This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json) Hash identifier: w5AOBGn8meFWswdovnDNPM7QscXkz/zAeLuxFSY3Onc= Subject key identifier: D9:74:5E:E2:05:41:55:B6:D0:4D:5A:80:63:89:7B:C0:9E:FD:93:8D Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Certificate serial: 019B33B1CAFDBB1403C1E22CF13FC6216F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft Manifest number: 0BF9 Signing time: Thu 18 Dec 2025 23:00:48 +0000 Manifest this update: Thu 18 Dec 2025 23:00:48 +0000 Manifest next update: Fri 19 Dec 2025 23:00:48 +0000 Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: cO42jyOfcyLpn9n5al5mpXjTJcBGhJIQWeefdfItBIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:ca:fd:bb:14:03:c1:e2:2c:f1:3f:c6:21:6f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Validity Not Before: Dec 18 23:00:48 2025 GMT Not After : Dec 19 23:00:48 2025 GMT Subject: CN=d9745ee2054155b6d04d5a8063897bc09efd938d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2d:fd:92:c9:b6:f0:a4:1a:35:d6:bf:1b:19: 99:a5:43:12:cf:e2:14:47:e9:3b:3b:6e:59:60:49: a0:99:b7:0b:db:15:85:d4:46:e6:87:fc:18:63:9a: 60:4b:2c:3f:56:aa:13:d7:57:85:d7:a6:c9:1e:ca: 54:67:bd:04:2d:e5:eb:6d:b9:a8:8d:19:01:d9:47: a3:36:84:0c:89:27:63:cd:e3:4b:f5:a7:ee:d8:3d: 15:e2:b6:98:1d:69:d6:38:92:fa:d3:96:cc:b3:d6: a7:80:66:7c:2e:55:39:c1:65:80:c1:01:e4:2a:a8: 24:83:92:a2:12:28:d1:10:9a:38:c0:4b:d8:ad:b5: 54:b4:f9:86:4e:f3:3d:fe:bb:96:4c:72:77:09:49: 48:62:6f:c4:f1:d7:8c:90:36:21:f5:93:4b:df:c0: 6f:0d:73:cf:f5:14:2b:38:b5:10:b4:b7:eb:e8:f2: 47:d1:5c:80:53:f2:13:4a:be:87:01:ce:bb:a2:2d: 4d:32:41:28:f1:02:d2:fe:b4:a4:a6:81:91:e0:b3: 07:f8:08:be:29:5a:26:69:33:33:91:4f:a9:dd:c0: fe:c4:4a:ad:80:56:bc:b9:46:9d:73:9f:a1:dd:c0: 2b:45:af:d7:6c:87:5c:c0:7b:5b:8f:fa:65:cb:69: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:5E:E2:05:41:55:B6:D0:4D:5A:80:63:89:7B:C0:9E:FD:93:8D X509v3 Authority Key Identifier: keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0d:05:a8:43:20:97:c5:4b:e8:48:4d:0b:cb:25:63:14:3b: 7e:c1:fb:86:06:61:fa:cb:a5:02:0a:fe:d3:b0:f2:23:31:09: 5b:e3:66:3d:68:c6:47:1e:6f:ac:64:06:5e:e6:e7:7c:70:d5: b1:bb:9d:74:d2:0a:15:3f:9b:b8:ef:bf:8a:d4:41:04:18:57: 29:02:73:15:6e:4e:19:49:9e:55:2f:2e:d1:b3:9c:d8:3e:77: 05:75:9f:6e:a1:59:a9:2f:1b:55:b3:b1:99:0b:c9:cf:f1:32: 77:f6:34:d4:75:3c:27:f1:fa:98:c1:ac:ec:94:75:39:bd:55: c0:b1:1a:2f:cb:9c:8c:4b:3d:0e:66:6d:df:13:bf:02:cf:fd: 2b:20:17:dc:8a:33:e2:e8:6c:d3:a8:b8:4c:37:5c:51:38:34: 70:82:c1:74:c9:e5:37:5f:96:2c:3e:9c:fb:63:5b:6a:05:f4: f6:46:5e:d4:68:7f:e2:79:97:a1:6d:fe:d4:33:23:df:45:99: 57:9d:aa:62:40:be:41:c5:af:cd:e6:76:90:87:f7:d4:fb:64: 47:ef:66:b3:ea:ae:f4:3e:85:62:6c:b5:6f:96:12:10:5b:36: f5:ee:46:39:16:63:b3:a8:1a:17:d1:7e:7d:82:f9:55:c9:b7: 67:22:3e:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscr9uxQDweIs8T/GIW80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi MTdkOWMwHhcNMjUxMjE4MjMwMDQ4WhcNMjUxMjE5MjMwMDQ4WjAzMTEwLwYDVQQD EyhkOTc0NWVlMjA1NDE1NWI2ZDA0ZDVhODA2Mzg5N2JjMDllZmQ5MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAri39ksm28KQaNda/GxmZpUMSz+IU R+k7O25ZYEmgmbcL2xWF1Ebmh/wYY5pgSyw/VqoT11eF16bJHspUZ70ELeXrbbmo jRkB2UejNoQMiSdjzeNL9afu2D0V4raYHWnWOJL605bMs9angGZ8LlU5wWWAwQHk Kqgkg5KiEijREJo4wEvYrbVUtPmGTvM9/ruWTHJ3CUlIYm/E8deMkDYh9ZNL38Bv DXPP9RQrOLUQtLfr6PJH0VyAU/ITSr6HAc67oi1NMkEo8QLS/rSkpoGR4LMH+Ai+ KVomaTMzkU+p3cD+xEqtgFa8uUadc5+h3cArRa/XbIdcwHtbj/ply2lDGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl0XuIFQVW20E1agGOJe8Ce/ZONMB8GA1UdIwQY MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw0FqEMg l8VL6EhNC8slYxQ7fsH7hgZh+sulAgr+07DyIzEJW+NmPWjGRx5vrGQGXubnfHDV sbuddNIKFT+buO+/itRBBBhXKQJzFW5OGUmeVS8u0bOc2D53BXWfbqFZqS8bVbOx mQvJz/Eyd/Y01HU8J/H6mMGs7JR1Ob1VwLEaL8ucjEs9DmZt3xO/As/9KyAX3Ioz 4uhs06i4TDdcUTg0cILBdMnlN1+WLD6c+2NbagX09kZe1Gh/4nmXoW3+1DMj30WZ V52qYkC+QcWvzeZ2kIf31PtkR+9ms+qu9D6FYmy1b5YSEFs29e5GORZjs6gaF9F+ fYL5Vcm3ZyI+lw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:57:37 2025 by rpki-client