This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft File: fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft (raw, json) Hash identifier: 7kfpjd6iMJtTcGE+EKQVlEO5XejVBobv8h8u3tyVsaI= Subject key identifier: A3:99:4F:D1:AF:9F:E5:DD:3E:19:37:BF:9D:9E:D3:F0:6A:95:B0:3B Authority key identifier: 7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 Certificate issuer: /CN=7c1bbb08037a876230406fa67379f980b5ab3276 Certificate serial: 019B21ABCE36C8D15E06E95B3F411BD970D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft Manifest number: 1044 Signing time: Mon 15 Dec 2025 11:01:05 +0000 Manifest this update: Mon 15 Dec 2025 11:01:05 +0000 Manifest next update: Tue 16 Dec 2025 11:01:05 +0000 Files and hashes: 1: fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl (hash: lUZECJ/gUPGT2TNvY5g4qLNASGXJt5211TyIpW9YpmA=) 2: mZO8S467jgcFzt406x0GmuRgZrg.roa (hash: LBo6nvo9ZS8C5pN/ZxvETZsZeRn1wNqdsDaMcfQFY7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:ce:36:c8:d1:5e:06:e9:5b:3f:41:1b:d9:70:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bbb08037a876230406fa67379f980b5ab3276 Validity Not Before: Dec 15 11:01:05 2025 GMT Not After : Dec 16 11:01:05 2025 GMT Subject: CN=a3994fd1af9fe5dd3e1937bf9d9ed3f06a95b03b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:bc:9b:d7:c7:9a:b7:5e:67:dc:f2:4b:d9:06: f0:bd:47:df:5f:bf:c1:30:2f:a2:ca:1b:eb:12:92: e8:d7:c5:fb:a3:37:02:56:43:73:02:ef:c6:17:2a: b7:62:16:e6:a0:36:13:35:2e:e1:95:8e:a2:09:1c: 68:be:ef:8e:40:74:a0:be:24:4f:05:fc:55:00:2c: 52:9f:be:ed:6d:5f:73:88:8d:7e:15:fc:57:78:c0: d8:c8:1a:05:be:1d:e5:b8:47:02:26:9e:96:4f:57: 3f:23:7c:8d:9d:d6:96:09:9a:63:29:bb:9c:78:03: db:88:21:b2:af:ce:28:db:ac:8c:28:57:c8:3f:2b: cd:df:03:94:c1:3d:82:ab:26:11:0f:67:13:54:ef: 88:e6:31:75:94:ed:31:83:76:59:7c:1f:e8:e2:a8: 11:aa:23:3a:c1:bf:4a:75:b6:58:0f:13:b3:27:32: 2a:9f:72:da:61:9e:f9:de:84:70:be:b7:84:d5:50: 56:7c:25:72:22:ca:98:dd:aa:5c:43:ee:81:14:27: aa:94:47:36:3b:8d:55:52:7e:f0:41:ba:d8:97:8c: ee:e9:d1:67:2e:77:fb:a2:03:53:c9:59:24:17:51: 2a:7f:3e:b2:02:8d:f3:76:11:cd:4b:bb:48:6b:22: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:99:4F:D1:AF:9F:E5:DD:3E:19:37:BF:9D:9E:D3:F0:6A:95:B0:3B X509v3 Authority Key Identifier: keyid:7C:1B:BB:08:03:7A:87:62:30:40:6F:A6:73:79:F9:80:B5:AB:32:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBu7CAN6h2IwQG-mc3n5gLWrMnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aca99b-82af-4aba-9967-08d5cd16f549/1/fBu7CAN6h2IwQG-mc3n5gLWrMnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:21:56:4d:80:49:50:8b:b7:60:90:f9:39:bb:6f:93:42:7d: 