This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft File: fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json) Hash identifier: qdUOs9prq8oFTIv6LjPYNCUop/EPKo/5d71nq9sgz1s= Subject key identifier: 10:EE:44:BA:7E:FC:B8:A5:BD:B0:DD:84:ED:7B:4F:D9:06:0E:1A:2A Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 Certificate issuer: /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Certificate serial: 019B5A1AC5EC8BBC9C1C4BF8B6D845C2BB46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft Manifest number: 0113 Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: agYu8h6iSWNOEDnRPYFOvaAoslk8OaY12Qk6f82A2mQ=) 2: zIaCxLUjq21dOPZ6oricOQf9_f8.roa (hash: lDpgOF97BKIlMEFYdLb+3oy7Ebe7Mk1d7MHbR+tgmKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c5:ec:8b:bc:9c:1c:4b:f8:b6:d8:45:c2:bb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2 Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=10ee44ba7efcb8a5bdb0dd84ed7b4fd9060e1a2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:8a:86:4e:c7:23:ba:e7:14:27:51:cf:49: d7:47:9e:f0:5c:71:09:3c:e0:d7:3e:cf:14:3e:29: 95:58:44:35:9a:8b:5f:fa:1e:e2:8a:81:e5:d1:cc: af:bf:a7:45:76:15:a8:ce:b7:ab:4d:9b:ec:82:19: ca:0c:83:41:e6:00:1f:1c:96:ca:3f:65:c8:ea:6f: 9e:cb:1b:39:bf:b0:b9:32:27:a5:12:80:eb:69:a0: ab:d7:1b:2f:c3:f3:4d:91:d5:1c:07:f6:89:ee:6b: b3:66:54:82:b0:07:c0:6f:58:49:66:ca:9f:19:42: 41:18:64:ef:5e:2e:d9:17:dd:50:aa:ee:89:27:34: b0:f5:63:eb:76:81:b7:8c:33:cf:c3:ba:cd:87:58: 67:3c:15:c8:a9:03:82:c1:dd:21:c8:fe:b5:d2:28: 61:52:4f:c4:7a:7f:6b:43:89:68:ca:7d:ec:70:57: 5b:03:73:6f:37:21:dd:89:55:c2:37:a1:fd:4b:dc: 05:c4:fb:36:43:b7:ce:93:7c:e9:6d:79:c1:e6:90: 3e:53:2d:79:c2:4e:1a:62:4e:56:f0:ba:39:ec:e5: 80:4e:01:9d:97:04:4e:f4:af:98:41:39:ba:8f:e1: 63:7c:ed:b3:a4:f3:6b:c6:8e:e3:a2:63:dd:5d:4f: 92:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EE:44:BA:7E:FC:B8:A5:BD:B0:DD:84:ED:7B:4F:D9:06:0E:1A:2A X509v3 Authority Key Identifier: keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d5:51:27:08:13:30:b3:e2:96:c5:69:9c:47:8e:a2:a5:f2: d4:69:75:1e:7c:b0:78:d4:07:5c:17:66:e5:e5:b0:e1:2b:66: dc:58:b7:82:7f:a3:4f:9d:8f:93:b5:b4:42:c0:c7:80:bc:4c: ed:a4:5c:b7:02:9b:bb:66:de:dc:42:10:75:33:44:c3:62:f0: 52:a4:7c:a0:4a:e2:f9:cc:a0:91:5c:a2:7a:70:bf:3e:25:cc: c6:f1:4b:1d:0f:3c:5f:59:4d:ed:06:b2:a0:57:06:ca:fb:0f: 5e:41:42:6d:84:02:b0:c8:ef:95:7d:8c:17:69:47:82:e3:1e: 6b:dc:bf:57:8b:14:e5:07:cb:86:3e:40:ed:51:7e:fc:2b:c5: a1:9c:8e:5f:4a:aa:f9:5b:02:d8:d7:c9:96:44:1a:ef:4f:14: 6f:9e:ce:c7:73:e0:1c:98:51:d6:42:6a:2f:ce:5c:91:2f:21: f8:e2:78:52:c2:b4:c0:38:4c:ae:21:b0:03:f7:08:7c:26:e6: a0:3b:4b:50:87:33:9e:61:43:01:a2:87:81:db:b6:ab:61:38: 3e:a6:19:56:4f:40:a4:21:ba:0e:d2:54:2c:58:73:bd:fb:77: 4c:64:e9:26:23:b8:04:48:4f:f3:73:15:0a:51:43:bb:76:c3: 03:72:76:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsXsi7ycHEv4tthFwrtGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDJlMjBhYmQyMjAzYjA1NzY4NmIxY2FkNmNjMTI1MzQ0 NGI4YjIwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EygxMGVlNDRiYTdlZmNiOGE1YmRiMGRkODRlZDdiNGZkOTA2MGUxYTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAaKhk7HI7rnFCdRz0nXR57wXHEJ PODXPs8UPimVWEQ1motf+h7iioHl0cyvv6dFdhWozrerTZvsghnKDINB5gAfHJbK P2XI6m+eyxs5v7C5MielEoDraaCr1xsvw/NNkdUcB/aJ7muzZlSCsAfAb1hJZsqf GUJBGGTvXi7ZF91Qqu6JJzSw9WPrdoG3jDPPw7rNh1hnPBXIqQOCwd0hyP610ihh Uk/Een9rQ4loyn3scFdbA3NvNyHdiVXCN6H9S9wFxPs2Q7fOk3zpbXnB5pA+Uy15 wk4aYk5W8Lo57OWATgGdlwRO9K+YQTm6j+FjfO2zpPNrxo7jomPdXU+SjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDuRLp+/LilvbDdhO17T9kGDhoqMB8GA1UdIwQY MBaAFH4C4gq9IgOwV2hrHK1swSU0RLiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEt ZjMwNzA5ZDljMzc5LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lOThhNzktMjQ5YS00MDQ4LTk1ODEtZjMwNzA5ZDljMzc5 LzEvZmdMaUNyMGlBN0JYYUdzY3JXekJKVFJFdUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdVRJwgT MLPilsVpnEeOoqXy1Gl1HnyweNQHXBdm5eWw4Stm3Fi3gn+jT52Pk7W0QsDHgLxM 7aRctwKbu2be3EIQdTNEw2LwUqR8oEri+cygkVyienC/PiXMxvFLHQ88X1lN7Qay oFcGyvsPXkFCbYQCsMjvlX2MF2lHguMea9y/V4sU5QfLhj5A7VF+/CvFoZyOX0qq +VsC2NfJlkQa708Ub57Ox3PgHJhR1kJqL85ckS8h+OJ4UsK0wDhMriGwA/cIfCbm oDtLUIcznmFDAaKHgdu2q2E4PqYZVk9ApCG6DtJULFhzvft3TGTpJiO4BEhP83MV ClFDu3bDA3J2Bg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:04:50 2025 by rpki-client