This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft File: fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft (raw, json) Hash identifier: 5ZuQs6Ej0zBftoHOppJPfpDZmq4tkFHsE2AhQBAzsmI= Subject key identifier: CB:08:51:58:2F:AF:49:1E:E4:17:AF:7D:CE:E0:88:65:5E:2A:52:CF Authority key identifier: 7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73 Certificate issuer: /CN=7e02a961b0375d72191bd970815d6b15f427d073 Certificate serial: 019B3CEBCD8C957C405956F699254630EA17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 18:00:45 +0000 Manifest this update: Sat 20 Dec 2025 18:00:45 +0000 Manifest next update: Sun 21 Dec 2025 18:00:45 +0000 Files and hashes: 1: O_lyoeGqf219CPNaRILiVGtpSnw.roa (hash: MBjGGTF1i33MT6liDQumorJo2rjHXFkdaYBR/A83Hr4=) 2: fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl (hash: kMH4owUQ7S7LWLvhootHq3r+7XlPi7RKojD7aKm+MXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:cd:8c:95:7c:40:59:56:f6:99:25:46:30:ea:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e02a961b0375d72191bd970815d6b15f427d073 Validity Not Before: Dec 20 18:00:45 2025 GMT Not After : Dec 21 18:00:45 2025 GMT Subject: CN=cb0851582faf491ee417af7dcee088655e2a52cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c5:31:d5:aa:40:40:0b:f8:89:59:77:85:a3: 9d:91:92:8a:51:77:66:88:e0:00:d1:8f:91:37:ce: 2c:a6:35:fa:6e:9d:8c:a9:d7:36:fe:a4:f1:a3:d1: 58:e0:54:a6:e3:a0:c7:95:73:28:af:4d:c5:a5:4f: 4e:64:24:d4:71:0e:05:a0:fe:06:6b:ff:65:83:f2: 70:42:16:43:93:d8:a8:22:eb:dd:d5:f2:6d:ab:eb: 8f:96:fa:1d:b7:4f:e1:d4:23:79:3d:92:88:e4:bd: 91:37:d3:6e:e7:4b:87:34:da:2e:52:99:c7:db:f2: 06:9d:ab:bc:ce:f9:69:1e:65:3b:fd:71:70:0b:01: de:cd:0f:3d:d1:1d:b9:6f:a9:c6:6c:ce:56:ee:e9: fa:e1:93:da:da:4d:bc:bf:82:d0:5b:ee:10:4d:e5: 37:68:9a:27:e6:41:c4:c6:a4:86:d8:c3:00:6c:cb: 6e:a8:bf:c6:01:a8:fe:f0:7d:4a:99:58:5f:62:d0: 80:75:e9:05:66:4b:47:c5:8b:a9:d5:1f:39:8a:26: 7f:18:72:4d:fd:eb:ba:ec:0c:14:f1:b1:c7:73:1e: 0a:61:b7:df:0a:e9:d7:42:37:78:34:28:d5:cc:c4: 83:9c:cf:7c:2e:a0:e9:61:70:de:af:c5:0a:8d:7b: e4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:08:51:58:2F:AF:49:1E:E4:17:AF:7D:CE:E0:88:65:5E:2A:52:CF X509v3 Authority Key Identifier: keyid:7E:02:A9:61:B0:37:5D:72:19:1B:D9:70:81:5D:6B:15:F4:27:D0:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgKpYbA3XXIZG9lwgV1rFfQn0HM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/3e6842-7229-4212-b2d4-cc47c1de01bd/1/fgKpYbA3XXIZG9lwgV1rFfQn0HM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a5:72:51:ee:cc:2c:6f:93:03:dc:84:25:e3:4c:9c:b2:53: