This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft File: fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json) Hash identifier: 6Qnmq1J6cb1poHCVvof96SNJ4Fw5MqVBdQcfiLhZ2j0= Subject key identifier: B4:D0:B5:9B:7C:42:21:17:5B:0F:74:A5:E6:88:46:64:AD:E4:67:00 Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F Certificate issuer: /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Certificate serial: 019B120270EAE251D18202DACD9B3928D88B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 10:01:48 +0000 Manifest this update: Fri 12 Dec 2025 10:01:48 +0000 Manifest next update: Sat 13 Dec 2025 10:01:48 +0000 Files and hashes: 1: 691mCGSXoSch_5n-_pfK7VBK24U.roa (hash: Wd9PO6+/FM13l9qBnW2wnUGn1u/XUolVRvwtK5oFjWQ=) 2: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: QTYXw+fBViYJ7uS8IqYyv6ngBQj/JvkSGLxpk/kfBo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:70:ea:e2:51:d1:82:02:da:cd:9b:39:28:d8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f Validity Not Before: Dec 12 10:01:48 2025 GMT Not After : Dec 13 10:01:48 2025 GMT Subject: CN=b4d0b59b7c4221175b0f74a5e6884664ade46700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:a2:c9:54:92:d3:27:ec:90:6a:1f:21:71: bb:1e:5d:a7:f9:b4:2b:e2:18:4c:53:8d:bd:ae:0c: 68:ea:90:60:d5:ba:52:d2:51:63:8e:40:ce:cc:2c: 2a:e1:4f:3e:4d:a3:01:17:32:34:ba:b5:dc:e5:19: 7c:26:48:5a:e0:ef:d5:0c:23:0d:46:dc:b4:28:1d: 3f:a5:5b:78:eb:2d:46:bc:15:1a:03:8b:f6:fe:9f: fb:6e:51:c3:c2:11:d4:09:5d:56:06:3b:0c:4c:ac: 00:d7:a0:87:ef:e7:b9:0d:2c:73:f4:30:8f:9b:d6: a3:3c:e6:30:b5:63:f6:9b:e2:b9:80:d1:1e:91:20: de:46:ea:e0:e6:6e:d6:1e:64:e6:66:65:30:c1:84: 32:bd:a6:64:af:4c:4e:c9:a2:8c:3d:52:70:f8:3a: 38:9e:47:b5:e1:be:4f:d5:11:ed:98:c3:c5:39:47: e4:c1:18:90:eb:00:21:db:60:bf:48:5f:64:7f:59: a9:f5:e2:9d:3a:f7:2d:3f:38:db:9e:28:bd:72:c5: a1:bd:fe:42:27:16:69:9c:80:2c:90:50:c5:84:24: c7:03:74:fa:80:2a:42:1b:64:93:60:c6:df:9c:4d: a8:66:6c:f3:fb:10:66:49:02:6e:76:90:20:c2:6c: e9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D0:B5:9B:7C:42:21:17:5B:0F:74:A5:E6:88:46:64:AD:E4:67:00 X509v3 Authority Key Identifier: keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a0:44:fa:df:c1:10:16:a2:0d:ad:2d:32:69:be:5c:2f:46: af:df:87:f0:9b:d2:c9:a2:ad:80:d1:7f:fe:27:3d:91:fb:95: f3:4c:da:36:7c:ee:c4:d8:de:b5:84:35:76:0c:cd:13:1d:74: a2:66:ae:ed:f6:a0:5b:7d:c0:e1:a7:a0:7f:d1:56:63:ae:d3: 71:f4:b2:b9:69:77:8f:64:9d:2f:c6:06:32:79:b1:e6:29:01: 09:42:10:27:6f:5d:01:7b:d9:31:43:1a:15:59:cd:cf:3c:eb: 94:c6:26:20:6e:e8:e7:45:af:8c:87:1f:55:6b:b3:f7:41:6a: cf:1d:ac:be:7a:3f:63:ab:b1:c9:02:c8:bb:9e:05:2c:ba:78: d1:b6:73:28:ae:c2:89:1f:68:e1:91:d8:0b:42:c9:18:40:f2: 3e:28:15:60:2f:cc:5a:30:ad:41:d7:4c:ce:25:e8:a6:9b:ff: b6:8a:30:51:e0:6f:3c:41:be:ce:a2:cc:85:4f:ce:2e:22:4d: ee:23:37:4d:7f:cd:8c:5c:2f:a0:d2:83:6c:8a:2a:e4:de:cc: 12:95:dd:5b:c3:2b:b2:64:e1:79:75:61:40:52:93:77:57:ad: 59:2c:31:bd:d7:40:55:36:b1:2d:00:1b:fc:20:4f:5b:c4:fa: 85:98:da:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAnDq4lHRggLazZs5KNiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz YTYxMmYwHhcNMjUxMjEyMTAwMTQ4WhcNMjUxMjEzMTAwMTQ4WjAzMTEwLwYDVQQD EyhiNGQwYjU5YjdjNDIyMTE3NWIwZjc0YTVlNjg4NDY2NGFkZTQ2NzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+iyVSS0yfskGofIXG7Hl2n+bQr 4hhMU429rgxo6pBg1bpS0lFjjkDOzCwq4U8+TaMBFzI0urXc5Rl8Jkha4O/VDCMN Rty0KB0/pVt46y1GvBUaA4v2/p/7blHDwhHUCV1WBjsMTKwA16CH7+e5DSxz9DCP m9ajPOYwtWP2m+K5gNEekSDeRurg5m7WHmTmZmUwwYQyvaZkr0xOyaKMPVJw+Do4 nke14b5P1RHtmMPFOUfkwRiQ6wAh22C/SF9kf1mp9eKdOvctPzjbnii9csWhvf5C JxZpnIAskFDFhCTHA3T6gCpCG2STYMbfnE2oZmzz+xBmSQJudpAgwmzpbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTQtZt8QiEXWw90peaIRmSt5GcAMB8GA1UdIwQY MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaBE+t/B EBaiDa0tMmm+XC9Gr9+H8JvSyaKtgNF//ic9kfuV80zaNnzuxNjetYQ1dgzNEx10 omau7fagW33A4aegf9FWY67TcfSyuWl3j2SdL8YGMnmx5ikBCUIQJ29dAXvZMUMa FVnNzzzrlMYmIG7o50WvjIcfVWuz90Fqzx2svno/Y6uxyQLIu54FLLp40bZzKK7C iR9o4ZHYC0LJGEDyPigVYC/MWjCtQddMziXoppv/toowUeBvPEG+zqLMhU/OLiJN 7iM3TX/NjFwvoNKDbIoq5N7MEpXdW8MrsmTheXVhQFKTd1etWSwxvddAVTaxLQAb /CBPW8T6hZjazg== -----END CERTIFICATE-----Generated at Fri Dec 12 20:36:33 2025 by rpki-client