This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft File: fgX1rbuaqxB5slJG4ju71qF-Ptg.mft (raw, json) Hash identifier: VyQUTCGxUDGgtiQuVH5LYpgiAARS0vYaQ8gf59UsIxE= Subject key identifier: C5:40:68:86:3F:95:15:1F:A6:A2:94:EA:3D:BD:03:51:26:C2:65:8B Authority key identifier: 7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 Certificate issuer: /CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Certificate serial: 019B066C1AB65E2C5EF55B4BD055739942C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft Manifest number: 176A Signing time: Wed 10 Dec 2025 04:01:46 +0000 Manifest this update: Wed 10 Dec 2025 04:01:46 +0000 Manifest next update: Thu 11 Dec 2025 04:01:46 +0000 Files and hashes: 1: HP64WtX1yfILpkNOMbG1q1N4a3k.roa (hash: qIWMDdKxzjP3RhBE+pArO3QBDZn+hnUGI/cwBEig+dA=) 2: fgX1rbuaqxB5slJG4ju71qF-Ptg.crl (hash: vG2b8Uk0SzdK1niVVxA6zVooMn7qPDHVAiDodWuQ+Aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6c:1a:b6:5e:2c:5e:f5:5b:4b:d0:55:73:99:42:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e05f5adbb9aab1079b25246e23bbbd6a17e3ed8 Validity Not Before: Dec 10 04:01:46 2025 GMT Not After : Dec 11 04:01:46 2025 GMT Subject: CN=c54068863f95151fa6a294ea3dbd035126c2658b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1f:bc:9d:02:f7:02:d7:87:28:c5:63:c2:77: cc:2b:0b:79:09:b3:01:f9:d0:61:b1:e7:34:70:ba: 07:bc:d3:17:25:73:28:91:5f:31:07:5f:32:f3:e0: 2f:48:51:03:9e:1a:75:16:76:27:b5:02:19:88:ea: fe:53:7b:11:90:20:36:04:cf:3b:04:ec:5b:8a:2d: 03:2f:3e:fd:77:6a:26:a3:ee:58:36:58:b8:2f:50: 45:9d:c4:69:e8:42:23:53:53:84:fb:65:92:ca:15: 19:1d:bb:a8:c9:52:48:91:85:2d:95:9d:02:07:8d: a3:1a:98:62:a0:d3:36:d0:d3:1a:46:01:ef:1e:d2: 59:dd:0b:79:03:f6:71:a4:81:e8:05:58:c9:c7:7d: 03:b2:a7:4e:9d:05:ac:48:67:ce:93:ae:ea:4f:28: 85:6e:c6:e6:3f:85:6c:bb:e4:ba:f4:a7:06:38:0e: 62:67:7f:62:c7:ec:72:61:10:09:87:69:0a:88:d1: 59:e8:01:21:7f:d2:40:19:b5:5e:a4:f7:0a:ce:1b: 25:48:71:2a:d0:52:0c:a6:29:a8:47:d2:88:22:64: f2:5c:c8:49:21:5e:d4:2e:e2:1c:84:0f:19:af:67: 69:ff:65:16:73:8f:f1:9f:1f:74:61:c8:15:ff:11: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:40:68:86:3F:95:15:1F:A6:A2:94:EA:3D:BD:03:51:26:C2:65:8B X509v3 Authority Key Identifier: keyid:7E:05:F5:AD:BB:9A:AB:10:79:B2:52:46:E2:3B:BB:D6:A1:7E:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgX1rbuaqxB5slJG4ju71qF-Ptg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/184500-3336-4cdd-943b-4f6c85fd50f1/1/fgX1rbuaqxB5slJG4ju71qF-Ptg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:7e:8c:93:37:60:16:4d:50:37:c9:02:c2:ba:36:45:5a:10: 