This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: zcfAhFaw+b95g7hFmcghs4FTkUHBbg1g1qDtl8pofgs= Subject key identifier: FB:98:53:76:C4:B0:49:91:7A:E3:98:0E:AB:3F:EC:13:95:6F:1E:63 Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B435C50EDE93F3B7B22242AB44AE111C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 02A5 Signing time: Mon 22 Dec 2025 00:01:22 +0000 Manifest this update: Mon 22 Dec 2025 00:01:22 +0000 Manifest next update: Tue 23 Dec 2025 00:01:22 +0000 Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=) 2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=) 3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: iJ3Jf7afpa/lHtxOwiLKijTDS6bumtCPaaLHlcPnRTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:50:ed:e9:3f:3b:7b:22:24:2a:b4:4a:e1:11:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Dec 22 00:01:22 2025 GMT Not After : Dec 23 00:01:22 2025 GMT Subject: CN=fb985376c4b049917ae3980eab3fec13956f1e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:32:96:42:d2:48:7b:45:cd:24:ec:5c:12:03: 71:65:53:67:92:bb:cc:05:fb:eb:cd:15:1a:07:a6: 21:75:8a:9b:d6:af:62:0d:97:b3:a8:38:e8:20:1e: 58:5d:74:0c:bb:be:e3:92:55:52:81:8a:6a:ac:4c: 74:a6:7a:75:57:f3:8d:18:3e:cb:f0:6a:83:7a:5b: 8e:ac:75:51:c0:8f:9a:ab:57:50:de:10:61:53:67: 26:f3:f5:6f:ea:db:ed:ba:c1:20:11:b8:78:da:ac: 65:18:d4:ae:07:9f:08:61:9b:e1:62:61:dc:9d:46: 7a:bb:09:a6:e1:36:fe:63:c6:ab:10:ce:21:b2:43: 15:b9:ee:53:6b:52:97:19:d4:29:39:e0:db:6a:90: 83:3f:11:3c:ea:4b:65:15:32:eb:56:02:17:48:ca: 03:19:f2:84:2b:dd:d9:e7:a7:80:81:c2:a8:6a:37: e0:e3:5c:28:b4:8a:c6:e1:1d:1f:ca:bd:00:d3:fd: 08:6f:b8:c5:8c:bd:6c:3b:e5:40:84:52:de:c7:9d: 55:ed:21:84:d5:ae:5f:33:3b:7a:be:19:a3:c1:5f: 97:a3:00:16:60:47:da:98:1d:1a:d9:d7:ed:5f:8a: aa:35:11:2e:e9:dc:b1:da:d9:dc:dd:86:21:0e:9d: 94:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:98:53:76:C4:B0:49:91:7A:E3:98:0E:AB:3F:EC:13:95:6F:1E:63 X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ac:31:14:77:05:d2:94:df:cf:fe:cc:f6:63:c1:50:af:ed: e0:c0:64:51:72:70:76:86:72:54:0f:8e:95:4f:33:be:84:ff: d2:52:58:12:13:5d:4b:fd:89:d3:41:a4:0c:c6:2b:f9:7e:5f: aa:eb:15:0c:1b:88:6e:0e:0b:28:c1:a7:f2:ca:f6:57:d0:5a: cc:af:d9:49:d6:a9:d7:89:26:ed:00:3f:7a:18:31:a0:73:b0: 6a:b0:a8:ef:3d:9e:6e:83:1d:3e:11:a3:ce:99:d9:a5:d3:ac: 7f:ac:b8:4f:c1:db:fb:3d:8a:c4:76:70:f7:fc:ac:7c:5f:5f: b6:44:2f:b4:7e:35:f7:de:84:9b:31:ab:73:08:7b:c9:1a:7f: a7:bc:37:9d:8c:fb:9e:e2:a8:e3:2a:78:91:b7:b4:aa:96:cd: 62:f4:69:d5:ca:ee:95:9a:1e:fb:e9:b1:3c:f0:9a:e9:eb:e4: d9:71:dc:f6:4a:71:4a:f5:32:61:d4:9a:c2:5e:41:4c:9a:e4: 76:35:5d:dd:f9:cd:c9:83:28:c2:14:fa:de:4c:fc:bd:48:5e: cf:69:72:88:d4:0f:4f:d2:e6:88:f0:ce:db:df:25:e3:dc:99: 72:12:8f:2e:94:b3:e8:c5:10:86:14:4b:7b:54:1d:a0:5d:0c: cd:c7:ad:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXFDt6T87eyIkKrRK4RHCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjUxMjIyMDAwMTIyWhcNMjUxMjIzMDAwMTIyWjAzMTEwLwYDVQQD EyhmYjk4NTM3NmM0YjA0OTkxN2FlMzk4MGVhYjNmZWMxMzk1NmYxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDKWQtJIe0XNJOxcEgNxZVNnkrvM BfvrzRUaB6YhdYqb1q9iDZezqDjoIB5YXXQMu77jklVSgYpqrEx0pnp1V/ONGD7L 8GqDeluOrHVRwI+aq1dQ3hBhU2cm8/Vv6tvtusEgEbh42qxlGNSuB58IYZvhYmHc nUZ6uwmm4Tb+Y8arEM4hskMVue5Ta1KXGdQpOeDbapCDPxE86ktlFTLrVgIXSMoD GfKEK93Z56eAgcKoajfg41wotIrG4R0fyr0A0/0Ib7jFjL1sO+VAhFLex51V7SGE 1a5fMzt6vhmjwV+XowAWYEfamB0a2dftX4qqNREu6dyx2tnc3YYhDp2UDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuYU3bEsEmReuOYDqs/7BOVbx5jMB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKwxFHcF 0pTfz/7M9mPBUK/t4MBkUXJwdoZyVA+OlU8zvoT/0lJYEhNdS/2J00GkDMYr+X5f qusVDBuIbg4LKMGn8sr2V9BazK/ZSdap14km7QA/ehgxoHOwarCo7z2eboMdPhGj zpnZpdOsf6y4T8Hb+z2KxHZw9/ysfF9ftkQvtH41996EmzGrcwh7yRp/p7w3nYz7 nuKo4yp4kbe0qpbNYvRp1crulZoe++mxPPCa6evk2XHc9kpxSvUyYdSawl5BTJrk djVd3fnNyYMowhT63kz8vUhez2lyiNQPT9LmiPDO298l49yZchKPLpSz6MUQhhRL e1QdoF0MzcetFA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:03:39 2025 by rpki-client