af:dd:9c:60:bc:dd:1f:c8:a1:b4:72:bf:76:ab:61:1c:49:63: 05:18:c4:05:7b:2c:e2:0c:a8:fd:67:48:41:38:77:39:b5:51: e4:75:d2:60:71:59:26:08:f0:e9:61:24:bb:22:f4:cb:43:eb: 1f:e7:e0:55:6e:f0:0e:b7:c7:bc:9b:38:58:9f:0e:17:50:1a: b1:a4:b2:eb:da:bb:2b:67:b1:01:96:c4:dc:9c:72:cf:97:80: 9b:32:fa:94:36:e8:a4:e5:33:f9:70:5d:2a:9a:27:a9:01:08: a0:77:59:65:ba:e8:09:2b:52:e0:93:5d:b3:ff:38:83:3b:af: 76:87:2a:c4:7a:a5:25:11:37:a7:56:b9:60:a6:b3:3e:8a:18: 13:1f:b0:b4:c5:e8:6e:0d:d6:52:6f:bd:e4:03:5a:88:88:c0: a4:33:4f:1c:e9:c1:f6:64:fc:57:d5:df:d3:93:7f:77:17:a8: da:4e:a4:67:8a:3a:74:d7:e4:d3:e0:57:14:7e:fa:e3:f3:ae: 5e:fd:07:bd:87:7a:16:5a:61:c4:7e:78:92:91:4a:69:c8:d1: 0e:70:31:82:50:cb:d2:f5:f3:a4:d4:a1:5c:2b:c4:d5:a7:49: 53:42:c1:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8682MlXxAWVb2mSVGMOoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDJhOTYxYjAzNzVkNzIxOTFiZDk3MDgxNWQ2YjE1ZjQy N2QwNzMwHhcNMjUxMjIwMTgwMDQ1WhcNMjUxMjIxMTgwMDQ1WjAzMTEwLwYDVQQD EyhjYjA4NTE1ODJmYWY0OTFlZTQxN2FmN2RjZWUwODg2NTVlMmE1MmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMUx1apAQAv4iVl3haOdkZKKUXdm iOAA0Y+RN84spjX6bp2Mqdc2/qTxo9FY4FSm46DHlXMor03FpU9OZCTUcQ4FoP4G a/9lg/JwQhZDk9ioIuvd1fJtq+uPlvodt0/h1CN5PZKI5L2RN9Nu50uHNNouUpnH 2/IGnau8zvlpHmU7/XFwCwHezQ890R25b6nGbM5W7un64ZPa2k28v4LQW+4QTeU3 aJon5kHExqSG2MMAbMtuqL/GAaj+8H1KmVhfYtCAdekFZktHxYup1R85iiZ/GHJN /eu67AwU8bHHcx4KYbffCunXQjd4NCjVzMSDnM98LqDpYXDer8UKjXvkiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsIUVgvr0ke5Bevfc7giGVeKlLPMB8GA1UdIwQY MBaAFH4CqWGwN11yGRvZcIFdaxX0J9BzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQt Y2M0N2MxZGUwMWJkLzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8zZTY4NDItNzIyOS00MjEyLWIyZDQtY2M0N2MxZGUwMWJk LzEvZmdLcFliQTNYWElaRzlsd2dWMXJGZlFuMEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKVyUe7M LG+TA9yEJeNMnLJTr92cYLzdH8ihtHK/dqthHEljBRjEBXss4gyo/WdIQTh3ObVR 5HXSYHFZJgjw6WEkuyL0y0PrH+fgVW7wDrfHvJs4WJ8OF1AasaSy69q7K2exAZbE 3Jxyz5eAmzL6lDbopOUz+XBdKponqQEIoHdZZbroCStS4JNds/84gzuvdocqxHql JRE3p1a5YKazPooYEx+wtMXobg3WUm+95ANaiIjApDNPHOnB9mT8V9Xf05N/dxeo 2k6kZ4o6dNfk0+BXFH764/OuXv0HvYd6FlphxH54kpFKacjRDnAxglDL0vXzpNSh XCvE1adJU0LB+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:57:40 2025 by rpki-client