This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json) Hash identifier: +kvf4HjsbPq1B5KK99JF9T9K3uZW4ubft0gEhn1R1Xo= Subject key identifier: 5D:C3:20:7D:5C:81:53:88:80:8C:E6:30:99:F1:52:FE:10:1A:82:74 Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Certificate serial: 019B3D59A57CB6E7736A338E990D144BC090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft Manifest number: 0466 Signing time: Sat 20 Dec 2025 20:00:43 +0000 Manifest this update: Sat 20 Dec 2025 20:00:43 +0000 Manifest next update: Sun 21 Dec 2025 20:00:43 +0000 Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=) 2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: dj6NjvyyCFvHmZWW2HD1XjUqK2XsMyfvBBX8ZgR2480=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:a5:7c:b6:e7:73:6a:33:8e:99:0d:14:4b:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Validity Not Before: Dec 20 20:00:43 2025 GMT Not After : Dec 21 20:00:43 2025 GMT Subject: CN=5dc3207d5c815388808ce63099f152fe101a8274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:4f:f2:f4:3d:6e:b0:3a:85:20:c8:20:c8: ee:75:aa:49:c6:c7:49:f2:b0:82:87:ee:33:f0:c1: 67:5c:a7:98:88:09:f6:b7:e1:6a:12:f4:0d:da:68: f1:69:79:8d:b0:62:e0:f0:74:a4:ba:9f:d2:ea:66: 9c:51:89:83:fe:f0:ce:0b:7a:10:e4:4e:b1:51:7f: 9f:0c:50:b9:be:9c:de:0a:80:7c:92:1f:09:a7:da: 69:4f:1a:c2:d9:e3:5c:cc:32:b3:31:54:ff:3a:14: b0:f5:02:49:b4:71:fb:d3:cd:69:85:8d:14:0f:c5: e6:d3:44:42:22:03:9a:33:85:4d:84:40:22:29:7f: cf:d6:d3:e5:ee:fd:d3:10:44:c2:9f:00:00:00:2f: 8a:cc:dd:e8:2c:6a:94:3e:05:d0:8e:2f:ad:c3:ce: 9a:34:04:e2:52:65:f0:4c:de:6b:b0:e1:1f:d4:4b: 31:50:8b:21:7f:fb:e3:a3:87:f6:bf:61:11:13:49: e0:c1:fc:c8:67:85:4f:76:a1:a3:52:77:d7:02:f7: ff:6c:24:bc:6c:5a:63:ba:a4:0a:f2:58:ed:eb:40: 96:bf:45:6a:d6:7c:72:33:10:61:b9:f9:7e:c7:1b: d4:d5:d4:29:46:91:65:de:4a:54:c6:f7:51:89:27: c1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:20:7D:5C:81:53:88:80:8C:E6:30:99:F1:52:FE:10:1A:82:74 X509v3 Authority Key Identifier: keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:e9:43:a9:87:d5:94:97:80:8a:de:32:97:06:09:db:48: 2e:9f:65:38:35:85:0e:85:f6:4b:73:e3:c8:e8:cb:7c:4b:ea: 45:4d:e6:85:04:b1:5a:8b:0f:0f:17:4f:f9:0d:ef:17:6e:f6: b7:27:df:e0:03:46:cc:d5:f2:8c:5f:a8:b8:5f:f1:58:3d:3f: fe:ec:59:59:a5:8d:9d:ab:42:e2:0c:1c:76:02:cd:8a:16:1c: d4:c3:f8:46:d5:81:5f:0a:42:93:9e:f9:7a:1f:2c:25:52:43: 64:72:54:2c:6d:16:9e:08:38:05:ed:db:39:94:29:22:eb:a8: 3d:06:6f:ed:67:d1:75:66:d1:b9:7b:85:ab:58:8a:9c:b3:db: b9:52:85:c7:61:89:70:f9:55:fb:2f:6c:27:ad:26:ea:ab:2e: d5:cf:fa:c6:09:6f:ad:1c:3f:e4:a3:90:40:22:f2:6d:ed:50: c7:f7:3e:1e:27:5f:89:aa:be:e1:5c:86:fa:71:b5:ba:31:9f: 1f:98:c8:b0:1e:9d:ca:98:ed:0e:2b:ba:79:38:d9:85:cd:6f: 13:d5:78:45:da:18:e4:e2:a5:0c:5d:2b:19:2c:db:df:98:1c: 99:a2:82:fd:57:b1:87:bb:d0:06:51:18:b1:a7:45:ff:de:64: 18:0d:fc:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WaV8tudzajOOmQ0US8CQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1NTM1MjMyM2RiY2MyODdiODdlMGQ2YTQ4MTRhNjNh YmJkNDYwHhcNMjUxMjIwMjAwMDQzWhcNMjUxMjIxMjAwMDQzWjAzMTEwLwYDVQQD Eyg1ZGMzMjA3ZDVjODE1Mzg4ODA4Y2U2MzA5OWYxNTJmZTEwMWE4Mjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cBP8vQ9brA6hSDIIMjudapJxsdJ 8rCCh+4z8MFnXKeYiAn2t+FqEvQN2mjxaXmNsGLg8HSkup/S6macUYmD/vDOC3oQ 5E6xUX+fDFC5vpzeCoB8kh8Jp9ppTxrC2eNczDKzMVT/OhSw9QJJtHH7081phY0U D8Xm00RCIgOaM4VNhEAiKX/P1tPl7v3TEETCnwAAAC+KzN3oLGqUPgXQji+tw86a NATiUmXwTN5rsOEf1EsxUIshf/vjo4f2v2ERE0ngwfzIZ4VPdqGjUnfXAvf/bCS8 bFpjuqQK8ljt60CWv0Vq1nxyMxBhufl+xxvU1dQpRpFl3kpUxvdRiSfB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3DIH1cgVOIgIzmMJnxUv4QGoJ0MB8GA1UdIwQY MBaAFH3FVTUjI9vMKHuH4NakgUpjq71GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQt MjEyYTlmMzEwNjIyLzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQtMjEyYTlmMzEwNjIy LzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdbpQ6mH 1ZSXgIreMpcGCdtILp9lODWFDoX2S3PjyOjLfEvqRU3mhQSxWosPDxdP+Q3vF272 tyff4ANGzNXyjF+ouF/xWD0//uxZWaWNnatC4gwcdgLNihYc1MP4RtWBXwpCk575 eh8sJVJDZHJULG0Wngg4Be3bOZQpIuuoPQZv7WfRdWbRuXuFq1iKnLPbuVKFx2GJ cPlV+y9sJ60m6qsu1c/6xglvrRw/5KOQQCLybe1Qx/c+Hidfiaq+4VyG+nG1ujGf H5jIsB6dypjtDiu6eTjZhc1vE9V4RdoY5OKlDF0rGSzb35gcmaKC/Vexh7vQBlEY sadF/95kGA384Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:22:47 2025 by rpki-client