This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json) Hash identifier: Js5DpF734DazApkKA/hUEmuVeRCMCMvRRIQ+GGj019A= Subject key identifier: 5C:9D:D8:F2:C8:BC:0C:C0:22:F6:17:64:FC:17:6D:43:D3:3E:32:D3 Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Certificate serial: 019B51BD135E2329DB8717BC90B5C80DC902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 19:01:44 +0000 Manifest this update: Wed 24 Dec 2025 19:01:44 +0000 Manifest next update: Thu 25 Dec 2025 19:01:44 +0000 Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=) 2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: yFzGq3LJuu0iwuUzZ/9QROLNp3WdZvh82I3JJaQhiIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:13:5e:23:29:db:87:17:bc:90:b5:c8:0d:c9:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Validity Not Before: Dec 24 19:01:44 2025 GMT Not After : Dec 25 19:01:44 2025 GMT Subject: CN=5c9dd8f2c8bc0cc022f61764fc176d43d33e32d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:4e:24:9b:65:f6:fe:08:c7:9b:57:84:4b: dd:ae:08:4a:ee:52:16:4d:21:9e:b8:5f:0e:a2:c2: 2a:86:78:ab:56:5a:6e:b4:bd:27:7b:88:53:a9:40: 76:0d:b3:b1:bf:19:d0:61:60:ca:69:74:a0:b9:76: 44:fa:c9:5a:c5:ce:c6:69:91:6f:45:67:0d:39:a9: 41:ac:30:32:0b:f3:7a:21:df:93:0c:51:ac:25:9f: b5:43:15:fe:af:ed:d5:fc:17:0b:75:5a:c5:98:42: 4d:33:c5:3c:d2:39:16:f8:a7:ed:5d:c2:76:e5:78: 50:21:00:47:cc:cc:f9:65:72:19:91:03:92:54:86: 0f:3c:f5:6c:75:dd:07:25:20:b3:70:6e:f6:17:d1: ec:a1:53:00:f6:62:64:24:bd:1f:7b:b6:d6:95:1e: 09:d1:84:e5:cf:f7:58:df:e6:a7:bc:38:52:5b:68: 56:6e:74:09:50:c3:dc:12:54:31:e0:7f:1a:7b:09: 93:8d:d2:32:91:a2:20:ea:5f:fa:e9:1e:d5:3c:c5: 45:50:8b:c2:8b:4f:01:f8:9b:aa:f4:67:d8:73:cd: de:91:18:e8:44:20:3a:e3:aa:65:23:ec:c4:15:c0: 11:fe:71:a7:19:13:64:b2:e7:57:0f:62:63:b8:f7: 72:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9D:D8:F2:C8:BC:0C:C0:22:F6:17:64:FC:17:6D:43:D3:3E:32:D3 X509v3 Authority Key Identifier: keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:60:61:b1:d9:35:8b:c4:d5:a5:f3:2a:4b:85:bb:30:e1:f9: 79:13:61:81:89:71:fe:a7:08:3c:82:7a:1f:42:5b:7b:e9:ed: bc:07:c2:97:f2:e1:ff:8e:0b:b8:d4:e8:7e:09:ce:52:3a:9e: 9a:d4:46:01:43:f3:29:0f:c0:e9:e6:0d:5c:56:1b:6e:75:c7: d1:3f:2f:80:73:4f:0f:d0:76:5f:47:c9:09:fe:93:e7:3b:38: 2b:ce:e6:c5:22:b7:8e:53:c4:a6:7c:e8:5e:e4:03:b3:5b:3f: db:b5:8c:ed:65:90:0e:44:84:7e:59:d8:e6:7f:a2:50:d0:87: 9f:e6:99:ac:ce:81:ee:64:37:7d:21:cc:01:a1:7d:cf:7d:f2: 65:43:90:96:4e:28:11:e7:76:e0:58:36:af:7e:69:7c:4b:ee: 02:74:f3:b4:5a:9b:17:8a:d8:e9:4e:72:28:58:4b:95:29:6d: e8:69:19:65:39:43:64:d9:e2:69:73:e1:bc:73:52:e0:06:c4: 6a:0a:6f:fc:db:30:8d:1b:bf:13:c4:ca:c3:d9:4f:30:95:08: 37:da:17:ed:cb:ec:f0:df:6a:58:72:63:62:e1:15:2a:8f:56: 2a:7d:e7:b1:37:b0:21:a7:9f:70:9b:52:61:f2:b8:92:07:80: af:cf:3c:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvRNeIynbhxe8kLXIDckCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz YTYxMmYwHhcNMjUxMjI0MTkwMTQ0WhcNMjUxMjI1MTkwMTQ0WjAzMTEwLwYDVQQD Eyg1YzlkZDhmMmM4YmMwY2MwMjJmNjE3NjRmYzE3NmQ0M2QzM2UzMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dVOJJtl9v4Ix5tXhEvdrghK7lIW TSGeuF8OosIqhnirVlputL0ne4hTqUB2DbOxvxnQYWDKaXSguXZE+slaxc7GaZFv RWcNOalBrDAyC/N6Id+TDFGsJZ+1QxX+r+3V/BcLdVrFmEJNM8U80jkW+KftXcJ2 5XhQIQBHzMz5ZXIZkQOSVIYPPPVsdd0HJSCzcG72F9HsoVMA9mJkJL0fe7bWlR4J 0YTlz/dY3+anvDhSW2hWbnQJUMPcElQx4H8aewmTjdIykaIg6l/66R7VPMVFUIvC i08B+Juq9GfYc83ekRjoRCA646plI+zEFcAR/nGnGRNksudXD2JjuPdy/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyd2PLIvAzAIvYXZPwXbUPTPjLTMB8GA1UdIwQY MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2Bhsdk1 i8TVpfMqS4W7MOH5eRNhgYlx/qcIPIJ6H0Jbe+ntvAfCl/Lh/44LuNTofgnOUjqe mtRGAUPzKQ/A6eYNXFYbbnXH0T8vgHNPD9B2X0fJCf6T5zs4K87mxSK3jlPEpnzo XuQDs1s/27WM7WWQDkSEflnY5n+iUNCHn+aZrM6B7mQ3fSHMAaF9z33yZUOQlk4o Eed24Fg2r35pfEvuAnTztFqbF4rY6U5yKFhLlSlt6GkZZTlDZNniaXPhvHNS4AbE agpv/NswjRu/E8TKw9lPMJUIN9oX7cvs8N9qWHJjYuEVKo9WKn3nsTewIaefcJtS YfK4kgeAr888uA== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:08 2025 by rpki-client