This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json) Hash identifier: bwqR0JlgyiaDDo09ecw07FZHDaH5lkjQaYItPifPHaA= Subject key identifier: 0B:86:C1:7F:1E:F1:60:C2:A0:D3:05:9E:F2:B4:35:F6:32:93:C7:EB Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Certificate serial: 019B71101ED3BFFE6DD9DF55B24C532B5BD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft Manifest number: 0266 Signing time: Tue 30 Dec 2025 21:00:40 +0000 Manifest this update: Tue 30 Dec 2025 21:00:40 +0000 Manifest next update: Wed 31 Dec 2025 21:00:40 +0000 Files and hashes: 1: 5lQnFnU-84I8pBL0bmtu_5E7JBE.roa (hash: choN2tt2VLbw64yYa4mcGxM9D/1eWfgY0Zlzr2QBz8I=) 2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: Ttm+6qv3sp8R4vlia6KagGEGs0Sen0eWLOShnV1t1yg=) 3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:1e:d3:bf:fe:6d:d9:df:55:b2:4c:53:2b:5b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Validity Not Before: Dec 30 21:00:40 2025 GMT Not After : Dec 31 21:00:40 2025 GMT Subject: CN=0b86c17f1ef160c2a0d3059ef2b435f63293c7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:1c:5d:22:e7:b3:e8:23:a5:0a:36:a3:26: d7:d4:55:f5:96:ed:c3:2d:12:1c:4a:2b:7c:bf:96: 43:cd:29:6a:dc:31:ae:74:1a:27:ad:e9:eb:24:9e: d8:19:bf:4c:f5:ce:35:46:a6:02:b8:3f:25:99:29: 41:f0:ae:7e:03:d5:ea:5b:9f:f9:6a:94:42:d5:68: 11:bc:f5:f3:9f:5e:f9:ef:08:97:d3:7e:40:c1:f3: 51:39:74:de:7b:4e:b0:b1:31:25:d0:2d:03:d4:f5: 10:d5:16:04:dc:dd:d6:76:30:89:05:78:6a:0f:41: 9d:a5:a5:8c:6d:21:66:bd:e9:36:de:b3:ea:15:d0: b0:5c:45:45:f7:0a:a3:f6:11:ce:db:ca:ff:42:99: d1:2c:a9:81:99:7c:7d:91:35:6d:10:2e:eb:1c:b0: 57:5b:f7:2e:79:30:09:03:6a:6b:a1:cd:52:44:ea: 27:19:16:3f:be:99:75:d7:d3:06:a8:3e:5a:db:37: 7d:15:e9:9b:1a:3f:1f:96:29:e2:67:46:f5:47:63: 75:6a:6c:ae:da:60:bd:67:f6:98:fe:d5:37:23:76: ab:84:57:9b:60:e3:e2:9c:55:46:3b:91:e0:db:aa: 2b:ad:d3:49:b9:59:1e:9c:28:9e:2f:83:2d:88:ca: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:86:C1:7F:1E:F1:60:C2:A0:D3:05:9E:F2:B4:35:F6:32:93:C7:EB X509v3 Authority Key Identifier: keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e7:ed:74:cf:8e:df:56:e6:9a:5a:1c:01:7a:c7:58:5c:02: 5c:c0:3a:f8:2d:59:22:91:3e:50:46:95:8b:10:97:96:77:62: ea:0d:d1:a8:9d:ac:c8:02:db:0e:7a:eb:22:27:82:b4:03:87: 40:e1:9a:2b:8c:10:4c:e2:39:49:84:51:e7:54:dd:c7:bc:51: 09:f4:85:c8:3f:79:78:ed:77:79:38:50:95:78:70:a4:88:94: fc:f0:9d:4c:74:28:59:85:da:e5:d8:ad:b2:d7:b6:f1:cb:02: 13:e9:55:54:00:d7:bf:28:39:d2:8e:89:e3:a0:73:9f:97:40: 14:a2:6a:d0:e2:a2:c9:5e:6c:0b:5f:50:78:dd:dc:69:51:f1: 5b:47:e9:79:ef:d4:e8:b0:21:e6:a8:e1:21:6c:68:e4:31:ef: 39:b9:4b:4e:c3:43:35:4a:d6:75:bd:ca:5e:15:a8:75:43:f0: d2:bb:ce:8f:6c:ed:04:b1:ae:80:55:04:22:24:af:69:52:19: f4:cd:c8:1b:c9:8b:f9:a5:00:b7:1c:0a:93:43:20:3a:34:28: 27:06:74:ed:38:28:7e:69:09:64:3d:81:e4:96:fb:c8:51:08: ea:71:c1:c7:ba:c7:ff:ff:41:a9:8e:46:88:d3:37:f8:80:d4: 0a:16:49:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEB7Tv/5t2d9VskxTK1vXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk MGFjYTEwHhcNMjUxMjMwMjEwMDQwWhcNMjUxMjMxMjEwMDQwWjAzMTEwLwYDVQQD EygwYjg2YzE3ZjFlZjE2MGMyYTBkMzA1OWVmMmI0MzVmNjMyOTNjN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOccXSLns+gjpQo2oybX1FX1lu3D LRIcSit8v5ZDzSlq3DGudBonrenrJJ7YGb9M9c41RqYCuD8lmSlB8K5+A9XqW5/5 apRC1WgRvPXzn1757wiX035AwfNROXTee06wsTEl0C0D1PUQ1RYE3N3WdjCJBXhq D0GdpaWMbSFmvek23rPqFdCwXEVF9wqj9hHO28r/QpnRLKmBmXx9kTVtEC7rHLBX W/cueTAJA2proc1SROonGRY/vpl119MGqD5a2zd9FembGj8fliniZ0b1R2N1amyu 2mC9Z/aY/tU3I3arhFebYOPinFVGO5Hg26orrdNJuVkenCieL4MtiMqz5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuGwX8e8WDCoNMFnvK0NfYyk8frMB8GA1UdIwQY MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt NzExODZlMmI1MTZhLzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOftdM+O 31bmmlocAXrHWFwCXMA6+C1ZIpE+UEaVixCXlndi6g3RqJ2syALbDnrrIieCtAOH QOGaK4wQTOI5SYRR51Tdx7xRCfSFyD95eO13eThQlXhwpIiU/PCdTHQoWYXa5dit ste28csCE+lVVADXvyg50o6J46Bzn5dAFKJq0OKiyV5sC19QeN3caVHxW0fpee/U 6LAh5qjhIWxo5DHvOblLTsNDNUrWdb3KXhWodUPw0rvOj2ztBLGugFUEIiSvaVIZ 9M3IG8mL+aUAtxwKk0MgOjQoJwZ07TgofmkJZD2B5Jb7yFEI6nHBx7rH//9BqY5G iNM3+IDUChZJ2g== -----END CERTIFICATE-----Generated at Wed Dec 31 06:29:13 2025 by rpki-client