This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft File: fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json) Hash identifier: +GTkTWTLH+wvsjAQKd2S2AMapaJ9E7LiNh0B5QzceiI= Subject key identifier: E6:44:B0:0D:6D:B2:AA:C3:70:77:57:8E:80:55:D8:AB:9D:3A:0D:55 Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A Certificate issuer: /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Certificate serial: 019B427FCDC8D3D7BAB7F87097CC2DB34337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft Manifest number: 11D4 Signing time: Sun 21 Dec 2025 20:00:30 +0000 Manifest this update: Sun 21 Dec 2025 20:00:30 +0000 Manifest next update: Mon 22 Dec 2025 20:00:30 +0000 Files and hashes: 1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: wfdu7IYGBn/Odqb3ONr95rKBb1kg6fxFuBP67nQeBG4=) 2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:cd:c8:d3:d7:ba:b7:f8:70:97:cc:2d:b3:43:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Validity Not Before: Dec 21 20:00:30 2025 GMT Not After : Dec 22 20:00:30 2025 GMT Subject: CN=e644b00d6db2aac37077578e8055d8ab9d3a0d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3d:8f:ba:f6:de:32:98:69:07:26:1d:8a:8c: 37:a3:e7:30:04:59:2e:41:b2:54:4f:c2:99:ab:77: 5e:b3:35:c0:a1:9b:65:78:d2:bb:5a:bf:63:63:82: 74:06:45:ed:85:a1:32:87:e3:06:d2:4f:8a:1f:f7: aa:27:47:7a:92:19:df:46:bc:b1:92:34:cd:41:06: a9:80:b2:3a:4d:04:c5:8d:db:51:76:35:53:45:d5: c2:8a:91:98:44:b8:70:70:48:dd:81:1a:b5:d3:d5: 52:2f:a7:47:23:b5:a2:eb:79:aa:12:55:9a:32:40: be:55:d9:ff:db:2b:a4:5e:99:23:ab:44:e6:aa:dd: 40:2a:2e:85:e8:1a:c5:fb:e9:01:d7:76:04:0e:b7: 28:26:06:64:76:42:43:c7:4c:ed:1b:d3:a0:f0:f8: 12:90:02:21:fe:7a:31:76:9c:64:22:d7:cd:42:66: cc:79:e9:bf:fc:e3:5b:25:64:50:d8:10:de:74:1b: 67:f8:bf:50:67:a5:8c:25:6b:24:03:a4:07:a6:c5: 38:16:78:f5:de:36:7e:28:5d:e5:50:10:09:46:bc: 1d:1f:8f:4a:b7:58:d1:22:89:46:33:54:e0:4f:14: d5:75:48:17:d0:3a:7c:74:0d:af:3b:67:81:c6:69: f1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:44:B0:0D:6D:B2:AA:C3:70:77:57:8E:80:55:D8:AB:9D:3A:0D:55 X509v3 Authority Key Identifier: keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:99:c9:95:b1:5a:4a:bf:0f:5c:a9:6c:aa:9b:ad:b1:eb:fb: de:2c:2f:c4:13:99:05:bd:96:b8:65:04:0f:24:77:82:06:20: d5:9c:0b:25:58:d9:ab:a3:f7:1c:ff:46:a4:81:32:33:64:41: 44:94:cc:3c:b4:38:35:ac:82:ea:97:ac:63:ef:76:f4:57:29: 55:28:57:02:8a:e6:fb:b0:b5:a7:50:38:24:d4:d2:11:5a:6f: ad:21:8f:67:1e:6c:38:88:f9:61:d1:ba:5f:40:72:eb:fd:9d: 28:15:bc:3c:7e:95:83:05:7a:79:75:c2:59:a8:e1:02:91:32: 3e:25:bf:61:04:46:40:17:3e:5f:dd:bd:ff:ec:6d:f2:48:60: b6:2a:35:a4:90:1e:52:79:50:e9:e4:7b:36:e7:67:f0:70:9a: 7e:59:68:e2:6b:96:6a:ac:c0:70:b3:3c:a5:da:b0:37:38:d7: dd:de:91:91:4f:a1:51:93:92:ad:2d:1c:29:10:20:65:35:0a: 2f:7a:ed:8d:87:dd:9c:9a:3e:ac:c6:89:6d:51:22:e6:03:f7: be:3c:3e:26:ef:89:fe:81:4f:0c:2c:fc:7c:58:80:d0:53:2d: f9:d6:8f:1e:37:c4:bb:5c:5d:01:29:66:96:8b:0e:b5:4c:a0: fc:a0:8d:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf83I09e6t/hwl8wts0M3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjM0MGUzN2NjZmMxMmFlYmFhYzJhNWYzM2Q0NWVhMGE4 ODdhOGEwHhcNMjUxMjIxMjAwMDMwWhcNMjUxMjIyMjAwMDMwWjAzMTEwLwYDVQQD EyhlNjQ0YjAwZDZkYjJhYWMzNzA3NzU3OGU4MDU1ZDhhYjlkM2EwZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT2PuvbeMphpByYdiow3o+cwBFku QbJUT8KZq3deszXAoZtleNK7Wr9jY4J0BkXthaEyh+MG0k+KH/eqJ0d6khnfRryx kjTNQQapgLI6TQTFjdtRdjVTRdXCipGYRLhwcEjdgRq109VSL6dHI7Wi63mqElWa MkC+Vdn/2yukXpkjq0Tmqt1AKi6F6BrF++kB13YEDrcoJgZkdkJDx0ztG9Og8PgS kAIh/noxdpxkItfNQmbMeem//ONbJWRQ2BDedBtn+L9QZ6WMJWskA6QHpsU4Fnj1 3jZ+KF3lUBAJRrwdH49Kt1jRIolGM1TgTxTVdUgX0Dp8dA2vO2eBxmnxYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZEsA1tsqrDcHdXjoBV2KudOg1VMB8GA1UdIwQY MBaAFH1jQON8z8Eq66rCpfM9ReoKiHqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQt ODk4MmI3YThmNjE0LzEvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQtODk4MmI3YThmNjE0 LzEvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJnJlbFa Sr8PXKlsqputsev73iwvxBOZBb2WuGUEDyR3ggYg1ZwLJVjZq6P3HP9GpIEyM2RB RJTMPLQ4NayC6pesY+929FcpVShXAorm+7C1p1A4JNTSEVpvrSGPZx5sOIj5YdG6 X0By6/2dKBW8PH6VgwV6eXXCWajhApEyPiW/YQRGQBc+X929/+xt8khgtio1pJAe UnlQ6eR7Nudn8HCafllo4muWaqzAcLM8pdqwNzjX3d6RkU+hUZOSrS0cKRAgZTUK L3rtjYfdnJo+rMaJbVEi5gP3vjw+Ju+J/oFPDCz8fFiA0FMt+daPHjfEu1xdASlm losOtUyg/KCNpQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:14 2025 by rpki-client