This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft File: fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json) Hash identifier: 2gqdMbkEFrrTS9sFRCe3+a6nJrxJ/XR62XIOLaSB7ro= Subject key identifier: F5:9E:4C:37:B2:AD:F5:7E:8D:CE:20:1A:B7:AE:CB:62:0B:44:C9:A2 Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B Certificate issuer: /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Certificate serial: 019B3A219E36A99C71CEC64D3053C1BACDF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 05:00:40 +0000 Manifest this update: Sat 20 Dec 2025 05:00:40 +0000 Manifest next update: Sun 21 Dec 2025 05:00:40 +0000 Files and hashes: 1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=) 2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: F97uPWFMVgqOegr6EPmz5s+w008ZUh6QwX2G4KkCykU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:9e:36:a9:9c:71:ce:c6:4d:30:53:c1:ba:cd:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b Validity Not Before: Dec 20 05:00:40 2025 GMT Not After : Dec 21 05:00:40 2025 GMT Subject: CN=f59e4c37b2adf57e8dce201ab7aecb620b44c9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:72:fd:ac:73:fe:98:c8:43:ec:5b:ac:00:92: 53:ff:5b:13:0a:b6:8d:46:8c:97:c5:e6:78:fc:3e: fb:37:d4:80:70:20:32:27:4b:21:3b:41:ed:48:88: 48:6e:26:d1:11:09:3a:8b:be:cb:a2:7a:d1:b8:58: 5b:0c:02:b3:b1:d4:61:ba:c5:a5:4d:bf:78:3b:a5: 93:b2:65:1a:60:46:bb:3e:54:e1:ac:30:8c:50:a2: a7:c3:b9:a2:07:89:61:61:5c:2f:dc:f1:cc:77:05: a1:ec:b6:a7:44:fa:f5:d2:89:f1:e6:fa:33:59:59: 17:01:bc:ad:bc:3e:e0:8f:f9:e7:f3:dc:1f:98:fe: 91:25:44:8f:92:66:79:21:cb:c6:81:a4:fe:f7:8b: 7a:8b:af:84:31:b2:18:a7:18:0e:e3:03:32:7d:8c: 83:5a:6f:1c:09:c1:8a:66:f6:30:c5:64:01:a3:7f: 10:06:26:27:29:37:7f:ad:1a:9b:59:00:ba:04:de: db:b4:0e:61:90:01:ee:1d:a5:8d:db:65:87:3e:91: 16:d2:be:df:2f:e8:2d:93:d3:b4:59:8a:4f:9b:07: 40:be:dc:8f:43:fb:5e:79:b0:af:07:41:54:90:10: ad:1b:1f:28:83:f7:da:4a:26:9e:df:85:fc:b9:8b: 78:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9E:4C:37:B2:AD:F5:7E:8D:CE:20:1A:B7:AE:CB:62:0B:44:C9:A2 X509v3 Authority Key Identifier: keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:71:70:7c:db:1a:c3:63:2e:33:c8:87:78:12:87:8b:76:e4: c6:52:25:b9:71:a9:85:77:36:99:88:b5:29:5e:32:ae:e5:9a: e5:49:71:26:dd:3e:df:ba:41:a7:a2:fc:59:3e:30:33:e4:47: 1e:63:57:42:9b:f8:95:52:a5:8c:35:51:1d:7b:49:63:40:8a: 46:c7:e5:58:e0:18:7c:72:07:bd:da:44:3d:de:84:f7:70:0c: b4:e0:7a:df:68:18:8e:fb:81:d1:0d:e0:59:f6:5b:20:50:8e: a6:96:24:4f:bb:f2:db:b7:3d:e3:e2:6f:45:31:9f:55:f5:85: f8:0f:e1:53:e9:26:a8:29:e8:d2:9b:34:71:6f:0f:dd:c8:0a: 86:6e:b2:2a:88:4f:fd:a3:00:c0:b8:03:a8:5c:b8:a3:ec:f5: 8f:94:f7:12:a5:86:4c:38:2e:5d:a1:8f:cc:1a:2c:ff:fe:a4: b6:fa:b4:27:3e:1f:a6:f3:e6:49:41:32:51:56:df:9f:04:fc: 86:94:0b:97:4e:81:38:d8:6c:92:df:08:20:c7:ad:75:9d:1c: 4b:93:23:67:85:05:e7:63:e8:16:49:7a:8a:71:a4:3e:ec:67: 66:13:23:6d:0a:d4:ca:6d:20:94:6d:aa:6e:0e:a4:c8:ee:fe: e7:df:58:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IZ42qZxxzsZNMFPBus3zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzgxZGUyZGEyZjBhNWFhYjQxODI2MTRiYmNjNWU0MTNk NTUyMWIwHhcNMjUxMjIwMDUwMDQwWhcNMjUxMjIxMDUwMDQwWjAzMTEwLwYDVQQD EyhmNTllNGMzN2IyYWRmNTdlOGRjZTIwMWFiN2FlY2I2MjBiNDRjOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43L9rHP+mMhD7FusAJJT/1sTCraN RoyXxeZ4/D77N9SAcCAyJ0shO0HtSIhIbibREQk6i77LonrRuFhbDAKzsdRhusWl Tb94O6WTsmUaYEa7PlThrDCMUKKnw7miB4lhYVwv3PHMdwWh7LanRPr10onx5voz WVkXAbytvD7gj/nn89wfmP6RJUSPkmZ5IcvGgaT+94t6i6+EMbIYpxgO4wMyfYyD Wm8cCcGKZvYwxWQBo38QBiYnKTd/rRqbWQC6BN7btA5hkAHuHaWN22WHPpEW0r7f L+gtk9O0WYpPmwdAvtyPQ/teebCvB0FUkBCtGx8og/faSiae34X8uYt41QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWeTDeyrfV+jc4gGreuy2ILRMmiMB8GA1UdIwQY MBaAFH7IHeLaLwpaq0GCYUu8xeQT1VIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYt YmQ5MWU5MmFjYTkwLzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wOTg1ZTctZGYwOC00MmE1LTlhODYtYmQ5MWU5MmFjYTkw LzEvZnNnZDR0b3ZDbHFyUVlKaFM3ekY1QlBWVWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXFwfNsa w2MuM8iHeBKHi3bkxlIluXGphXc2mYi1KV4yruWa5UlxJt0+37pBp6L8WT4wM+RH HmNXQpv4lVKljDVRHXtJY0CKRsflWOAYfHIHvdpEPd6E93AMtOB632gYjvuB0Q3g WfZbIFCOppYkT7vy27c94+JvRTGfVfWF+A/hU+kmqCno0ps0cW8P3cgKhm6yKohP /aMAwLgDqFy4o+z1j5T3EqWGTDguXaGPzBos//6ktvq0Jz4fpvPmSUEyUVbfnwT8 hpQLl06BONhskt8IIMetdZ0cS5MjZ4UF52PoFkl6inGkPuxnZhMjbQrUym0glG2q bg6kyO7+599YtQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:43 2025 by rpki-client