This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json) Hash identifier: MpPtaUMCEumGxUnhsUzmzOAt1+tsEPwilvCa0T2/4EM= Subject key identifier: 7E:D0:AE:B3:7A:3B:90:8A:A5:5E:84:61:3C:31:6F:42:38:3B:04:13 Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Certificate serial: 019B3BD93127E294B5F2D2274475CBD434FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft Manifest number: 01AD Signing time: Sat 20 Dec 2025 13:00:48 +0000 Manifest this update: Sat 20 Dec 2025 13:00:48 +0000 Manifest next update: Sun 21 Dec 2025 13:00:48 +0000 Files and hashes: 1: 9KxQLDioSqe2aYOVeKPxnDsDwuw.roa (hash: T09E0Yzsg9eTP49n/hH17rluOJ232f0wRoO/hcyQIQU=) 2: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: TP08M+HiJ42bkoD0rlkwoMmdIZ0kKHU0GSXjwPUj+pw=) 3: Q8cVRY59L3A1W2LpGOt9ieYk9RM.roa (hash: yXkhjZJyjmNgePGj4chVCFye5ELdiGcKlqAHTFsZoww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:31:27:e2:94:b5:f2:d2:27:44:75:cb:d4:34:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9 Validity Not Before: Dec 20 13:00:48 2025 GMT Not After : Dec 21 13:00:48 2025 GMT Subject: CN=7ed0aeb37a3b908aa55e84613c316f42383b0413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bb:41:3b:71:2e:b8:fc:70:48:a3:da:5d:a9: 2f:47:7c:83:d6:4f:64:ed:81:8f:fc:11:7f:b7:26: ef:ff:0c:aa:e8:5b:ad:d4:01:5c:04:db:b6:dd:b6: e5:bd:ad:41:0b:ca:50:06:60:f8:ee:d3:09:5a:b3: d8:6d:9f:7d:30:88:ec:2f:79:55:e1:0b:c5:6a:11: 42:c6:30:86:25:ed:ad:dd:df:9a:30:be:40:68:df: 02:ca:21:22:3a:f6:63:c1:aa:ef:d5:e5:e5:d7:73: a5:0d:1d:02:05:5b:b1:f8:89:8e:ad:df:0b:a4:ec: 02:d5:a5:0e:d5:f8:f8:f0:01:53:d2:c2:12:73:dd: 9a:a8:76:8b:6e:04:ec:5f:7a:4c:81:7c:4c:1a:a8: 91:fe:49:d8:d9:7a:ec:f7:54:a1:18:d3:98:ec:40: b0:4f:9f:2d:b2:a2:4b:05:a0:68:39:03:ea:37:92: 3a:1a:dd:a9:06:5e:ca:8f:be:3a:ec:ed:39:a5:7b: 86:e7:71:d0:c0:31:df:8b:f2:5f:89:00:d8:f9:50: 96:8b:35:e1:cf:82:a0:5e:4b:df:97:a7:fc:b0:08: 8a:b0:b4:b9:13:0b:22:cb:09:26:96:46:15:0f:64: e2:85:d5:90:44:30:26:a7:49:52:79:16:33:60:41: 13:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:AE:B3:7A:3B:90:8A:A5:5E:84:61:3C:31:6F:42:38:3B:04:13 X509v3 Authority Key Identifier: keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:2d:a1:90:58:b4:db:ff:99:0f:72:61:08:f7:42:9a:8b:33: 95:b3:a5:4a:ce:e6:73:78:b2:e3:45:5a:a2:db:30:4b:d9:19: ac:b5:30:c9:a6:c9:b7:ed:c1:c5:b5:01:55:6c:c0:a1:5b:95: e9:96:63:69:9e:1f:c4:7b:6b:fc:b2:b4:91:79:b0:81:22:7c: ae:69:93:d6:d7:b8:10:a1:f3:b4:a7:51:29:2d:db:82:fd:29: d2:b5:84:ab:ce:0d:30:51:d5:0a:91:c9:ac:3b:8d:a3:ea:3d: ca:9e:d7:22:13:6c:23:58:7f:9f:0f:1b:43:dd:56:12:e9:50: 3f:40:41:8a:58:cd:7a:a3:c2:45:70:59:d4:a6:2f:20:91:45: d6:7f:0c:e5:e7:d7:d1:53:ca:28:a7:f8:3e:24:ad:93:29:64: 8a:68:1b:09:87:55:3b:8f:51:b0:68:0c:5b:66:16:ce:28:26: f9:15:36:e4:a9:26:06:91:bb:87:57:78:69:f6:08:0b:7d:88: 3b:d5:f6:0b:01:a0:db:dd:58:5b:bc:7e:14:c0:f1:f7:59:2b: ab:c7:6f:ea:5d:be:ae:11:18:e3:d4:7a:67:25:36:d1:b0:2a: 71:f6:32:63:d6:15:a1:6b:92:e2:50:0e:fd:9a:d3:71:e7:24: 18:1c:3d:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72TEn4pS18tInRHXL1DT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzA3MTZjOGRkODNlNGZlYjA1ZjY1NDM0M2MxMjBhNzZi ZGIzYjkwHhcNMjUxMjIwMTMwMDQ4WhcNMjUxMjIxMTMwMDQ4WjAzMTEwLwYDVQQD Eyg3ZWQwYWViMzdhM2I5MDhhYTU1ZTg0NjEzYzMxNmY0MjM4M2IwNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirtBO3EuuPxwSKPaXakvR3yD1k9k 7YGP/BF/tybv/wyq6Fut1AFcBNu23bblva1BC8pQBmD47tMJWrPYbZ99MIjsL3lV 4QvFahFCxjCGJe2t3d+aML5AaN8CyiEiOvZjwarv1eXl13OlDR0CBVux+ImOrd8L pOwC1aUO1fj48AFT0sISc92aqHaLbgTsX3pMgXxMGqiR/knY2Xrs91ShGNOY7ECw T58tsqJLBaBoOQPqN5I6Gt2pBl7Kj7467O05pXuG53HQwDHfi/JfiQDY+VCWizXh z4KgXkvfl6f8sAiKsLS5EwsiywkmlkYVD2TihdWQRDAmp0lSeRYzYEET+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7QrrN6O5CKpV6EYTwxb0I4OwQTMB8GA1UdIwQY MBaAFBRwcWyN2D5P6wX2VDQ8Egp2vbO5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgt NmEyMzhiYTE3OWNkLzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84YjllNGYtZDEzZS00MjUxLTlkMTgtNmEyMzhiYTE3OWNk LzEvRkhCeGJJM1lQa19yQmZaVU5Ed1NDbmE5czdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEy2hkFi0 2/+ZD3JhCPdCmoszlbOlSs7mc3iy40VaotswS9kZrLUwyabJt+3BxbUBVWzAoVuV 6ZZjaZ4fxHtr/LK0kXmwgSJ8rmmT1te4EKHztKdRKS3bgv0p0rWEq84NMFHVCpHJ rDuNo+o9yp7XIhNsI1h/nw8bQ91WEulQP0BBiljNeqPCRXBZ1KYvIJFF1n8M5efX 0VPKKKf4PiStkylkimgbCYdVO49RsGgMW2YWzigm+RU25KkmBpG7h1d4afYIC32I O9X2CwGg291YW7x+FMDx91krq8dv6l2+rhEY49R6ZyU20bAqcfYyY9YVoWuS4lAO /ZrTceckGBw9nw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:49 2025 by rpki-client