This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft File: fbrLH8LCBjBCeBYxtRfOR1Izor0.mft (raw, json) Hash identifier: 7wZBvwgkEW4HObE8x1zzDn9g4UPDk2UK1k/WtLeMosc= Subject key identifier: E1:45:21:36:0D:8F:BB:7F:F8:95:76:D4:F7:C8:7F:BF:A9:3B:5C:56 Authority key identifier: 7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD Certificate issuer: /CN=7dbacb1fc2c2063042781631b517ce475233a2bd Certificate serial: 019B533CBF3AECB5D5ED7CA5DAB49FC7BD29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft Manifest number: 179B Signing time: Thu 25 Dec 2025 02:00:48 +0000 Manifest this update: Thu 25 Dec 2025 02:00:48 +0000 Manifest next update: Fri 26 Dec 2025 02:00:48 +0000 Files and hashes: 1: BP7hIYhiDfgoLYC3EQ_BWDeI0kM.roa (hash: ojCr5JBVKUCnA0I9p1E7esZg/ahEto7MwTtjkK6NUEk=) 2: fbrLH8LCBjBCeBYxtRfOR1Izor0.crl (hash: P5QavUpcHRB+3sxgn4liQsLuH9bqyGy+zTLQeH6EE/E=) 3: jZCTuDYNLnCGsAPDwWIixMbLxV4.roa (hash: V9apneKgCADjYV+Y9jMV35PL/ZewdT33ExfgNVHPedw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3c:bf:3a:ec:b5:d5:ed:7c:a5:da:b4:9f:c7:bd:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbacb1fc2c2063042781631b517ce475233a2bd Validity Not Before: Dec 25 02:00:48 2025 GMT Not After : Dec 26 02:00:48 2025 GMT Subject: CN=e14521360d8fbb7ff89576d4f7c87fbfa93b5c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:76:61:6d:ef:ef:49:cb:de:74:4b:a3:09:58: c6:6b:77:25:d9:32:2d:e5:3d:db:aa:2d:82:4c:62: 64:ad:39:c4:31:3d:18:eb:d0:bd:2f:78:13:b3:ef: f6:c1:7e:2f:7d:15:d5:a5:55:d2:e6:bf:75:db:31: ac:99:91:44:c7:5c:47:97:7a:45:e1:7f:02:62:b4: 87:60:15:24:b2:e2:da:a6:7b:08:38:0e:44:ee:27: 97:b9:b1:63:5f:8a:28:71:d7:64:41:95:6f:d1:e3: 97:dc:67:1e:ce:e3:06:c2:1f:1c:0f:9f:cb:10:45: cd:2b:f9:09:31:0e:d5:43:6c:4e:d4:cb:50:00:9a: b0:7d:66:fe:01:78:06:70:55:c1:2b:40:cc:8b:e4: d3:d7:f5:f8:69:9e:71:67:35:a2:65:16:2b:d8:5e: 8f:ba:6e:bf:a4:e4:aa:b0:4a:dd:73:12:3e:5e:18: f1:b2:82:10:83:f7:9e:05:5a:56:7e:e0:64:f0:38: e5:8d:c6:2a:af:ff:19:ab:73:c8:07:7f:fc:a8:90: 9e:b9:0d:82:e3:fd:f5:d3:31:34:b3:2d:b8:50:44: f2:b0:e4:2e:b9:40:0f:9b:8e:53:62:3e:05:f7:83: d7:b6:4b:7d:7a:ae:c0:43:eb:0a:c2:6e:ff:20:23: 50:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:45:21:36:0D:8F:BB:7F:F8:95:76:D4:F7:C8:7F:BF:A9:3B:5C:56 X509v3 Authority Key Identifier: