This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft File: fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json) Hash identifier: eut9gPBwkG/Ca6QP3oxXga6zuhUypdX2k/dqnL/XXn8= Subject key identifier: 25:BF:BF:5A:63:7F:1D:6F:46:77:41:7F:DF:AF:47:B6:14:7E:EE:4A Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 Certificate issuer: /CN=7e904bd71d6fe74a67168fd913e828722755b494 Certificate serial: 019B0F6E760B84DFEC306756EFF7A61054F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft Manifest number: 0838 Signing time: Thu 11 Dec 2025 22:00:55 +0000 Manifest this update: Thu 11 Dec 2025 22:00:55 +0000 Manifest next update: Fri 12 Dec 2025 22:00:55 +0000 Files and hashes: 1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=) 2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: PXig3RwaztP4cni9SNCKDDe0d0nB4T/dQ8NkKDb52EQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:76:0b:84:df:ec:30:67:56:ef:f7:a6:10:54:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494 Validity Not Before: Dec 11 22:00:55 2025 GMT Not After : Dec 12 22:00:55 2025 GMT Subject: CN=25bfbf5a637f1d6f4677417fdfaf47b6147eee4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:8b:e7:22:a2:51:88:ba:04:24:b4:e3:3b: 3c:b5:54:27:12:74:49:43:ac:ad:46:64:e6:88:fb: 20:89:70:f8:0a:48:ee:d7:c9:bc:6b:a4:e8:73:3f: f3:77:91:a1:d9:15:af:8f:81:43:c6:9d:81:dd:c9: d0:a4:fe:a1:42:2e:64:0d:83:00:e7:aa:96:54:ac: 01:29:5d:f9:d7:5d:9f:da:ad:24:fb:b3:93:fd:9a: 60:ce:fb:d1:96:af:eb:1c:ec:77:43:71:69:29:62: 69:8d:ee:ac:dc:1a:be:80:b2:21:98:d8:db:1a:36: dd:74:fa:df:ab:b2:81:46:c5:10:49:6b:b5:24:b6: 08:cd:f6:2c:e0:10:67:5e:56:99:22:2e:4a:0d:2b: e8:a2:6e:63:27:5e:df:59:40:d8:e1:b9:a4:40:25: d4:27:a7:ad:df:29:c9:e6:58:1f:00:88:43:c8:3d: c3:ff:4b:5b:42:29:a8:ad:56:dc:01:62:67:77:cb: 96:e4:da:7a:c4:1e:a2:d4:e9:38:78:cd:a5:f3:5d: 7e:dd:2e:93:53:f9:4d:8c:24:ee:88:03:05:09:0a: 55:e1:57:09:33:bf:9c:49:98:8a:70:13:45:fd:00: 04:22:aa:00:36:f8:a1:19:0a:fa:2c:8e:fd:61:25: fd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BF:BF:5A:63:7F:1D:6F:46:77:41:7F:DF:AF:47:B6:14:7E:EE:4A X509v3 Authority Key Identifier: keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a8:be:71:e1:ba:6e:83:7c:6e:f3:51:c0:9e:33:af:54:8d: f1:e3:64:28:ae:54:32:93:18:d0:75:5c:9a:7a:26:81:80:6e: 91:c3:b1:36:c0:fa:cd:37:1c:a5:a7:76:85:a4:6e:00:0b:5c: 6e:8b:b6:79:95:5c:6b:16:c3:4f:81:63:2a:02:ba:c5:23:d3: d5:a6:a9:08:97:6c:70:54:e5:82:3c:1e:db:00:c9:cf:df:80: e4:43:92:8a:c1:e6:87:c5:a4:47:5e:1d:f1:61:f3:fb:d1:46: ae:f2:de:74:e5:e7:4e:de:91:b7:19:e9:dc:47:64:38:35:46: 1b:9d:18:a1:8c:09:ac:e1:dc:55:33:97:07:d1:33:bd:b9:97: 14:6a:2b:fb:6f:a2:bb:8f:26:49:b4:0c:5e:7a:2a:56:6d:fe: c5:2f:dc:f7:4d:3c:d4:fe:90:ac:74:6f:e4:33:74:23:5f:36: cd:cf:2b:f0:be:a2:20:82:35:a2:31:ad:43:32:98:d4:23:03: ae:91:5e:d9:ee:b4:d5:a9:a8:8c:a0:17:6d:55:de:49:fc:fe: 53:31:7a:a8:a2:7e:42:64:de:7f:6a:e3:7c:66:79:73:3a:49: 41:16:8c:a9:3a:54:c7:2e:0a:19:ae:f7:fa:13:d2:5b:cc:01: 66:8b:d1:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbnYLhN/sMGdW7/emEFTyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlOTA0YmQ3MWQ2ZmU3NGE2NzE2OGZkOTEzZTgyODcyMjc1 NWI0OTQwHhcNMjUxMjExMjIwMDU1WhcNMjUxMjEyMjIwMDU1WjAzMTEwLwYDVQQD EygyNWJmYmY1YTYzN2YxZDZmNDY3NzQxN2ZkZmFmNDdiNjE0N2VlZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmSL5yKiUYi6BCS04zs8tVQnEnRJ Q6ytRmTmiPsgiXD4Ckju18m8a6Tocz/zd5Gh2RWvj4FDxp2B3cnQpP6hQi5kDYMA 56qWVKwBKV35112f2q0k+7OT/ZpgzvvRlq/rHOx3Q3FpKWJpje6s3Bq+gLIhmNjb GjbddPrfq7KBRsUQSWu1JLYIzfYs4BBnXlaZIi5KDSvoom5jJ17fWUDY4bmkQCXU J6et3ynJ5lgfAIhDyD3D/0tbQimorVbcAWJnd8uW5Np6xB6i1Ok4eM2l811+3S6T U/lNjCTuiAMFCQpV4VcJM7+cSZiKcBNF/QAEIqoANvihGQr6LI79YSX9MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCW/v1pjfx1vRndBf9+vR7YUfu5KMB8GA1UdIwQY MBaAFH6QS9cdb+dKZxaP2RPoKHInVbSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQt NGYzODJjYmI1OWYyLzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8yZjEyNjQtMjNlOC00MmUwLTgzNjQtNGYzODJjYmI1OWYy LzEvZnBCTDF4MXY1MHBuRm9fWkUtZ29jaWRWdEpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASai+ceG6 boN8bvNRwJ4zr1SN8eNkKK5UMpMY0HVcmnomgYBukcOxNsD6zTccpad2haRuAAtc bou2eZVcaxbDT4FjKgK6xSPT1aapCJdscFTlgjwe2wDJz9+A5EOSisHmh8WkR14d 8WHz+9FGrvLedOXnTt6Rtxnp3EdkODVGG50YoYwJrOHcVTOXB9EzvbmXFGor+2+i u48mSbQMXnoqVm3+xS/c90081P6QrHRv5DN0I182zc8r8L6iIII1ojGtQzKY1CMD rpFe2e601amojKAXbVXeSfz+UzF6qKJ+QmTef2rjfGZ5czpJQRaMqTpUxy4KGa73 +hPSW8wBZovRrw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:37 2025 by rpki-client