This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json) Hash identifier: RGfdq8hTOytalfTyfKlvx7IyQLjupjx+s1jUf9wpTWI= Subject key identifier: CA:10:E7:FE:0F:14:45:37:FA:C2:C4:26:0E:B2:7D:91:8D:06:40:FB Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01 Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201 Certificate serial: 019B589A2EFA722D7F0E47F39B09C935CC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft Manifest number: 0DBB Signing time: Fri 26 Dec 2025 03:00:58 +0000 Manifest this update: Fri 26 Dec 2025 03:00:58 +0000 Manifest next update: Sat 27 Dec 2025 03:00:58 +0000 Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=) 2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: sLTG23bvvD2bPlPDOToOL3iiUauXTQDP6NEAYRdqTEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:2e:fa:72:2d:7f:0e:47:f3:9b:09:c9:35:cc:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201 Validity Not Before: Dec 26 03:00:58 2025 GMT Not After : Dec 27 03:00:58 2025 GMT Subject: CN=ca10e7fe0f144537fac2c4260eb27d918d0640fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:1d:ee:2f:0e:d6:ef:c0:e5:d5:be:12:17: 57:4a:c9:df:c9:a6:d5:b8:19:ba:02:fe:d4:9f:97: 61:0e:98:63:33:09:65:67:b7:77:bd:0c:8e:cf:f1: 0d:1e:11:6e:9e:37:0e:20:2d:b8:d2:ff:e3:3e:79: 44:bd:b0:8d:cf:22:51:af:4f:a5:e4:f3:c7:ac:98: 09:c6:90:0f:2a:78:52:e2:92:a3:38:cf:5b:23:05: d5:d8:fa:66:e8:77:b6:a1:d9:f1:20:11:16:ba:b9: e8:89:06:f5:50:66:42:34:43:2b:51:97:ff:22:8f: 1e:ab:d1:d7:8e:c7:d6:0d:9a:9b:28:9b:2b:c6:96: 63:0f:71:de:bc:a7:47:ba:3b:1f:0e:0b:d7:b4:43: 6a:33:1d:d3:30:a7:20:fb:34:93:e4:fe:0c:44:ad: 34:62:b9:72:05:df:3e:4e:2f:4c:a2:2a:23:77:4f: 64:e3:74:fb:b1:00:5b:78:44:40:29:be:78:7e:2e: d1:6d:fa:8a:d4:e9:6d:81:e6:bd:c9:ca:bc:c9:2b: 50:8c:ef:b4:5d:7e:aa:35:e1:4c:d0:2f:66:16:40: bd:dd:1b:a7:f1:a6:e6:17:17:f2:82:ad:39:8b:3a: 31:06:cc:65:ff:5e:d3:fb:d6:f4:9a:e7:27:99:96: 22:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:10:E7:FE:0F:14:45:37:FA:C2:C4:26:0E:B2:7D:91:8D:06:40:FB X509v3 Authority Key Identifier: keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:14:3d:01:e2:2b:ca:8a:cb:37:eb:26:29:47:08:86:f1:98: 50:05:24:27:7d:3c:34:38:19:08:f5:86:f4:0d:f4:6c:4d:09: 6f:33:f7:bc:ab:52:e2:7f:e8:88:63:ab:b5:86:21:44:c3:8b: 1c:fa:31:94:a8:fb:7a:a8:7f:e8:02:ce:72:e4:87:29:ee:61: bb:87:f9:ac:9f:a8:22:a6:85:96:e8:72:37:d5:f7:ec:b7:19: aa:3f:af:8d:a2:92:6f:e1:89:a6:b0:b9:99:ec:f0:53:74:1d: 63:d2:d9:76:35:4a:c4:9b:21:b2:49:90:c9:90:98:41:ef:f2: c6:3e:93:c9:3f:e1:ca:93:56:6c:ff:90:3b:66:46:a7:e4:d9: 57:57:55:d9:b7:08:c8:54:aa:5d:38:e4:2e:3c:55:42:3a:1f: 7b:c7:da:2e:0d:86:73:d1:74:84:dc:d9:a8:c3:6e:f9:58:4a: 8c:ed:64:9e:ce:91:8c:27:d1:77:03:d4:73:9a:af:47:0c:49: aa:55:c0:99:91:03:c4:97:f3:fe:b1:a1:cb:5a:e6:06:c8:2c: 2a:d4:7f:b1:6e:89:5d:6e:fe:3a:55:2f:77:32:4a:ce:86:f8: f9:72:17:19:96:24:ea:70:e3:24:67:d1:1f:67:2f:c8:45:38: a0:e2:c5:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmi76ci1/DkfzmwnJNcxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjFlM2Q4MWYwNWFjYjU2YmRmNzk4ZWQ0YWUyYWY2Mzc3 OTQyMDEwHhcNMjUxMjI2MDMwMDU4WhcNMjUxMjI3MDMwMDU4WjAzMTEwLwYDVQQD EyhjYTEwZTdmZTBmMTQ0NTM3ZmFjMmM0MjYwZWIyN2Q5MThkMDY0MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mwd7i8O1u/A5dW+EhdXSsnfyabV uBm6Av7Un5dhDphjMwllZ7d3vQyOz/ENHhFunjcOIC240v/jPnlEvbCNzyJRr0+l 5PPHrJgJxpAPKnhS4pKjOM9bIwXV2Ppm6He2odnxIBEWurnoiQb1UGZCNEMrUZf/ Io8eq9HXjsfWDZqbKJsrxpZjD3HevKdHujsfDgvXtENqMx3TMKcg+zST5P4MRK00 YrlyBd8+Ti9Moiojd09k43T7sQBbeERAKb54fi7RbfqK1Oltgea9ycq8yStQjO+0 XX6qNeFM0C9mFkC93Run8abmFxfygq05izoxBsxl/17T+9b0mucnmZYi0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoQ5/4PFEU3+sLEJg6yfZGNBkD7MB8GA1UdIwQY MBaAFHxh49gfBay1a995jtSuKvY3eUIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUt OWRmYmU2ZGRhODhhLzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUtOWRmYmU2ZGRhODhh LzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBQ9AeIr yorLN+smKUcIhvGYUAUkJ308NDgZCPWG9A30bE0JbzP3vKtS4n/oiGOrtYYhRMOL HPoxlKj7eqh/6ALOcuSHKe5hu4f5rJ+oIqaFluhyN9X37LcZqj+vjaKSb+GJprC5 mezwU3QdY9LZdjVKxJshskmQyZCYQe/yxj6TyT/hypNWbP+QO2ZGp+TZV1dV2bcI yFSqXTjkLjxVQjofe8faLg2Gc9F0hNzZqMNu+VhKjO1kns6RjCfRdwPUc5qvRwxJ qlXAmZEDxJfz/rGhy1rmBsgsKtR/sW6JXW7+OlUvdzJKzob4+XIXGZYk6nDjJGfR H2cvyEU4oOLFWQ== -----END CERTIFICATE-----Generated at Fri Dec 26 09:36:07 2025 by rpki-client