This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft File: fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft (raw, json) Hash identifier: MZNozOG77Twg85BJcl+3e4bzfmFJAjB+1D8ZvmcnsxU= Subject key identifier: C1:40:4B:D7:BD:F6:56:B4:0A:17:9B:E8:D2:DF:BD:D3:20:54:CC:C2 Authority key identifier: 7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 Certificate issuer: /CN=7ddf809131ee56531939d05f607271bdf01d19b5 Certificate serial: 019B24AC893ADF1E1C308926EEEBF7EB29E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 01:00:45 +0000 Manifest this update: Tue 16 Dec 2025 01:00:45 +0000 Manifest next update: Wed 17 Dec 2025 01:00:45 +0000 Files and hashes: 1: 71iuHhnjyMau6dRuVZxIZ-aHD6o.roa (hash: 6pikJCy9Nh7pkhX7m11NEA9DArPLhaL64o6XpR/q7jo=) 2: fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl (hash: 0toNhvdbMvzu4t1py1o0orVjkKvBLhwvnheFVNCkg8U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:89:3a:df:1e:1c:30:89:26:ee:eb:f7:eb:29:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ddf809131ee56531939d05f607271bdf01d19b5 Validity Not Before: Dec 16 01:00:45 2025 GMT Not After : Dec 17 01:00:45 2025 GMT Subject: CN=c1404bd7bdf656b40a179be8d2dfbdd32054ccc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:16:c9:83:f6:6d:8d:b3:f3:02:6d:a3:6a: 92:9d:3f:0b:ba:43:01:ef:da:df:cd:8e:ce:89:9b: 58:89:6c:11:44:81:bf:a2:39:5f:d2:07:c2:e3:cc: 99:84:b3:dc:a6:36:f8:fc:39:9f:17:c6:ab:0d:3f: ce:fe:f4:ff:99:ad:5c:a4:5c:ff:41:df:6f:16:03: 9a:1f:9f:ca:99:21:c9:0e:28:58:11:c6:b4:e5:f8: 05:cf:cd:a4:8b:0d:29:02:1a:92:62:58:da:8f:5c: d0:25:c4:ee:84:f1:5d:49:de:ec:06:47:f0:99:2a: 0c:79:6f:41:5d:5f:a9:32:d9:52:29:22:20:f3:93: a8:41:cb:33:03:6b:81:0e:56:60:10:5f:23:89:51: 64:70:56:e5:13:61:92:f1:62:85:74:cc:d3:27:05: f3:ef:e8:c0:34:b0:65:35:6a:23:3f:6c:31:ad:be: 4c:50:e0:6e:2d:96:4a:be:5d:2d:f0:2c:6d:3f:bd: 12:d8:e0:fa:8b:de:02:19:07:db:4a:4b:43:09:4b: 24:05:2b:65:33:0d:d8:25:18:61:1f:75:24:37:2c: 91:13:b7:04:c3:e7:37:24:7b:42:1f:06:35:77:9f: 27:be:7a:be:e1:e1:8e:15:6d:84:3a:28:b4:89:9f: de:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:40:4B:D7:BD:F6:56:B4:0A:17:9B:E8:D2:DF:BD:D3:20:54:CC:C2 X509v3 Authority Key Identifier: keyid:7D:DF:80:91:31:EE:56:53:19:39:D0:5F:60:72:71:BD:F0:1D:19:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd-AkTHuVlMZOdBfYHJxvfAdGbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/e7e635-f256-4001-b071-b94eb9e6b9eb/1/fd-AkTHuVlMZOdBfYHJxvfAdGbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b4:13:d6:89:1b:d0:ab:7a:b1:11:52:aa:e1:f7:83:32:56: 