This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft File: fHwxHo7uu82iiQYtY6wOLtYdsd8.mft (raw, json) Hash identifier: L/4OAcV8jvk7bzbxq1VvBltJgIoAb21Gy7vK4DiWtsc= Subject key identifier: E6:14:EC:68:BE:F1:F4:26:3C:13:5F:FB:61:EC:10:E0:FD:00:72:AF Authority key identifier: 7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF Certificate issuer: /CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df Certificate serial: 019B5976AE434CEB2C9EB8D61E64DEC8789B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft Manifest number: 3C Signing time: Fri 26 Dec 2025 07:01:48 +0000 Manifest this update: Fri 26 Dec 2025 07:01:48 +0000 Manifest next update: Sat 27 Dec 2025 07:01:48 +0000 Files and hashes: 1: 3uRUYhxh2pp22_I97fv2FZVD4Yw.roa (hash: GOeSJcMTK2Ax70rbzLrLaqfDkJ9XYf9jSvZdaM9vWpg=) 2: fHwxHo7uu82iiQYtY6wOLtYdsd8.crl (hash: GLS7MvVUCshdx8AuAJ7hfVzejoeGPRnC0WAxNBtvOvc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ae:43:4c:eb:2c:9e:b8:d6:1e:64:de:c8:78:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c311e8eeebbcda289062d63ac0e2ed61db1df Validity Not Before: Dec 26 07:01:48 2025 GMT Not After : Dec 27 07:01:48 2025 GMT Subject: CN=e614ec68bef1f4263c135ffb61ec10e0fd0072af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:fd:3c:eb:96:6c:a2:a6:68:bf:8b:04:1a: ee:71:72:e2:cd:03:3a:ee:96:fd:f7:e3:c8:a2:ab: db:a0:9f:67:c6:b7:8d:41:ca:4c:a1:bd:8c:c5:90: 01:f3:ab:7e:db:02:39:c7:a7:8f:9a:ca:dd:60:4b: 35:2a:e1:27:fc:02:da:f1:e0:84:74:86:68:6b:e7: ea:93:9f:8d:8f:75:12:4a:ba:03:09:83:59:24:35: 68:7b:54:27:9e:99:7d:c7:1a:82:2f:57:13:6a:d0: 6d:4e:17:21:bf:8e:ce:b2:13:86:24:f6:5e:b8:5a: 8b:78:b1:01:69:4a:b2:fb:03:7d:1b:c2:ea:19:eb: 22:8e:08:a6:6f:d9:ee:f6:1e:65:ac:6f:8c:db:ea: d3:e6:a7:6d:e8:ff:0e:e4:1b:c2:0a:66:5a:52:48: c8:0c:1d:20:9c:2a:8a:5c:73:3b:e8:e2:ab:25:c5: 01:c1:39:88:ee:a5:dd:e6:45:d1:92:fa:e4:ea:be: 85:6a:3d:36:a7:29:6a:5e:0e:93:22:35:5a:06:47: 5d:4f:8b:7c:38:17:79:7f:71:eb:99:a7:e3:b8:fe: 2f:f6:7a:ab:65:93:21:f5:d0:d8:e2:9c:00:99:92: a7:66:b9:86:da:27:62:2f:3a:58:d4:76:b0:ea:9b: f4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:EC:68:BE:F1:F4:26:3C:13:5F:FB:61:EC:10:E0:FD:00:72:AF X509v3 Authority Key Identifier: keyid:7C:7C:31:1E:8E:EE:BB:CD:A2:89:06:2D:63:AC:0E:2E:D6:1D:B1:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHwxHo7uu82iiQYtY6wOLtYdsd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8f114b-b11d-4e78-bfe8-04648ec4731e/1/fHwxHo7uu82iiQYtY6wOLtYdsd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:b2:1f:cb:62:a7:af:82:0e:0b:d7:c2:04:a1:4d:fe:2c:8e: 