This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json) Hash identifier: ulkKkUasFP8A+BOII7XSf3T72+tc0qNNSmMZGxELASI= Subject key identifier: 1C:44:EB:9D:C3:5C:2B:A9:54:5B:65:7E:B4:BA:8C:06:9B:20:96:A3 Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019B3E6E2FBF0998FA592451950CAC20A08A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft Manifest number: 179B Signing time: Sun 21 Dec 2025 01:02:47 +0000 Manifest this update: Sun 21 Dec 2025 01:02:47 +0000 Manifest next update: Mon 22 Dec 2025 01:02:47 +0000 Files and hashes: 1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=) 2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=) 3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=) 4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=) 5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=) 6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: c+orhHIKUktgpF7vpcveB5y5VpDI2lFOtfOMSuqVs74=) 7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:2f:bf:09:98:fa:59:24:51:95:0c:ac:20:a0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Dec 21 01:02:47 2025 GMT Not After : Dec 22 01:02:47 2025 GMT Subject: CN=1c44eb9dc35c2ba9545b657eb4ba8c069b2096a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:1b:ef:2b:ec:f8:ca:8d:62:cd:2a:ac:32: 0c:26:b1:d5:64:48:2e:b5:ef:87:7f:5f:b5:d5:a0: ab:c1:b9:a4:ed:f2:3a:88:94:0c:29:75:d0:ed:2e: b7:bd:14:12:49:e9:06:72:59:0b:e6:23:57:ad:4b: 0f:5f:88:f9:99:3b:4f:58:5d:68:d6:2b:fb:7b:b9: ae:de:a6:29:d1:16:fd:0d:89:58:46:c2:70:3c:56: da:ab:41:43:67:81:b1:cb:57:2e:77:1a:61:0e:f9: 23:5d:74:eb:43:d8:c2:3b:68:de:ee:89:cb:89:84: 08:2e:21:de:ae:27:a0:20:fd:4c:bd:88:9a:17:fc: d3:30:ea:a3:01:94:8a:c3:cc:4f:87:2b:00:89:e4: 27:60:60:61:23:c4:cc:33:1f:3d:12:51:c4:48:0a: 51:d0:9d:0a:e8:ee:81:2d:37:09:c4:67:b7:d6:a7: d9:ac:4b:3b:ea:c3:e3:8c:46:8f:79:0c:0f:1a:0b: 0e:2d:1c:77:8c:70:ae:cd:eb:07:3d:3b:78:95:bc: d2:02:ac:32:33:8e:43:4b:d5:1d:3c:4b:4d:30:5b: a8:bb:7f:67:aa:b6:44:0b:1f:5a:e9:28:7b:dd:5a: 66:75:41:92:3f:13:4d:df:bc:e2:f9:1c:12:2e:08: d6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:44:EB:9D:C3:5C:2B:A9:54:5B:65:7E:B4:BA:8C:06:9B:20:96:A3 X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:73:c1:a2:e9:22:03:cd:f1:f5:61:03:d3:c1:71:d8:32:49: e7:3e:59:d8:da:74:be:eb:d1:75:6e:7f:42:d1:9e:81:8b:05: ca:df:f4:3f:f1:4f:29:2e:d9:b3:af:2b:6b:dd:2f:a0:96:db: d6:c9:fe:4f:16:9d:43:80:4b:c5:31:66:6e:9b:12:fb:5d:4f: af:c1:a4:ca:b9:70:e0:c7:2c:93:b2:0c:23:67:6c:75:3d:be: 92:5d:6b:01:23:27:4f:ce:af:32:3a:3c:e5:ee:b2:42:f5:4e: 67:d9:cd:68:c8:04:45:93:ef:57:ae:72:cb:e5:f1:9b:89:b1: 97:92:d2:cf:e9:bf:05:e8:12:2e:15:c9:e7:51:ee:4a:33:1c: cb:cd:cf:da:14:9b:75:1a:fb:e9:b0:96:bf:f8:e1:2e:43:2f: 56:b0:b0:94:d6:a9:15:77:41:10:7c:84:de:7b:7b:58:50:56: 98:84:8b:bc:68:98:ee:84:51:53:85:e8:53:66:53:de:7f:cb: c4:ac:05:95:7a:9b:83:de:19:07:fa:6a:9d:cc:05:96:0a:d6: 6d:a9:a0:be:49:e3:ba:52:d6:35:2c:1d:df:71:6f:78:37:99: bd:e9:a9:07:18:9e:c1:63:38:43:16:3e:b0:7b:24:cf:58:a2: d1:e4:1a:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bi+/CZj6WSRRlQysIKCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjUxMjIxMDEwMjQ3WhcNMjUxMjIyMDEwMjQ3WjAzMTEwLwYDVQQD EygxYzQ0ZWI5ZGMzNWMyYmE5NTQ1YjY1N2ViNGJhOGMwNjliMjA5NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz8b7yvs+MqNYs0qrDIMJrHVZEgu te+Hf1+11aCrwbmk7fI6iJQMKXXQ7S63vRQSSekGclkL5iNXrUsPX4j5mTtPWF1o 1iv7e7mu3qYp0Rb9DYlYRsJwPFbaq0FDZ4Gxy1cudxphDvkjXXTrQ9jCO2je7onL iYQILiHeriegIP1MvYiaF/zTMOqjAZSKw8xPhysAieQnYGBhI8TMMx89ElHESApR 0J0K6O6BLTcJxGe31qfZrEs76sPjjEaPeQwPGgsOLRx3jHCuzesHPTt4lbzSAqwy M45DS9UdPEtNMFuou39nqrZECx9a6Sh73VpmdUGSPxNN37zi+RwSLgjWNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxE653DXCupVFtlfrS6jAabIJajMB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnPBouki A83x9WED08Fx2DJJ5z5Z2Np0vuvRdW5/QtGegYsFyt/0P/FPKS7Zs68ra90voJbb 1sn+TxadQ4BLxTFmbpsS+11Pr8Gkyrlw4Mcsk7IMI2dsdT2+kl1rASMnT86vMjo8 5e6yQvVOZ9nNaMgERZPvV65yy+Xxm4mxl5LSz+m/BegSLhXJ51HuSjMcy83P2hSb dRr76bCWv/jhLkMvVrCwlNapFXdBEHyE3nt7WFBWmISLvGiY7oRRU4XoU2ZT3n/L xKwFlXqbg94ZB/pqncwFlgrWbamgvknjulLWNSwd33FveDeZvempBxiewWM4QxY+ sHskz1ii0eQa4A== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:43 2025 by rpki-client