This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json) Hash identifier: RlfIlH6WaXgGI4iZX+zR+2eZ3gJBb0XiN0pQLhWv+Mc= Subject key identifier: 0F:4A:44:03:C5:FC:B0:64:81:A4:26:29:F9:72:3E:BE:6E:95:BE:07 Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Certificate serial: 019B0746C70C3E073E8B9B51CC020FE4B33F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft Manifest number: 176C Signing time: Wed 10 Dec 2025 08:00:37 +0000 Manifest this update: Wed 10 Dec 2025 08:00:37 +0000 Manifest next update: Thu 11 Dec 2025 08:00:37 +0000 Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=) 2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=) 3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: gz3MtiNEbOKnrKP0nt2aX9RZzILg8siFhDNWt+f2O3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:46:c7:0c:3e:07:3e:8b:9b:51:cc:02:0f:e4:b3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Validity Not Before: Dec 10 08:00:37 2025 GMT Not After : Dec 11 08:00:37 2025 GMT Subject: CN=0f4a4403c5fcb06481a42629f9723ebe6e95be07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:34:a1:2a:80:ab:e3:3b:e7:4e:c6:c4:00: 04:72:73:71:20:ef:12:ca:5a:77:36:ee:44:1b:79: 2b:f5:03:07:bb:a8:4a:66:87:3b:1b:83:14:32:5d: b9:4e:21:c0:03:42:38:55:37:33:d4:a3:52:4d:9b: 97:60:4e:61:58:6f:89:2f:99:99:5b:b4:98:3d:f6: b6:3b:8b:b1:94:c2:45:1d:a3:43:99:dd:55:94:a3: 99:cb:a4:e9:60:32:54:50:70:62:c6:93:b5:97:55: 3e:54:69:c6:da:df:a0:90:cc:51:d8:6e:f7:6e:8d: 7c:ba:ce:d6:21:34:96:d2:e0:c0:d2:e8:01:0a:33: 63:fd:56:32:e4:bf:33:dc:67:5f:00:1e:a9:77:a8: 8b:b3:d9:d5:3e:55:f0:9a:46:5b:4b:8b:09:4e:08: 4a:8d:d6:3b:0d:0a:83:d2:e7:6b:e6:49:5e:23:ea: d1:a1:84:91:08:8f:f4:39:95:8f:fb:ca:19:16:68: d9:1a:92:18:88:98:28:2d:56:8f:80:21:90:1c:7d: 84:cc:18:95:c6:3f:6b:d7:7f:11:4d:18:ab:80:65: 9c:b2:db:36:e8:a9:07:4f:09:3e:03:1d:aa:ee:76: 9f:2d:f1:e3:92:37:7c:4f:f1:0d:3d:4d:24:f1:88: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:4A:44:03:C5:FC:B0:64:81:A4:26:29:F9:72:3E:BE:6E:95:BE:07 X509v3 Authority Key Identifier: keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a0:96:77:ff:2d:3c:10:12:85:bb:61:d3:07:e0:d5:f8:5e: 39:19:17:05:0a:fd:cd:d9:0b:fe:f0:00:14:e0:a7:8a:26:0a: e6:fc:87:ed:b5:da:c2:c8:88:79:fe:04:ae:d3:69:4c:a1:e6: 95:44:3d:83:09:c3:71:51:e0:e6:ff:a2:0d:d4:68:21:32:53: f3:a7:7b:54:5f:b6:40:42:4b:26:5f:0a:14:4a:5b:07:8c:80: 12:ae:54:c1:0b:0d:86:a6:d1:43:90:0d:a5:a7:a8:cd:dc:37: d6:d6:a1:c0:a8:aa:d9:9f:4c:d6:68:80:9d:f1:3a:f5:e4:d6: 90:e9:27:17:ed:1c:6a:ce:00:0f:51:bb:bd:70:d3:b0:e2:5a: a7:af:4f:d1:58:54:66:7f:9a:e3:64:0e:1d:b9:90:7e:ce:a6: f7:db:49:9b:da:58:3e:24:47:bc:7b:9e:53:b2:5f:b3:02:9e: a9:bb:21:ff:86:3f:aa:ef:4d:47:f7:9b:ee:e8:27:08:5b:9c: 3e:de:e6:6d:f0:fb:41:36:8d:7e:e9:57:70:33:ef:48:0f:f9: 22:43:8c:ff:5a:69:3a:ad:91:6d:7f:77:64:c0:2a:56:74:d1: 35:18:79:ff:30:57:ea:06:7e:30:01:3e:28:b4:c4:1e:16:0c: 70:5e:c1:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHRscMPgc+i5tRzAIP5LM/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi NjNlZTYwHhcNMjUxMjEwMDgwMDM3WhcNMjUxMjExMDgwMDM3WjAzMTEwLwYDVQQD EygwZjRhNDQwM2M1ZmNiMDY0ODFhNDI2MjlmOTcyM2ViZTZlOTViZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq180oSqAq+M7507GxAAEcnNxIO8S ylp3Nu5EG3kr9QMHu6hKZoc7G4MUMl25TiHAA0I4VTcz1KNSTZuXYE5hWG+JL5mZ W7SYPfa2O4uxlMJFHaNDmd1VlKOZy6TpYDJUUHBixpO1l1U+VGnG2t+gkMxR2G73 bo18us7WITSW0uDA0ugBCjNj/VYy5L8z3GdfAB6pd6iLs9nVPlXwmkZbS4sJTghK jdY7DQqD0udr5kleI+rRoYSRCI/0OZWP+8oZFmjZGpIYiJgoLVaPgCGQHH2EzBiV xj9r138RTRirgGWcsts26KkHTwk+Ax2q7nafLfHjkjd8T/ENPU0k8YgDYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9KRAPF/LBkgaQmKflyPr5ulb4HMB8GA1UdIwQY MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt YTU1NjhlMGZiYjZkLzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqCWd/8t PBAShbth0wfg1fheORkXBQr9zdkL/vAAFOCniiYK5vyH7bXawsiIef4ErtNpTKHm lUQ9gwnDcVHg5v+iDdRoITJT86d7VF+2QEJLJl8KFEpbB4yAEq5UwQsNhqbRQ5AN paeozdw31tahwKiq2Z9M1miAnfE69eTWkOknF+0cas4AD1G7vXDTsOJap69P0VhU Zn+a42QOHbmQfs6m99tJm9pYPiRHvHueU7JfswKeqbsh/4Y/qu9NR/eb7ugnCFuc Pt7mbfD7QTaNfulXcDPvSA/5IkOM/1ppOq2RbX93ZMAqVnTRNRh5/zBX6gZ+MAE+ KLTEHhYMcF7BLA== -----END CERTIFICATE-----Generated at Wed Dec 10 12:50:18 2025 by rpki-client