This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json) Hash identifier: ZCVzUAR8A1ggBon9aNUd0KGDTTSejdb06jzyNzyPObQ= Subject key identifier: E8:FC:83:5E:1D:6B:9B:D2:EE:1B:E2:88:F5:7D:4C:C1:40:82:4B:26 Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Certificate serial: 019B25C0043FA451638A85C089E29214DB6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft Manifest number: 0C85 Signing time: Tue 16 Dec 2025 06:01:39 +0000 Manifest this update: Tue 16 Dec 2025 06:01:39 +0000 Manifest next update: Wed 17 Dec 2025 06:01:39 +0000 Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=) 2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: f/vuxrG7A73LjAvK7jzt7ROUv+BdA0YQw2FBdIivnLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:c0:04:3f:a4:51:63:8a:85:c0:89:e2:92:14:db:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Validity Not Before: Dec 16 06:01:39 2025 GMT Not After : Dec 17 06:01:39 2025 GMT Subject: CN=e8fc835e1d6b9bd2ee1be288f57d4cc140824b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:64:27:d2:25:22:c2:d6:1a:ad:e9:c4:16:6e: 89:01:fe:3e:be:41:b9:18:72:5c:24:00:af:a2:83: 1a:0c:f4:8d:10:af:15:50:52:f4:af:0b:49:26:c0: 83:72:65:cd:6c:c7:77:f8:de:96:1c:82:63:5f:a9: 64:93:67:fb:90:07:cd:8c:30:30:fa:f1:92:dd:df: 9b:10:25:eb:de:b6:06:aa:4b:7b:b6:8a:4a:4d:c2: 51:b4:9e:07:9f:dd:2d:ac:dd:82:5c:1a:07:b3:4e: d1:08:0d:12:28:44:2f:94:13:7f:cd:fe:05:9c:db: 32:2c:5c:59:bc:c1:6f:bb:f4:5f:4f:2b:fd:9d:dd: 2d:bc:89:d2:bc:ed:59:16:2f:99:b7:b1:7a:2d:0a: 7e:bf:5c:f2:ad:c5:b6:eb:26:8c:a3:1b:ae:d2:b1: 0e:f8:b4:c0:39:7f:5a:14:21:ac:75:d3:8e:bf:f9: e0:4b:23:60:fc:a6:52:ab:0c:03:a5:85:32:6f:83: ff:e0:28:5a:87:ff:85:0c:aa:5a:cc:bb:4b:56:7c: c0:a5:29:9f:bc:db:f6:c0:8e:8a:18:db:26:b0:82: 61:6f:ea:8b:95:f2:e5:54:d8:cf:5d:b7:6c:89:5c: 0c:bd:a0:31:b9:44:f5:3f:bf:61:f2:71:eb:43:23: 55:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FC:83:5E:1D:6B:9B:D2:EE:1B:E2:88:F5:7D:4C:C1:40:82:4B:26 X509v3 Authority Key Identifier: keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:cd:b9:f7:47:da:34:75:89:fc:f0:ec:99:a2:70:75:39:68: be:63:9b:2d:40:fd:76:21:10:30:40:92:1f:9b:3d:36:e9:1d: bf:33:98:fd:2e:06:a8:cd:bb:27:7c:a7:ea:70:2b:88:b4:df: d9:14:9c:78:9a:2b:9b:1c:66:c1:e7:b4:86:55:55:c7:1d:50: 4f:0d:71:e0:8f:cf:eb:7d:01:a3:7f:0e:f2:f3:b2:69:b1:18: 2e:78:3e:fc:89:9a:fa:16:59:c3:4c:3c:cd:89:d6:79:7a:1b: ec:15:a4:0b:e1:cb:df:80:4d:d2:46:aa:0f:3b:1c:14:35:df: 80:42:48:fc:d1:7e:f4:68:8c:ac:59:0c:13:2c:fd:01:91:32: 19:d3:24:2b:2b:1b:bf:26:d2:e8:0c:b1:2f:80:16:0a:ae:00: 31:c9:1d:91:d1:0f:96:e7:db:1f:92:47:f4:84:76:07:e2:01: fb:ed:e8:b7:39:43:29:cb:cb:b4:a2:be:4c:2b:db:9f:90:71: 39:69:cb:ba:a5:54:36:ec:ed:03:1a:44:22:d3:8c:f9:39:9f: 50:c9:a4:aa:52:87:ee:89:28:b1:32:58:12:9f:4d:72:9c:fb: fc:02:8a:6f:7d:05:c8:7d:9e:a6:a2:0f:a8:8e:0d:3f:2f:32: e4:2a:d0:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslwAQ/pFFjioXAieKSFNttMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj MDFhZjkwHhcNMjUxMjE2MDYwMTM5WhcNMjUxMjE3MDYwMTM5WjAzMTEwLwYDVQQD EyhlOGZjODM1ZTFkNmI5YmQyZWUxYmUyODhmNTdkNGNjMTQwODI0YjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Qn0iUiwtYarenEFm6JAf4+vkG5 GHJcJACvooMaDPSNEK8VUFL0rwtJJsCDcmXNbMd3+N6WHIJjX6lkk2f7kAfNjDAw +vGS3d+bECXr3rYGqkt7topKTcJRtJ4Hn90trN2CXBoHs07RCA0SKEQvlBN/zf4F nNsyLFxZvMFvu/RfTyv9nd0tvInSvO1ZFi+Zt7F6LQp+v1zyrcW26yaMoxuu0rEO +LTAOX9aFCGsddOOv/ngSyNg/KZSqwwDpYUyb4P/4Chah/+FDKpazLtLVnzApSmf vNv2wI6KGNsmsIJhb+qLlfLlVNjPXbdsiVwMvaAxuUT1P79h8nHrQyNVMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj8g14da5vS7hviiPV9TMFAgksmMB8GA1UdIwQY MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd82590fa NHWJ/PDsmaJwdTlovmObLUD9diEQMECSH5s9NukdvzOY/S4GqM27J3yn6nAriLTf 2RSceJormxxmwee0hlVVxx1QTw1x4I/P630Bo38O8vOyabEYLng+/Ima+hZZw0w8 zYnWeXob7BWkC+HL34BN0kaqDzscFDXfgEJI/NF+9GiMrFkMEyz9AZEyGdMkKysb vybS6AyxL4AWCq4AMckdkdEPlufbH5JH9IR2B+IB++3otzlDKcvLtKK+TCvbn5Bx OWnLuqVUNuztAxpEItOM+TmfUMmkqlKH7okosTJYEp9Ncpz7/AKKb30FyH2epqIP qI4NPy8y5CrQYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 16:05:24 2025 by rpki-client