This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json) Hash identifier: S5gLt9ctmAJGVZE1tUEjzeEFae509YAFiM7t/Tt2CS0= Subject key identifier: 95:3D:7D:3E:E5:75:20:3A:5D:C6:38:FF:21:43:4F:60:2B:B6:1B:30 Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e Certificate serial: 019B619D9116A61CA24594B96E13609EFB0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 21:01:14 +0000 Manifest this update: Sat 27 Dec 2025 21:01:14 +0000 Manifest next update: Sun 28 Dec 2025 21:01:14 +0000 Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: xh/Zmgwy8Qbo27koMlXhNYry5DkH6IltxNZMlbHfXRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:91:16:a6:1c:a2:45:94:b9:6e:13:60:9e:fb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e Validity Not Before: Dec 27 21:01:14 2025 GMT Not After : Dec 28 21:01:14 2025 GMT Subject: CN=953d7d3ee575203a5dc638ff21434f602bb61b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:78:bc:0a:93:1a:a3:bb:be:f2:50:17:73: df:96:83:f7:20:72:1c:f3:33:26:29:16:2f:d5:9d: 7f:20:f9:dc:49:e7:b4:cf:17:e2:41:ba:9a:93:a9: 3e:f3:cb:65:5e:fd:fa:10:3f:54:eb:f5:79:91:0f: 96:ac:67:74:64:81:78:f0:38:72:90:9c:a9:f0:cb: 83:2e:2c:ef:09:d0:cd:6e:44:17:81:94:a4:f9:58: 1f:15:21:59:88:d9:2b:f4:72:e2:2d:64:94:e3:fc: c8:ab:c5:32:97:b1:29:3a:25:5c:d9:68:7e:4b:31: 13:78:d7:a6:6c:d3:d6:7c:51:af:4f:1b:67:88:c9: 4d:4a:5b:ae:16:6d:04:32:e8:4f:61:43:7a:b4:34: e0:3b:26:c4:aa:4b:ea:fb:00:d2:c6:97:d0:a1:fc: 0a:c2:79:39:e7:5b:61:ed:3f:b4:e5:5d:d5:0e:b3: 59:92:5f:b3:3c:ee:2a:2d:49:52:4c:6d:54:f0:49: 78:06:54:88:79:6c:09:2e:e2:70:3f:c7:34:95:21: 25:04:c2:9c:2f:4b:fd:3a:5d:2f:2d:c4:4d:01:49: e5:67:c9:51:b9:7a:da:d5:67:53:3f:47:e3:82:8d: d5:69:3b:45:82:cd:e3:6f:1b:ca:40:62:a3:53:d8: 06:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3D:7D:3E:E5:75:20:3A:5D:C6:38:FF:21:43:4F:60:2B:B6:1B:30 X509v3 Authority Key Identifier: keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:5b:8d:47:b9:5e:67:50:e6:2a:5f:ad:f0:85:93:61:0d:15: 85:e2:9a:1e:3a:97:a0:7b:87:40:98:04:ee:55:ac:bf:6d:87: d6:82:0e:58:25:6c:90:94:3c:7b:09:eb:b9:5a:99:17:6c:a8: 16:a5:ef:8b:38:b4:10:e5:fa:46:4f:fa:a7:19:a7:45:d8:60: 7e:42:58:a5:b5:25:79:c1:07:a5:e5:16:fb:2c:cc:b1:49:38: ac:bb:39:4a:1a:11:1d:e2:5e:28:c6:1b:90:5a:80:2e:c7:13: 1e:99:6b:22:38:af:fe:48:64:2e:17:8c:27:14:19:c6:e9:50: 02:34:d2:9d:c5:37:be:f1:ed:85:c8:69:60:5a:fe:d8:35:a6: 5b:23:73:a4:ed:a2:cc:de:3d:95:32:d9:a2:48:80:9b:f2:02: 42:f0:c2:95:da:20:d0:61:71:ec:31:0b:de:77:ef:af:d7:93: 85:e9:a8:3e:14:8d:e4:83:ca:17:fa:61:18:3d:b1:ab:f2:86: cd:8d:75:c9:d0:39:c2:8d:af:21:96:1a:fc:02:09:8c:55:0d: 8e:15:e8:0d:dc:09:2a:cb:4f:2e:27:73:7d:b7:cc:73:0e:74: 35:89:e0:9d:12:68:b3:ae:7a:64:b5:10:4c:ef:01:83:fd:26: 92:26:db:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnZEWphyiRZS5bhNgnvsMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz MzMwN2UwHhcNMjUxMjI3MjEwMTE0WhcNMjUxMjI4MjEwMTE0WjAzMTEwLwYDVQQD Eyg5NTNkN2QzZWU1NzUyMDNhNWRjNjM4ZmYyMTQzNGY2MDJiYjYxYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYF4vAqTGqO7vvJQF3PfloP3IHIc 8zMmKRYv1Z1/IPncSee0zxfiQbqak6k+88tlXv36ED9U6/V5kQ+WrGd0ZIF48Dhy kJyp8MuDLizvCdDNbkQXgZSk+VgfFSFZiNkr9HLiLWSU4/zIq8Uyl7EpOiVc2Wh+ SzETeNembNPWfFGvTxtniMlNSluuFm0EMuhPYUN6tDTgOybEqkvq+wDSxpfQofwK wnk551th7T+05V3VDrNZkl+zPO4qLUlSTG1U8El4BlSIeWwJLuJwP8c0lSElBMKc L0v9Ol0vLcRNAUnlZ8lRuXra1WdTP0fjgo3VaTtFgs3jbxvKQGKjU9gGpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU9fT7ldSA6XcY4/yFDT2ArthswMB8GA1UdIwQY MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1uNR7le Z1DmKl+t8IWTYQ0VheKaHjqXoHuHQJgE7lWsv22H1oIOWCVskJQ8ewnruVqZF2yo FqXvizi0EOX6Rk/6pxmnRdhgfkJYpbUlecEHpeUW+yzMsUk4rLs5ShoRHeJeKMYb kFqALscTHplrIjiv/khkLheMJxQZxulQAjTSncU3vvHthchpYFr+2DWmWyNzpO2i zN49lTLZokiAm/ICQvDCldog0GFx7DEL3nfvr9eThemoPhSN5IPKF/phGD2xq/KG zY11ydA5wo2vIZYa/AIJjFUNjhXoDdwJKstPLidzfbfMcw50NYngnRJos656ZLUQ TO8Bg/0mkibb0g== -----END CERTIFICATE-----Generated at Sun Dec 28 03:17:23 2025 by rpki-client