keyid:7D:BA:CB:1F:C2:C2:06:30:42:78:16:31:B5:17:CE:47:52:33:A2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbrLH8LCBjBCeBYxtRfOR1Izor0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3d2d7b-2c5c-498f-85bf-285ec8fe8ec6/1/fbrLH8LCBjBCeBYxtRfOR1Izor0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:f7:24:28:ab:1a:bc:3b:79:96:16:15:51:61:fb:f1:e3: 92:13:de:09:51:13:5f:36:1d:91:35:8f:30:33:bd:fe:21:5e: 34:66:8e:3d:5d:f3:b5:27:70:6f:69:ed:3c:74:b4:cd:b6:13: 68:c5:ea:30:49:ad:44:e0:9c:40:ea:1f:fa:5d:8f:72:d0:3e: 38:07:e2:79:53:f1:8a:3a:2d:5f:9d:6d:0d:c0:9a:6c:8a:83: 0f:42:23:fb:ff:c7:de:20:9b:5d:00:b2:5d:1b:13:df:53:95: ff:6b:0e:1f:d3:51:60:77:2f:53:d0:ac:1f:55:c9:bf:d7:5b: ba:21:84:4a:7d:f1:43:24:19:b0:b1:7b:52:64:81:49:73:0f: 4b:5d:35:54:0f:0b:f6:05:1e:f9:87:29:81:63:13:a1:63:5e: fd:e3:4a:07:a7:ec:3f:09:9f:0b:59:ca:cb:92:15:b2:ea:aa: 45:84:6c:0d:ee:e5:14:f8:b7:80:c4:b6:ca:79:0c:b9:8e:29: a4:66:ea:e3:51:76:1c:33:3c:87:d4:c3:47:a2:bf:ab:05:72: fc:43:51:0c:98:26:83:32:7a:50:b1:44:a7:ad:66:ad:2b:0a: 9e:cf:18:01:10:41:0d:f3:6c:b2:36:04:ef:52:81:5a:4d:3a: e3:24:39:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPL867LXV7Xyl2rSfx70pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFjYjFmYzJjMjA2MzA0Mjc4MTYzMWI1MTdjZTQ3NTIz M2EyYmQwHhcNMjUxMjI1MDIwMDQ4WhcNMjUxMjI2MDIwMDQ4WjAzMTEwLwYDVQQD EyhlMTQ1MjEzNjBkOGZiYjdmZjg5NTc2ZDRmN2M4N2ZiZmE5M2I1YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZhbe/vScvedEujCVjGa3cl2TIt 5T3bqi2CTGJkrTnEMT0Y69C9L3gTs+/2wX4vfRXVpVXS5r912zGsmZFEx1xHl3pF 4X8CYrSHYBUksuLapnsIOA5E7ieXubFjX4oocddkQZVv0eOX3GcezuMGwh8cD5/L EEXNK/kJMQ7VQ2xO1MtQAJqwfWb+AXgGcFXBK0DMi+TT1/X4aZ5xZzWiZRYr2F6P um6/pOSqsErdcxI+XhjxsoIQg/eeBVpWfuBk8DjljcYqr/8Zq3PIB3/8qJCeuQ2C 4/310zE0sy24UETysOQuuUAPm45TYj4F94PXtkt9eq7AQ+sKwm7/ICNQHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFFITYNj7t/+JV21PfIf7+pO1xWMB8GA1UdIwQY MBaAFH26yx/CwgYwQngWMbUXzkdSM6K9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYt Mjg1ZWM4ZmU4ZWM2LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zZDJkN2ItMmM1Yy00OThmLTg1YmYtMjg1ZWM4ZmU4ZWM2 LzEvZmJyTEg4TENCakJDZUJZeHRSZk9SMUl6b3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt33JCir Grw7eZYWFVFh+/HjkhPeCVETXzYdkTWPMDO9/iFeNGaOPV3ztSdwb2ntPHS0zbYT aMXqMEmtROCcQOof+l2PctA+OAfieVPxijotX51tDcCabIqDD0Ij+//H3iCbXQCy XRsT31OV/2sOH9NRYHcvU9CsH1XJv9dbuiGESn3xQyQZsLF7UmSBSXMPS101VA8L 9gUe+YcpgWMToWNe/eNKB6fsPwmfC1nKy5IVsuqqRYRsDe7lFPi3gMS2ynkMuY4p pGbq41F2HDM8h9TDR6K/qwVy/ENRDJgmgzJ6ULFEp61mrSsKns8YARBBDfNssjYE 71KBWk064yQ5gQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:21:11 2025 by rpki-client