3a:a2:20:9f:86:2b:2d:22:fb:f9:f5:40:3b:fe:96:bd:26:9f: 50:1b:09:73:f7:75:a1:ef:06:77:e3:70:66:89:d9:31:87:1f: f2:4a:85:ae:82:ca:96:f1:69:26:57:0f:08:c1:6b:82:a4:6f: 88:80:37:0e:07:9d:ce:60:7e:7f:f9:09:37:fd:a3:86:56:84: 48:e7:d4:fa:46:ec:7e:3b:32:1f:10:7a:2d:4c:bd:2e:ee:b4: 81:78:bd:1d:90:7e:12:aa:de:1a:f2:f3:f8:fe:cc:9e:f1:7b: 83:19:c6:4b:a9:15:59:38:c9:43:c2:4a:f5:89:fa:8e:6c:cd: b3:90:1e:61:80:6c:ee:5a:fd:3d:84:c4:ce:94:0a:68:c1:5a: 75:56:0c:56:08:fe:cc:2d:43:28:71:f6:1e:8c:db:09:c6:bd: 23:6a:a4:26:51:f9:fb:63:86:83:97:af:01:95:e6:b9:e9:d1: 30:ba:3b:9b:3a:81:99:90:3c:24:da:ad:2e:5d:4e:9c:c2:2d: 47:92:38:e2:77:9e:91:53:c7:5d:49:fe:ed:99:82:fa:61:f2: 25:4c:c2:9a:ce:84:ad:fa:a0:c9:18:80:e7:72:93:c7:79:e0: e8:10:8d:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbBq2Xixe9VtL0FVzmULAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDVmNWFkYmI5YWFiMTA3OWIyNTI0NmUyM2JiYmQ2YTE3 ZTNlZDgwHhcNMjUxMjEwMDQwMTQ2WhcNMjUxMjExMDQwMTQ2WjAzMTEwLwYDVQQD EyhjNTQwNjg4NjNmOTUxNTFmYTZhMjk0ZWEzZGJkMDM1MTI2YzI2NThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqh+8nQL3AteHKMVjwnfMKwt5CbMB +dBhsec0cLoHvNMXJXMokV8xB18y8+AvSFEDnhp1FnYntQIZiOr+U3sRkCA2BM87 BOxbii0DLz79d2omo+5YNli4L1BFncRp6EIjU1OE+2WSyhUZHbuoyVJIkYUtlZ0C B42jGphioNM20NMaRgHvHtJZ3Qt5A/ZxpIHoBVjJx30DsqdOnQWsSGfOk67qTyiF bsbmP4Vsu+S69KcGOA5iZ39ix+xyYRAJh2kKiNFZ6AEhf9JAGbVepPcKzhslSHEq 0FIMpimoR9KIImTyXMhJIV7ULuIchA8Zr2dp/2UWc4/xnx90YcgV/xGr0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVAaIY/lRUfpqKU6j29A1EmwmWLMB8GA1UdIwQY MBaAFH4F9a27mqsQebJSRuI7u9ahfj7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2It NGY2Yzg1ZmQ1MGYxLzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xODQ1MDAtMzMzNi00Y2RkLTk0M2ItNGY2Yzg1ZmQ1MGYx LzEvZmdYMXJidWFxeEI1c2xKRzRqdTcxcUYtUHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoX6Mkzdg Fk1QN8kCwro2RVoQOqIgn4YrLSL7+fVAO/6WvSafUBsJc/d1oe8Gd+NwZonZMYcf 8kqFroLKlvFpJlcPCMFrgqRviIA3DgedzmB+f/kJN/2jhlaESOfU+kbsfjsyHxB6 LUy9Lu60gXi9HZB+EqreGvLz+P7MnvF7gxnGS6kVWTjJQ8JK9Yn6jmzNs5AeYYBs 7lr9PYTEzpQKaMFadVYMVgj+zC1DKHH2HozbCca9I2qkJlH5+2OGg5evAZXmuenR MLo7mzqBmZA8JNqtLl1OnMItR5I44neekVPHXUn+7ZmC+mHyJUzCms6ErfqgyRiA 53KTx3ng6BCNjQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:14:53 2025 by rpki-client