This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json) Hash identifier: jp4sRoCLePNs+O55UUBHzBHZFUNVN2ViGGOt2snpOhI= Subject key identifier: 5A:2B:EF:8A:F8:98:1F:36:C8:C0:30:F8:C1:49:A4:0F:AC:24:97:23 Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Certificate serial: 019B323147A8E93B07FF1B2C9B491258C520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 16:00:48 +0000 Manifest this update: Thu 18 Dec 2025 16:00:48 +0000 Manifest next update: Fri 19 Dec 2025 16:00:48 +0000 Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: GD78Q2Rw53QN+KkdEDuWczDnRWpcyanYuYdp8DkJXdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:47:a8:e9:3b:07:ff:1b:2c:9b:49:12:58:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Validity Not Before: Dec 18 16:00:48 2025 GMT Not After : Dec 19 16:00:48 2025 GMT Subject: CN=5a2bef8af8981f36c8c030f8c149a40fac249723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e0:e0:c5:5d:f2:18:e7:af:89:a5:70:68:84: 69:92:49:ba:6c:49:33:05:48:38:09:e9:2d:7a:de: cf:f7:d6:1b:55:d7:cd:48:be:0d:62:48:e7:c7:99: ae:2e:76:a4:2e:8a:39:26:9a:f5:0d:3b:07:5b:86: 38:b1:47:82:f9:d4:c2:60:0b:cc:72:db:99:94:77: 0d:78:25:c7:40:24:9b:14:24:e9:8b:32:81:39:d5: 94:07:ed:dc:57:00:6f:ed:ee:93:3b:52:f0:6b:71: 73:a3:17:47:4d:e5:77:2d:58:a1:80:35:5e:04:d6: 2a:a8:78:49:ae:18:2b:f8:11:d2:c6:23:59:38:29: 61:b3:14:36:17:7e:17:61:e6:81:98:f4:db:40:c9: 37:e8:b7:3d:94:17:d6:4d:3b:81:e7:9d:cd:ea:d3: 9d:0d:a5:bc:72:3c:26:45:ac:3d:44:ce:fa:54:cc: eb:2b:f3:e7:fd:45:bd:db:65:da:b5:90:20:1a:a3: 79:90:ef:42:4d:ba:06:56:63:61:50:ca:c6:85:aa: da:ed:02:2f:4e:19:0f:19:b7:9f:83:7c:d8:88:b1: 6e:04:67:cb:f3:d2:1e:09:29:89:fd:1c:51:2b:af: 13:93:4d:c3:4e:b3:60:95:94:c4:34:10:c3:87:5e: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:2B:EF:8A:F8:98:1F:36:C8:C0:30:F8:C1:49:A4:0F:AC:24:97:23 X509v3 Authority Key Identifier: keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:19:ea:2f:57:cb:d6:cb:25:73:ae:00:7e:de:3e:c6:d4:88: f0:87:9f:c2:37:3e:b9:6b:f2:3a:20:7a:bf:ad:53:0f:1c:66: 06:e6:9a:c8:b4:1c:f9:ad:ab:8c:7f:d1:ef:c3:df:ec:6e:20: 2e:55:32:f1:b3:00:ed:b8:ba:d1:22:52:41:64:8e:a0:d3:f9: 62:64:bc:93:33:e8:fe:d8:26:55:32:0d:29:ee:c1:00:ff:c0: 5b:3e:57:9a:1f:ef:ff:9b:aa:20:7e:1a:fb:b4:cf:49:d0:87: 8d:2f:fd:a3:d4:e6:bf:fc:bc:29:55:d7:92:49:8a:29:56:9c: c7:79:6a:87:e6:0a:f7:9e:6e:9c:6f:90:d6:b3:74:f3:32:51: 69:27:c3:4d:18:a3:c2:c0:b6:92:69:83:73:af:2c:15:c2:fe: 0b:55:df:d9:56:48:4b:52:6c:e9:84:a5:1f:4d:5d:ea:7a:ad: aa:c5:2b:39:a3:4a:23:42:60:1e:93:3c:32:6d:4f:42:5a:0c: 51:09:e9:60:b6:83:32:90:b9:fa:89:70:d5:de:a0:8c:18:f3: e8:97:b9:d3:f6:c5:64:cd:21:63:ac:b7:a9:cd:14:1b:f2:16: e4:1e:3f:7f:ee:76:88:b9:fd:25:29:33:79:f7:cc:40:d2:5a: 13:67:c1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMUeo6TsH/xssm0kSWMUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0 NTkwZWIwHhcNMjUxMjE4MTYwMDQ4WhcNMjUxMjE5MTYwMDQ4WjAzMTEwLwYDVQQD Eyg1YTJiZWY4YWY4OTgxZjM2YzhjMDMwZjhjMTQ5YTQwZmFjMjQ5NzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eDgxV3yGOeviaVwaIRpkkm6bEkz BUg4Cektet7P99YbVdfNSL4NYkjnx5muLnakLoo5Jpr1DTsHW4Y4sUeC+dTCYAvM ctuZlHcNeCXHQCSbFCTpizKBOdWUB+3cVwBv7e6TO1Lwa3FzoxdHTeV3LVihgDVe BNYqqHhJrhgr+BHSxiNZOClhsxQ2F34XYeaBmPTbQMk36Lc9lBfWTTuB553N6tOd DaW8cjwmRaw9RM76VMzrK/Pn/UW922XatZAgGqN5kO9CTboGVmNhUMrGhara7QIv ThkPGbefg3zYiLFuBGfL89IeCSmJ/RxRK68Tk03DTrNglZTENBDDh140AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFor74r4mB82yMAw+MFJpA+sJJcjMB8GA1UdIwQY MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRnqL1fL 1sslc64Aft4+xtSI8Iefwjc+uWvyOiB6v61TDxxmBuaayLQc+a2rjH/R78Pf7G4g LlUy8bMA7bi60SJSQWSOoNP5YmS8kzPo/tgmVTINKe7BAP/AWz5Xmh/v/5uqIH4a +7TPSdCHjS/9o9Tmv/y8KVXXkkmKKVacx3lqh+YK955unG+Q1rN08zJRaSfDTRij wsC2kmmDc68sFcL+C1Xf2VZIS1Js6YSlH01d6nqtqsUrOaNKI0JgHpM8Mm1PQloM UQnpYLaDMpC5+olw1d6gjBjz6Je50/bFZM0hY6y3qc0UG/IW5B4/f+52iLn9JSkz effMQNJaE2fBlg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:25:43 2025 by rpki-client