This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft File: fd0jbYBNWqmiyrOc9RAirAXgsYM.mft (raw, json) Hash identifier: aJnEjtsfQAmh6PuqNCR6wETzDDoQIqfjYKUjpl+pfRg= Subject key identifier: 21:FF:38:55:44:B6:FC:CA:5C:D5:D8:A7:1F:4A:85:00:93:09:F7:91 Authority key identifier: 7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 Certificate issuer: /CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Certificate serial: 019B3833B5079E217C20454980CB02348FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft Manifest number: 09E5 Signing time: Fri 19 Dec 2025 20:01:11 +0000 Manifest this update: Fri 19 Dec 2025 20:01:11 +0000 Manifest next update: Sat 20 Dec 2025 20:01:11 +0000 Files and hashes: 1: 45wj0w29EVb12lgzB4yBvbTkqGs.roa (hash: 4Uf4k8PcGp1LUe7lAU3OcDE8Hhp21WcetwJsk03S3B4=) 2: ZHtshAVSbLpIP6v49gVS0CpZjoA.roa (hash: mR3WUJCnn8qyhWMeXp3I4DCHuYg0Dpb1YM8jPQjkryI=) 3: fd0jbYBNWqmiyrOc9RAirAXgsYM.crl (hash: I+ORi80aCuiXJW8aEk/YRY4+eEleNjW6hr90lRzAGTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:b5:07:9e:21:7c:20:45:49:80:cb:02:34:8f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddd236d804d5aa9a2cab39cf51022ac05e0b183 Validity Not Before: Dec 19 20:01:11 2025 GMT Not After : Dec 20 20:01:11 2025 GMT Subject: CN=21ff385544b6fcca5cd5d8a71f4a85009309f791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e8:94:74:2e:66:63:61:c4:ae:1c:89:5f:16: c4:80:99:ca:c7:0a:cd:db:df:41:14:a7:63:ad:01: f7:44:15:8a:d3:df:8d:00:69:2a:f5:f3:b5:12:9c: 56:ff:78:d0:d0:a2:7f:80:98:ba:4e:1b:0e:d7:d5: ed:dd:9d:b9:a9:c3:61:0e:73:ee:da:6e:8d:f0:eb: 74:0a:40:78:99:45:7b:2e:be:b0:1e:4e:de:ba:a6: c9:48:b7:3c:80:b6:2e:84:dc:b5:7d:67:ba:6f:09: 1b:47:2f:b1:e2:77:fa:46:b7:55:c5:58:fe:d2:be: c0:56:bf:30:a4:c0:ec:0e:74:43:21:b1:0d:64:7b: 54:48:f7:fc:09:8e:b7:ef:19:1d:7d:5f:96:2b:0c: 60:dc:17:ec:9b:d7:33:28:d5:aa:59:59:7d:95:e3: c0:d6:8f:47:15:e8:8b:81:80:b5:43:1e:bb:c8:0c: 1b:8c:a5:eb:cf:02:e1:92:b6:22:79:8a:9c:1a:1b: 75:7a:d5:3d:86:c2:53:69:90:46:11:b4:bc:cf:dd: 4c:af:f7:53:4e:1e:99:3e:f0:a0:1e:e9:37:74:c8: 49:23:45:85:aa:41:94:ac:df:08:d8:aa:5b:35:5b: 94:68:ab:73:e3:24:fc:45:1d:22:8f:2e:7a:b8:4d: f5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FF:38:55:44:B6:FC:CA:5C:D5:D8:A7:1F:4A:85:00:93:09:F7:91 X509v3 Authority Key Identifier: keyid:7D:DD:23:6D:80:4D:5A:A9:A2:CA:B3:9C:F5:10:22:AC:05:E0:B1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd0jbYBNWqmiyrOc9RAirAXgsYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e98c2-2bae-4d14-9bcc-855e6072ef36/1/fd0jbYBNWqmiyrOc9RAirAXgsYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:76:aa:19:c9:c1:b3:73:1f:f8:92:76:1f:89:85:1c:7c:32: f4:f9:95:3b:ea:f8:18:97:a9:09:4e:ce:7b:52:b2:41:e6:7f: df:a6:ac:07:8d:7d:a5:51:f2:18:37:fd:5b:88:45:3f:93:f8: b9:19:13:dc:80:a6:63:b7:6f:57:2b:ab:5c:ee:1f:af:a5:1d: 4f:8e:de:2b:a5:38:90:17:29:f4:89:e8:6a:d7:b6:85:0d:ef: 31:94:4f:59:52:59:f8:d4:0f:50:3d:40:55:d0:e6:49:90:64: c3:16:f2:89:03:49:9d:13:4a:2c:6b:ff:65:17:8a:ea:0a:b6: 83:db:63:92:08:39:c7:72:38:88:c1:ee:69:89:48:00:08:dd: 8e:bd:91:40:a9:74:f4:4f:79:e1:18:4a:6f:e1:31:64:75:30: 1f:79:35:16:ed:cd:8b:72:2f:b5:74:2e:48:d0:80:84:9e:0c: 44:21:57:ed:2f:c3:6b:db:8d:48:e5:d9:4f:0c:64:c4:79:b7: 23:72:62:08:a5:78:1b:02:67:69:e9:70:12:2c:76:ac:7e:3f: 40:38:77:45:fa:cc:98:9f:0e:3c:bb:4f:fd:98:9f:a4:f4:4f: 0c:da:67:f0:39:8e:38:e7:02:70:6e:07:3c:1f:c0:aa:a8:ab: e7:df:7a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M7UHniF8IEVJgMsCNI/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGQyMzZkODA0ZDVhYTlhMmNhYjM5Y2Y1MTAyMmFjMDVl MGIxODMwHhcNMjUxMjE5MjAwMTExWhcNMjUxMjIwMjAwMTExWjAzMTEwLwYDVQQD EygyMWZmMzg1NTQ0YjZmY2NhNWNkNWQ4YTcxZjRhODUwMDkzMDlmNzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+iUdC5mY2HErhyJXxbEgJnKxwrN 299BFKdjrQH3RBWK09+NAGkq9fO1EpxW/3jQ0KJ/gJi6ThsO19Xt3Z25qcNhDnPu 2m6N8Ot0CkB4mUV7Lr6wHk7euqbJSLc8gLYuhNy1fWe6bwkbRy+x4nf6RrdVxVj+ 0r7AVr8wpMDsDnRDIbENZHtUSPf8CY637xkdfV+WKwxg3Bfsm9czKNWqWVl9lePA 1o9HFeiLgYC1Qx67yAwbjKXrzwLhkrYieYqcGht1etU9hsJTaZBGEbS8z91Mr/dT Th6ZPvCgHuk3dMhJI0WFqkGUrN8I2KpbNVuUaKtz4yT8RR0ijy56uE319QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCH/OFVEtvzKXNXYpx9KhQCTCfeRMB8GA1UdIwQY MBaAFH3dI22ATVqposqznPUQIqwF4LGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2Mt ODU1ZTYwNzJlZjM2LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk4YzItMmJhZS00ZDE0LTliY2MtODU1ZTYwNzJlZjM2 LzEvZmQwamJZQk5XcW1peXJPYzlSQWlyQVhnc1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnaqGcnB s3Mf+JJ2H4mFHHwy9PmVO+r4GJepCU7Oe1KyQeZ/36asB419pVHyGDf9W4hFP5P4 uRkT3ICmY7dvVyurXO4fr6UdT47eK6U4kBcp9Inoate2hQ3vMZRPWVJZ+NQPUD1A VdDmSZBkwxbyiQNJnRNKLGv/ZReK6gq2g9tjkgg5x3I4iMHuaYlIAAjdjr2RQKl0 9E954RhKb+ExZHUwH3k1Fu3Ni3IvtXQuSNCAhJ4MRCFX7S/Da9uNSOXZTwxkxHm3 I3JiCKV4GwJnaelwEix2rH4/QDh3RfrMmJ8OPLtP/ZifpPRPDNpn8DmOOOcCcG4H PB/Aqqir5996wg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:09:08 2025 by rpki-client