This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft File: fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json) Hash identifier: HiVBBzwxNO6y8aHV2XHDZpRiDh1E6RARhtMFGwd1E9I= Subject key identifier: 28:FD:2B:1D:46:A0:F6:5C:F8:7E:03:54:6D:05:7F:B9:7A:54:37:24 Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 Certificate issuer: /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Certificate serial: 019B10EEB43CFEFFE904EED1D106860537D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft Manifest number: 044F Signing time: Fri 12 Dec 2025 05:00:37 +0000 Manifest this update: Fri 12 Dec 2025 05:00:37 +0000 Manifest next update: Sat 13 Dec 2025 05:00:37 +0000 Files and hashes: 1: RdOdP3DlBfXpnxBBT7lO73v8oG8.roa (hash: 9+BQ0Xt7iU/x6pUN6YyjEsb6BHBaV2Ejuirq22nlRh8=) 2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: gGzGN7cAtSgUhp082a+XsL9dd27IhMznGwkaWuzAQ9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:b4:3c:fe:ff:e9:04:ee:d1:d1:06:86:05:37:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46 Validity Not Before: Dec 12 05:00:37 2025 GMT Not After : Dec 13 05:00:37 2025 GMT Subject: CN=28fd2b1d46a0f65cf87e03546d057fb97a543724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:67:ad:7d:70:56:fb:a8:c8:d5:5e:97:3c:55: 63:d8:99:cd:74:58:42:d7:ce:e3:dc:76:ef:29:a8: 25:f0:b1:c6:62:50:12:4d:aa:20:e7:e5:3a:f3:3b: 6a:b0:58:bf:30:5c:e6:05:f9:eb:3f:d7:bb:65:6e: 93:0f:a0:c0:7a:39:9f:85:af:7e:5a:24:02:0a:78: 86:b4:b2:c0:91:c9:09:32:dd:d5:30:5b:e3:f6:b9: 42:ba:08:07:20:1e:53:2d:ce:51:76:e0:d4:9b:7d: a6:68:d5:dc:1f:8f:ef:38:d0:e7:70:df:5c:39:cd: c1:50:fe:94:8d:16:a9:bd:3b:76:e1:8c:2a:e5:3b: a6:08:87:ea:b3:49:5e:4c:e8:90:9d:6e:03:26:36: 94:70:e5:96:99:0f:25:a7:fa:8b:cc:ac:f0:e2:6e: 55:5d:4d:75:25:db:9a:bb:f6:ca:bd:9e:96:d2:31: 95:9f:bd:c9:b3:02:35:2e:eb:7b:27:da:3e:67:c3: b8:55:30:b8:d0:a5:2b:6a:14:21:4d:15:f7:97:a8: 9e:a2:09:aa:f0:fb:70:76:cb:78:e0:22:93:79:54: a5:b6:53:a3:b5:47:6e:b7:83:49:87:6c:3b:f9:3d: 1e:c3:5c:b6:c0:9a:51:f8:84:85:17:3d:3f:ad:62: 40:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FD:2B:1D:46:A0:F6:5C:F8:7E:03:54:6D:05:7F:B9:7A:54:37:24 X509v3 Authority Key Identifier: keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:93:9a:96:9e:51:1f:8b:7c:e9:8e:b6:25:cd:dc:09:cb:59: a1:3a:4a:b2:07:81:cf:6e:35:13:0d:08:10:7e:91:eb:b6:3f: fe:0f:f7:09:1d:bf:08:d5:7d:4d:03:96:3c:c9:e0:a5:32:04: 81:db:6a:08:76:b4:87:e8:21:52:95:3a:ed:2e:80:e8:c5:a8: 83:f8:89:3b:b4:08:fb:a5:36:14:87:86:58:9b:03:44:94:23: cf:82:ef:39:e8:58:73:6e:49:35:14:46:72:08:16:3c:58:06: 5b:29:2c:43:02:4a:53:90:36:2d:b0:1b:44:cb:80:4d:84:7c: 3f:cb:c7:de:0c:be:01:0e:4b:c5:9f:a8:5b:57:37:9e:41:74: 55:d2:fc:60:a3:27:c9:0c:30:cd:b6:ff:f4:d7:c4:31:7f:79: be:cc:d5:b4:26:b9:93:66:c0:aa:b9:7e:e4:17:71:79:ff:8e: 8c:cb:45:5b:3c:07:02:73:b2:28:1f:fe:44:44:55:c3:b8:c7: bc:2a:d5:ce:13:be:11:2c:e6:2d:06:a0:e2:e8:cd:f0:f9:ed: 78:9b:3d:a8:e5:02:87:cd:e6:4e:dd:98:c6:37:3c:e2:65:70: 3b:1f:e6:14:9c:39:d3:af:98:4f:90:c0:2b:3d:ce:dc:d4:29: 4a:46:37:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7rQ8/v/pBO7R0QaGBTfXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1NTM1MjMyM2RiY2MyODdiODdlMGQ2YTQ4MTRhNjNh YmJkNDYwHhcNMjUxMjEyMDUwMDM3WhcNMjUxMjEzMDUwMDM3WjAzMTEwLwYDVQQD EygyOGZkMmIxZDQ2YTBmNjVjZjg3ZTAzNTQ2ZDA1N2ZiOTdhNTQzNzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WetfXBW+6jI1V6XPFVj2JnNdFhC 187j3HbvKagl8LHGYlASTaog5+U68ztqsFi/MFzmBfnrP9e7ZW6TD6DAejmfha9+ WiQCCniGtLLAkckJMt3VMFvj9rlCuggHIB5TLc5RduDUm32maNXcH4/vONDncN9c Oc3BUP6UjRapvTt24Ywq5TumCIfqs0leTOiQnW4DJjaUcOWWmQ8lp/qLzKzw4m5V XU11Jduau/bKvZ6W0jGVn73JswI1Lut7J9o+Z8O4VTC40KUrahQhTRX3l6ieogmq 8Ptwdst44CKTeVSltlOjtUdut4NJh2w7+T0ew1y2wJpR+ISFFz0/rWJAEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCj9Kx1GoPZc+H4DVG0Ff7l6VDckMB8GA1UdIwQY MBaAFH3FVTUjI9vMKHuH4NakgUpjq71GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQt MjEyYTlmMzEwNjIyLzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi83YTFhZWUtNjcxYi00ZjM5LWI0ZGQtMjEyYTlmMzEwNjIy LzEvZmNWVk5TTWoyOHdvZTRmZzFxU0JTbU9ydlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJOalp5R H4t86Y62Jc3cCctZoTpKsgeBz241Ew0IEH6R67Y//g/3CR2/CNV9TQOWPMngpTIE gdtqCHa0h+ghUpU67S6A6MWog/iJO7QI+6U2FIeGWJsDRJQjz4LvOehYc25JNRRG cggWPFgGWyksQwJKU5A2LbAbRMuATYR8P8vH3gy+AQ5LxZ+oW1c3nkF0VdL8YKMn yQwwzbb/9NfEMX95vszVtCa5k2bAqrl+5Bdxef+OjMtFWzwHAnOyKB/+RERVw7jH vCrVzhO+ESzmLQag4ujN8PnteJs9qOUCh83mTt2Yxjc84mVwOx/mFJw506+YT5DA Kz3O3NQpSkY3/g== -----END CERTIFICATE-----Generated at Fri Dec 12 06:54:21 2025 by rpki-client