This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft File: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json) Hash identifier: tRVUcE/2c8O3eDJWX8ZMdMjy0Nt+kPJ3PLhhnZ7y2+M= Subject key identifier: 9B:D8:5E:48:EF:56:9B:C5:DE:DA:8F:86:44:76:4E:D8:E7:20:EB:B5 Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A Certificate issuer: /CN=7e3150f8c67063121027328954968d08d4cf329a Certificate serial: 019B0DEDE17F9EA023DE09EB23B619A1E2F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft Manifest number: 0201 Signing time: Thu 11 Dec 2025 15:00:52 +0000 Manifest this update: Thu 11 Dec 2025 15:00:52 +0000 Manifest next update: Fri 12 Dec 2025 15:00:52 +0000 Files and hashes: 1: B0G3sXZP-lhExtNpCnBC4YPOMgM.roa (hash: gLC/9yZUh8hacXl47LTUe+LM65gMVKVuxWQdb+HkSvE=) 2: LDoP5Dfl1mKROHPXAg7g52U96wY.roa (hash: zTokmzR2O1Fhpl59w3s7zzWY51T7sYMdoDy4HTwa7WM=) 3: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: 2OrbdtWWhFPsOGRqbA/yy/ut8v6cAnT6NvKDEn/3QTw=) 4: lur7LLaprCF9vuUpmH2EDiL7-NI.roa (hash: tuwH5AM3gmMcWOq6gRBrX3IhB6gIQd7IZ9AP/juvN3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:e1:7f:9e:a0:23:de:09:eb:23:b6:19:a1:e2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a Validity Not Before: Dec 11 15:00:52 2025 GMT Not After : Dec 12 15:00:52 2025 GMT Subject: CN=9bd85e48ef569bc5deda8f8644764ed8e720ebb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:11:76:f8:35:ef:d0:7b:dd:19:8c:ab:f1: ab:dc:29:c9:bf:a7:40:9a:d1:1d:43:0f:0c:be:22: 4d:b8:24:0b:47:1f:a2:95:63:09:47:94:36:03:74: ff:7d:fe:22:88:f4:5a:67:02:af:bf:87:5a:50:67: 24:ea:f0:86:a4:29:01:94:42:bb:dc:3e:58:b0:fc: d8:15:71:b6:5e:28:a4:fd:c9:9c:be:c1:e7:32:c0: 98:d2:c3:cd:e3:8f:1b:72:50:ef:3c:d2:7c:c7:e4: 59:88:d9:cd:58:af:fe:c1:2c:20:f1:2a:d8:ca:59: f7:eb:32:f7:eb:cc:eb:76:ae:77:fc:2c:b5:2a:38: 64:53:0f:3d:ab:22:f3:66:2a:cd:d6:0d:37:e7:77: 14:e7:c2:3b:99:38:14:bc:e7:72:7e:b2:0a:51:3f: a3:1d:04:bb:e1:f4:08:cd:2f:30:39:3a:66:b0:f7: fb:5e:6b:9d:d4:68:a1:da:05:bf:53:22:f7:b4:ea: 0b:08:2f:c5:67:6f:e0:96:b8:fd:95:bd:10:e0:bf: 6d:81:71:0b:49:42:b5:58:f5:2d:8a:93:9f:14:98: e1:67:e3:6d:86:02:df:c3:7f:a2:4b:11:5e:1f:74: c1:cd:4f:a2:ab:30:6c:bd:a7:ca:69:71:28:b7:02: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D8:5E:48:EF:56:9B:C5:DE:DA:8F:86:44:76:4E:D8:E7:20:EB:B5 X509v3 Authority Key Identifier: keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:04:1e:c3:2f:be:87:67:97:af:9c:2e:e1:de:2f:a0:38: c7:bc:67:d6:51:6a:89:a7:b4:17:96:6f:fb:a0:80:3f:16:72: 15:a9:e3:20:6d:5a:f4:4e:3e:a1:62:ac:bb:92:e3:e3:53:6f: 69:bb:3c:da:56:b3:c9:27:7b:ee:da:f3:d4:40:04:b8:17:a8: 67:16:66:f4:c9:04:d2:3f:86:d9:ec:41:4a:7c:bc:11:bb:52: 9e:f6:14:bd:71:d1:ca:fa:5b:c0:a5:69:a5:b8:f0:a8:f0:2e: 7b:48:d2:af:56:8c:cf:7e:0e:fa:99:9a:67:82:e7:50:f7:57: bb:32:02:c0:31:17:33:a3:65:0c:1e:0a:97:8c:58:d7:7a:53: 9c:c1:ec:84:dd:c2:d9:a1:53:45:e9:aa:1f:91:fe:c6:0a:8b: fc:cf:21:7b:01:39:2a:42:72:34:9c:72:fb:5e:5f:96:55:c8: ea:ab:93:7e:da:33:ea:a9:1c:65:6a:68:f9:77:ba:56:a5:2e: da:81:09:45:54:2c:36:45:40:26:2b:9b:b8:10:c2:04:c9:ae: 1f:b6:3f:cd:0b:fb:a5:c5:5d:11:a3:9e:55:ea:62:5f:f3:1c: f3:e7:87:c7:8f:d9:ce:11:45:6c:a7:40:f3:88:f6:d6:ee:e5: ce:45:dc:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7eF/nqAj3gnrI7YZoeLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzE1MGY4YzY3MDYzMTIxMDI3MzI4OTU0OTY4ZDA4ZDRj ZjMyOWEwHhcNMjUxMjExMTUwMDUyWhcNMjUxMjEyMTUwMDUyWjAzMTEwLwYDVQQD Eyg5YmQ4NWU0OGVmNTY5YmM1ZGVkYThmODY0NDc2NGVkOGU3MjBlYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSwRdvg179B73RmMq/Gr3CnJv6dA mtEdQw8MviJNuCQLRx+ilWMJR5Q2A3T/ff4iiPRaZwKvv4daUGck6vCGpCkBlEK7 3D5YsPzYFXG2Xiik/cmcvsHnMsCY0sPN448bclDvPNJ8x+RZiNnNWK/+wSwg8SrY yln36zL368zrdq53/Cy1KjhkUw89qyLzZirN1g0353cU58I7mTgUvOdyfrIKUT+j HQS74fQIzS8wOTpmsPf7Xmud1Gih2gW/UyL3tOoLCC/FZ2/glrj9lb0Q4L9tgXEL SUK1WPUtipOfFJjhZ+NthgLfw3+iSxFeH3TBzU+iqzBsvafKaXEotwL10QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJvYXkjvVpvF3tqPhkR2TtjnIOu1MB8GA1UdIwQY MBaAFH4xUPjGcGMSECcyiVSWjQjUzzKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAt OTM1ZTQxOGJkYmU3LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84YmNmZDctZjZkMy00MzJhLWI1ZjAtOTM1ZTQxOGJkYmU3 LzEvZmpGUS1NWndZeElRSnpLSlZKYU5DTlRQTXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhsEHsMv vodnl6+cLuHeL6A4x7xn1lFqiae0F5Zv+6CAPxZyFanjIG1a9E4+oWKsu5Lj41Nv abs82lazySd77trz1EAEuBeoZxZm9MkE0j+G2exBSny8EbtSnvYUvXHRyvpbwKVp pbjwqPAue0jSr1aMz34O+pmaZ4LnUPdXuzICwDEXM6NlDB4Kl4xY13pTnMHshN3C 2aFTRemqH5H+xgqL/M8hewE5KkJyNJxy+15fllXI6quTftoz6qkcZWpo+Xe6VqUu 2oEJRVQsNkVAJiubuBDCBMmuH7Y/zQv7pcVdEaOeVepiX/Mc8+eHx4/ZzhFFbKdA 84j21u7lzkXclw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:22 2025 by rpki-client