This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft File: fmdQ5YygordfLFO99vYf9j7IMcs.mft (raw, json) Hash identifier: JxL+SN0xH1M99FajYw5XUtEJbR9CcThFn6iKB1fotAg= Subject key identifier: 93:11:E4:35:D6:34:8C:62:F5:89:BC:FF:4D:39:BC:9D:6A:E0:8F:93 Authority key identifier: 7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB Certificate issuer: /CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb Certificate serial: 019B424AF6EDF85175A19A128DED86205FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:02:47 +0000 Manifest this update: Sun 21 Dec 2025 19:02:47 +0000 Manifest next update: Mon 22 Dec 2025 19:02:47 +0000 Files and hashes: 1: 1jPmqvt1ilYlmNcTs9vv0mQwV2Y.roa (hash: eLo4dRJvSmA8RvGBVuxw5fjwL9gDtsf1LW0xwTy98e0=) 2: fmdQ5YygordfLFO99vYf9j7IMcs.crl (hash: lbXPLMreCV9TI+kKXJ3dgkRxOPKtLZF1Eab2TeF+f/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:f6:ed:f8:51:75:a1:9a:12:8d:ed:86:20:5f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e6750e58ca0a2b75f2c53bdf6f61ff63ec831cb Validity Not Before: Dec 21 19:02:47 2025 GMT Not After : Dec 22 19:02:47 2025 GMT Subject: CN=9311e435d6348c62f589bcff4d39bc9d6ae08f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f9:87:06:e1:59:62:26:6d:8f:36:4d:18:4e: 19:b6:24:b5:e1:20:d6:10:a1:79:a1:e7:04:08:82: b0:4a:9e:f5:c4:1e:63:5a:48:e6:5c:fb:cb:f0:96: ee:88:62:d4:88:67:cb:f2:79:29:30:e0:44:6f:af: ca:25:91:76:ba:b2:69:5d:8c:e1:54:af:8a:90:c8: 41:2b:30:1b:f7:4f:a4:f4:82:f0:88:54:f6:69:7d: 9a:f4:3a:f9:77:03:e6:89:60:64:fe:e7:54:99:76: c5:88:fa:48:f5:6f:79:76:60:4c:54:f2:fe:bc:79: 6f:fe:96:95:3f:cc:60:0f:ab:1c:f9:0f:c0:d5:23: 87:bb:92:5e:3e:9f:28:2a:8c:b0:97:62:f9:b7:0d: 12:87:e8:22:29:83:4b:40:ae:d8:ed:0d:67:10:56: e9:a7:53:ab:c1:4f:af:a9:7b:3a:dc:9a:3c:7b:11: 75:05:3d:bd:1b:1e:46:d9:34:bd:c1:fb:ab:54:98: 52:84:c8:26:13:7c:eb:f4:34:7d:40:29:0a:ab:a6: 91:1a:9a:f1:2b:a1:e3:a6:88:c1:f7:ae:6d:2d:e4: 9f:00:f8:6e:1f:02:9a:ad:4c:4f:0c:ca:24:60:83: 2a:59:c2:e7:ba:77:a9:86:9c:74:4c:59:2d:c7:9f: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:11:E4:35:D6:34:8C:62:F5:89:BC:FF:4D:39:BC:9D:6A:E0:8F:93 X509v3 Authority Key Identifier: keyid:7E:67:50:E5:8C:A0:A2:B7:5F:2C:53:BD:F6:F6:1F:F6:3E:C8:31:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmdQ5YygordfLFO99vYf9j7IMcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/78bd05-6006-462f-a187-0ecf4220023e/1/fmdQ5YygordfLFO99vYf9j7IMcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:77:05:12:fb:15:27:02:7a:1a:60:da:8c:2b:ad:c5:c8:fa: bd:1b:40:c5:a3:b4:e7:16:b4:30:25:c3:87:17:55:08:7b:0b: 55:55:4c:09:ca:64:4e:a8:9a:f3:20:8f:ba:3c:70:56:52:b1: 49:be:ac:9c:5a:77:b9:0e:25:31:c3:a1:a7:e4:3c:5e:11:69: 76:28:9c:af:96:92:0f:80:68:68:48:9a:e5:41:55:b1:1e:e0: a0:00:83:9a:f4:76:06:d1:e0:be:83:85:a8:52:3a:bf:3d:c1: 53:d3:c6:a7:46:c2:cb:8d:5d:14:99:ca:23:ad:4b:64:60:8b: bc:f6:45:2b:a6:58:64:fb:09:61:d7:c7:f4:03:66:7c:11:d0: 86:85:05:59:4f:ee:0e:7c:78:83:52:b0:e9:90:54:7d:8a:8a: fc:86:0d:51:a4:37:76:38:9e:79:fb:7f:20:37:08:0d:f4:fc: e5:f3:a4:a7:91:e5:bf:ff:b6:cb:b1:93:e0:55:21:3e:43:4f: 94:62:8d:45:83:6e:d6:44:c2:49:f4:e1:f2:60:15:18:f5:5d: 0b:27:39:b9:8a:a4:b8:8e:aa:23:b0:a7:57:57:bf:97:67:da: 50:ba:ed:ce:a5:8d:dc:97:cf:7c:dd:41:3d:9e:88:77:4e:6e: 14:42:85:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSvbt+FF1oZoSje2GIF+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjc1MGU1OGNhMGEyYjc1ZjJjNTNiZGY2ZjYxZmY2M2Vj ODMxY2IwHhcNMjUxMjIxMTkwMjQ3WhcNMjUxMjIyMTkwMjQ3WjAzMTEwLwYDVQQD Eyg5MzExZTQzNWQ2MzQ4YzYyZjU4OWJjZmY0ZDM5YmM5ZDZhZTA4ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/mHBuFZYiZtjzZNGE4ZtiS14SDW EKF5oecECIKwSp71xB5jWkjmXPvL8JbuiGLUiGfL8nkpMOBEb6/KJZF2urJpXYzh VK+KkMhBKzAb90+k9ILwiFT2aX2a9Dr5dwPmiWBk/udUmXbFiPpI9W95dmBMVPL+ vHlv/paVP8xgD6sc+Q/A1SOHu5JePp8oKoywl2L5tw0Sh+giKYNLQK7Y7Q1nEFbp p1OrwU+vqXs63Jo8exF1BT29Gx5G2TS9wfurVJhShMgmE3zr9DR9QCkKq6aRGprx K6HjpojB965tLeSfAPhuHwKarUxPDMokYIMqWcLnunephpx0TFktx5+uUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMR5DXWNIxi9Ym8/005vJ1q4I+TMB8GA1UdIwQY MBaAFH5nUOWMoKK3XyxTvfb2H/Y+yDHLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODct MGVjZjQyMjAwMjNlLzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS83OGJkMDUtNjAwNi00NjJmLWExODctMGVjZjQyMjAwMjNl LzEvZm1kUTVZeWdvcmRmTEZPOTl2WWY5ajdJTWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3cFEvsV JwJ6GmDajCutxcj6vRtAxaO05xa0MCXDhxdVCHsLVVVMCcpkTqia8yCPujxwVlKx Sb6snFp3uQ4lMcOhp+Q8XhFpdiicr5aSD4BoaEia5UFVsR7goACDmvR2BtHgvoOF qFI6vz3BU9PGp0bCy41dFJnKI61LZGCLvPZFK6ZYZPsJYdfH9ANmfBHQhoUFWU/u Dnx4g1Kw6ZBUfYqK/IYNUaQ3djieeft/IDcIDfT85fOkp5Hlv/+2y7GT4FUhPkNP lGKNRYNu1kTCSfTh8mAVGPVdCyc5uYqkuI6qI7CnV1e/l2faULrtzqWN3JfPfN1B PZ6Id05uFEKFvQ== -----END CERTIFICATE-----Generated at Sun Dec 21 21:28:28 2025 by rpki-client