This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft File: fsZmdy15vXuyEZmiq9r-IgJRHHA.mft (raw, json) Hash identifier: hz0nbYoAwsISd0OrZea+EaIikqRGZBmq8vTeAoxAWIM= Subject key identifier: BE:92:53:CA:A0:D4:8E:8C:C3:89:C8:DA:27:06:E2:B2:9A:5A:6F:4C Authority key identifier: 7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70 Certificate issuer: /CN=7ec666772d79bd7bb21199a2abdafe2202511c70 Certificate serial: 019B5ABFD9AEE9E8E1F1ABF773D4EF564AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft Manifest number: 0EAB Signing time: Fri 26 Dec 2025 13:01:20 +0000 Manifest this update: Fri 26 Dec 2025 13:01:20 +0000 Manifest next update: Sat 27 Dec 2025 13:01:20 +0000 Files and hashes: 1: dWmsOWayzQrhACw6PZROUA9TY4k.roa (hash: k+N79FADkE2zFtD7FMss3oaOymFQNUYiml90eSHs5KE=) 2: fsZmdy15vXuyEZmiq9r-IgJRHHA.crl (hash: 0Ewq7fNor72lW0wKM9Gk+wf7MBbVoX9tsmZ3af0HGaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d9:ae:e9:e8:e1:f1:ab:f7:73:d4:ef:56:4a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec666772d79bd7bb21199a2abdafe2202511c70 Validity Not Before: Dec 26 13:01:20 2025 GMT Not After : Dec 27 13:01:20 2025 GMT Subject: CN=be9253caa0d48e8cc389c8da2706e2b29a5a6f4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d7:1b:fa:89:f0:a2:62:4e:25:d3:41:fd:80: 8c:13:c0:fa:1b:94:67:81:72:ac:61:71:3e:1c:21: f7:f6:b5:68:7e:b5:2f:eb:10:0b:f2:77:f3:94:3e: 54:cf:b5:10:f3:a9:b4:1f:62:59:8d:6c:07:bb:24: b2:8c:cc:2c:67:ac:d2:f6:23:0c:e9:06:50:30:4e: 56:3f:99:d1:e1:66:2c:0d:b2:72:9a:0c:a6:5e:47: a3:73:07:08:6f:f4:ce:9c:17:f7:9d:ce:2e:99:de: b5:1d:de:68:74:9a:6f:ef:fc:46:ba:6d:e1:96:37: c0:45:4c:43:8b:71:6c:46:89:61:a7:b3:be:5c:b1: ef:1c:f5:11:c3:36:93:df:ff:98:2d:84:45:c3:b9: 2a:fa:ec:c3:4d:ae:0a:33:01:09:02:57:ad:41:26: 24:5c:fd:18:2d:13:0d:1d:38:b3:18:09:6c:50:d6: 61:e8:f1:26:82:83:f9:08:f6:2d:20:5e:a1:4b:09: 10:ec:9d:c2:cf:79:02:5f:9c:24:f2:4e:2f:a4:fd: e7:d6:c3:77:1b:05:e7:f2:0a:b3:14:1d:a1:bc:ec: 5d:3b:45:dc:a4:67:18:ba:43:74:78:5a:1f:36:fa: 4f:c2:fc:a5:f3:7a:fd:59:aa:28:c1:31:25:94:eb: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:92:53:CA:A0:D4:8E:8C:C3:89:C8:DA:27:06:E2:B2:9A:5A:6F:4C X509v3 Authority Key Identifier: keyid:7E:C6:66:77:2D:79:BD:7B:B2:11:99:A2:AB:DA:FE:22:02:51:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZmdy15vXuyEZmiq9r-IgJRHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a6d660-b1b8-425e-bb82-91651d9b856a/1/fsZmdy15vXuyEZmiq9r-IgJRHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:0a:f8:7f:76:26:29:88:3a:bf:25:e7:85:ee:9c:e3:ad: 