This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft File: fU--VZRwf9z5QCXqFVcaaMJNqas.mft (raw, json) Hash identifier: fouKKDkNgHpFMzGtOufYIgl2mZHiE2UWzcwUKitaxyo= Subject key identifier: 8E:63:73:BC:60:D7:54:49:5D:DB:27:EA:4B:06:A3:9A:62:B5:E3:F9 Authority key identifier: 7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB Certificate issuer: /CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Certificate serial: 019B3C7DF28157513DED5E2CF9CC503380C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft Manifest number: 0955 Signing time: Sat 20 Dec 2025 16:00:45 +0000 Manifest this update: Sat 20 Dec 2025 16:00:45 +0000 Manifest next update: Sun 21 Dec 2025 16:00:45 +0000 Files and hashes: 1: fU--VZRwf9z5QCXqFVcaaMJNqas.crl (hash: lrKIacRzN5knZWMp3ocesxeCg0ee+b1De2LVL3+exDo=) 2: uJcxOoPayTtpIImr51o6Grvnwh4.roa (hash: HgfbCb24sxq0O5vUUAY2XVFtTmqaW+l9dpOtt2vq4Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:f2:81:57:51:3d:ed:5e:2c:f9:cc:50:33:80:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4fbe5594707fdcf94025ea15571a68c24da9ab Validity Not Before: Dec 20 16:00:45 2025 GMT Not After : Dec 21 16:00:45 2025 GMT Subject: CN=8e6373bc60d754495ddb27ea4b06a39a62b5e3f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:57:7e:1d:a6:ad:89:c0:a3:ed:b0:be:fc:d9: 34:76:a4:ed:c3:a0:d9:b7:ea:e1:2d:a7:c6:34:b3: 6b:22:1a:64:cb:b7:9d:2b:ec:75:dc:21:c6:ed:dd: a9:7d:3b:11:12:c9:f2:c0:7c:af:3e:82:01:48:aa: 3d:02:27:72:6e:dc:28:c0:23:04:f9:02:20:35:be: b6:0a:fc:3c:fc:cb:6d:27:e3:41:30:79:74:c2:f7: 0c:9c:dd:00:d4:ef:f4:d5:4a:59:05:45:39:9f:0f: 54:71:9f:9e:8b:fb:c4:2e:b4:ac:23:62:27:55:61: ce:c0:ca:7e:5a:6f:d2:74:3e:62:5c:44:d2:91:79: 5e:83:15:ca:78:50:8e:de:0c:cd:24:0d:de:36:03: c0:20:78:eb:43:a3:c6:c4:e9:a4:6b:cb:78:8a:de: 11:49:16:3f:ad:0c:26:ad:13:79:97:ba:a5:87:a5: cf:16:8b:db:35:40:96:ed:22:90:41:5d:fa:4d:01: a3:fe:4f:79:91:f7:bb:6a:b4:c4:b8:b2:75:e5:a3: 75:89:38:21:81:b3:a2:28:3d:e8:37:86:eb:23:71: 05:b7:12:54:65:c7:b8:11:57:5e:60:42:01:32:35: c5:eb:3a:8a:af:46:68:be:3b:e8:99:56:b9:9f:da: 3b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:63:73:BC:60:D7:54:49:5D:DB:27:EA:4B:06:A3:9A:62:B5:E3:F9 X509v3 Authority Key Identifier: keyid:7D:4F:BE:55:94:70:7F:DC:F9:40:25:EA:15:57:1A:68:C2:4D:A9:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU--VZRwf9z5QCXqFVcaaMJNqas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bf7bbb-6b12-474c-93bc-7c73059278ef/1/fU--VZRwf9z5QCXqFVcaaMJNqas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:af:cd:83:da:10:3e:12:17:25:19:a6:f8:c7:a6:cc:6a:e7: 