This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft File: fzXVrkF_Re6FBdds6qGzTEWDlKA.mft (raw, json) Hash identifier: orem+PzG89Z5/hsYSBYGn0BMXrHN9On6rQ9F4Ss+ITk= Subject key identifier: 9F:18:26:D0:3A:5D:86:90:C2:9A:12:C6:FB:9A:65:1D:D9:43:A6:6F Authority key identifier: 7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 Certificate issuer: /CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0 Certificate serial: 019B6AD8C1E8813DA1ECE1E874677A86F8B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft Manifest number: 107A Signing time: Mon 29 Dec 2025 16:02:28 +0000 Manifest this update: Mon 29 Dec 2025 16:02:28 +0000 Manifest next update: Tue 30 Dec 2025 16:02:28 +0000 Files and hashes: 1: 60SN0C5WIf6xee2zdPp6NtBUZT4.roa (hash: 4gepFS/5lwBJIpO8Zj2TAgVElFJH/stJp2iOcS189VA=) 2: fzXVrkF_Re6FBdds6qGzTEWDlKA.crl (hash: WIkpqH9ZRjnIN37ErV4uxyNfmFiTVNFLdcy1IVVmA54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d8:c1:e8:81:3d:a1:ec:e1:e8:74:67:7a:86:f8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f35d5ae417f45ee8505d76ceaa1b34c458394a0 Validity Not Before: Dec 29 16:02:28 2025 GMT Not After : Dec 30 16:02:28 2025 GMT Subject: CN=9f1826d03a5d8690c29a12c6fb9a651dd943a66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:fe:2b:6f:f8:49:76:ed:39:f3:1f:36:c3:74: d8:c7:58:76:30:c6:8d:0e:14:d2:44:9d:35:49:fc: 9c:77:89:00:ef:93:6f:f3:29:81:21:45:ba:be:3b: 29:5e:79:7b:c4:11:ff:bc:65:30:ff:40:c9:58:03: 92:bc:e0:5a:b8:fd:a0:f5:5d:30:6a:7e:48:4d:14: 70:60:b6:49:c1:eb:50:59:f0:98:0d:f5:e0:27:64: 74:01:af:33:b9:9c:70:76:69:a1:33:b1:86:93:27: 0c:e5:a9:e5:70:1b:01:c2:7e:f9:c7:89:b4:1a:00: 67:55:11:9e:2a:d4:38:a7:87:a7:ad:f7:1c:bb:f1: ee:e5:82:69:8b:48:39:00:59:9c:03:c9:d4:c0:91: 72:2d:b3:d2:52:46:b1:3b:7a:a7:ce:35:75:19:29: b6:15:42:5b:94:04:ec:c2:28:61:b2:0a:36:42:98: ff:9b:7a:6d:ba:30:4e:d6:ee:9e:f7:7b:07:36:de: 57:d7:4f:b9:5b:2d:53:72:b4:d5:fc:48:84:9b:54: 5e:24:09:72:bb:f6:89:45:13:69:bc:2d:c5:ca:61: 5f:2d:16:78:6a:64:0c:da:9d:36:97:dd:21:c5:f8: 31:e7:f5:8d:ce:6b:07:e8:4a:19:54:e1:f5:58:49: 95:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:18:26:D0:3A:5D:86:90:C2:9A:12:C6:FB:9A:65:1D:D9:43:A6:6F X509v3 Authority Key Identifier: keyid:7F:35:D5:AE:41:7F:45:EE:85:05:D7:6C:EA:A1:B3:4C:45:83:94:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzXVrkF_Re6FBdds6qGzTEWDlKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c5467b-3962-4b74-ae0d-34473bc91d80/1/fzXVrkF_Re6FBdds6qGzTEWDlKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d6:5b:e2:df:b4:f0:a5:5c:c0:76:4d:a6:71:93:33:af:7b: 