This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft File: fWG4N46PNorkmY1Rw6ms5kFI1s0.mft (raw, json) Hash identifier: 04AkC/r4BasyqVxLH4RsYI66iJWllHXecj2uMuLoRSs= Subject key identifier: 5D:E4:69:A9:DD:5C:62:89:31:B6:22:A2:6C:04:F2:0B:57:E1:24:DE Authority key identifier: 7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD Certificate issuer: /CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Certificate serial: 019B5D896E5D35DACB9B980325598499F012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft Manifest number: 17AC Signing time: Sat 27 Dec 2025 02:00:46 +0000 Manifest this update: Sat 27 Dec 2025 02:00:46 +0000 Manifest next update: Sun 28 Dec 2025 02:00:46 +0000 Files and hashes: 1: fWG4N46PNorkmY1Rw6ms5kFI1s0.crl (hash: ZjXFsen4sgPF6Sj1TAW1EGVdeIAb2JFZ41XmCgtWAho=) 2: twpPI3s0M0CHfpsRtqw1y94__1Q.roa (hash: 9YvNSCEe8cpoY/bygIYeVTlYIEufzY0ULaNZDfOCQKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:6e:5d:35:da:cb:9b:98:03:25:59:84:99:f0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d61b8378e8f368ae4998d51c3a9ace64148d6cd Validity Not Before: Dec 27 02:00:46 2025 GMT Not After : Dec 28 02:00:46 2025 GMT Subject: CN=5de469a9dd5c628931b622a26c04f20b57e124de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:70:d6:45:39:08:7a:5f:9f:19:08:e0:01: a1:69:ff:8d:ad:aa:4f:86:a3:1a:5d:af:2d:f4:40: 09:4e:ee:d6:f1:94:d4:6f:71:45:32:5d:91:69:7c: ed:3c:a2:b4:b9:29:dc:e0:0f:5c:4a:78:a4:fb:6c: 0f:a1:a6:5b:fd:0a:f0:48:c4:27:f1:bc:09:fc:6a: c0:56:77:ff:f8:3f:c7:ea:82:a5:80:cc:f4:ce:aa: 93:47:e9:25:84:af:69:b6:99:fb:4b:e1:a8:43:b9: 71:db:1e:79:ae:ee:68:0d:f9:9a:e2:31:3c:a7:bd: c2:ba:15:66:e5:a3:98:2e:f2:bd:8e:04:17:27:3c: c7:47:bb:97:9e:7e:1b:b4:59:c8:e0:d5:71:5a:53: 18:37:a9:4f:92:fd:e4:f0:f9:a4:81:d1:6c:c6:3a: be:04:e4:55:59:cb:b8:54:6c:94:e4:f0:06:84:46: 43:9c:fc:96:79:ac:01:50:a8:62:7e:08:fb:d3:a8: 85:ba:a9:68:4a:93:48:72:e5:c5:cf:8c:2a:b7:52: a6:47:a8:62:28:7c:09:8e:eb:85:b4:0f:81:37:1e: 05:81:cd:28:ab:de:c6:38:74:81:77:f5:0c:2a:11: fa:0a:bd:38:c4:a8:6c:0f:92:ad:4f:b8:93:69:75: 1f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E4:69:A9:DD:5C:62:89:31:B6:22:A2:6C:04:F2:0B:57:E1:24:DE X509v3 Authority Key Identifier: keyid:7D:61:B8:37:8E:8F:36:8A:E4:99:8D:51:C3:A9:AC:E6:41:48:D6:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWG4N46PNorkmY1Rw6ms5kFI1s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ed821b-3452-427a-8e44-d16e4ae61f80/1/fWG4N46PNorkmY1Rw6ms5kFI1s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:57:dc:84:0c:1b:30:82:c8:71:fd:cf:31:df:47:f9:30:b0: 