This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft File: fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json) Hash identifier: 5A5IgAdaS8mKoji73hxyX6xo+Oj9xuJADorZDPSdG5E= Subject key identifier: 04:0C:FA:61:E5:26:A6:0C:E8:56:39:CE:56:06:A2:47:02:8E:2F:7E Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 Certificate issuer: /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Certificate serial: 019B19165546452733B7A31736A06D495E7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft Manifest number: 14B6 Signing time: Sat 13 Dec 2025 19:00:52 +0000 Manifest this update: Sat 13 Dec 2025 19:00:52 +0000 Manifest next update: Sun 14 Dec 2025 19:00:52 +0000 Files and hashes: 1: JROuZAUGn_uROa26H7eCA7kb4tU.roa (hash: VxgK0RqcCU8OfeeQD1Bnel6yFDs/O6brmPZY7KVwoN4=) 2: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: QXUywgaHxh+g+xvbP0adhNt7WtWp2iCtADHussY3umA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:55:46:45:27:33:b7:a3:17:36:a0:6d:49:5e:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24 Validity Not Before: Dec 13 19:00:52 2025 GMT Not After : Dec 14 19:00:52 2025 GMT Subject: CN=040cfa61e526a60ce85639ce5606a247028e2f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:10:bf:0b:1d:14:92:d7:32:7b:98:79:d9: 15:9f:b8:08:07:f3:de:f4:e0:f9:2f:42:8d:32:d3: 90:02:47:1c:99:df:78:08:fd:1a:f9:92:30:c4:82: 47:97:71:16:30:69:98:a1:6a:29:e5:f4:df:84:61: 67:22:89:fa:9d:35:02:af:a8:17:ab:39:c3:dc:d5: a8:3d:70:12:04:7c:24:63:4e:82:cc:b0:31:45:b8: 5d:01:31:df:48:d7:c2:b2:7a:b5:64:a8:05:5c:9c: af:f6:2d:09:d7:8b:8e:2f:03:04:cd:07:80:3a:e1: 51:89:f4:51:a6:18:cf:5a:d5:ef:fc:d7:ac:86:8b: 90:da:4c:8a:1f:05:72:9b:97:47:58:14:b9:83:23: 25:11:3a:1b:2b:d9:10:8b:96:e1:4d:5c:cc:e5:b6: be:f6:0b:db:dc:51:e1:78:24:61:72:76:c7:04:91: fb:c6:fa:9a:01:38:0d:0b:6e:97:cd:1a:11:d2:40: d5:ce:5b:b3:84:cd:d6:f7:ed:e5:5d:e1:7f:5e:33: 44:75:ee:0d:d6:19:cc:58:dd:db:f6:6e:18:28:a5: 22:60:b2:fe:a1:80:09:48:e8:2b:6c:01:45:70:4c: 18:b8:0f:1d:e7:28:dc:f5:79:01:6e:92:e6:ee:56: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:0C:FA:61:E5:26:A6:0C:E8:56:39:CE:56:06:A2:47:02:8E:2F:7E X509v3 Authority Key Identifier: keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:68:76:90:e6:28:1d:1d:b2:20:5d:60:e9:22:34:59:2a:80: 93:f3:b0:bd:f6:4f:c2:10:61:9e:ca:3e:fd:d2:fd:e6:4d:b7: 23:76:9f:f1:d6:51:6a:b8:19:84:2a:e2:6f:77:e8:8b:84:78: b0:18:e7:ca:89:25:01:f8:47:5b:4e:7b:cc:4e:7d:68:69:6a: 16:bb:69:ac:42:36:d4:be:77:bb:68:bd:92:12:f9:eb:58:9f: e6:b1:fd:27:71:85:0b:8d:6d:e2:75:b3:e9:42:8c:9a:63:de: c3:89:f0:0d:e0:2e:ed:98:18:48:47:5e:94:3e:70:89:ad:55: 35:4a:f1:d6:92:3f:78:20:6e:14:c0:bd:3c:ed:ed:ab:d6:68: 12:96:69:b4:f2:a9:3f:36:b4:62:88:c1:40:62:7f:be:27:dd: bf:25:ad:08:27:7e:28:0e:cc:47:49:90:47:45:b0:d2:2b:16: 8f:ae:02:c3:ee:72:ac:68:60:28:09:39:16:63:e8:46:ba:76: e9:06:dd:6f:2c:3b:9b:d6:7c:94:40:80:27:bd:91:c6:52:b6: 51:33:08:f9:e0:59:6b:db:1d:e5:dd:09:97:58:68:b6:64:12: 19:36:78:c2:2f:6d:01:e8:36:82:94:7c:3a:94:b7:43:4e:db: 1c:c2:e6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFlVGRSczt6MXNqBtSV58MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh NmFhMjQwHhcNMjUxMjEzMTkwMDUyWhcNMjUxMjE0MTkwMDUyWjAzMTEwLwYDVQQD EygwNDBjZmE2MWU1MjZhNjBjZTg1NjM5Y2U1NjA2YTI0NzAyOGUyZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthkQvwsdFJLXMnuYedkVn7gIB/Pe 9OD5L0KNMtOQAkccmd94CP0a+ZIwxIJHl3EWMGmYoWop5fTfhGFnIon6nTUCr6gX qznD3NWoPXASBHwkY06CzLAxRbhdATHfSNfCsnq1ZKgFXJyv9i0J14uOLwMEzQeA OuFRifRRphjPWtXv/NeshouQ2kyKHwVym5dHWBS5gyMlETobK9kQi5bhTVzM5ba+ 9gvb3FHheCRhcnbHBJH7xvqaATgNC26XzRoR0kDVzluzhM3W9+3lXeF/XjNEde4N 1hnMWN3b9m4YKKUiYLL+oYAJSOgrbAFFcEwYuA8d5yjc9XkBbpLm7lanwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQM+mHlJqYM6FY5zlYGokcCji9+MB8GA1UdIwQY MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5 LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmh2kOYo HR2yIF1g6SI0WSqAk/OwvfZPwhBhnso+/dL95k23I3af8dZRargZhCrib3foi4R4 sBjnyoklAfhHW057zE59aGlqFrtprEI21L53u2i9khL561if5rH9J3GFC41t4nWz 6UKMmmPew4nwDeAu7ZgYSEdelD5wia1VNUrx1pI/eCBuFMC9PO3tq9ZoEpZptPKp Pza0YojBQGJ/vifdvyWtCCd+KA7MR0mQR0Ww0isWj64Cw+5yrGhgKAk5FmPoRrp2 6Qbdbyw7m9Z8lECAJ72RxlK2UTMI+eBZa9sd5d0Jl1hotmQSGTZ4wi9tAeg2gpR8 OpS3Q07bHMLmOA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:54:56 2025 by rpki-client