38:7f:66:e7:0f:f9:03:24:3b:7d:1c:e9:82:42:fd:f8:df:29: e3:d0:3f:a5:e8:34:17:82:9a:bd:14:bb:9f:b2:7d:3b:8e:10: 3d:d0:24:d6:c3:de:72:77:c8:98:37:77:79:c2:03:9f:89:b8: e7:b6:c4:21:8b:40:cc:5e:87:f6:fc:57:b5:d7:55:f2:20:4f: b9:5d:0f:34:dc:cd:04:a7:c9:77:8e:47:7a:ec:8f:4c:47:0c: 91:87:c1:e0:ed:6a:3a:d9:89:5d:ab:d6:56:0f:d3:bc:a0:33: 1e:af:93:1d:ea:13:61:fc:98:8b:a9:fc:de:02:04:10:71:a7: 0d:88:87:5c:ea:c7:57:e2:8c:57:b8:81:b6:cb:6b:f0:b4:db: 01:52:9b:90:a8:20:26:7a:c8:5f:cd:42:3c:44:b2:7a:fb:dd: 43:75:03:cf:9a:50:02:8d:c4:48:b6:fa:fe:bf:5a:85:10:1f: b9:f1:73:90:17:98:7b:8a:9f:25:e9:c1:00:45:42:a1:f3:94: 93:78:c3:ea:49:70:bd:4d:c0:23:a3:14:c6:6a:31:d3:8a:a9: 57:d7:d2:b2:58:59:95:f6:6c:ac:c7:19:e4:4e:88:c4:02:8d: 9e:16:29:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdq5DTOssnrjWHmTeyHibMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2MzMTFlOGVlZWJiY2RhMjg5MDYyZDYzYWMwZTJlZDYx ZGIxZGYwHhcNMjUxMjI2MDcwMTQ4WhcNMjUxMjI3MDcwMTQ4WjAzMTEwLwYDVQQD EyhlNjE0ZWM2OGJlZjFmNDI2M2MxMzVmZmI2MWVjMTBlMGZkMDA3MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlP9POuWbKKmaL+LBBrucXLizQM6 7pb99+PIoqvboJ9nxreNQcpMob2MxZAB86t+2wI5x6ePmsrdYEs1KuEn/ALa8eCE dIZoa+fqk5+Nj3USSroDCYNZJDVoe1Qnnpl9xxqCL1cTatBtThchv47OshOGJPZe uFqLeLEBaUqy+wN9G8LqGesijgimb9nu9h5lrG+M2+rT5qdt6P8O5BvCCmZaUkjI DB0gnCqKXHM76OKrJcUBwTmI7qXd5kXRkvrk6r6Faj02pylqXg6TIjVaBkddT4t8 OBd5f3HrmafjuP4v9nqrZZMh9dDY4pwAmZKnZrmG2idiLzpY1Haw6pv0mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYU7Gi+8fQmPBNf+2HsEOD9AHKvMB8GA1UdIwQY MBaAFHx8MR6O7rvNookGLWOsDi7WHbHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh3eEhvN3V1ODJpaVFZdFk2d09MdFlkc2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84ZjExNGItYjExZC00ZTc4LWJmZTgt MDQ2NDhlYzQ3MzFlLzEvZkh3eEhvN3V1ODJpaVFZdFk2d09MdFlkc2Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84ZjExNGItYjExZC00ZTc4LWJmZTgtMDQ2NDhlYzQ3MzFl LzEvZkh3eEhvN3V1ODJpaVFZdFk2d09MdFlkc2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrIfy2Kn r4IOC9fCBKFN/iyOOH9m5w/5AyQ7fRzpgkL9+N8p49A/peg0F4KavRS7n7J9O44Q PdAk1sPecnfImDd3ecIDn4m457bEIYtAzF6H9vxXtddV8iBPuV0PNNzNBKfJd45H euyPTEcMkYfB4O1qOtmJXavWVg/TvKAzHq+THeoTYfyYi6n83gIEEHGnDYiHXOrH V+KMV7iBtstr8LTbAVKbkKggJnrIX81CPESyevvdQ3UDz5pQAo3ESLb6/r9ahRAf ufFzkBeYe4qfJenBAEVCofOUk3jD6klwvU3AI6MUxmox04qpV9fSslhZlfZsrMcZ 5E6IxAKNnhYpvw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:14 2025 by rpki-client