99:a9:8f:63:cd:56:61:01:b1:51:1f:5f:2f:7e:46:67:57:10: d1:68:ec:c6:0c:d7:7f:58:06:51:4d:ab:c0:fb:73:eb:16:ce: 53:59:e4:c9:9c:82:2f:f2:18:a8:c1:73:23:eb:f8:a3:21:eb: 88:44:96:ce:99:5d:09:84:1d:7d:96:88:ac:d3:b2:cf:48:10: 16:41:3d:63:92:68:fe:71:b9:11:e3:0a:76:8e:5a:03:cd:74: c5:3d:73:bb:6f:07:ec:0e:ff:1f:e5:8e:18:28:dd:fc:f4:dd: c2:95:0c:7a:a3:6e:fa:e3:cd:ed:e6:09:40:b8:ff:42:dc:dd: b0:f6:6a:43:26:6b:59:02:32:f5:6a:76:e7:fe:98:ca:44:10: 91:e3:8f:0a:2c:54:68:af:56:a8:97:d4:69:8a:5c:78:7f:67: 61:66:1f:a3:66:95:36:d4:dd:73:c1:f6:ab:df:b9:ab:b6:87: a6:52:ac:7b:92:e1:3f:9b:4b:aa:8b:40:38:59:6c:1d:a0:89: b9:c4:5b:78:1b:85:90:a4:0a:48:3c:43:d2:d4:eb:b2:16:aa: 01:fd:a5:8c:04:61:40:47:2c:4e:58:65:4b:ba:25:a8:02:3b: 97:cd:b8:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffKBV1E97V4s+cxQM4DFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNGZiZTU1OTQ3MDdmZGNmOTQwMjVlYTE1NTcxYTY4YzI0 ZGE5YWIwHhcNMjUxMjIwMTYwMDQ1WhcNMjUxMjIxMTYwMDQ1WjAzMTEwLwYDVQQD Eyg4ZTYzNzNiYzYwZDc1NDQ5NWRkYjI3ZWE0YjA2YTM5YTYyYjVlM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVd+HaaticCj7bC+/Nk0dqTtw6DZ t+rhLafGNLNrIhpky7edK+x13CHG7d2pfTsREsnywHyvPoIBSKo9AidybtwowCME +QIgNb62Cvw8/MttJ+NBMHl0wvcMnN0A1O/01UpZBUU5nw9UcZ+ei/vELrSsI2In VWHOwMp+Wm/SdD5iXETSkXlegxXKeFCO3gzNJA3eNgPAIHjrQ6PGxOmka8t4it4R SRY/rQwmrRN5l7qlh6XPFovbNUCW7SKQQV36TQGj/k95kfe7arTEuLJ15aN1iTgh gbOiKD3oN4brI3EFtxJUZce4EVdeYEIBMjXF6zqKr0ZovjvomVa5n9o7FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5jc7xg11RJXdsn6ksGo5piteP5MB8GA1UdIwQY MBaAFH1PvlWUcH/c+UAl6hVXGmjCTamrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMt N2M3MzA1OTI3OGVmLzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9iZjdiYmItNmIxMi00NzRjLTkzYmMtN2M3MzA1OTI3OGVm LzEvZlUtLVZaUndmOXo1UUNYcUZWY2FhTUpOcWFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6/Ng9oQ PhIXJRmm+MemzGrnmamPY81WYQGxUR9fL35GZ1cQ0WjsxgzXf1gGUU2rwPtz6xbO U1nkyZyCL/IYqMFzI+v4oyHriESWzpldCYQdfZaIrNOyz0gQFkE9Y5Jo/nG5EeMK do5aA810xT1zu28H7A7/H+WOGCjd/PTdwpUMeqNu+uPN7eYJQLj/QtzdsPZqQyZr WQIy9Wp25/6YykQQkeOPCixUaK9WqJfUaYpceH9nYWYfo2aVNtTdc8H2q9+5q7aH plKse5LhP5tLqotAOFlsHaCJucRbeBuFkKQKSDxD0tTrshaqAf2ljARhQEcsTlhl S7olqAI7l8244Q== -----END CERTIFICATE-----Generated at Sat Dec 20 23:11:41 2025 by rpki-client