This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft File: fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json) Hash identifier: ZKF9N+SSqB1H9IYpuWrLhWYODOJXWI/xen56Pb5ZbOQ= Subject key identifier: D5:AB:E0:AF:5F:E5:0A:9C:C8:73:E3:80:43:AF:E8:64:49:3C:63:34 Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2 Certificate issuer: /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2 Certificate serial: 019B3DC7A957959AA2DE33DE7F0B4090700F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft Manifest number: 0E74 Signing time: Sat 20 Dec 2025 22:00:53 +0000 Manifest this update: Sat 20 Dec 2025 22:00:53 +0000 Manifest next update: Sun 21 Dec 2025 22:00:53 +0000 Files and hashes: 1: 1M64bp2D6OoninKtd2dTV1Hn7lI.roa (hash: gBHtNRumJYHeajotR/1OOcz7o/b7zA7upFunHXmsr5M=) 2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: 9Hez2Qryllo/6XFmzpJNS2pAxaylJ09uR2dGctiDZzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a9:57:95:9a:a2:de:33:de:7f:0b:40:90:70:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2 Validity Not Before: Dec 20 22:00:53 2025 GMT Not After : Dec 21 22:00:53 2025 GMT Subject: CN=d5abe0af5fe50a9cc873e38043afe864493c6334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6c:61:41:45:ef:b4:e4:cd:e4:8b:b3:ac:53: d0:3d:48:f4:11:71:15:7f:c5:15:36:a1:b4:9e:88: ac:6d:07:98:da:72:de:96:78:d0:60:90:39:44:9f: 5a:9a:d0:e3:ca:fa:4b:cf:2f:68:48:f0:c9:bc:fe: 33:4c:46:29:eb:44:ae:db:e1:73:cf:3f:85:c7:e2: 58:e5:58:b6:69:0c:e9:b0:4b:bf:79:b5:31:d7:0a: c9:07:6a:98:8b:1d:05:c4:bf:b0:5a:60:4f:7c:de: d8:66:42:4f:28:0c:bb:10:33:dd:43:87:cd:62:9f: 04:f2:e9:ad:8b:20:41:95:11:03:cb:fc:f4:35:a0: 86:25:8a:90:66:97:99:a1:a0:ba:59:04:e6:e5:a0: c3:13:f3:10:bb:60:14:54:cb:33:52:5e:b1:fa:68: 93:8c:dc:dd:11:70:9a:1d:50:5d:b6:03:f5:5f:28: b9:eb:b0:69:5a:56:f6:1f:69:0a:6c:3d:42:89:7d: 82:26:ab:5b:f5:7a:54:04:bf:ce:aa:f8:0b:13:bf: 89:1e:97:9f:5f:34:ca:ae:f7:40:35:7a:10:ca:f7: d7:e0:cb:49:23:8c:f4:86:d8:f2:24:fc:57:bd:12: 89:e2:b3:1d:12:02:9b:ef:f9:3b:31:65:bc:b1:52: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:E0:AF:5F:E5:0A:9C:C8:73:E3:80:43:AF:E8:64:49:3C:63:34 X509v3 Authority Key Identifier: keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:08:62:f4:3d:5f:ad:3e:e8:08:7d:8f:21:a7:d0:b8:1c:9b: 1f:76:f4:ac:19:29:d8:fe:ac:0f:12:3c:9a:17:54:03:0f:10: 14:7f:ee:a9:e8:b1:1d:75:13:b0:33:6b:55:e5:21:d5:2a:38: 34:48:0e:d8:62:bf:4a:0e:cf:a5:ab:17:5c:45:1a:da:49:d2: 92:98:f0:7f:8b:fc:3b:ca:08:69:2e:1e:db:46:ed:eb:cd:f7: f9:16:ac:43:03:63:5e:e6:b9:7a:e8:8f:9a:b4:8c:a6:33:05: 78:33:58:0b:f0:f4:b1:a6:25:a5:36:47:fe:86:e4:8c:1e:21: dd:8e:83:f1:ac:aa:a1:67:5d:26:9e:06:a2:0d:7f:8d:0b:67: 9c:06:07:d5:9c:94:9f:3f:b4:20:24:4b:b7:72:d2:30:7a:80: 55:05:5e:55:aa:87:32:79:e3:30:f6:5a:fe:f6:e7:b3:3d:39: 86:38:72:f2:8e:43:f6:58:62:ed:26:26:6d:ff:3f:f4:3f:af: 0a:dc:a8:0b:97:b9:c5:3e:2f:96:00:d9:92:ab:74:42:55:d4: e3:b2:b6:24:b3:de:5b:1c:1b:47:8f:95:f8:66:6c:11:3c:e5: 84:e7:54:73:0f:f2:82:4c:5e:93:f0:89:d0:17:96:3c:b4:9e: c9:0c:d1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6lXlZqi3jPefwtAkHAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmMyZWNhMzI0Nzc3ZDc0YmYyZTczYzE1YjBjYzdmZjNl ZTc1YTIwHhcNMjUxMjIwMjIwMDUzWhcNMjUxMjIxMjIwMDUzWjAzMTEwLwYDVQQD EyhkNWFiZTBhZjVmZTUwYTljYzg3M2UzODA0M2FmZTg2NDQ5M2M2MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mxhQUXvtOTN5IuzrFPQPUj0EXEV f8UVNqG0noisbQeY2nLelnjQYJA5RJ9amtDjyvpLzy9oSPDJvP4zTEYp60Su2+Fz zz+Fx+JY5Vi2aQzpsEu/ebUx1wrJB2qYix0FxL+wWmBPfN7YZkJPKAy7EDPdQ4fN Yp8E8umtiyBBlREDy/z0NaCGJYqQZpeZoaC6WQTm5aDDE/MQu2AUVMszUl6x+miT jNzdEXCaHVBdtgP1Xyi567BpWlb2H2kKbD1CiX2CJqtb9XpUBL/OqvgLE7+JHpef XzTKrvdANXoQyvfX4MtJI4z0htjyJPxXvRKJ4rMdEgKb7/k7MWW8sVJEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWr4K9f5QqcyHPjgEOv6GRJPGM0MB8GA1UdIwQY MBaAFH28LsoyR3fXS/LnPBWwzH/z7nWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83Njc3ZTItYzk3MS00YWU3LWE3YjMt YzhkMTE5ZWUyMDUzLzEvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83Njc3ZTItYzk3MS00YWU3LWE3YjMtYzhkMTE5ZWUyMDUz LzEvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARwhi9D1f rT7oCH2PIafQuBybH3b0rBkp2P6sDxI8mhdUAw8QFH/uqeixHXUTsDNrVeUh1So4 NEgO2GK/Sg7PpasXXEUa2knSkpjwf4v8O8oIaS4e20bt6833+RasQwNjXua5euiP mrSMpjMFeDNYC/D0saYlpTZH/obkjB4h3Y6D8ayqoWddJp4Gog1/jQtnnAYH1ZyU nz+0ICRLt3LSMHqAVQVeVaqHMnnjMPZa/vbnsz05hjhy8o5D9lhi7SYmbf8/9D+v CtyoC5e5xT4vlgDZkqt0QlXU47K2JLPeWxwbR4+V+GZsETzlhOdUcw/ygkxek/CJ 0BeWPLSeyQzRUw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:05:32 2025 by rpki-client