This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft File: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json) Hash identifier: LZdjjMYp7BExUTbmhZU/xmIn9NxEGBHPsqNcgQ7hkFQ= Subject key identifier: 61:EA:31:69:40:BA:B0:C0:10:71:2B:C4:82:D0:7C:77:10:84:F8:2A Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 Certificate issuer: /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Certificate serial: 019B5A515B6DC9C2FE3BF419A7027FE72E53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft Manifest number: 065F Signing time: Fri 26 Dec 2025 11:00:39 +0000 Manifest this update: Fri 26 Dec 2025 11:00:39 +0000 Manifest next update: Sat 27 Dec 2025 11:00:39 +0000 Files and hashes: 1: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: 1gdgKky8aUTfJP15f52WaWFs3/RylU0bpZbXGU38lXA=) 2: mYkTlXqpG_46xscAOO-Sp6Bp4FA.roa (hash: F4Jtc5+FUEqcLwMhPjxlPH6jWlgxGrbFa+YLXHGjjaE=) 3: tXhAc_5lQ9z8se-7mjM6cOpg6e4.roa (hash: 26ICYZJOvq605v0CSl1cezfNjCXPU7AckP1ImmTpFUQ=) 4: u7uQ2Dm3QD7l-Xxryd9G8exq5eQ.roa (hash: z1DWJwaHbuR/Qct83OIrMO/3C45DlWrhtr2MVeCX/hs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:5b:6d:c9:c2:fe:3b:f4:19:a7:02:7f:e7:2e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34 Validity Not Before: Dec 26 11:00:39 2025 GMT Not After : Dec 27 11:00:39 2025 GMT Subject: CN=61ea316940bab0c010712bc482d07c771084f82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ed:c8:24:df:73:61:c8:e0:db:ec:2a:a0:5d: ce:0b:f0:20:cf:74:13:ee:6e:e2:f3:fe:15:df:f9: 1c:0b:46:a4:f6:17:29:a1:58:ab:6a:36:0a:e1:56: 76:e5:57:52:22:da:79:34:48:ac:8a:4e:87:df:ed: 93:9b:ea:66:09:ca:cc:02:cc:6c:90:06:2e:ab:9c: 82:b3:56:7e:23:70:c5:3a:87:22:62:d5:53:f0:31: 28:0f:1c:c1:7b:d5:77:86:7e:80:47:ca:89:a4:de: cb:4e:20:3c:e7:8a:f9:28:1f:0f:8a:e2:35:a1:18: c8:4c:29:c4:39:b3:ba:c5:66:ab:45:08:b3:34:02: 3c:66:fb:4f:0e:b9:fc:74:3b:fa:48:fe:93:67:99: 77:93:1f:f0:4c:d9:15:70:c3:8e:86:76:fc:4e:9d: 3a:16:06:ee:d2:08:d0:88:bb:db:7d:5f:ec:4c:d9: c0:12:c9:be:05:b2:40:87:8d:4b:a9:96:36:d5:69: c4:99:43:f4:48:08:39:78:30:75:9a:0a:57:86:ba: e0:9b:b1:0e:65:93:55:ce:bf:53:03:b1:91:c9:36: 5a:af:8c:e8:1f:93:fc:d1:fc:85:54:de:eb:d4:22: cb:08:01:1a:36:69:e0:32:f7:b4:ad:07:66:06:66: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EA:31:69:40:BA:B0:C0:10:71:2B:C4:82:D0:7C:77:10:84:F8:2A X509v3 Authority Key Identifier: keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:8a:c6:58:02:8f:b9:91:97:58:9a:5b:31:b4:e2:e3:97:07: cf:4b:ff:03:8a:89:01:a1:c5:6b:39:83:bb:96:88:bf:79:92: 47:d6:78:9e:db:e8:31:f3:d3:a2:ac:c9:12:46:2f:c3:ab:8b: fa:08:22:3c:3a:af:d7:47:f6:c7:79:68:7b:70:47:79:ed:ab: 73:35:93:39:1c:34:0d:00:38:ed:89:a0:b0:db:e9:0e:13:3c: 71:aa:99:06:63:1f:63:d5:fe:fa:59:64:91:19:26:c1:0b:e0: 48:21:85:74:92:c5:a0:f6:21:09:d4:38:81:83:2f:94:1e:8c: 58:25:0d:ad:d3:20:e1:2f:66:2f:e5:0e:21:14:27:55:a3:c8: 63:5c:fd:20:54:85:a2:70:74:85:f9:61:48:93:ab:71:86:1c: 67:16:5d:90:13:d0:33:ec:99:53:35:c3:15:91:7e:4d:57:84: a3:be:4f:6d:d4:4b:ae:83:db:ae:5e:19:db:38:77:8f:4a:00: a7:b0:c6:6c:3c:12:6b:4f:4b:6a:70:6b:f7:0f:3a:98:7d:09: 64:16:4f:7f:a6:1a:1f:63:7f:56:d6:f6:6c:21:73:fa:f6:0d: 21:5c:6b:c1:78:a1:5b:8a:e0:0d:9e:2e:13:8e:bf:12:9c:b3: 0f:6f:ef:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUVttycL+O/QZpwJ/5y5TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2M3ZDQ4ODg3ZTJmMDg2NWQ3MDFjZGM2ZTBiYjdkZWVk NWRiMzQwHhcNMjUxMjI2MTEwMDM5WhcNMjUxMjI3MTEwMDM5WjAzMTEwLwYDVQQD Eyg2MWVhMzE2OTQwYmFiMGMwMTA3MTJiYzQ4MmQwN2M3NzEwODRmODJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+3IJN9zYcjg2+wqoF3OC/Agz3QT 7m7i8/4V3/kcC0ak9hcpoVirajYK4VZ25VdSItp5NEisik6H3+2Tm+pmCcrMAsxs kAYuq5yCs1Z+I3DFOociYtVT8DEoDxzBe9V3hn6AR8qJpN7LTiA854r5KB8PiuI1 oRjITCnEObO6xWarRQizNAI8ZvtPDrn8dDv6SP6TZ5l3kx/wTNkVcMOOhnb8Tp06 Fgbu0gjQiLvbfV/sTNnAEsm+BbJAh41LqZY21WnEmUP0SAg5eDB1mgpXhrrgm7EO ZZNVzr9TA7GRyTZar4zoH5P80fyFVN7r1CLLCAEaNmngMve0rQdmBmZNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHqMWlAurDAEHErxILQfHcQhPgqMB8GA1UdIwQY MBaAFHx8fUiIfi8IZdcBzcbgu33u1ds0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYt ZjdhYmVmM2M4YTJiLzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hYzExY2EtNzgxNy00ZTc1LThlZmYtZjdhYmVmM2M4YTJi LzEvZkh4OVNJaC1Md2hsMXdITnh1QzdmZTdWMnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIrGWAKP uZGXWJpbMbTi45cHz0v/A4qJAaHFazmDu5aIv3mSR9Z4ntvoMfPToqzJEkYvw6uL +ggiPDqv10f2x3loe3BHee2rczWTORw0DQA47YmgsNvpDhM8caqZBmMfY9X++llk kRkmwQvgSCGFdJLFoPYhCdQ4gYMvlB6MWCUNrdMg4S9mL+UOIRQnVaPIY1z9IFSF onB0hflhSJOrcYYcZxZdkBPQM+yZUzXDFZF+TVeEo75PbdRLroPbrl4Z2zh3j0oA p7DGbDwSa09LanBr9w86mH0JZBZPf6YaH2N/Vtb2bCFz+vYNIVxrwXihW4rgDZ4u E46/EpyzD2/vFw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:17 2025 by rpki-client