This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json) Hash identifier: ORXJWfIgfbOIfpkEh550JqwS8r4WsjGFrnfty6b66YA= Subject key identifier: E4:0C:C0:DD:14:6F:3F:1A:27:77:EE:DD:1A:5A:C8:2B:E7:E8:65:79 Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Certificate serial: 019B439335F1121505BED74B4865D02C1C11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft Manifest number: 1252 Signing time: Mon 22 Dec 2025 01:01:19 +0000 Manifest this update: Mon 22 Dec 2025 01:01:19 +0000 Manifest next update: Tue 23 Dec 2025 01:01:19 +0000 Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=) 2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: XcIX2jlgAGuTniDd6GfnV+uZab3mjB53PJipyML7oHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:35:f1:12:15:05:be:d7:4b:48:65:d0:2c:1c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Validity Not Before: Dec 22 01:01:19 2025 GMT Not After : Dec 23 01:01:19 2025 GMT Subject: CN=e40cc0dd146f3f1a2777eedd1a5ac82be7e86579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:26:91:68:37:df:e5:74:0d:a8:0c:52:9f: f1:1a:64:d8:9e:eb:d9:61:7b:57:4f:e9:41:3e:cc: c6:84:30:ec:7f:fc:a5:c8:90:6b:db:cc:51:4f:7e: fb:9b:47:d2:d1:76:00:02:42:0c:d5:63:11:57:48: e9:30:75:8d:7b:fa:ea:f3:d8:af:d8:72:a5:5c:8f: f8:e6:d7:1f:c8:49:ce:5a:1b:f9:01:21:c8:35:bd: 39:8e:9d:3f:69:a7:bc:e2:04:a4:a6:5e:21:7a:cb: 13:e3:59:42:8f:88:f4:5a:7a:64:41:10:f2:08:ec: 13:5e:9b:08:b6:d8:65:13:cc:df:e7:08:d4:83:ef: f2:b7:0f:63:b7:e4:52:a1:43:aa:ed:d2:c1:65:82: c2:8e:0f:79:ea:b8:54:96:eb:53:d5:ed:e9:a0:a6: bc:0a:eb:e3:0c:6b:2e:0b:db:f9:b2:0a:54:84:1b: 19:7e:38:7a:4a:64:c7:d9:6d:36:9f:91:79:10:2f: 0d:47:c9:7e:69:22:47:5a:17:15:8f:53:1d:bf:24: b6:36:35:32:a4:9a:1f:5b:1c:30:86:02:a3:20:5c: 71:a0:ca:4d:30:2a:45:9e:01:98:3c:a3:ef:6d:00: 6c:de:5c:2d:8a:b6:b0:e8:00:fb:50:e3:c8:0c:0a: 38:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0C:C0:DD:14:6F:3F:1A:27:77:EE:DD:1A:5A:C8:2B:E7:E8:65:79 X509v3 Authority Key Identifier: keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ed:3c:cf:95:45:47:0a:37:1e:a2:79:63:3c:79:04:86:b7: ef:0d:c9:f8:2f:0f:87:fb:69:62:e9:a9:67:ce:c0:35:70:5a: a6:2b:5a:87:c7:1f:3d:6d:6d:e4:24:16:82:f2:ab:9d:9c:8b: 82:87:09:10:3d:16:6e:ad:24:3f:44:3e:8e:4f:82:d3:4c:45: 93:5f:d7:b0:67:d5:41:08:86:34:e4:4e:1f:3a:dd:6d:d2:eb: af:24:e2:84:c4:41:08:b4:50:48:b8:f8:4e:a0:b2:b1:1b:08: 89:c6:5a:f7:25:d3:51:af:62:72:1c:0c:d0:e7:da:e5:c4:4c: ad:f3:fe:95:a2:4d:ec:85:b1:af:b7:0f:39:63:d6:72:fe:e8: 66:59:a9:af:0e:e6:df:45:2e:70:5b:70:8e:bd:89:a6:6e:01: 78:cc:19:b4:b3:71:41:fb:4f:4d:f8:23:98:a3:6e:66:a1:1c: 41:2c:df:1e:10:ac:d0:82:29:ca:d9:a9:0d:b7:07:8a:91:bd: 84:4b:42:55:ef:e5:11:83:08:4f:bf:4a:91:9b:99:07:10:a0: fe:77:d5:0b:22:95:d5:dd:09:e7:7f:b6:08:67:c3:ae:ea:39: 2c:50:b9:d8:4f:99:e5:5a:e4:c8:e8:cf:08:58:91:a0:b9:11: 26:a5:7f:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkzXxEhUFvtdLSGXQLBwRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz NmExZDEwHhcNMjUxMjIyMDEwMTE5WhcNMjUxMjIzMDEwMTE5WjAzMTEwLwYDVQQD EyhlNDBjYzBkZDE0NmYzZjFhMjc3N2VlZGQxYTVhYzgyYmU3ZTg2NTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01UmkWg33+V0DagMUp/xGmTYnuvZ YXtXT+lBPszGhDDsf/ylyJBr28xRT377m0fS0XYAAkIM1WMRV0jpMHWNe/rq89iv 2HKlXI/45tcfyEnOWhv5ASHINb05jp0/aae84gSkpl4hessT41lCj4j0WnpkQRDy COwTXpsItthlE8zf5wjUg+/ytw9jt+RSoUOq7dLBZYLCjg956rhUlutT1e3poKa8 CuvjDGsuC9v5sgpUhBsZfjh6SmTH2W02n5F5EC8NR8l+aSJHWhcVj1MdvyS2NjUy pJofWxwwhgKjIFxxoMpNMCpFngGYPKPvbQBs3lwtiraw6AD7UOPIDAo4DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQMwN0Ubz8aJ3fu3RpayCvn6GV5MB8GA1UdIwQY MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1 LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu08z5VF Rwo3HqJ5Yzx5BIa37w3J+C8Ph/tpYumpZ87ANXBapitah8cfPW1t5CQWgvKrnZyL gocJED0Wbq0kP0Q+jk+C00xFk1/XsGfVQQiGNOROHzrdbdLrryTihMRBCLRQSLj4 TqCysRsIicZa9yXTUa9ichwM0Ofa5cRMrfP+laJN7IWxr7cPOWPWcv7oZlmprw7m 30UucFtwjr2Jpm4BeMwZtLNxQftPTfgjmKNuZqEcQSzfHhCs0IIpytmpDbcHipG9 hEtCVe/lEYMIT79KkZuZBxCg/nfVCyKV1d0J53+2CGfDruo5LFC52E+Z5VrkyOjP CFiRoLkRJqV/jQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:30:42 2025 by rpki-client