This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft File: fAfb3HHxK9p7t_qAytwu2aL-7-s.mft (raw, json) Hash identifier: ZLsTv7tx0p12AB6gO9w23bkU4XI6yBdM7O3/T++zwtY= Subject key identifier: FD:FB:B6:FC:1B:D7:54:28:7B:B9:02:A2:9F:70:DF:3D:16:56:8D:14 Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Certificate serial: 019B0DB6A616D957D876011DB68CC42A8347 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 14:00:32 +0000 Manifest this update: Thu 11 Dec 2025 14:00:32 +0000 Manifest next update: Fri 12 Dec 2025 14:00:32 +0000 Files and hashes: 1: fAfb3HHxK9p7t_qAytwu2aL-7-s.crl (hash: A56FX1kkZh6rgWuHOigGXMMoV87We9F1kS/p1OCZdZY=) 2: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (hash: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:a6:16:d9:57:d8:76:01:1d:b6:8c:c4:2a:83:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb Validity Not Before: Dec 11 14:00:32 2025 GMT Not After : Dec 12 14:00:32 2025 GMT Subject: CN=fdfbb6fc1bd754287bb902a29f70df3d16568d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:b3:8d:87:76:92:ba:2c:73:86:cd:79:96: 69:39:e3:6a:27:53:74:c2:d4:0b:cb:83:05:5e:22: c2:88:ad:4f:40:e9:50:f7:fb:eb:91:75:13:7a:2c: c6:29:80:7a:be:4c:51:67:cd:73:6f:cb:5e:a2:d8: fa:91:9f:97:4b:90:ee:41:a1:86:cd:17:40:8d:90: 7c:af:43:80:f3:e0:2a:cc:25:ee:94:ea:d3:e6:db: 65:a4:db:c6:b9:d0:73:16:3e:cd:8c:35:c1:c3:37: ca:e8:d1:66:df:80:d0:62:9c:a9:34:db:5c:18:7a: ed:8e:73:78:5d:de:58:1e:2f:73:23:9d:bb:de:b1: 6e:8b:2c:eb:fc:85:30:53:2c:13:8e:e3:c5:fa:07: fe:0e:e6:61:de:97:5c:f4:5c:c8:b6:bd:b1:08:e0: e6:a2:6f:29:11:5b:d8:d9:08:56:31:70:6e:91:c4: 74:26:5e:c8:2f:2e:b3:82:57:85:ce:65:aa:58:a0: 0d:b6:67:d7:6d:c7:57:fe:0e:78:bb:92:21:54:26: 08:2d:d1:8d:d7:e1:5b:36:0f:e5:b2:89:58:14:ed: b4:86:70:0f:d5:7c:1b:70:5f:7e:7e:68:49:63:7a: 1d:48:89:39:03:be:08:75:ba:85:ef:c6:36:eb:86: 34:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FB:B6:FC:1B:D7:54:28:7B:B9:02:A2:9F:70:DF:3D:16:56:8D:14 X509v3 Authority Key Identifier: keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:fc:10:4b:a1:79:6b:6b:80:a3:7d:e5:41:38:04:15:5e:17: 4b:09:f6:ab:38:52:91:8e:29:ed:ab:6a:33:8c:aa:6a:69:74: 5d:7c:fe:53:0b:4e:e3:45:44:f6:44:a2:3e:e0:07:d0:78:f3: 75:a6:0c:87:7d:e5:a3:af:80:fb:d0:39:77:fb:b2:95:4b:85: d8:3c:3b:b4:f8:e4:e9:5d:b1:dc:da:30:68:b1:e6:67:b4:d6: 91:04:7f:bb:ce:dd:01:33:31:66:b2:a1:19:54:16:34:c2:61: 35:84:c7:0a:37:80:72:d1:86:1b:c8:89:3b:4c:6c:85:33:bc: 25:ba:4b:eb:e4:c2:23:26:b4:66:3f:54:7a:50:36:ef:fe:d6: 63:b8:17:b0:3a:08:ac:fc:ea:e9:eb:64:4a:a4:a1:55:37:d9: c9:4c:54:8f:0e:07:ce:98:70:d7:49:4d:8d:23:8e:97:91:f1: 65:5d:00:3f:0c:a0:98:53:67:e4:9e:5a:87:c4:d6:0c:99:b1: 6d:68:ca:68:e6:85:df:af:d2:cd:ab:6e:03:e9:96:73:2e:98: 6a:19:da:82:3f:8c:64:5e:b2:0d:6c:8a:f3:1b:b3:61:be:08: 09:5c:90:30:52:88:23:55:58:17:e7:71:0e:9a:f1:46:8d:0d: 45:9c:3e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtqYW2VfYdgEdtozEKoNHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDdkYmRjNzFmMTJiZGE3YmI3ZmE4MGNhZGMyZWQ5YTJm ZWVmZWIwHhcNMjUxMjExMTQwMDMyWhcNMjUxMjEyMTQwMDMyWjAzMTEwLwYDVQQD EyhmZGZiYjZmYzFiZDc1NDI4N2JiOTAyYTI5ZjcwZGYzZDE2NTY4ZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDezjYd2krosc4bNeZZpOeNqJ1N0 wtQLy4MFXiLCiK1PQOlQ9/vrkXUTeizGKYB6vkxRZ81zb8teotj6kZ+XS5DuQaGG zRdAjZB8r0OA8+AqzCXulOrT5ttlpNvGudBzFj7NjDXBwzfK6NFm34DQYpypNNtc GHrtjnN4Xd5YHi9zI5273rFuiyzr/IUwUywTjuPF+gf+DuZh3pdc9FzItr2xCODm om8pEVvY2QhWMXBukcR0Jl7ILy6zgleFzmWqWKANtmfXbcdX/g54u5IhVCYILdGN 1+FbNg/lsolYFO20hnAP1XwbcF9+fmhJY3odSIk5A74IdbqF78Y264Y0YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP37tvwb11Qoe7kCop9w3z0WVo0UMB8GA1UdIwQY MBaAFHwH29xx8Svae7f6gMrcLtmi/u/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUt ODk1YjBkM2M0YjQ1LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xOTY1MGQtMmI4Ny00OTExLWFlMWUtODk1YjBkM2M0YjQ1 LzEvZkFmYjNISHhLOXA3dF9xQXl0d3UyYUwtNy1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT/wQS6F5 a2uAo33lQTgEFV4XSwn2qzhSkY4p7atqM4yqaml0XXz+UwtO40VE9kSiPuAH0Hjz daYMh33lo6+A+9A5d/uylUuF2Dw7tPjk6V2x3NowaLHmZ7TWkQR/u87dATMxZrKh GVQWNMJhNYTHCjeActGGG8iJO0xshTO8JbpL6+TCIya0Zj9UelA27/7WY7gXsDoI rPzq6etkSqShVTfZyUxUjw4Hzphw10lNjSOOl5HxZV0APwygmFNn5J5ah8TWDJmx bWjKaOaF36/SzatuA+mWcy6Yahnagj+MZF6yDWyK8xuzYb4ICVyQMFKII1VYF+dx DprxRo0NRZw+VQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:22:56 2025 by rpki-client