This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft File: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json) Hash identifier: 8V0Ife2B4tjX4326s1RzdB8G9jPmxBh8uyt3xyFcdyk= Subject key identifier: B4:CD:6C:76:F2:CD:B8:C0:8A:39:E3:DD:F4:DC:CF:71:B2:A4:DB:87 Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 Certificate issuer: /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Certificate serial: 019B597755B3C8BE72F9823D477495E8EB77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft Manifest number: 10C2 Signing time: Fri 26 Dec 2025 07:02:31 +0000 Manifest this update: Fri 26 Dec 2025 07:02:31 +0000 Manifest next update: Sat 27 Dec 2025 07:02:31 +0000 Files and hashes: 1: dY8PRHODabkygNlq6-JaDEHqZls.asa (hash: wO6s5irr+VwBuwHpzpyaBiPqP7VqY55H1NCOsRyEv68=) 2: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: 9f4yJ6IAnUn4PP+TVYtMglub7cJYVF3UzLBif+FVNTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:55:b3:c8:be:72:f9:82:3d:47:74:95:e8:eb:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24 Validity Not Before: Dec 26 07:02:31 2025 GMT Not After : Dec 27 07:02:31 2025 GMT Subject: CN=b4cd6c76f2cdb8c08a39e3ddf4dccf71b2a4db87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:0b:97:57:ef:a2:a6:0d:66:35:23:53:2a: 26:19:83:36:a1:33:8f:21:2f:32:80:21:3e:a0:55: 39:23:89:95:df:38:0f:47:21:34:c1:da:57:76:4f: 23:8c:2c:c6:59:d6:ca:23:b9:da:a8:41:be:a5:5a: 7f:9f:37:a9:de:e9:5f:ad:12:a9:3e:c7:55:f9:a0: b2:ca:cc:66:78:7a:e8:5c:f2:a1:7a:cc:74:ed:d4: cc:0a:ce:bb:3b:9b:58:c4:1a:f4:42:19:c6:24:b8: 7a:8b:35:5a:56:f7:32:b8:35:09:3b:84:6e:8d:f3: c4:3b:56:e8:13:72:f5:2d:ee:4a:1d:84:2a:06:a4: 97:38:46:9b:ab:ea:4c:66:8f:93:89:6c:53:b8:eb: 69:83:54:62:a5:5f:b8:eb:8a:88:dd:2b:9d:03:9f: 23:c3:04:a8:bf:4d:d1:42:61:fd:b5:97:2a:de:ed: cb:81:81:4d:bd:21:58:3a:ca:1d:24:26:25:c8:ba: fc:09:ee:3b:37:f4:89:04:96:55:62:99:20:3d:c5: 63:38:62:b3:97:4e:50:44:9b:93:99:f2:35:94:fa: 07:aa:55:09:75:7e:16:37:f6:d5:48:cf:ac:69:fc: 36:9e:d8:c6:3c:44:b2:e2:c4:16:a5:41:8b:a4:d0: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:CD:6C:76:F2:CD:B8:C0:8A:39:E3:DD:F4:DC:CF:71:B2:A4:DB:87 X509v3 Authority Key Identifier: keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:e5:7e:89:8e:a9:bb:2a:d4:81:d0:81:93:d6:9a:8c:f7:72: fd:d9:0c:8d:e6:ea:30:ba:d6:19:b3:a5:46:69:e0:df:0f:e4: 68:ef:95:1b:0b:7a:d4:97:67:72:5b:7c:7b:29:6f:eb:8a:fa: cf:98:6f:85:9d:1f:58:ca:8d:b4:85:ae:79:65:c2:7c:3c:a7: 23:67:c4:a5:35:f8:82:54:af:b0:f9:d3:4b:00:e5:cb:55:3c: 12:5f:1c:d6:77:06:02:25:22:cd:1b:28:13:7e:63:49:47:71: 1a:42:6a:8a:38:69:53:e9:94:6c:fb:82:bb:e0:ed:21:da:5b: 81:1c:8a:10:24:ea:a5:8a:d7:fc:81:47:0f:3f:dc:52:d1:5a: 32:3c:d5:29:c5:e1:c4:81:4b:ad:0f:4d:32:f9:4f:29:19:57: 75:3b:71:85:ed:75:8c:6c:d7:26:cf:22:27:f3:ec:1c:70:15: ec:38:33:d8:df:17:d0:c9:11:4c:84:de:c1:cc:dc:7d:71:3d: 1c:f8:e1:c2:57:3f:5f:b1:af:7d:d9:ed:39:87:1b:7b:92:bd: 82:db:58:0f:08:05:6b:64:1b:6a:4a:5f:5f:62:e2:85:e3:0f: c0:8e:06:e8:3d:e0:46:c1:98:dd:f2:c4:9c:5c:7e:07:2c:fb: 52:81:0d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1WzyL5y+YI9R3SV6Ot3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDVmYmZmZDYyZmUyNGUyNjMzOTE5M2FkOWE2YzMxOGI1 ZGJiMjQwHhcNMjUxMjI2MDcwMjMxWhcNMjUxMjI3MDcwMjMxWjAzMTEwLwYDVQQD EyhiNGNkNmM3NmYyY2RiOGMwOGEzOWUzZGRmNGRjY2Y3MWIyYTRkYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt60Ll1fvoqYNZjUjUyomGYM2oTOP IS8ygCE+oFU5I4mV3zgPRyE0wdpXdk8jjCzGWdbKI7naqEG+pVp/nzep3ulfrRKp PsdV+aCyysxmeHroXPKhesx07dTMCs67O5tYxBr0QhnGJLh6izVaVvcyuDUJO4Ru jfPEO1boE3L1Le5KHYQqBqSXOEabq+pMZo+TiWxTuOtpg1RipV+464qI3SudA58j wwSov03RQmH9tZcq3u3LgYFNvSFYOsodJCYlyLr8Ce47N/SJBJZVYpkgPcVjOGKz l05QRJuTmfI1lPoHqlUJdX4WN/bVSM+safw2ntjGPESy4sQWpUGLpNBWjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTNbHbyzbjAijnj3fTcz3GypNuHMB8GA1UdIwQY MBaAFH1F+//WL+JOJjORk62abDGLXbskMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMt ODdhNjJlMGZjNDhjLzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9iMjk1M2EtZDk4Ny00NmIwLWJlYTMtODdhNjJlMGZjNDhj LzEvZlVYN185WXY0azRtTTVHVHJacHNNWXRkdXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+V+iY6p uyrUgdCBk9aajPdy/dkMjebqMLrWGbOlRmng3w/kaO+VGwt61Jdnclt8eylv64r6 z5hvhZ0fWMqNtIWueWXCfDynI2fEpTX4glSvsPnTSwDly1U8El8c1ncGAiUizRso E35jSUdxGkJqijhpU+mUbPuCu+DtIdpbgRyKECTqpYrX/IFHDz/cUtFaMjzVKcXh xIFLrQ9NMvlPKRlXdTtxhe11jGzXJs8iJ/PsHHAV7Dgz2N8X0MkRTITewczcfXE9 HPjhwlc/X7GvfdntOYcbe5K9gttYDwgFa2QbakpfX2LiheMPwI4G6D3gRsGY3fLE nFx+Byz7UoEN+w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:58 2025 by rpki-client