This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft File: fGHj2B8FrLVr33mO1K4q9jd5QgE.mft (raw, json) Hash identifier: 0ASKGtS5rA1Cw+3gNQ3PpVoJEGdi+ekmm2/ZTwzKu+E= Subject key identifier: 3D:43:26:66:33:13:2A:CE:A5:E0:D4:3A:13:27:7D:FA:57:E3:8D:A2 Authority key identifier: 7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01 Certificate issuer: /CN=7c61e3d81f05acb56bdf798ed4ae2af637794201 Certificate serial: 019B5A8871C20C276B0AD17FC4CA51A8BEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft Manifest number: 0DBC Signing time: Fri 26 Dec 2025 12:00:49 +0000 Manifest this update: Fri 26 Dec 2025 12:00:49 +0000 Manifest next update: Sat 27 Dec 2025 12:00:49 +0000 Files and hashes: 1: 9-PXmxWchg8g5OgsfYgYmWKFumw.roa (hash: eNSHI9SJ5/kKtvd8JJrC72SBUIAaYNTK8wZ5odVwcZA=) 2: fGHj2B8FrLVr33mO1K4q9jd5QgE.crl (hash: sEJFwXKkGRGeJi51G8Y9zjx1s150kZh1BvCmQiYuckg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:71:c2:0c:27:6b:0a:d1:7f:c4:ca:51:a8:be:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c61e3d81f05acb56bdf798ed4ae2af637794201 Validity Not Before: Dec 26 12:00:49 2025 GMT Not After : Dec 27 12:00:49 2025 GMT Subject: CN=3d43266633132acea5e0d43a13277dfa57e38da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9a:c3:4d:d8:26:03:e7:ea:65:5c:b7:c0:1e: 0b:79:5a:4e:e4:9a:04:c2:5d:ef:21:c8:37:c6:c8: 6c:54:b9:7b:74:04:e5:5e:22:8f:63:21:a0:53:ea: e9:2e:1a:d6:26:f7:81:08:ee:2b:20:60:30:99:a4: 2e:e3:d5:f5:d8:1e:01:db:38:62:68:c1:b4:f6:4b: 27:92:ee:f0:b9:2c:85:80:92:81:2a:1a:44:c5:c1: d6:89:89:ba:53:8b:f6:98:fa:81:09:22:db:6d:97: f8:ef:86:11:4b:76:13:78:6b:87:6c:27:d4:6d:08: 99:01:bc:76:71:b4:00:3c:fa:f6:bc:d7:7f:fe:a7: 24:1f:6b:25:01:77:ba:38:93:f6:55:91:2b:78:8c: 8a:a9:26:b4:cf:a1:25:9f:ac:e4:22:30:72:7f:6f: 0c:7e:f0:cd:fa:34:c9:f6:b3:2e:7c:bf:18:b3:96: 22:18:cb:ac:1a:40:b6:c6:94:c7:bf:76:f9:12:d8: c6:47:be:3f:8c:e1:d8:ed:2b:f3:97:f6:e5:49:d1: 8c:a4:28:81:17:6e:71:ea:fc:a2:17:24:77:9e:35: 65:98:3a:36:64:98:5f:57:b5:9b:81:61:fb:6f:6e: db:fb:ec:8b:14:51:39:b9:b3:1a:94:6c:a8:44:0b: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:26:66:33:13:2A:CE:A5:E0:D4:3A:13:27:7D:FA:57:E3:8D:A2 X509v3 Authority Key Identifier: keyid:7C:61:E3:D8:1F:05:AC:B5:6B:DF:79:8E:D4:AE:2A:F6:37:79:42:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGHj2B8FrLVr33mO1K4q9jd5QgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/b0212a-eabe-45ab-bfd5-9dfbe6dda88a/1/fGHj2B8FrLVr33mO1K4q9jd5QgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2a:bc:0b:07:ce:46:b2:96:dd:0b:99:b1:e9:34:a9:4e:1f: 