23:bb:26:70:87:e0:70:52:7f:e2:4e:72:86:0e:b6:f9:03:42: 52:24:d1:09:c7:85:2b:1a:f5:d6:97:19:86:af:c5:c7:7d:f5: c1:b6:4c:1d:69:f6:40:ce:b1:3b:0f:87:e9:16:1c:8e:43:9e: 1a:3f:8d:9f:65:b5:0d:22:d5:ba:17:3f:92:2f:3f:72:81:83: 45:c2:92:8f:40:ab:80:09:09:ca:71:0a:c1:ec:5f:62:f6:78: 71:b5:6c:39:f4:4f:a5:8d:a5:75:9f:c1:5e:2d:c0:fa:f5:f8: f7:60:ef:5c:d5:00:6f:1a:b9:b8:93:20:ac:77:ad:e9:29:ef: 11:52:53:ef:21:57:84:6f:8e:c9:7f:84:f9:24:15:7c:90:4c: 5d:f9:47:91:a5:88:7e:38:f4:8b:37:98:4b:47:90:aa:00:09: 1d:dd:f0:f7:16:77:ec:2c:f9:25:41:15:47:7d:1d:89:d7:c6: 53:b3:0a:c1:ac:12:1a:60:d0:d3:15:0d:a3:7c:d3:2e:c2:92: 59:6a:89:88:60:a1:8c:3e:a2:aa:a8:de:ac:00:63:7e:19:4c: 3f:eb:9d:e2:f4:01:f4:d0:9c:8b:98:d4:35:d8:d9:da:87:5b: 1a:ba:60:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq2MHogT2h7OHodGd6hvizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMzVkNWFlNDE3ZjQ1ZWU4NTA1ZDc2Y2VhYTFiMzRjNDU4 Mzk0YTAwHhcNMjUxMjI5MTYwMjI4WhcNMjUxMjMwMTYwMjI4WjAzMTEwLwYDVQQD Eyg5ZjE4MjZkMDNhNWQ4NjkwYzI5YTEyYzZmYjlhNjUxZGQ5NDNhNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+/4rb/hJdu058x82w3TYx1h2MMaN DhTSRJ01Sfycd4kA75Nv8ymBIUW6vjspXnl7xBH/vGUw/0DJWAOSvOBauP2g9V0w an5ITRRwYLZJwetQWfCYDfXgJ2R0Aa8zuZxwdmmhM7GGkycM5anlcBsBwn75x4m0 GgBnVRGeKtQ4p4enrfccu/Hu5YJpi0g5AFmcA8nUwJFyLbPSUkaxO3qnzjV1GSm2 FUJblATswihhsgo2Qpj/m3ptujBO1u6e93sHNt5X10+5Wy1TcrTV/EiEm1ReJAly u/aJRRNpvC3FymFfLRZ4amQM2p02l90hxfgx5/WNzmsH6EoZVOH1WEmVjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8YJtA6XYaQwpoSxvuaZR3ZQ6ZvMB8GA1UdIwQY MBaAFH811a5Bf0XuhQXXbOqhs0xFg5SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQt MzQ0NzNiYzkxZDgwLzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jNTQ2N2ItMzk2Mi00Yjc0LWFlMGQtMzQ0NzNiYzkxZDgw LzEvZnpYVnJrRl9SZTZGQmRkczZxR3pURVdEbEtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtZb4t+0 8KVcwHZNpnGTM697I7smcIfgcFJ/4k5yhg62+QNCUiTRCceFKxr11pcZhq/Fx331 wbZMHWn2QM6xOw+H6RYcjkOeGj+Nn2W1DSLVuhc/ki8/coGDRcKSj0CrgAkJynEK wexfYvZ4cbVsOfRPpY2ldZ/BXi3A+vX492DvXNUAbxq5uJMgrHet6SnvEVJT7yFX hG+OyX+E+SQVfJBMXflHkaWIfjj0izeYS0eQqgAJHd3w9xZ37Cz5JUEVR30didfG U7MKwawSGmDQ0xUNo3zTLsKSWWqJiGChjD6iqqjerABjfhlMP+ud4vQB9NCci5jU NdjZ2odbGrpgZg== -----END CERTIFICATE-----Generated at Mon Dec 29 23:44:51 2025 by rpki-client