13:ee:3c:6d:12:21:9e:21:d3:e7:67:8d:df:23:ec:4e:61:6f: 93:bf:93:4d:e1:73:55:d9:e8:97:65:76:1f:02:6e:d7:32:5a: 90:d2:ba:80:aa:fa:31:a9:f3:08:55:13:f3:72:4d:7f:18:36: 9a:e8:7a:a5:d0:26:52:d7:8f:9c:11:90:6c:4e:33:8f:9b:b3: 0d:66:79:85:3e:83:fe:49:69:cd:0b:3c:c9:cd:4b:4b:56:bb: 54:c9:13:13:5d:41:f7:99:6c:fc:f9:80:ae:bb:7b:3c:e5:9a: d4:c1:7a:7e:12:f9:88:ec:49:90:63:8e:ae:80:50:44:a4:a2: ec:8c:35:6b:62:ea:ca:d1:f2:e5:63:2a:0d:24:d6:04:b6:c3: 96:a5:6f:d7:8b:de:39:14:2e:a6:c8:25:97:d9:b5:e6:86:53: 9b:cf:3c:ce:57:b3:b2:98:c1:7a:03:a4:1e:bf:dd:8b:cc:34: 16:e2:1b:d6:bc:a1:39:0f:cb:ce:fb:a7:e3:32:e3:14:45:c0: 37:d8:c2:56:14:e5:65:8e:a8:34:f9:4b:90:f3:5d:57:56:54: 6b:40:f8:bf:19:49:40:c2:de:06:a0:87:2f:b1:b6:79:19:7e: 10:d3:e7:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9mu6ejh8av3c9TvVkrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzY2Njc3MmQ3OWJkN2JiMjExOTlhMmFiZGFmZTIyMDI1 MTFjNzAwHhcNMjUxMjI2MTMwMTIwWhcNMjUxMjI3MTMwMTIwWjAzMTEwLwYDVQQD EyhiZTkyNTNjYWEwZDQ4ZThjYzM4OWM4ZGEyNzA2ZTJiMjlhNWE2ZjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ncb+onwomJOJdNB/YCME8D6G5Rn gXKsYXE+HCH39rVofrUv6xAL8nfzlD5Uz7UQ86m0H2JZjWwHuySyjMwsZ6zS9iMM 6QZQME5WP5nR4WYsDbJymgymXkejcwcIb/TOnBf3nc4umd61Hd5odJpv7/xGum3h ljfARUxDi3FsRolhp7O+XLHvHPURwzaT3/+YLYRFw7kq+uzDTa4KMwEJAletQSYk XP0YLRMNHTizGAlsUNZh6PEmgoP5CPYtIF6hSwkQ7J3Cz3kCX5wk8k4vpP3n1sN3 GwXn8gqzFB2hvOxdO0XcpGcYukN0eFofNvpPwvyl83r9WaoowTEllOuEEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6SU8qg1I6Mw4nI2icG4rKaWm9MMB8GA1UdIwQY MBaAFH7GZncteb17shGZoqva/iICURxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODIt OTE2NTFkOWI4NTZhLzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hNmQ2NjAtYjFiOC00MjVlLWJiODItOTE2NTFkOWI4NTZh LzEvZnNabWR5MTV2WHV5RVptaXE5ci1JZ0pSSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/4K+H92 JimIOr8l54XunOOtE+48bRIhniHT52eN3yPsTmFvk7+TTeFzVdnol2V2HwJu1zJa kNK6gKr6ManzCFUT83JNfxg2muh6pdAmUtePnBGQbE4zj5uzDWZ5hT6D/klpzQs8 yc1LS1a7VMkTE11B95ls/PmArrt7POWa1MF6fhL5iOxJkGOOroBQRKSi7Iw1a2Lq ytHy5WMqDSTWBLbDlqVv14veORQupsgll9m15oZTm888zlezspjBegOkHr/di8w0 FuIb1ryhOQ/Lzvun4zLjFEXAN9jCVhTlZY6oNPlLkPNdV1ZUa0D4vxlJQMLeBqCH L7G2eRl+ENPnXA== -----END CERTIFICATE-----Generated at Fri Dec 26 19:29:44 2025 by rpki-client