9e:2c:19:3b:b2:6c:6c:29:d5:26:24:dd:4b:87:5e:1e:73:9a: 14:c1:40:d9:72:80:50:97:20:1c:ac:f9:f5:a8:b5:77:34:7a: cf:42:ee:da:d1:23:a5:70:ad:80:9e:43:c8:c8:85:f2:8e:60: bb:76:a9:ef:14:24:f9:22:f1:ef:b2:5a:4f:ce:af:d7:09:09: b4:01:18:4c:17:3c:5b:c4:76:a4:59:83:f3:ef:54:8d:25:f3: 1d:64:20:83:18:17:83:cd:a9:2b:4b:fe:e4:7b:8a:77:e4:d7: 82:e0:87:72:4b:1e:a2:ef:05:84:2b:16:58:3a:84:14:f3:36: c8:5c:bc:d2:88:67:5d:5a:bb:ac:a4:90:7c:03:cb:d9:9d:d6: 70:85:65:a4:92:ee:55:b5:87:44:09:e5:c2:82:b9:30:3f:71: 08:0a:7e:c6:0c:55:81:ce:f1:b4:28:ce:23:36:10:b3:e3:bd: 9e:fb:0d:4f:f2:93:b0:72:f5:de:d7:22:b0:17:13:7e:30:4a: a5:71:e0:f4:64:e1:cb:f9:ef:c5:ec:43:3d:ac:c5:14:3f:5c: 80:f4:99:9e:f1:c5:34:eb:5d:bc:6e:a5:a1:21:ce:d4:9f:73: 1a:11:4f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiW5dNdrLm5gDJVmEmfASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjFiODM3OGU4ZjM2OGFlNDk5OGQ1MWMzYTlhY2U2NDE0 OGQ2Y2QwHhcNMjUxMjI3MDIwMDQ2WhcNMjUxMjI4MDIwMDQ2WjAzMTEwLwYDVQQD Eyg1ZGU0NjlhOWRkNWM2Mjg5MzFiNjIyYTI2YzA0ZjIwYjU3ZTEyNGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQtw1kU5CHpfnxkI4AGhaf+NrapP hqMaXa8t9EAJTu7W8ZTUb3FFMl2RaXztPKK0uSnc4A9cSnik+2wPoaZb/QrwSMQn 8bwJ/GrAVnf/+D/H6oKlgMz0zqqTR+klhK9ptpn7S+GoQ7lx2x55ru5oDfma4jE8 p73CuhVm5aOYLvK9jgQXJzzHR7uXnn4btFnI4NVxWlMYN6lPkv3k8PmkgdFsxjq+ BORVWcu4VGyU5PAGhEZDnPyWeawBUKhifgj706iFuqloSpNIcuXFz4wqt1KmR6hi KHwJjuuFtA+BNx4Fgc0oq97GOHSBd/UMKhH6Cr04xKhsD5KtT7iTaXUfbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3kaandXGKJMbYiomwE8gtX4STeMB8GA1UdIwQY MBaAFH1huDeOjzaK5JmNUcOprOZBSNbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQt ZDE2ZTRhZTYxZjgwLzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZDgyMWItMzQ1Mi00MjdhLThlNDQtZDE2ZTRhZTYxZjgw LzEvZldHNE40NlBOb3JrbVkxUnc2bXM1a0ZJMXMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlfchAwb MILIcf3PMd9H+TCwniwZO7JsbCnVJiTdS4deHnOaFMFA2XKAUJcgHKz59ai1dzR6 z0Lu2tEjpXCtgJ5DyMiF8o5gu3ap7xQk+SLx77JaT86v1wkJtAEYTBc8W8R2pFmD 8+9UjSXzHWQggxgXg82pK0v+5HuKd+TXguCHckseou8FhCsWWDqEFPM2yFy80ohn XVq7rKSQfAPL2Z3WcIVlpJLuVbWHRAnlwoK5MD9xCAp+xgxVgc7xtCjOIzYQs+O9 nvsNT/KTsHL13tcisBcTfjBKpXHg9GThy/nvxexDPazFFD9cgPSZnvHFNOtdvG6l oSHO1J9zGhFPpQ== -----END CERTIFICATE-----Generated at Sat Dec 27 04:12:54 2025 by rpki-client