This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json) Hash identifier: HuFbAtI1MptG134NdxvQjqI90QVz4UCMdNCStYV3/LM= Subject key identifier: 22:C8:33:2F:90:25:17:C3:94:35:39:B4:98:67:20:A7:27:73:D6:FD Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12 Certificate serial: 019B3BD98A9FA49219DC63EDD740E7933F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft Manifest number: 03B7 Signing time: Sat 20 Dec 2025 13:01:11 +0000 Manifest this update: Sat 20 Dec 2025 13:01:11 +0000 Manifest next update: Sun 21 Dec 2025 13:01:11 +0000 Files and hashes: 1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: B6F7XuQFrnJO32yLR1bOKC3tLL34xwPqN08pkZT20Xw=) 2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:8a:9f:a4:92:19:dc:63:ed:d7:40:e7:93:3f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12 Validity Not Before: Dec 20 13:01:11 2025 GMT Not After : Dec 21 13:01:11 2025 GMT Subject: CN=22c8332f902517c3943539b4986720a72773d6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bd:66:1d:9a:da:d0:76:18:e6:05:75:86:2b: 2d:37:44:89:57:7a:3d:94:13:c7:90:e5:c4:84:33: 9e:8a:b2:47:0d:ed:4f:ae:42:ad:f8:e0:6d:b6:93: 2d:81:5a:34:45:92:a6:57:a2:c5:cb:a9:63:9a:30: cc:a9:ae:de:c6:36:d2:b8:f6:72:f3:0f:e8:78:0a: a7:90:c6:d4:1b:19:07:52:b3:bf:98:a0:51:da:d2: c5:d5:4b:db:fa:f3:88:34:d3:ff:44:71:fa:16:93: f5:5e:86:89:7d:78:35:59:a4:1b:e5:56:52:75:fa: eb:35:93:bf:9f:dc:70:27:cd:ec:bd:30:66:44:e0: 67:1e:07:21:98:62:3a:9d:b8:ca:59:16:d7:77:88: 85:32:21:17:5f:35:48:5b:e9:da:2b:6d:09:ea:7c: ad:5b:9a:f1:37:c3:ca:ba:a2:9e:d7:4d:7d:dc:3a: de:8a:ed:2f:66:4b:8f:e2:f9:0a:9e:96:fe:16:b5: 03:6a:e1:a5:d2:f6:a1:90:ff:36:f9:9b:48:24:18: 03:37:f5:15:95:fa:99:9d:41:43:59:db:af:a5:82: 0c:08:1f:2b:c3:42:52:9b:b6:77:28:43:de:0d:30: 72:d0:3e:0e:e6:7b:2f:db:67:34:19:5e:b9:71:84: b4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:C8:33:2F:90:25:17:C3:94:35:39:B4:98:67:20:A7:27:73:D6:FD X509v3 Authority Key Identifier: keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:eb:aa:ca:b7:17:9e:17:5c:e2:70:1f:bb:dc:37:59:84:20: 48:e0:1b:ce:7a:0b:c9:72:ae:13:63:6f:84:19:c8:01:5f:66: 07:c9:8d:67:c2:96:c2:f7:ad:76:89:5d:f8:9f:f3:c4:94:94: 79:78:7d:de:17:59:95:fc:31:d5:66:09:b9:97:86:67:c1:ea: 69:96:bd:76:43:80:66:6e:00:83:fd:9f:bd:94:63:95:6f:ce: 88:7b:57:33:ba:57:76:00:9b:b9:63:01:41:cc:42:24:f0:16: 37:40:7c:c9:1c:03:44:7f:f1:98:e2:d3:e0:73:73:5f:ea:99: f3:6a:e6:f8:34:a6:00:58:44:a6:8c:97:a1:0c:87:c3:8a:da: ca:50:d1:f1:8d:18:a2:83:12:d8:55:55:9a:39:dc:f4:e0:59: d6:54:1d:40:ba:67:70:da:6c:fb:8c:79:cb:b2:96:ea:3a:b8: 57:49:7a:39:f5:f1:ee:57:7d:bd:7b:ab:77:5e:f0:df:71:af: d3:72:91:71:a5:03:c0:0a:dc:62:0f:8f:a6:56:bc:bb:a1:9b: 57:97:6f:6c:09:f5:88:12:ef:9e:74:c5:c4:06:2b:02:67:e6: e4:df:ee:85:f5:4c:8e:86:b8:84:b8:7a:43:8f:20:9b:89:a8: 56:b2:4c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72YqfpJIZ3GPt10Dnkz8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMjQ5Yjk1NDQ2MjA2ODNmOTRiMzg4YTc1NTFhNjhhNjQ5 M2VkMTIwHhcNMjUxMjIwMTMwMTExWhcNMjUxMjIxMTMwMTExWjAzMTEwLwYDVQQD EygyMmM4MzMyZjkwMjUxN2MzOTQzNTM5YjQ5ODY3MjBhNzI3NzNkNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb1mHZra0HYY5gV1histN0SJV3o9 lBPHkOXEhDOeirJHDe1PrkKt+OBttpMtgVo0RZKmV6LFy6ljmjDMqa7exjbSuPZy 8w/oeAqnkMbUGxkHUrO/mKBR2tLF1Uvb+vOINNP/RHH6FpP1XoaJfXg1WaQb5VZS dfrrNZO/n9xwJ83svTBmROBnHgchmGI6nbjKWRbXd4iFMiEXXzVIW+naK20J6nyt W5rxN8PKuqKe10193Dreiu0vZkuP4vkKnpb+FrUDauGl0vahkP82+ZtIJBgDN/UV lfqZnUFDWduvpYIMCB8rw0JSm7Z3KEPeDTBy0D4O5nsv22c0GV65cYS0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLIMy+QJRfDlDU5tJhnIKcnc9b9MB8GA1UdIwQY MBaAFH8km5VEYgaD+Us4inVRpopkk+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMt ODQyMzk3ZTMwNjQzLzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMtODQyMzk3ZTMwNjQz LzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOuqyrcX nhdc4nAfu9w3WYQgSOAbznoLyXKuE2NvhBnIAV9mB8mNZ8KWwvetdold+J/zxJSU eXh93hdZlfwx1WYJuZeGZ8HqaZa9dkOAZm4Ag/2fvZRjlW/OiHtXM7pXdgCbuWMB QcxCJPAWN0B8yRwDRH/xmOLT4HNzX+qZ82rm+DSmAFhEpoyXoQyHw4raylDR8Y0Y ooMS2FVVmjnc9OBZ1lQdQLpncNps+4x5y7KW6jq4V0l6OfXx7ld9vXurd17w33Gv 03KRcaUDwArcYg+Ppla8u6GbV5dvbAn1iBLvnnTFxAYrAmfm5N/uhfVMjoa4hLh6 Q48gm4moVrJMZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:25 2025 by rpki-client