This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft File: fQdOnuMuCxDIMNykdj65zGUkb6o.mft (raw, json) Hash identifier: Ec1guQ4GzxSsqN2tv6l1yeIh7Q/CnUG4eW+5B5W3jaA= Subject key identifier: BF:93:16:E7:E1:B7:D4:28:1A:54:15:BF:77:00:CE:0C:D2:DB:FE:21 Authority key identifier: 7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA Certificate issuer: /CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa Certificate serial: 019B593ED9402BE121E784EE896C5AEB948A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft Manifest number: B6 Signing time: Fri 26 Dec 2025 06:00:49 +0000 Manifest this update: Fri 26 Dec 2025 06:00:49 +0000 Manifest next update: Sat 27 Dec 2025 06:00:49 +0000 Files and hashes: 1: 71qYJL8nzjLbrizEeui2lEgxB5s.roa (hash: VmrhpDcOBNu6Xf5rfKPD5N1hG7HhaxfVhsVb8qoAF7A=) 2: fQdOnuMuCxDIMNykdj65zGUkb6o.crl (hash: WPu2vQBEAg55jhGNWV/7haelmbEuqXCnWGLm5eHXR4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:3e:d9:40:2b:e1:21:e7:84:ee:89:6c:5a:eb:94:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d074e9ee32e0b10c830dca4763eb9cc65246faa Validity Not Before: Dec 26 06:00:49 2025 GMT Not After : Dec 27 06:00:49 2025 GMT Subject: CN=bf9316e7e1b7d4281a5415bf7700ce0cd2dbfe21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:bd:03:0a:ff:23:a3:b6:37:c7:0b:a0:7b: 0a:80:a0:3c:86:1d:0f:de:9e:e8:8f:dd:fd:6a:84: 7d:b6:98:dc:55:e5:ed:7b:e4:5c:f1:20:f9:29:27: 55:4d:13:0b:0a:27:8e:e7:8c:69:d0:88:14:cb:83: 47:58:bd:07:1d:ab:1a:ee:b9:9a:cd:f9:0d:b8:97: bd:3e:ec:de:0d:9d:01:df:c6:7a:fa:8d:36:93:45: 4a:a9:9a:e6:e1:3c:09:4c:6d:c8:b2:25:99:40:1d: 1f:05:b0:f5:ba:50:b5:30:92:f7:a6:ce:d5:de:98: 0b:cc:bd:d9:bd:91:42:ff:fc:eb:17:a0:1d:ab:2f: 0e:d2:18:33:b0:d0:d1:44:c2:8c:9c:a4:6d:c9:33: 24:d9:24:2a:3e:b9:e1:bc:b2:95:41:73:dd:b8:da: 32:70:88:19:fc:2e:33:3c:7d:82:c3:d4:40:11:f8: ca:08:b8:fb:73:57:6a:27:7d:cf:e9:00:0a:b9:28: f4:db:10:7c:a5:50:91:43:c6:7a:89:0c:ea:7c:8b: e1:70:54:41:8c:ec:eb:4f:5b:82:68:5c:7a:b9:5e: d2:20:70:86:e2:e1:cf:65:80:c5:cb:2a:32:21:7c: 89:aa:a7:10:54:96:86:16:d0:bc:4c:47:64:4f:2b: 0b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:93:16:E7:E1:B7:D4:28:1A:54:15:BF:77:00:CE:0C:D2:DB:FE:21 X509v3 Authority Key Identifier: keyid:7D:07:4E:9E:E3:2E:0B:10:C8:30:DC:A4:76:3E:B9:CC:65:24:6F:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQdOnuMuCxDIMNykdj65zGUkb6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f8fdae-a53f-43c1-9612-120fc19236c9/1/fQdOnuMuCxDIMNykdj65zGUkb6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f3:c1:d7:fd:22:63:09:ec:ef:d5:42:08:f8:8c:5e:5b:35: