This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json) Hash identifier: j1QcMspk7qzQE7cQ9DnFEW4c5y1jwse4dHAsYtHj+ow= Subject key identifier: 0B:4F:83:54:3B:88:38:11:EE:89:C9:F8:5B:AE:0F:F9:E7:2B:59:25 Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Certificate serial: 019B4ADE68486244B291D8E286747FEAFA74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft Manifest number: 0B36 Signing time: Tue 23 Dec 2025 11:00:48 +0000 Manifest this update: Tue 23 Dec 2025 11:00:48 +0000 Manifest next update: Wed 24 Dec 2025 11:00:48 +0000 Files and hashes: 1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=) 2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: RMjx9Et4zsUHJux1RmSFU+hFeG8ONAd5tsgkZX0hzeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:68:48:62:44:b2:91:d8:e2:86:74:7f:ea:fa:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Validity Not Before: Dec 23 11:00:48 2025 GMT Not After : Dec 24 11:00:48 2025 GMT Subject: CN=0b4f83543b883811ee89c9f85bae0ff9e72b5925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:e7:f9:7d:8d:75:30:04:fb:5d:bb:c7:28: 21:49:1b:58:2e:6b:97:90:90:b6:71:61:0f:a5:84: 17:2b:22:72:46:34:74:21:99:9e:98:3e:f5:47:e8: 81:61:d9:6d:fe:e6:78:3e:54:a9:b7:66:ee:56:ac: 3b:4c:32:77:17:8e:20:a8:34:83:56:84:6c:a4:8d: cf:c0:49:81:03:32:06:c3:f7:d9:a8:86:c7:59:49: 82:a9:c6:b0:6d:9a:0a:3a:50:56:f3:4a:52:f8:3c: b4:0c:92:a7:e8:d4:b4:da:6c:aa:9e:cb:a6:e6:6a: 01:83:e8:bb:fc:e5:e3:a6:ff:31:e5:12:d8:77:df: 17:94:d5:ec:09:cf:55:3c:63:3d:11:37:6f:89:2d: 1f:16:1b:1d:a0:54:54:02:fc:f0:61:3c:b7:19:21: d7:31:44:db:f7:ae:08:db:89:4c:65:5a:53:7b:b1: b0:68:9b:d8:16:2d:0b:ec:3b:82:76:66:a3:f5:05: c7:a3:67:3b:88:fa:8f:c3:d4:e6:1e:d3:84:3f:29: e1:fb:ea:6b:33:67:fc:02:b8:a3:19:5b:0f:a9:1d: ed:8e:7d:bf:32:e1:85:56:9a:b0:01:92:91:f1:ce: 87:35:96:20:2b:95:76:8b:ff:d2:7e:7d:2a:26:55: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:83:54:3B:88:38:11:EE:89:C9:F8:5B:AE:0F:F9:E7:2B:59:25 X509v3 Authority Key Identifier: keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a0:aa:21:8e:1d:de:0a:10:94:52:1d:f6:bd:1e:c2:b9:38: 17:89:89:c4:b1:6b:03:8a:ea:51:96:ef:3e:6c:70:a2:e4:a9: 2c:81:26:08:b5:09:36:b6:4d:49:11:5c:83:6d:d2:67:af:5d: 1b:cf:20:83:1d:10:85:09:70:12:41:fa:1e:42:9b:25:32:77: 2a:04:6b:56:fb:2b:42:da:24:63:89:ff:04:8d:40:6f:8d:2d: fc:e9:74:b3:71:f1:33:24:02:46:1a:98:66:d4:9a:e3:83:32: 39:17:8f:fe:22:1a:ff:9b:11:65:bf:26:a0:9e:82:82:f3:52: 1a:41:da:61:e9:8f:e5:ad:cf:c4:39:12:d5:77:bf:e7:21:57: 38:aa:61:82:43:44:af:5a:2e:80:d2:26:2f:57:36:0a:41:2c: 7c:d7:e0:41:ad:a9:40:72:bb:39:f7:61:ee:c2:23:fa:a5:ee: f4:b8:25:20:1b:5a:50:3c:07:9d:63:b0:67:5a:e3:b9:89:d7: 76:33:19:87:2a:90:1d:d1:ec:01:31:fe:aa:8e:3e:26:07:29: 26:81:8e:6f:06:f6:61:54:e0:44:d2:d0:ec:cb:09:72:3f:70: 77:2c:39:cb:1f:e3:66:85:71:c5:0a:71:5c:78:00:0e:16:4c: ef:57:d1:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3mhIYkSykdjihnR/6vp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjkyYjM4ZGYxOTdjYTJjYmFlMzAyNjkzMjI2YjIzZjMy YTNmNzYwHhcNMjUxMjIzMTEwMDQ4WhcNMjUxMjI0MTEwMDQ4WjAzMTEwLwYDVQQD EygwYjRmODM1NDNiODgzODExZWU4OWM5Zjg1YmFlMGZmOWU3MmI1OTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUfn+X2NdTAE+127xyghSRtYLmuX kJC2cWEPpYQXKyJyRjR0IZmemD71R+iBYdlt/uZ4PlSpt2buVqw7TDJ3F44gqDSD VoRspI3PwEmBAzIGw/fZqIbHWUmCqcawbZoKOlBW80pS+Dy0DJKn6NS02myqnsum 5moBg+i7/OXjpv8x5RLYd98XlNXsCc9VPGM9ETdviS0fFhsdoFRUAvzwYTy3GSHX MUTb964I24lMZVpTe7GwaJvYFi0L7DuCdmaj9QXHo2c7iPqPw9TmHtOEPynh++pr M2f8ArijGVsPqR3tjn2/MuGFVpqwAZKR8c6HNZYgK5V2i//Sfn0qJlXnFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtPg1Q7iDgR7onJ+FuuD/nnK1klMB8GA1UdIwQY MBaAFH65KzjfGXyiy64wJpMiayPzKj92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUt OTFkMWEwNjg2M2FlLzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUtOTFkMWEwNjg2M2Fl LzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKCqIY4d 3goQlFId9r0ewrk4F4mJxLFrA4rqUZbvPmxwouSpLIEmCLUJNrZNSRFcg23SZ69d G88ggx0QhQlwEkH6HkKbJTJ3KgRrVvsrQtokY4n/BI1Ab40t/Ol0s3HxMyQCRhqY ZtSa44MyOReP/iIa/5sRZb8moJ6CgvNSGkHaYemP5a3PxDkS1Xe/5yFXOKphgkNE r1ougNImL1c2CkEsfNfgQa2pQHK7Ofdh7sIj+qXu9LglIBtaUDwHnWOwZ1rjuYnX djMZhyqQHdHsATH+qo4+JgcpJoGObwb2YVTgRNLQ7MsJcj9wdyw5yx/jZoVxxQpx XHgADhZM71fRYA== -----END CERTIFICATE-----Generated at Tue Dec 23 18:02:33 2025 by rpki-client