This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft File: fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json) Hash identifier: O4YvtEozVh36hy4g7B4rUZ5yqRFnbGMwN2Xcauz75go= Subject key identifier: BA:27:DC:DB:58:D4:EE:2E:8F:0E:B3:BC:16:A1:E4:57:AC:71:21:08 Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 Certificate issuer: /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Certificate serial: 019B5D524A0D34045B20E369273143170CF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft Manifest number: 146E Signing time: Sat 27 Dec 2025 01:00:32 +0000 Manifest this update: Sat 27 Dec 2025 01:00:32 +0000 Manifest next update: Sun 28 Dec 2025 01:00:32 +0000 Files and hashes: 1: 9ZU6x_6PrSPT_uW6sJ6cuQkOSmo.roa (hash: bC7IXHx63H7lpbQ+lP0qMuIBLR6TNwS7YJHQvmLzCRc=) 2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: lCaBUz/5gjHF9fWWHEVHIQ0ifpOhEpzXXZKuAbM0Dfs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:4a:0d:34:04:5b:20:e3:69:27:31:43:17:0c:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3 Validity Not Before: Dec 27 01:00:32 2025 GMT Not After : Dec 28 01:00:32 2025 GMT Subject: CN=ba27dcdb58d4ee2e8f0eb3bc16a1e457ac712108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b3:57:bf:c2:b7:26:98:82:6e:5b:42:6e:0a: 09:26:ae:bf:07:4b:0f:4f:77:f5:4f:16:d9:30:7b: 77:22:3c:cd:6e:4a:c5:d6:40:94:5a:d0:6c:dd:37: 43:76:e5:a0:a5:6e:81:7d:75:bb:bc:6c:1d:34:f1: 72:bb:60:96:d9:e2:06:95:3e:26:d2:b3:47:fa:cf: bb:a1:90:b5:f4:1f:e5:ff:f9:e9:4d:a8:55:47:d6: c9:73:d4:eb:31:a8:56:fc:c0:ae:35:5a:56:62:78: 34:19:85:17:79:96:b9:d1:3a:a7:d5:3a:67:6a:7f: e0:43:a0:8f:1b:0a:dd:9c:2d:72:2c:a3:79:f9:a9: 15:e7:d5:08:0d:57:ca:78:75:3f:2c:50:91:d0:45: 46:0f:bd:67:48:5c:22:52:87:2c:1b:5e:18:07:23: af:07:4a:72:a9:1e:b1:3d:47:97:4a:8a:0d:92:6a: 62:44:b4:f0:1c:69:6f:0a:96:d1:4c:79:55:72:10: e8:5a:af:05:a2:ab:bc:5a:cb:12:a1:79:18:b5:a4: df:ad:35:03:4e:43:45:65:32:d3:85:b6:3f:40:1f: 5c:34:f9:86:0d:96:20:5a:ab:d6:0b:f1:b4:06:05: 6f:a7:2a:7a:b8:89:cd:92:19:96:96:c3:f2:f3:05: 2e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:27:DC:DB:58:D4:EE:2E:8F:0E:B3:BC:16:A1:E4:57:AC:71:21:08 X509v3 Authority Key Identifier: keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:55:67:d7:33:d3:80:95:98:81:9d:d6:af:58:dd:40:a9:eb: ee:2d:86:62:51:bc:cb:21:e6:a9:1c:54:b4:b1:c2:13:74:18: 20:28:36:9f:be:e7:a7:80:9b:ea:3b:e5:51:0b:4c:55:3b:92: 15:5b:06:ec:40:fc:9a:42:19:8c:ab:0a:b2:8c:53:2e:22:8e: f5:49:00:20:55:2e:3e:ea:34:69:cc:d4:c8:58:32:92:16:78: b0:64:9c:0d:1a:27:35:41:3f:24:5c:2d:88:39:79:8b:1b:7d: 69:7f:66:68:7b:bc:f1:2e:e5:cd:90:74:81:9a:dc:18:b3:5b: d1:25:4e:ca:1f:f8:5c:56:c6:19:af:3c:b3:69:b2:8c:18:c8: 64:5e:85:88:10:43:0b:28:a4:f2:1e:fd:e5:c9:fe:01:0c:44: 52:d9:61:02:f7:14:b8:18:c2:70:75:89:86:ec:99:cc:d4:e7: 50:c7:2d:44:1d:cd:0e:fc:fb:92:9b:a8:4f:e0:ea:af:e7:de: d5:b3:e5:67:02:7c:ac:b9:ed:19:37:4b:8d:a2:3d:68:76:68: 9c:93:0d:ee:f7:be:1d:7e:37:cf:54:5d:ba:19:e4:6e:fd:98: 32:54:ae:96:e6:51:ae:4b:56:47:5a:16:da:eb:c5:24:34:70: 88:fe:52:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUkoNNARbIONpJzFDFwzzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5 MzcwZTMwHhcNMjUxMjI3MDEwMDMyWhcNMjUxMjI4MDEwMDMyWjAzMTEwLwYDVQQD EyhiYTI3ZGNkYjU4ZDRlZTJlOGYwZWIzYmMxNmExZTQ1N2FjNzEyMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LNXv8K3JpiCbltCbgoJJq6/B0sP T3f1TxbZMHt3IjzNbkrF1kCUWtBs3TdDduWgpW6BfXW7vGwdNPFyu2CW2eIGlT4m 0rNH+s+7oZC19B/l//npTahVR9bJc9TrMahW/MCuNVpWYng0GYUXeZa50Tqn1Tpn an/gQ6CPGwrdnC1yLKN5+akV59UIDVfKeHU/LFCR0EVGD71nSFwiUocsG14YByOv B0pyqR6xPUeXSooNkmpiRLTwHGlvCpbRTHlVchDoWq8Foqu8WssSoXkYtaTfrTUD TkNFZTLThbY/QB9cNPmGDZYgWqvWC/G0BgVvpyp6uInNkhmWlsPy8wUuJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLon3NtY1O4ujw6zvBah5FescSEIMB8GA1UdIwQY MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt ZjNiNWU4MDI1MGRkLzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflVn1zPT gJWYgZ3Wr1jdQKnr7i2GYlG8yyHmqRxUtLHCE3QYICg2n77np4Cb6jvlUQtMVTuS FVsG7ED8mkIZjKsKsoxTLiKO9UkAIFUuPuo0aczUyFgykhZ4sGScDRonNUE/JFwt iDl5ixt9aX9maHu88S7lzZB0gZrcGLNb0SVOyh/4XFbGGa88s2myjBjIZF6FiBBD Cyik8h795cn+AQxEUtlhAvcUuBjCcHWJhuyZzNTnUMctRB3NDvz7kpuoT+Dqr+fe 1bPlZwJ8rLntGTdLjaI9aHZonJMN7ve+HX43z1Rduhnkbv2YMlSuluZRrktWR1oW 2uvFJDRwiP5S6w== -----END CERTIFICATE-----Generated at Sat Dec 27 04:10:17 2025 by rpki-client