This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json) Hash identifier: 8XlBtFBnSux9WNQJb/H+QiNEDxcXtKrv/MSLLCNRCdE= Subject key identifier: D8:23:25:FD:A5:74:D7:2F:16:A6:C0:28:3C:47:6D:35:C4:13:F9:54 Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9 Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9 Certificate serial: 019B59772E17AEA687C7AFFA05050AA478AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft Manifest number: 0726 Signing time: Fri 26 Dec 2025 07:02:21 +0000 Manifest this update: Fri 26 Dec 2025 07:02:21 +0000 Manifest next update: Sat 27 Dec 2025 07:02:21 +0000 Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: isqILaSJk61a0QR9isHS0Wj4sDVOVo3K3m9XSiB04as=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:2e:17:ae:a6:87:c7:af:fa:05:05:0a:a4:78:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9 Validity Not Before: Dec 26 07:02:21 2025 GMT Not After : Dec 27 07:02:21 2025 GMT Subject: CN=d82325fda574d72f16a6c0283c476d35c413f954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:d0:5e:3f:e8:1b:c4:b4:54:76:24:76:ae: 37:c3:4c:09:39:33:aa:a3:60:53:bf:02:28:d7:02: 74:10:ef:b5:22:d5:d9:b7:15:67:f1:21:35:07:8e: 75:95:47:e2:c2:8e:91:4e:3e:bc:fc:d6:01:8d:a3: 25:12:74:45:4c:10:61:f5:e1:a7:77:1e:62:3a:67: b1:bb:c5:1f:44:1e:04:5a:08:9d:01:bf:67:cc:bd: e8:d4:44:07:73:c6:af:e7:65:86:78:34:ce:04:28: e9:56:35:b7:fc:5f:d0:cc:06:20:9d:64:ec:e0:ba: 4b:6e:d7:c7:9d:c1:b8:45:45:6b:be:91:9c:ab:c8: 35:df:b3:dc:a6:51:2c:c3:c6:72:fa:f5:f3:ed:70: 0a:0e:40:31:0e:86:61:bb:57:b5:25:05:22:c6:da: eb:bc:da:10:6d:e3:73:7a:be:1e:1c:6b:06:b1:3c: c8:57:07:ae:20:e2:59:94:42:3b:eb:80:46:25:ab: 9e:1e:ef:7c:ef:f5:71:73:44:af:a2:bb:f2:60:10: 0d:34:e7:31:7e:0b:9c:4f:aa:e2:17:0d:4c:c5:b7: 97:d4:91:c7:7b:28:9a:1b:ea:94:d0:9e:42:bc:f7: ea:b4:33:57:13:1a:8a:b7:da:d7:f9:93:04:26:f0: 6d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:23:25:FD:A5:74:D7:2F:16:A6:C0:28:3C:47:6D:35:C4:13:F9:54 X509v3 Authority Key Identifier: keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:6e:62:f6:de:27:a6:39:fb:0b:f4:f0:f4:55:2c:1f:50: 13:e8:13:cf:a7:70:08:ee:76:91:50:3e:48:a1:81:82:a4:75: 3e:59:dc:df:99:f9:93:92:77:55:ef:3b:70:92:93:01:69:c0: a0:04:59:0d:05:76:f5:04:bb:cf:15:2a:9c:65:8d:ec:54:fb: f4:a4:2c:8e:8c:c5:e4:f8:c0:7e:29:29:21:81:f3:f0:11:5e: dd:7b:c8:cc:43:b8:fe:3a:93:d7:18:ba:5c:cb:bb:8c:11:52: 9a:bc:c9:2a:70:0a:91:c2:80:16:63:dd:51:a0:c6:52:c8:23: 49:d0:81:93:21:8a:91:b6:39:1e:16:2e:a8:89:b6:8c:ec:33: 1f:7c:51:ac:3d:ea:2a:3d:30:ce:14:51:1a:ee:13:f0:fc:fe: 1c:15:54:b4:c9:8f:74:4d:f9:73:4b:3b:e0:1b:d1:c6:d8:f0: e5:c2:94:1b:0f:f9:68:a1:e1:67:a6:3f:85:7a:3a:d2:45:8a: 8e:6d:85:46:02:fa:ca:74:a1:1d:16:97:ef:ff:42:09:3b:ea: 85:10:76:4e:2e:b2:f7:2b:83:3d:5c:ef:42:27:38:93:bd:54: 9d:37:9c:64:ea:c3:2f:29:14:bf:35:ac:a5:4a:e3:63:2c:8b: 13:bb:10:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdy4XrqaHx6/6BQUKpHiuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODIzMDI4YWVmZmM1OTlhZWZmYTVkZTViOTBjY2FkMzM0 OTdkYjkwHhcNMjUxMjI2MDcwMjIxWhcNMjUxMjI3MDcwMjIxWjAzMTEwLwYDVQQD EyhkODIzMjVmZGE1NzRkNzJmMTZhNmMwMjgzYzQ3NmQzNWM0MTNmOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI3QXj/oG8S0VHYkdq43w0wJOTOq o2BTvwIo1wJ0EO+1ItXZtxVn8SE1B451lUfiwo6RTj68/NYBjaMlEnRFTBBh9eGn dx5iOmexu8UfRB4EWgidAb9nzL3o1EQHc8av52WGeDTOBCjpVjW3/F/QzAYgnWTs 4LpLbtfHncG4RUVrvpGcq8g137PcplEsw8Zy+vXz7XAKDkAxDoZhu1e1JQUixtrr vNoQbeNzer4eHGsGsTzIVweuIOJZlEI764BGJaueHu987/Vxc0SvorvyYBANNOcx fgucT6riFw1MxbeX1JHHeyiaG+qU0J5CvPfqtDNXExqKt9rX+ZMEJvBthQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgjJf2ldNcvFqbAKDxHbTXEE/lUMB8GA1UdIwQY MBaAFHyCMCiu/8WZrv+l3luQzK0zSX25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMt Njg2OTFkYWJiZGYzLzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMtNjg2OTFkYWJiZGYz LzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALd9uYvbe J6Y5+wv08PRVLB9QE+gTz6dwCO52kVA+SKGBgqR1Plnc35n5k5J3Ve87cJKTAWnA oARZDQV29QS7zxUqnGWN7FT79KQsjozF5PjAfikpIYHz8BFe3XvIzEO4/jqT1xi6 XMu7jBFSmrzJKnAKkcKAFmPdUaDGUsgjSdCBkyGKkbY5HhYuqIm2jOwzH3xRrD3q Kj0wzhRRGu4T8Pz+HBVUtMmPdE35c0s74BvRxtjw5cKUGw/5aKHhZ6Y/hXo60kWK jm2FRgL6ynShHRaX7/9CCTvqhRB2Ti6y9yuDPVzvQic4k71UnTecZOrDLykUvzWs pUrjYyyLE7sQaw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:04 2025 by rpki-client