This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json) Hash identifier: uNEvOfYuLeMrC74RyVNkquXFqlX/qubGwvovyCKKcgY= Subject key identifier: 9E:57:17:38:84:51:A4:4B:C3:47:B5:FA:3F:E8:99:66:EE:CA:24:C0 Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd Certificate serial: 019B424AFFF2F784D71F3662B494292E3F8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft Manifest number: 0B1B Signing time: Sun 21 Dec 2025 19:02:49 +0000 Manifest this update: Sun 21 Dec 2025 19:02:49 +0000 Manifest next update: Mon 22 Dec 2025 19:02:49 +0000 Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: 2J2D0xs8fw6rTrTUG8VvadAbj/V0omyWoK5RsEO2Ryk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ff:f2:f7:84:d7:1f:36:62:b4:94:29:2e:3f:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd Validity Not Before: Dec 21 19:02:49 2025 GMT Not After : Dec 22 19:02:49 2025 GMT Subject: CN=9e5717388451a44bc347b5fa3fe89966eeca24c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:cc:04:c3:19:6a:2f:52:16:b3:13:3e:d4: bd:15:39:48:2a:73:fc:a7:91:f3:b2:4e:65:f6:2c: 33:be:7a:0d:36:82:ef:8e:c6:81:96:a5:9e:1a:4a: ae:a6:41:74:ff:31:6e:c1:5d:f2:76:f5:d7:5c:ff: e4:5d:24:87:42:8e:f2:a3:14:6b:1c:8a:77:9d:5d: a4:74:80:0b:a2:e3:42:d8:b4:29:c1:fc:0a:12:9b: e1:92:a5:19:3c:c2:64:8e:d8:84:42:e0:b3:7d:b0: d2:33:94:5a:11:ad:fa:24:43:f9:b4:fd:94:56:88: 34:c5:fb:2f:46:ab:a6:8d:15:ab:22:41:7f:5f:48: a2:50:ea:b8:0b:86:ff:22:e1:4d:91:38:b6:8b:c8: ca:fd:89:68:82:14:61:6f:fd:c6:ea:49:85:4b:0c: c3:e1:c6:3f:88:a4:84:39:b9:a4:fb:fc:ee:ca:05: 77:33:e9:96:c2:42:61:04:b2:11:73:96:ca:27:2d: 26:dd:fa:64:41:ab:8f:7e:a8:b1:f9:67:79:c1:d3: a5:19:82:ce:f4:10:bd:5f:5b:e7:af:b9:7a:79:67: 70:e0:6b:0c:7e:11:59:68:5d:76:e4:40:25:9e:28: b7:ea:95:9a:70:84:11:83:b2:c5:71:f8:b1:80:1c: 00:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:17:38:84:51:A4:4B:C3:47:B5:FA:3F:E8:99:66:EE:CA:24:C0 X509v3 Authority Key Identifier: keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:38:da:f4:e6:c4:a5:2e:45:fa:61:96:c8:02:2c:58:f7:77: 27:15:11:e7:c6:c7:aa:cd:d9:6d:d6:3f:4e:36:9a:9b:83:27: c1:1a:80:17:64:c2:b0:3b:27:ce:3b:e2:08:08:8b:c4:3d:de: e6:da:d7:9d:2b:f8:89:7b:48:a9:69:b9:54:cc:80:36:73:a7: 09:4a:ef:ed:66:5c:c7:66:f5:85:b5:79:f3:b4:31:95:4b:2b: b6:bd:f4:4c:3e:ee:2b:ae:41:69:df:03:22:d6:3a:54:dc:89: cc:fa:3c:ca:0f:9b:39:95:c0:bb:f8:e8:44:5f:36:07:79:f1: 9b:27:1d:d6:0f:a3:85:95:75:48:1e:b3:b8:98:f1:98:70:d9: 97:e3:8d:52:bd:48:4c:62:4d:5e:69:f2:38:6f:a1:9e:36:e1: 66:a1:55:87:20:8f:69:0e:6e:b5:8c:ec:93:de:91:c2:a9:ca: 96:6b:91:c2:49:70:09:a2:05:29:fc:ad:e5:cc:df:f2:14:3a: ff:e2:c4:06:24:d0:8a:c3:a3:ee:69:e3:f1:fd:38:c3:fe:dc: 46:dd:d5:55:be:9b:97:b9:af:26:1d:79:88:87:0b:d2:00:5a: b9:5c:7b:08:db:ee:27:bb:89:29:f3:f4:71:ff:c0:86:d1:3a: c0:7c:c1:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSv/y94TXHzZitJQpLj+LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm NjQ0ZmQwHhcNMjUxMjIxMTkwMjQ5WhcNMjUxMjIyMTkwMjQ5WjAzMTEwLwYDVQQD Eyg5ZTU3MTczODg0NTFhNDRiYzM0N2I1ZmEzZmU4OTk2NmVlY2EyNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvjMBMMZai9SFrMTPtS9FTlIKnP8 p5Hzsk5l9iwzvnoNNoLvjsaBlqWeGkqupkF0/zFuwV3ydvXXXP/kXSSHQo7yoxRr HIp3nV2kdIALouNC2LQpwfwKEpvhkqUZPMJkjtiEQuCzfbDSM5RaEa36JEP5tP2U Vog0xfsvRqumjRWrIkF/X0iiUOq4C4b/IuFNkTi2i8jK/YloghRhb/3G6kmFSwzD 4cY/iKSEObmk+/zuygV3M+mWwkJhBLIRc5bKJy0m3fpkQauPfqix+Wd5wdOlGYLO 9BC9X1vnr7l6eWdw4GsMfhFZaF125EAlnii36pWacIQRg7LFcfixgBwAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5XFziEUaRLw0e1+j/omWbuyiTAMB8GA1UdIwQY MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmDja9ObE pS5F+mGWyAIsWPd3JxUR58bHqs3ZbdY/Tjaam4MnwRqAF2TCsDsnzjviCAiLxD3e 5trXnSv4iXtIqWm5VMyANnOnCUrv7WZcx2b1hbV587QxlUsrtr30TD7uK65Bad8D ItY6VNyJzPo8yg+bOZXAu/joRF82B3nxmycd1g+jhZV1SB6zuJjxmHDZl+ONUr1I TGJNXmnyOG+hnjbhZqFVhyCPaQ5utYzsk96RwqnKlmuRwklwCaIFKfyt5czf8hQ6 /+LEBiTQisOj7mnj8f04w/7cRt3VVb6bl7mvJh15iIcL0gBauVx7CNvuJ7uJKfP0 cf/AhtE6wHzB6w== -----END CERTIFICATE-----Generated at Mon Dec 22 02:17:38 2025 by rpki-client