This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json) Hash identifier: hRqnq876+Dg4kkKKzej8HYm6iN7qociYH/1RqYpRB3E= Subject key identifier: 9D:98:E6:A5:85:AB:DB:A0:39:A6:72:15:FF:47:F1:29:ED:2D:28:6D Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Certificate serial: 019B4BF1F393204231065D1128567328165F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft Manifest number: 1465 Signing time: Tue 23 Dec 2025 16:01:46 +0000 Manifest this update: Tue 23 Dec 2025 16:01:46 +0000 Manifest next update: Wed 24 Dec 2025 16:01:46 +0000 Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=) 2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: 41A7YgVXzgUOKNLAYkbtKONQL01p8BNmWpM6DK2fDCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:f3:93:20:42:31:06:5d:11:28:56:73:28:16:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Validity Not Before: Dec 23 16:01:46 2025 GMT Not After : Dec 24 16:01:46 2025 GMT Subject: CN=9d98e6a585abdba039a67215ff47f129ed2d286d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ba:16:66:48:e4:59:41:5e:68:9c:9e:23:06: e9:1b:af:99:97:6d:ed:93:f7:57:6e:0f:e5:3c:68: 0d:11:e8:9b:6f:7f:3c:db:bd:53:cb:66:7e:52:44: af:b2:1f:2f:d0:31:28:a6:21:5b:a0:69:93:8a:5e: c0:38:f9:8b:c9:e3:e4:0a:99:82:84:10:bd:20:9b: d5:62:2d:52:c0:c2:84:a5:7f:83:7a:89:c6:b9:ea: e8:f0:d6:cd:81:1b:f1:b4:39:9c:ff:9e:52:0c:d8: 4a:09:c3:f7:da:0e:46:97:eb:b4:b1:89:01:23:e6: 60:5c:24:35:33:3e:65:6d:88:9b:26:40:9a:fc:5d: d6:a4:84:36:1c:60:fa:3e:6c:53:cc:15:40:c6:a6: 47:9c:58:02:e5:d9:26:40:48:07:be:dc:55:27:00: 75:cf:68:57:9a:db:6c:e7:39:5a:5c:df:de:46:75: cc:f9:dd:8e:bc:72:25:39:a6:01:d5:f3:02:b5:b2: ed:fa:f4:26:23:2e:ff:05:6a:4b:5a:36:c8:cc:08: cc:1b:17:14:44:c1:00:c4:55:0a:67:b9:e5:ed:cf: c3:4e:78:44:32:2b:7d:6c:27:af:84:a4:d1:c6:cd: 15:f2:cb:3f:3b:3d:56:b5:ac:e0:97:3f:85:d7:5d: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:98:E6:A5:85:AB:DB:A0:39:A6:72:15:FF:47:F1:29:ED:2D:28:6D X509v3 Authority Key Identifier: keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:7f:ad:2d:07:85:b1:77:21:89:f1:67:8a:3e:a2:4d:f5:6a: 60:a9:6d:40:0d:71:be:9a:ad:04:dd:32:69:12:02:0c:6a:42: a2:bb:38:fe:60:d7:74:d0:60:52:43:e0:3b:3e:4e:6b:d2:11: 10:c3:aa:19:d1:38:0a:2b:8a:14:3a:6b:97:4a:8c:d2:7e:e8: fa:58:41:34:19:17:73:3d:47:fd:b6:ee:30:01:57:71:e3:b2: 5a:9a:86:c9:08:7f:f5:51:cd:e7:f3:a8:c0:6e:96:f5:b8:a6: 52:b3:ab:df:fc:17:b3:bf:56:11:ee:ad:ec:8f:1e:cf:7e:e4: 92:fc:54:2e:94:83:62:e5:87:cf:06:ec:54:d3:b6:2b:72:7d: fc:62:96:b9:5e:a8:4e:20:2b:81:a7:db:d0:0f:82:ff:17:12: e9:21:66:f2:60:11:46:66:fb:13:15:c3:cd:5c:bb:f1:20:2e: df:e1:ee:dc:59:2f:3c:0e:f1:23:f8:ae:6d:db:40:72:05:d8: ab:fe:06:d9:71:f3:78:43:15:f0:42:b7:a3:3e:34:18:e0:0a: 68:55:3e:60:bc:9a:12:a7:8c:de:eb:40:15:cb:9f:68:30:dc: 82:6f:e2:97:18:1c:4b:d3:28:f5:78:04:02:66:57:c5:24:1b: 2d:ec:df:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8fOTIEIxBl0RKFZzKBZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5 MzcwZTMwHhcNMjUxMjIzMTYwMTQ2WhcNMjUxMjI0MTYwMTQ2WjAzMTEwLwYDVQQD Eyg5ZDk4ZTZhNTg1YWJkYmEwMzlhNjcyMTVmZjQ3ZjEyOWVkMmQyODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzboWZkjkWUFeaJyeIwbpG6+Zl23t k/dXbg/lPGgNEeibb388271Ty2Z+UkSvsh8v0DEopiFboGmTil7AOPmLyePkCpmC hBC9IJvVYi1SwMKEpX+DeonGuero8NbNgRvxtDmc/55SDNhKCcP32g5Gl+u0sYkB I+ZgXCQ1Mz5lbYibJkCa/F3WpIQ2HGD6PmxTzBVAxqZHnFgC5dkmQEgHvtxVJwB1 z2hXmtts5zlaXN/eRnXM+d2OvHIlOaYB1fMCtbLt+vQmIy7/BWpLWjbIzAjMGxcU RMEAxFUKZ7nl7c/DTnhEMit9bCevhKTRxs0V8ss/Oz1Wtazglz+F110NawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2Y5qWFq9ugOaZyFf9H8SntLShtMB8GA1UdIwQY MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt ZjNiNWU4MDI1MGRkLzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3+tLQeF sXchifFnij6iTfVqYKltQA1xvpqtBN0yaRICDGpCors4/mDXdNBgUkPgOz5Oa9IR EMOqGdE4CiuKFDprl0qM0n7o+lhBNBkXcz1H/bbuMAFXceOyWpqGyQh/9VHN5/Oo wG6W9bimUrOr3/wXs79WEe6t7I8ez37kkvxULpSDYuWHzwbsVNO2K3J9/GKWuV6o TiArgafb0A+C/xcS6SFm8mARRmb7ExXDzVy78SAu3+Hu3FkvPA7xI/iubdtAcgXY q/4G2XHzeEMV8EK3oz40GOAKaFU+YLyaEqeM3utAFcufaDDcgm/ilxgcS9Mo9XgE AmZXxSQbLezfTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:29 2025 by rpki-client