a3:ce:79:a9:1c:8a:57:e8:28:80:5b:2c:45:5b:76:d7:1e:66: 89:18:8a:03:9d:97:e8:b2:26:c7:65:a1:11:f2:ef:98:b2:67: ae:ba:95:9e:90:29:ac:4d:a7:40:fb:a1:d8:c8:12:49:86:ed: 93:1e:0e:d3:06:2f:4c:63:10:39:77:fc:22:2f:9f:7f:52:79: 6e:f0:87:9c:7d:1b:f9:57:26:43:ca:6f:dc:4b:d8:45:55:67: cc:98:ff:1f:8a:02:d6:41:c1:34:e1:bb:d4:d7:4e:79:62:f8: d6:bc:94:a0:1f:20:bd:07:00:34:8d:81:96:31:22:a8:d1:87: 49:a4:f2:aa:25:3d:e4:00:2d:44:72:a5:dd:6a:47:77:b7:de: 62:0e:e8:74:d3:fb:5b:94:22:b8:eb:72:b2:76:e1:c1:95:76: 89:25:9e:17:0a:e7:b9:a1:08:b1:3b:ce:a0:32:92:1e:db:5d: fe:dc:bb:27:e6:c9:f3:6f:58:b2:ad:0f:78:43:07:24:58:a3: b7:f7:7e:f1:ba:1f:04:1c:85:7c:c0:4a:3b:96:b9:1a:bf:df: c3:c8:ef:9d:dc:b0:82:05:d6:a2:d6:e0:bc:3c:d9:14:63:ef: b8:94:20:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZPtlAK+Eh54TuiWxa65SKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDc0ZTllZTMyZTBiMTBjODMwZGNhNDc2M2ViOWNjNjUy NDZmYWEwHhcNMjUxMjI2MDYwMDQ5WhcNMjUxMjI3MDYwMDQ5WjAzMTEwLwYDVQQD EyhiZjkzMTZlN2UxYjdkNDI4MWE1NDE1YmY3NzAwY2UwY2QyZGJmZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt29Awr/I6O2N8cLoHsKgKA8hh0P 3p7oj939aoR9tpjcVeXte+Rc8SD5KSdVTRMLCieO54xp0IgUy4NHWL0HHasa7rma zfkNuJe9PuzeDZ0B38Z6+o02k0VKqZrm4TwJTG3IsiWZQB0fBbD1ulC1MJL3ps7V 3pgLzL3ZvZFC//zrF6Adqy8O0hgzsNDRRMKMnKRtyTMk2SQqPrnhvLKVQXPduNoy cIgZ/C4zPH2Cw9RAEfjKCLj7c1dqJ33P6QAKuSj02xB8pVCRQ8Z6iQzqfIvhcFRB jOzrT1uCaFx6uV7SIHCG4uHPZYDFyyoyIXyJqqcQVJaGFtC8TEdkTysLiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+TFufht9QoGlQVv3cAzgzS2/4hMB8GA1UdIwQY MBaAFH0HTp7jLgsQyDDcpHY+ucxlJG+qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mOGZkYWUtYTUzZi00M2MxLTk2MTIt MTIwZmMxOTIzNmM5LzEvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mOGZkYWUtYTUzZi00M2MxLTk2MTItMTIwZmMxOTIzNmM5 LzEvZlFkT251TXVDeERJTU55a2RqNjV6R1VrYjZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvPB1/0i Ywns79VCCPiMXls1o855qRyKV+gogFssRVt21x5miRiKA52X6LImx2WhEfLvmLJn rrqVnpAprE2nQPuh2MgSSYbtkx4O0wYvTGMQOXf8Ii+ff1J5bvCHnH0b+VcmQ8pv 3EvYRVVnzJj/H4oC1kHBNOG71NdOeWL41ryUoB8gvQcANI2BljEiqNGHSaTyqiU9 5AAtRHKl3WpHd7feYg7odNP7W5QiuOtysnbhwZV2iSWeFwrnuaEIsTvOoDKSHttd /ty7J+bJ829Ysq0PeEMHJFijt/d+8bofBByFfMBKO5a5Gr/fw8jvndywggXWotbg vDzZFGPvuJQg9g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:24 2025 by rpki-client