2d:fb:d1:27:2c:8e:47:61:ac:1f:41:f6:f2:92:9e:a6:e6:ba: 1b:c8:fd:f1:37:9c:8c:46:af:a1:59:50:e1:08:9b:f4:f5:8a: 86:cd:54:65:5a:3c:5d:f8:8b:74:96:ed:1f:d3:d5:5e:e5:c1: 77:ac:10:d0:98:08:44:cf:b4:68:ef:8c:ab:2a:3c:2c:fb:dd: cf:e8:37:eb:48:6d:c4:34:ce:5b:28:ac:c8:e5:7e:ae:ae:02: 29:79:38:89:d2:5b:f2:f4:42:9b:c4:a9:ef:8f:fa:1f:7c:44: 4f:fa:b6:be:24:ca:49:cf:5a:75:2c:bb:85:6b:b4:87:a2:25: 22:79:06:ef:c1:93:31:40:f4:32:fa:25:0f:8d:af:81:8f:20: 28:e0:5b:3f:bb:e3:d4:8c:be:c1:00:04:e1:30:03:6b:5c:af: 66:fb:d3:26:ae:86:e7:2f:e9:b1:5c:38:6e:06:42:4f:92:3a: 96:70:5d:9d:0f:c8:7b:c3:dc:9d:7f:28:0d:6e:00:73:9c:66: 61:f7:16:bf:06:e9:b4:fa:cc:a1:f8:b1:9f:2e:e5:f4:c6:45: 07:d5:39:9a:4d:21:20:35:23:84:9f:ea:41:83:9b:0d:43:64: 65:93:b5:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq842yNFeBulbP0Eb2XDZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJiYjA4MDM3YTg3NjIzMDQwNmZhNjczNzlmOTgwYjVh YjMyNzYwHhcNMjUxMjE1MTEwMTA1WhcNMjUxMjE2MTEwMTA1WjAzMTEwLwYDVQQD EyhhMzk5NGZkMWFmOWZlNWRkM2UxOTM3YmY5ZDllZDNmMDZhOTViMDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ryb18eat15n3PJL2QbwvUffX7/B MC+iyhvrEpLo18X7ozcCVkNzAu/GFyq3YhbmoDYTNS7hlY6iCRxovu+OQHSgviRP BfxVACxSn77tbV9ziI1+FfxXeMDYyBoFvh3luEcCJp6WT1c/I3yNndaWCZpjKbuc eAPbiCGyr84o26yMKFfIPyvN3wOUwT2CqyYRD2cTVO+I5jF1lO0xg3ZZfB/o4qgR qiM6wb9KdbZYDxOzJzIqn3LaYZ753oRwvreE1VBWfCVyIsqY3apcQ+6BFCeqlEc2 O41VUn7wQbrYl4zu6dFnLnf7ogNTyVkkF1Eqfz6yAo3zdhHNS7tIayIMsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOZT9Gvn+XdPhk3v52e0/BqlbA7MB8GA1UdIwQY MBaAFHwbuwgDeodiMEBvpnN5+YC1qzJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5Njct MDhkNWNkMTZmNTQ5LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9hY2E5OWItODJhZi00YWJhLTk5NjctMDhkNWNkMTZmNTQ5 LzEvZkJ1N0NBTjZoMkl3UUctbWMzbjVnTFdyTW5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCFWTYBJ UIu3YJD5Obtvk0J9LfvRJyyOR2GsH0H28pKepua6G8j98TecjEavoVlQ4Qib9PWK hs1UZVo8XfiLdJbtH9PVXuXBd6wQ0JgIRM+0aO+Mqyo8LPvdz+g360htxDTOWyis yOV+rq4CKXk4idJb8vRCm8Sp74/6H3xET/q2viTKSc9adSy7hWu0h6IlInkG78GT MUD0MvolD42vgY8gKOBbP7vj1Iy+wQAE4TADa1yvZvvTJq6G5y/psVw4bgZCT5I6 lnBdnQ/Ie8PcnX8oDW4Ac5xmYfcWvwbptPrMofixny7l9MZFB9U5mk0hIDUjhJ/q QYObDUNkZZO14g== -----END CERTIFICATE-----Generated at Mon Dec 15 20:23:27 2025 by rpki-client