This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft File: fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json) Hash identifier: jcDvAeF+sLB8WrdlI1QkgAWZcD+HTIF9oA2kK4nw3Ik= Subject key identifier: 2B:05:9C:75:B9:C3:10:D8:FD:F3:EE:A0:A1:D1:EE:38:DF:B0:A3:CF Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 Certificate issuer: /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Certificate serial: 019B085ABDA707F0A95898453E0212B2814D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft Manifest number: 177F Signing time: Wed 10 Dec 2025 13:02:03 +0000 Manifest this update: Wed 10 Dec 2025 13:02:03 +0000 Manifest next update: Thu 11 Dec 2025 13:02:03 +0000 Files and hashes: 1: 1-NN7sVbgRc7-e06UCxTChEWhBGw.roa (hash: 1nkStuI6UE5AiUo/eeuy7d+ojDXercvaN8swfpqL2XQ=) 2: AEVvsnRQYto226XFdaazjy3xWuo.roa (hash: Txnd+U22SzgetuoksqRrs/2RHcGormwyvmHzfxiwQko=) 3: FyI0FgVBR2eCZIu7-BhB5eWHjhM.roa (hash: IUL/2jO+KiUhk4ijellQkxSdiTlMw+UUQGTK5Yg/kD0=) 4: Gm24Jz4FAwlPLPviHhCETg5MzmE.roa (hash: UUEH5H1Pt5nW5hTKrLZcoRUOcZCQ7CH6xwXFlcJaL+E=) 5: aoPilv5n5CJ_hoE4hhIg-yOODEg.roa (hash: mUjFO9yZy5mYwcYcLvHaIain98TW2y4wajIxqcvRaFw=) 6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: Dvz9kdVkoF3kTPGPMjHkiyfsDclQH3R/M+wSNiXTvVQ=) 7: nc5KXUWUdck8gbw7m_0IyKBWC5g.roa (hash: i0jN8KLoirBy04xz9xtOlV7fBEKQPtgwb2siK57WV1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:bd:a7:07:f0:a9:58:98:45:3e:02:12:b2:81:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6 Validity Not Before: Dec 10 13:02:03 2025 GMT Not After : Dec 11 13:02:03 2025 GMT Subject: CN=2b059c75b9c310d8fdf3eea0a1d1ee38dfb0a3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5b:0a:ad:cd:b0:61:75:f4:fd:59:68:eb:ab: a2:e3:6d:ec:c1:83:76:85:bc:bf:fd:57:48:e4:87: 96:ce:d3:8b:88:d6:99:fb:65:3c:0d:3e:4d:33:f4: 01:c9:b3:50:28:0e:53:54:3f:07:7e:3f:bf:27:39: 7c:a4:84:12:56:ab:bb:1a:c8:82:43:ba:7d:a8:f5: 2b:47:5c:7e:0c:a8:53:b3:bf:51:4e:83:98:5b:47: 14:de:fc:7f:c0:9b:55:cb:44:08:46:85:6b:c1:8e: 4c:fa:43:85:26:be:e1:56:1c:a1:69:76:18:8c:7d: c4:7f:57:c3:1f:61:e0:f9:ea:d8:ed:df:02:38:53: 62:62:af:14:fd:59:98:ab:2f:e4:84:56:ce:65:aa: bd:81:89:e6:ab:ae:9c:05:ab:e2:3e:74:f2:47:8b: 3d:08:0e:15:c8:6e:9f:f9:fe:b9:ff:3b:5f:af:e8: 1a:85:24:48:a8:e0:b5:6e:2b:97:cd:e8:4f:9b:20: c1:ff:ed:bb:e7:5c:dd:95:b0:55:4b:bc:b3:2c:6b: 22:9b:2c:63:18:1d:68:a4:bc:34:2a:70:f6:0e:a8: 38:d9:56:66:cd:3a:9e:96:09:ec:94:75:11:7e:55: 88:62:68:5a:e9:d6:03:d5:1e:f8:84:4c:a5:68:11: 67:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:05:9C:75:B9:C3:10:D8:FD:F3:EE:A0:A1:D1:EE:38:DF:B0:A3:CF X509v3 Authority Key Identifier: keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:34:80:a3:ef:27:3a:ec:2d:d9:6c:d9:1a:f2:6e:a8:0d: f4:15:17:b5:b3:02:85:c8:0b:e4:b8:dd:25:f7:1b:4d:17:59: 56:27:93:09:c6:3a:51:60:0b:70:d1:c3:7b:6b:e7:3e:16:a7: 7a:78:6f:12:51:4e:56:43:83:c5:62:fc:3c:72:c9:b3:66:29: 79:e6:c5:63:bb:12:ed:16:5e:5c:d9:6b:b5:ac:e8:8c:0d:b7: ad:e6:9e:eb:5f:f6:38:0f:07:ac:59:79:49:26:c1:99:c6:62: 7c:46:d8:93:76:e4:c6:f1:08:b6:b9:47:b7:5c:97:b9:5c:49: 25:2a:79:f3:1e:2d:ad:41:c8:0e:b8:5d:4f:72:a5:78:bf:76: 12:6b:f2:25:05:3b:25:3b:63:9c:86:8a:ab:4f:ac:ec:e2:a7: 6d:0a:71:7b:14:82:7e:26:da:62:7f:0f:94:8e:a4:e8:29:25: 1d:53:5e:b9:48:4b:46:a5:7f:5c:17:f4:8b:31:9e:aa:c5:3e: 27:57:a2:8d:33:d0:19:70:34:f9:de:ce:dd:aa:54:41:0d:0b: f6:ec:a6:e8:6f:ac:ab:c9:cb:6d:62:2c:72:8d:55:84:4b:60: 77:ef:dc:8b:a5:1d:3f:92:a5:b9:8f:52:51:55:e7:24:ea:4a: 34:22:6b:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWr2nB/CpWJhFPgISsoFNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2I4ODc3ZTFhMTMwZmU1MDM4NmM2MTBkNmVhZDU2NDFi OTdiYTYwHhcNMjUxMjEwMTMwMjAzWhcNMjUxMjExMTMwMjAzWjAzMTEwLwYDVQQD EygyYjA1OWM3NWI5YzMxMGQ4ZmRmM2VlYTBhMWQxZWUzOGRmYjBhM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lsKrc2wYXX0/Vlo66ui423swYN2 hby//VdI5IeWztOLiNaZ+2U8DT5NM/QBybNQKA5TVD8Hfj+/Jzl8pIQSVqu7GsiC Q7p9qPUrR1x+DKhTs79RToOYW0cU3vx/wJtVy0QIRoVrwY5M+kOFJr7hVhyhaXYY jH3Ef1fDH2Hg+erY7d8COFNiYq8U/VmYqy/khFbOZaq9gYnmq66cBaviPnTyR4s9 CA4VyG6f+f65/ztfr+gahSRIqOC1biuXzehPmyDB/+2751zdlbBVS7yzLGsimyxj GB1opLw0KnD2Dqg42VZmzTqelgnslHURflWIYmha6dYD1R74hEylaBFnQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsFnHW5wxDY/fPuoKHR7jjfsKPPMB8GA1UdIwQY MBaAFHw7iHfhoTD+UDhsYQ1urVZBuXumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTIt MTIwMjVjNTRmNDg0LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8xN2E3MTItNGU1YS00MGM1LWEzYTItMTIwMjVjNTRmNDg0 LzEvZkR1SWQtR2hNUDVRT0d4aERXNnRWa0c1ZTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNg0gKPv JzrsLdls2RrybqgN9BUXtbMChcgL5LjdJfcbTRdZVieTCcY6UWALcNHDe2vnPhan enhvElFOVkODxWL8PHLJs2YpeebFY7sS7RZeXNlrtazojA23reae61/2OA8HrFl5 SSbBmcZifEbYk3bkxvEItrlHt1yXuVxJJSp58x4trUHIDrhdT3KleL92EmvyJQU7 JTtjnIaKq0+s7OKnbQpxexSCfibaYn8PlI6k6CklHVNeuUhLRqV/XBf0izGeqsU+ J1eijTPQGXA0+d7O3apUQQ0L9uym6G+sq8nLbWIsco1VhEtgd+/ci6UdP5KluY9S UVXnJOpKNCJrGw== -----END CERTIFICATE-----Generated at Wed Dec 10 15:27:29 2025 by rpki-client