This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json) Hash identifier: YwsiF4Op1zA789s2ImDXD66x5Z/um+UWNShnoVdBYh4= Subject key identifier: 87:E5:0A:07:61:16:71:D6:00:E1:DE:0B:A3:BC:95:F5:18:C6:ED:9C Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5 Certificate serial: 019B4F2925F4FB1CCFC1BD6078142A9733AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 07:00:55 +0000 Manifest this update: Wed 24 Dec 2025 07:00:55 +0000 Manifest next update: Thu 25 Dec 2025 07:00:55 +0000 Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=) 2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: SdtzOs5cSoTg9BkpoyROlOR4k2BqGVFqrmSkKqohj2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:25:f4:fb:1c:cf:c1:bd:60:78:14:2a:97:33:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5 Validity Not Before: Dec 24 07:00:55 2025 GMT Not After : Dec 25 07:00:55 2025 GMT Subject: CN=87e50a07611671d600e1de0ba3bc95f518c6ed9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:08:12:20:19:93:45:3c:cc:04:66:31:3f:4a: 5a:be:df:3e:7d:06:dc:52:21:ce:8e:03:65:62:e5: d6:fc:60:4b:0a:ef:04:d0:02:63:56:98:a8:aa:5c: d8:24:69:ae:53:f5:8f:ef:69:a2:c0:2a:47:e3:e1: 3e:fe:5d:e4:84:16:10:9b:c0:f4:14:7f:d0:40:ce: cc:11:40:7d:68:a9:95:b1:75:18:72:6d:65:d4:0f: e6:f1:21:3d:41:bc:0c:85:32:c3:9a:f0:4d:a9:4b: f9:12:30:84:60:fa:2d:2a:e5:82:62:d7:c8:d7:22: 90:b6:5c:74:40:75:1e:16:b8:e0:5d:a1:35:0e:72: ff:83:13:20:15:4f:fb:ca:9a:65:d5:c1:71:3f:ef: 7a:fd:ce:8c:56:23:3b:29:65:16:6d:1c:cd:f6:e3: be:cf:c4:fd:5e:7f:e2:8f:ff:42:d5:fb:87:51:a9: 12:9b:e6:b2:cc:b3:33:1a:4b:1a:de:59:6a:40:9e: b7:ac:7e:e6:ff:4b:74:a7:a0:a5:be:70:ae:18:ca: 50:6e:26:28:73:b4:4d:3d:89:fb:73:c5:7d:ce:f6: 45:8d:f5:22:5f:4c:61:62:2b:bf:3b:ac:f4:9e:2c: 89:fb:f6:ac:74:c3:9c:c7:14:c4:81:e7:3d:d9:18: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:0A:07:61:16:71:D6:00:E1:DE:0B:A3:BC:95:F5:18:C6:ED:9C X509v3 Authority Key Identifier: keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b4:29:a6:62:cc:51:80:04:38:a8:da:44:27:ff:dd:9e:05: d1:d9:60:f3:c9:02:49:bd:b4:5d:df:ed:10:f3:a1:ac:a5:da: b8:37:20:7d:3f:dc:c3:e5:45:39:0b:39:96:a8:cf:48:ce:6d: c1:12:f7:69:85:97:47:db:b5:f8:53:f1:fd:55:a3:1e:23:78: 93:95:57:59:bb:89:20:bb:9a:47:95:6b:79:7a:51:83:44:5e: 50:e8:28:ad:34:73:67:36:fa:98:c0:22:3e:0e:21:37:3d:83: e0:c6:b1:cf:a7:cc:47:c1:30:ed:a2:ef:0c:78:36:24:2d:34: 7a:92:3a:12:b1:c1:cd:b8:f7:be:f6:71:c4:9d:d8:23:0f:20: f8:97:cc:5e:2d:ad:93:19:f3:05:a6:80:09:67:57:a1:4f:d6: 81:04:92:9a:93:d6:87:6a:ba:4f:99:4f:8b:8e:90:4e:b2:15: a5:ba:fc:b9:66:1a:c2:74:c6:ec:d4:0e:38:73:23:88:51:14: 47:71:af:0d:77:2e:a3:1d:2d:46:51:7e:56:53:5c:f7:98:7b: 1b:53:7b:a4:76:f7:00:b1:aa:d1:7d:89:d0:08:b8:ee:23:c2: 31:ec:9e:82:ce:dc:fb:65:d8:10:33:43:c2:89:3e:ef:dc:02: 2c:c7:89:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKSX0+xzPwb1geBQqlzOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx ZDE5YjUwHhcNMjUxMjI0MDcwMDU1WhcNMjUxMjI1MDcwMDU1WjAzMTEwLwYDVQQD Eyg4N2U1MGEwNzYxMTY3MWQ2MDBlMWRlMGJhM2JjOTVmNTE4YzZlZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQgSIBmTRTzMBGYxP0pavt8+fQbc UiHOjgNlYuXW/GBLCu8E0AJjVpioqlzYJGmuU/WP72miwCpH4+E+/l3khBYQm8D0 FH/QQM7MEUB9aKmVsXUYcm1l1A/m8SE9QbwMhTLDmvBNqUv5EjCEYPotKuWCYtfI 1yKQtlx0QHUeFrjgXaE1DnL/gxMgFU/7yppl1cFxP+96/c6MViM7KWUWbRzN9uO+ z8T9Xn/ij/9C1fuHUakSm+ayzLMzGksa3llqQJ63rH7m/0t0p6ClvnCuGMpQbiYo c7RNPYn7c8V9zvZFjfUiX0xhYiu/O6z0niyJ+/asdMOcxxTEgec92RhtowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIflCgdhFnHWAOHeC6O8lfUYxu2cMB8GA1UdIwQY MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbQppmLM UYAEOKjaRCf/3Z4F0dlg88kCSb20Xd/tEPOhrKXauDcgfT/cw+VFOQs5lqjPSM5t wRL3aYWXR9u1+FPx/VWjHiN4k5VXWbuJILuaR5VreXpRg0ReUOgorTRzZzb6mMAi Pg4hNz2D4Maxz6fMR8Ew7aLvDHg2JC00epI6ErHBzbj3vvZxxJ3YIw8g+JfMXi2t kxnzBaaACWdXoU/WgQSSmpPWh2q6T5lPi46QTrIVpbr8uWYawnTG7NQOOHMjiFEU R3GvDXcuox0tRlF+VlNc95h7G1N7pHb3ALGq0X2J0Ai47iPCMeyegs7c+2XYEDND wok+79wCLMeJSA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:11:07 2025 by rpki-client