This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft File: fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft (raw, json) Hash identifier: Cog4N/tPmuAO1dMvBzUlEWv2GjF8lx03Pr+XchcQW7U= Subject key identifier: D7:53:2C:3C:DF:5F:04:E3:C6:22:41:00:C8:D2:E4:EC:31:74:60:22 Authority key identifier: 7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF Certificate issuer: /CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Certificate serial: 019B42B70441C6D0B3364AFABE9925F85C01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft Manifest number: 0FE5 Signing time: Sun 21 Dec 2025 21:00:48 +0000 Manifest this update: Sun 21 Dec 2025 21:00:48 +0000 Manifest next update: Mon 22 Dec 2025 21:00:48 +0000 Files and hashes: 1: fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl (hash: /w52QTm0WEKNmFQQFSwvNBDTEMIFD6+p8O83fpRRqoc=) 2: r6JJsn0eajhp7sOEpygQyvJsZMU.roa (hash: cxRi0/gis8Ga5ROT0QtFOFL60z01cmboldkWqbkptMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:04:41:c6:d0:b3:36:4a:fa:be:99:25:f8:5c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3cca3419c8ab15b3ad4ed74438e53f4fb610df Validity Not Before: Dec 21 21:00:48 2025 GMT Not After : Dec 22 21:00:48 2025 GMT Subject: CN=d7532c3cdf5f04e3c6224100c8d2e4ec31746022 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:11:84:bd:fa:1c:04:09:aa:17:89:67:7d:44: 07:f8:92:29:f4:39:62:a5:1d:fd:85:6c:43:13:a9: f8:25:e4:5f:7a:cf:63:d8:2f:e1:d0:06:09:b6:d8: 07:80:36:3c:d0:a0:49:20:20:a7:8a:1a:83:e4:74: 7d:5d:9d:97:e6:01:e5:e7:5e:e3:cd:01:16:0a:e9: 69:7d:79:a1:2a:8d:c1:9f:74:49:9b:d3:8b:2e:9d: ef:67:ec:3a:eb:7f:39:95:94:38:cc:f5:0d:39:b9: ad:83:1f:1e:0a:13:9f:6a:09:bf:f8:ae:a1:0e:9f: 68:d4:c2:1f:db:00:b7:2b:c9:1f:df:ae:eb:9a:2d: 90:3f:c6:13:0f:a8:03:19:ee:a1:5f:aa:f2:9c:3f: 7e:54:02:d9:d3:cc:96:d8:f9:b8:26:b2:98:4f:82: d9:c5:9d:72:bd:31:88:03:b0:0e:95:06:dd:a4:c5: 4a:41:b8:d5:95:bc:5e:b4:a7:0d:2c:ae:19:df:a8: 87:24:bf:77:3a:94:60:21:ef:52:4e:32:61:c0:c5: 18:e2:4f:b4:0b:9f:db:b4:0b:89:eb:69:a3:0c:3a: aa:b1:b5:49:33:26:a8:b3:06:39:f5:d4:2f:db:e7: 34:7e:b3:c0:71:16:0d:8e:b2:ad:13:ee:f1:dd:aa: ea:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:53:2C:3C:DF:5F:04:E3:C6:22:41:00:C8:D2:E4:EC:31:74:60:22 X509v3 Authority Key Identifier: keyid:7C:3C:CA:34:19:C8:AB:15:B3:AD:4E:D7:44:38:E5:3F:4F:B6:10:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDzKNBnIqxWzrU7XRDjlP0-2EN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/48f2ec-d3a7-4354-93ff-0f5c959aca0b/1/fDzKNBnIqxWzrU7XRDjlP0-2EN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:ff:17:ad:35:b1:ca:a5:96:f2:18:bb:66:6c:b0:a4:9d:69: eb:ad:01:16:c9:ce:21:d6:0b:f5:6a:3d:8e:7c:f6:e5:28:20: 7e:dd:46:15:05:f3:8b:e6:73:3e:55:1b:d5:a7:2a:e8:9a:2f: 70:07:54:38:22:d0:68:96:06:07:e8:72:72:ef:08:a0:28:c1: 02:d8:25:d9:ed:2b:70:c7:5e:a1:3d:3e:8d:ae:28:6c:f1:98: 5b:b7:2a:fe:b6:54:a2:7b:32:85:69:fa:fc:65:dd:44:57:fd: c5:20:a7:40:22:2c:9a:17:9f:3f:b6:35:97:63:a5:5f:79:b9: 0b:d1:d2:d1:7c:f9:fc:e0:4e:df:53:8d:a2:a6:ab:8d:4c:47: 12:36:f8:d0:6e:39:fa:02:b3:b6:e3:57:b2:cd:68:d2:43:77: f8:66:19:a0:e5:8f:4a:dd:4e:ab:36:b0:07:a8:ff:8b:1b:60: 23:e2:8e:45:44:9d:f4:34:9f:97:3c:41:a9:1b:ae:e3:be:a2: ec:6d:e2:28:b2:54:12:86:a5:0b:ee:cc:68:9e:9c:ce:b2:de: ca:6a:c5:89:f4:26:0d:88:81:16:e0:f7:0f:85:6d:c0:9f:0f: ed:a8:ec:6c:6a:72:73:a1:b2:c9:14:ff:f9:f7:ff:2d:26:a5: c4:a6:85:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtwRBxtCzNkr6vpkl+FwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2NjYTM0MTljOGFiMTViM2FkNGVkNzQ0MzhlNTNmNGZi NjEwZGYwHhcNMjUxMjIxMjEwMDQ4WhcNMjUxMjIyMjEwMDQ4WjAzMTEwLwYDVQQD EyhkNzUzMmMzY2RmNWYwNGUzYzYyMjQxMDBjOGQyZTRlYzMxNzQ2MDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBGEvfocBAmqF4lnfUQH+JIp9Dli pR39hWxDE6n4JeRfes9j2C/h0AYJttgHgDY80KBJICCnihqD5HR9XZ2X5gHl517j zQEWCulpfXmhKo3Bn3RJm9OLLp3vZ+w66385lZQ4zPUNObmtgx8eChOfagm/+K6h Dp9o1MIf2wC3K8kf367rmi2QP8YTD6gDGe6hX6rynD9+VALZ08yW2Pm4JrKYT4LZ xZ1yvTGIA7AOlQbdpMVKQbjVlbxetKcNLK4Z36iHJL93OpRgIe9STjJhwMUY4k+0 C5/btAuJ62mjDDqqsbVJMyaoswY59dQv2+c0frPAcRYNjrKtE+7x3arqMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdTLDzfXwTjxiJBAMjS5OwxdGAiMB8GA1UdIwQY MBaAFHw8yjQZyKsVs61O10Q45T9PthDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYt MGY1Yzk1OWFjYTBiLzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80OGYyZWMtZDNhNy00MzU0LTkzZmYtMGY1Yzk1OWFjYTBi LzEvZkR6S05CbklxeFd6clU3WFJEamxQMC0yRU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArP8XrTWx yqWW8hi7ZmywpJ1p660BFsnOIdYL9Wo9jnz25Sggft1GFQXzi+ZzPlUb1acq6Jov cAdUOCLQaJYGB+hycu8IoCjBAtgl2e0rcMdeoT0+ja4obPGYW7cq/rZUonsyhWn6 /GXdRFf9xSCnQCIsmhefP7Y1l2OlX3m5C9HS0Xz5/OBO31ONoqarjUxHEjb40G45 +gKztuNXss1o0kN3+GYZoOWPSt1OqzawB6j/ixtgI+KORUSd9DSflzxBqRuu476i 7G3iKLJUEoalC+7MaJ6czrLeymrFifQmDYiBFuD3D4VtwJ8P7ajsbGpyc6GyyRT/ +ff/LSalxKaFJw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:57 2025 by rpki-client