This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft File: fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json) Hash identifier: hJykECTC3bAhZxaxCdNLxQf3psXzSbNXkWHVPfEE9gU= Subject key identifier: 8B:B7:82:2D:F2:D1:AF:D7:C9:B2:62:99:65:53:71:6C:58:8D:C9:5B Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 Certificate issuer: /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Certificate serial: 019B484B64C074913B7984A72891056F7EA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft Manifest number: 0D7D Signing time: Mon 22 Dec 2025 23:00:59 +0000 Manifest this update: Mon 22 Dec 2025 23:00:59 +0000 Manifest next update: Tue 23 Dec 2025 23:00:59 +0000 Files and hashes: 1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=) 2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: /jtaRebHQZRmHlr6e11nT2/cZKKYJFfieuunb1Kbdn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:64:c0:74:91:3b:79:84:a7:28:91:05:6f:7e:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96 Validity Not Before: Dec 22 23:00:59 2025 GMT Not After : Dec 23 23:00:59 2025 GMT Subject: CN=8bb7822df2d1afd7c9b262996553716c588dc95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:62:4a:7b:eb:00:b0:69:6f:3f:3b:66:82:8f: 72:e7:3e:21:bc:b2:7d:23:b7:22:f6:24:c2:f1:9b: 10:54:a8:85:be:c6:e2:a4:59:5d:e1:10:a0:ad:33: 67:37:94:92:8d:39:ba:ba:ae:fd:94:23:c9:30:d5: 98:6f:10:5f:da:37:c2:0a:b5:5c:e5:5c:87:76:b3: 45:8d:c6:76:b7:7e:d1:39:87:0e:82:01:95:b9:fc: 75:a0:83:7c:0a:fc:b2:b2:5f:2b:0d:92:19:83:ba: 7a:b3:13:7a:80:58:45:c6:44:61:d3:a0:b8:5b:2f: 0c:75:17:ac:24:12:32:1b:15:9d:46:e3:a4:da:49: e7:de:d3:20:2d:10:77:1d:31:ad:06:8d:50:d4:04: 79:aa:9b:8f:00:5d:9c:67:bc:e8:9b:c1:82:67:48: a8:d4:04:05:3a:ee:74:af:d3:b6:9b:04:4c:eb:43: f6:b7:f3:ce:e0:f1:6e:38:70:12:3b:09:aa:b5:c9: 87:60:93:e4:ed:5a:46:25:c7:46:e6:b6:e9:23:e2: 5c:44:e6:4e:0e:a7:44:56:53:7a:b0:1b:a6:d7:b6: d1:99:d0:87:6d:bb:9c:62:4b:10:df:a2:58:b4:84: c4:3e:f0:80:ce:84:ea:d9:24:3a:4b:61:d6:bb:1f: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B7:82:2D:F2:D1:AF:D7:C9:B2:62:99:65:53:71:6C:58:8D:C9:5B X509v3 Authority Key Identifier: keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5e:2f:23:8f:7d:1c:81:85:cf:da:0f:a0:2a:1e:8d:e6:bd: a9:c2:22:e5:4b:6d:84:fe:87:9e:84:5c:33:66:44:ad:23:81: c7:d4:3a:7f:d8:74:76:33:f7:cf:07:8a:a0:49:c3:de:de:0f: 66:8f:d7:72:c0:6a:9f:7b:f8:ce:60:03:7b:80:d0:ba:3f:56: 48:cc:01:ef:c8:a6:88:13:52:1d:a9:30:d4:16:3b:e2:03:22: 57:98:5a:7d:47:fe:ac:99:29:af:f0:f2:3c:e7:a7:21:05:d3: 76:e5:28:a3:a7:1a:c0:96:75:02:b1:b2:5a:e8:77:62:38:e5: e2:63:f2:c6:42:8b:83:d9:7b:fa:6d:7e:fa:7e:71:fa:48:3d: 08:af:23:b5:8f:9a:c4:8a:01:06:9c:c1:29:06:fe:ca:0e:7e: 5b:b5:e0:70:bc:79:4f:2e:5c:fb:52:b8:75:a1:f8:8b:86:6b: 54:f2:c4:c7:2c:f5:c9:c2:a1:4c:eb:96:c6:bc:ac:60:6c:88: 85:eb:f9:0f:20:33:cc:6a:30:4b:de:01:a2:62:3a:38:8d:d9: be:a3:35:be:fc:a7:d0:f6:86:8c:bf:22:25:bf:f3:80:28:55: 39:81:1f:d5:c3:00:94:31:65:95:bb:ae:fe:14:8f:e0:f0:88: 21:7a:85:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS2TAdJE7eYSnKJEFb36pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMzUzMmU1MmVhYWZlZjk0OGM0MmM4YjFkNTExNDVjYWM5 ZDRjOTYwHhcNMjUxMjIyMjMwMDU5WhcNMjUxMjIzMjMwMDU5WjAzMTEwLwYDVQQD Eyg4YmI3ODIyZGYyZDFhZmQ3YzliMjYyOTk2NTUzNzE2YzU4OGRjOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WJKe+sAsGlvPztmgo9y5z4hvLJ9 I7ci9iTC8ZsQVKiFvsbipFld4RCgrTNnN5SSjTm6uq79lCPJMNWYbxBf2jfCCrVc 5VyHdrNFjcZ2t37ROYcOggGVufx1oIN8Cvyysl8rDZIZg7p6sxN6gFhFxkRh06C4 Wy8MdResJBIyGxWdRuOk2knn3tMgLRB3HTGtBo1Q1AR5qpuPAF2cZ7zom8GCZ0io 1AQFOu50r9O2mwRM60P2t/PO4PFuOHASOwmqtcmHYJPk7VpGJcdG5rbpI+JcROZO DqdEVlN6sBum17bRmdCHbbucYksQ36JYtITEPvCAzoTq2SQ6S2HWux/c4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIu3gi3y0a/XybJimWVTcWxYjclbMB8GA1UdIwQY MBaAFHw1MuUuqv75SMQsix1RFFysnUyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUt NTY0ZWJkY2YzZjk2LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hNDM4NTAtMDJhMi00ODU5LTliZGUtNTY0ZWJkY2YzZjk2 LzEvZkRVeTVTNnFfdmxJeEN5TEhWRVVYS3lkVEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl4vI499 HIGFz9oPoCoejea9qcIi5UtthP6HnoRcM2ZErSOBx9Q6f9h0djP3zweKoEnD3t4P Zo/XcsBqn3v4zmADe4DQuj9WSMwB78imiBNSHakw1BY74gMiV5hafUf+rJkpr/Dy POenIQXTduUoo6cawJZ1ArGyWuh3Yjjl4mPyxkKLg9l7+m1++n5x+kg9CK8jtY+a xIoBBpzBKQb+yg5+W7XgcLx5Ty5c+1K4daH4i4ZrVPLExyz1ycKhTOuWxrysYGyI hev5DyAzzGowS94BomI6OI3ZvqM1vvyn0PaGjL8iJb/zgChVOYEf1cMAlDFllbuu /hSP4PCIIXqFoA== -----END CERTIFICATE-----Generated at Tue Dec 23 03:14:44 2025 by rpki-client