52:77:4f:b8:1d:15:ca:a0:ea:b5:85:4d:d6:69:c1:a4:08:a2: 15:6d:02:c5:2a:82:e5:1d:cf:fb:e0:00:5a:45:7e:3d:8d:ae: 07:5a:40:e8:09:ec:f2:9e:ca:1f:c0:bc:71:c5:d1:45:61:07: 01:cc:64:e0:e1:83:74:8e:63:e6:1a:05:76:ba:83:02:8d:f3: 93:ce:09:4c:6f:35:43:a8:cf:71:ca:93:cc:0e:6b:91:9c:8e: 03:8a:87:ec:24:a1:6b:4f:7b:a1:11:cc:f9:7a:a6:91:a8:c2: 21:26:e8:89:81:dd:49:57:79:80:bb:a7:fa:69:33:ee:0c:d9: eb:5c:e0:00:b5:93:b2:da:76:fa:f6:8f:49:6c:12:b5:1d:cb: 78:59:6b:0a:ed:59:df:67:bb:b0:53:80:1d:a8:1a:48:46:dc: ce:2e:de:b2:22:4a:f2:bc:a3:ac:fd:09:49:59:7a:3d:af:94: 35:5c:72:6a:b4:e2:55:13:cc:c5:d7:71:df:48:aa:f9:2c:c9: 64:98:ee:47:e4:64:5f:68:e7:5a:25:3c:1a:60:1c:c9:39:23: 95:cf:9d:6b:4b:07:0a:e0:68:c4:9f:23:72:e5:11:6f:2f:1b: dd:52:80:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiHHCDCdrCtF/xMpRqL7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjFlM2Q4MWYwNWFjYjU2YmRmNzk4ZWQ0YWUyYWY2Mzc3 OTQyMDEwHhcNMjUxMjI2MTIwMDQ5WhcNMjUxMjI3MTIwMDQ5WjAzMTEwLwYDVQQD EygzZDQzMjY2NjMzMTMyYWNlYTVlMGQ0M2ExMzI3N2RmYTU3ZTM4ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJrDTdgmA+fqZVy3wB4LeVpO5JoE wl3vIcg3xshsVLl7dATlXiKPYyGgU+rpLhrWJveBCO4rIGAwmaQu49X12B4B2zhi aMG09ksnku7wuSyFgJKBKhpExcHWiYm6U4v2mPqBCSLbbZf474YRS3YTeGuHbCfU bQiZAbx2cbQAPPr2vNd//qckH2slAXe6OJP2VZEreIyKqSa0z6Eln6zkIjByf28M fvDN+jTJ9rMufL8Ys5YiGMusGkC2xpTHv3b5EtjGR74/jOHY7Svzl/blSdGMpCiB F25x6vyiFyR3njVlmDo2ZJhfV7WbgWH7b27b++yLFFE5ubMalGyoRAtF0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1DJmYzEyrOpeDUOhMnffpX442iMB8GA1UdIwQY MBaAFHxh49gfBay1a995jtSuKvY3eUIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUt OWRmYmU2ZGRhODhhLzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iMDIxMmEtZWFiZS00NWFiLWJmZDUtOWRmYmU2ZGRhODhh LzEvZkdIajJCOEZyTFZyMzNtTzFLNHE5amQ1UWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyq8CwfO RrKW3QuZsek0qU4fUndPuB0VyqDqtYVN1mnBpAiiFW0CxSqC5R3P++AAWkV+PY2u B1pA6Ans8p7KH8C8ccXRRWEHAcxk4OGDdI5j5hoFdrqDAo3zk84JTG81Q6jPccqT zA5rkZyOA4qH7CSha097oRHM+XqmkajCISboiYHdSVd5gLun+mkz7gzZ61zgALWT stp2+vaPSWwStR3LeFlrCu1Z32e7sFOAHagaSEbczi7esiJK8ryjrP0JSVl6Pa+U NVxyarTiVRPMxddx30iq+SzJZJjuR+RkX2jnWiU8GmAcyTkjlc+da0sHCuBoxJ8j cuURby8b3VKAAQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:55:01 2025 by rpki-client