Dec 2025 23:01:00 +0000 Manifest next update: Thu 25 Dec 2025 23:01:00 +0000 Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: JUs6tsHx/8V1/3hFyWSUZWaZWCEULLW9KZWVumTd1fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:20:5c:12:77:ab:1b:1c:81:ee:cc:30:bc:36:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Validity Not Before: Dec 24 23:01:00 2025 GMT Not After : Dec 25 23:01:00 2025 GMT Subject: CN=a68714ddf5e04da7c87a33bc44030a637982159e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fa:e8:5d:c4:14:5e:d3:54:46:b1:c7:a7:ef: 17:0a:7f:be:73:26:d0:92:96:7a:43:68:d6:4c:0b: ee:c8:fd:0b:7b:36:8d:11:73:61:f4:a3:02:b8:8f: e6:df:c3:e6:61:0b:5d:f0:4b:65:53:3e:b8:2d:de: 9e:20:b0:42:1f:aa:51:30:9b:78:48:ee:51:f8:88: 95:b7:37:07:eb:b9:1d:da:14:e8:5e:43:41:27:f5: 1d:31:df:21:33:f3:ad:71:5d:1b:3a:a8:07:b8:98: 50:1b:7b:4f:53:33:db:9b:7f:bd:3e:7a:86:a1:aa: 15:88:14:30:91:0c:67:b2:64:82:76:0b:7c:af:30: 0b:6d:22:99:db:70:85:1f:66:8d:0a:2f:df:89:d2: ed:e8:d6:fb:ab:7d:97:d9:05:92:d4:19:97:71:a8: 05:e6:bc:c9:d1:d6:5d:e1:fd:c4:76:17:c2:43:be: 3a:2e:ed:8a:f4:4c:92:06:82:10:8e:4c:34:6f:51: 0e:34:fa:30:29:0b:a7:64:33:bb:cc:df:d3:ca:12: 7c:04:11:b7:23:83:61:20:2f:68:93:bb:13:15:dd: 1e:aa:34:c0:ea:73:cb:68:51:1a:d0:0a:fa:2a:66: 87:60:a4:1e:29:cc:08:85:73:23:e1:d6:08:26:c3: 5a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:87:14:DD:F5:E0:4D:A7:C8:7A:33:BC:44:03:0A:63:79:82:15:9E X509v3 Authority Key Identifier: keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1e:d8:c5:88:69:52:00:c9:ac:62:27:2b:60:b5:8c:11:72: e9:cb:80:b2:e8:4c:5f:41:8c:9b:4e:27:7e:98:53:a9:65:8f: bd:73:ec:23:ef:d4:64:f3:d1:38:ce:ef:9c:4f:cc:19:e6:92: 1b:40:fd:7c:9b:43:b3:ae:85:d4:ba:c3:d5:bf:a6:82:66:a0: 37:91:7c:4e:0d:1b:de:44:43:b2:1a:6a:a9:7c:1f:ef:44:b7: ae:59:6d:6f:fc:2a:1b:07:58:ac:00:15:0a:41:3f:f5:63:41: b7:d2:7f:a4:5d:55:eb:8f:e6:71:02:e7:d9:aa:65:e3:6f:ee: 05:3a:1b:db:f9:e2:79:85:63:29:6b:bf:c9:5d:01:29:66:2d: c6:b6:ba:7f:a3:7d:76:74:c0:cd:4f:ba:88:bb:8c:4a:3a:3c: 86:3e:02:be:b9:d8:ab:17:0c:fe:a8:f9:99:16:ec:20:ee:f3: 13:b0:5e:34:18:df:a8:ac:1b:b6:c0:15:cb:63:3c:55:30:9d: 23:28:f9:30:45:ae:83:f0:69:a7:dc:0d:68:fa:b2:ff:c2:60: e7:3f:b6:e8:f6:98:64:39:f2:98:57:a0:8f:0f:d7:cd:4c:f5: 62:12:11:ee:c8:25:cf:0c:e3:a3:87:90:9e:87:61:d1:29:c0: fb:19:49:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmCBcEnerGxyB7swwvDZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi MTdkOWMwHhcNMjUxMjI0MjMwMTAwWhcNMjUxMjI1MjMwMTAwWjAzMTEwLwYDVQQD EyhhNjg3MTRkZGY1ZTA0ZGE3Yzg3YTMzYmM0NDAzMGE2Mzc5ODIxNTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufroXcQUXtNURrHHp+8XCn++cybQ kpZ6Q2jWTAvuyP0LezaNEXNh9KMCuI/m38PmYQtd8EtlUz64Ld6eILBCH6pRMJt4 SO5R+IiVtzcH67kd2hToXkNBJ/UdMd8hM/OtcV0bOqgHuJhQG3tPUzPbm3+9PnqG oaoViBQwkQxnsmSCdgt8rzALbSKZ23CFH2aNCi/fidLt6Nb7q32X2QWS1BmXcagF 5rzJ0dZd4f3EdhfCQ746Lu2K9EySBoIQjkw0b1EONPowKQunZDO7zN/TyhJ8BBG3 I4NhIC9ok7sTFd0eqjTA6nPLaFEa0Ar6KmaHYKQeKcwIhXMj4dYIJsNawwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaHFN314E2nyHozvEQDCmN5ghWeMB8GA1UdIwQY MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh7YxYhp UgDJrGInK2C1jBFy6cuAsuhMX0GMm04nfphTqWWPvXPsI+/UZPPROM7vnE/MGeaS G0D9fJtDs66F1LrD1b+mgmagN5F8Tg0b3kRDshpqqXwf70S3rlltb/wqGwdYrAAV CkE/9WNBt9J/pF1V64/mcQLn2apl42/uBTob2/nieYVjKWu/yV0BKWYtxra6f6N9 dnTAzU+6iLuMSjo8hj4CvrnYqxcM/qj5mRbsIO7zE7BeNBjfqKwbtsAVy2M8VTCd Iyj5MEWug/Bpp9wNaPqy/8Jg5z+26PaYZDnymFegjw/XzUz1YhIR7sglzwzjo4eQ nodh0SnA+xlJkA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:11:55 2025 by rpki-client