34:a5:24:c3:61:1e:2d:94:67:9f:7b:41:e0:51:0b:9a:47:17: ae:df:a6:57:17:16:54:31:ba:e4:bf:8a:c7:39:4b:6e:b2:3b: 72:a0:b7:c5:f8:89:03:99:b4:e4:de:c1:a9:a1:8d:4f:d9:5f: 1b:29:82:33:94:07:63:f5:e9:8f:6a:64:63:32:e0:0c:4a:0a: 68:3b:49:b1:db:70:cc:43:53:18:a0:e2:2f:f2:18:2a:21:49: 6a:9c:66:2c:10:fe:db:15:30:65:64:c2:3a:eb:74:36:38:e6: 38:5b:7a:71:71:43:32:9f:d3:3e:1b:58:bd:35:50:91:af:43: a8:91:e0:ae:65:20:e6:cf:6b:86:df:f2:9f:10:6b:49:33:9e: a6:c6:01:0e:01:e3:10:38:63:11:39:35:b9:6c:be:c0:d3:6a: e5:ea:10:46:19:76:79:61:7a:f9:20:de:8b:43:e2:d5:49:aa: 79:17:17:94:c5:fc:0c:82:06:ab:91:b2:9a:31:f4:ea:5c:f3: 82:c4:c0:41:d4:25:0a:35:b1:cb:ba:82:62:11:ba:c9:ae:92: b5:1f:55:78:45:89:48:1b:c2:d2:78:cd:53:97:7a:e3:2d:01: 71:eb:9e:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrIk63x4cMIkm7uv36ynmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZGY4MDkxMzFlZTU2NTMxOTM5ZDA1ZjYwNzI3MWJkZjAx ZDE5YjUwHhcNMjUxMjE2MDEwMDQ1WhcNMjUxMjE3MDEwMDQ1WjAzMTEwLwYDVQQD EyhjMTQwNGJkN2JkZjY1NmI0MGExNzliZThkMmRmYmRkMzIwNTRjY2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNYWyYP2bY2z8wJto2qSnT8LukMB 79rfzY7OiZtYiWwRRIG/ojlf0gfC48yZhLPcpjb4/DmfF8arDT/O/vT/ma1cpFz/ Qd9vFgOaH5/KmSHJDihYEca05fgFz82kiw0pAhqSYljaj1zQJcTuhPFdSd7sBkfw mSoMeW9BXV+pMtlSKSIg85OoQcszA2uBDlZgEF8jiVFkcFblE2GS8WKFdMzTJwXz 7+jANLBlNWojP2wxrb5MUOBuLZZKvl0t8CxtP70S2OD6i94CGQfbSktDCUskBStl Mw3YJRhhH3UkNyyRE7cEw+c3JHtCHwY1d58nvnq+4eGOFW2EOii0iZ/eNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFAS9e99la0Cheb6NLfvdMgVMzCMB8GA1UdIwQY MBaAFH3fgJEx7lZTGTnQX2Bycb3wHRm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEt Yjk0ZWI5ZTZiOWViLzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lN2U2MzUtZjI1Ni00MDAxLWIwNzEtYjk0ZWI5ZTZiOWVi LzEvZmQtQWtUSHVWbE1aT2RCZllISnh2ZkFkR2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLQT1okb 0Kt6sRFSquH3gzJWNKUkw2EeLZRnn3tB4FELmkcXrt+mVxcWVDG65L+KxzlLbrI7 cqC3xfiJA5m05N7BqaGNT9lfGymCM5QHY/Xpj2pkYzLgDEoKaDtJsdtwzENTGKDi L/IYKiFJapxmLBD+2xUwZWTCOut0NjjmOFt6cXFDMp/TPhtYvTVQka9DqJHgrmUg 5s9rht/ynxBrSTOepsYBDgHjEDhjETk1uWy+wNNq5eoQRhl2eWF6+SDei0Pi1Umq eRcXlMX8DIIGq5GymjH06lzzgsTAQdQlCjWxy7qCYhG6ya6StR9VeEWJSBvC0njN U5d64y0Bceueng== -----END CERTIFICATE-----Generated at Tue Dec 16 06:21:44 2025 by rpki-client