This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft File: _fVLGHmhRTl_rA01jvq9L1_QrKE.mft (raw, json) Hash identifier: EwIoYKE5OHOxFdHGHY0zNFuPFLnpnOIqbZQDWWpRM/Q= Subject key identifier: 5F:2E:A9:4C:E2:AB:D2:A4:06:29:7E:B0:25:E5:BD:4E:92:EC:A6:A5 Authority key identifier: FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 Certificate issuer: /CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Certificate serial: 019B3EDA8FD9894BA73B522BB7E6BFB4CAA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft Manifest number: 024C Signing time: Sun 21 Dec 2025 03:01:09 +0000 Manifest this update: Sun 21 Dec 2025 03:01:09 +0000 Manifest next update: Mon 22 Dec 2025 03:01:09 +0000 Files and hashes: 1: 5lQnFnU-84I8pBL0bmtu_5E7JBE.roa (hash: choN2tt2VLbw64yYa4mcGxM9D/1eWfgY0Zlzr2QBz8I=) 2: _fVLGHmhRTl_rA01jvq9L1_QrKE.crl (hash: rXztqKTXX1n2wuOu5nsOBk+RvfKLC2GH+QZ5PrnhTvE=) 3: aFgiJNKCIanfvnqNDMdjznHMd1g.roa (hash: LkdaN274HWy1PdIg0LvK8JE9h9510OV9pL6YxntLzSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:8f:d9:89:4b:a7:3b:52:2b:b7:e6:bf:b4:ca:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf54b1879a145397fac0d358efabd2f5fd0aca1 Validity Not Before: Dec 21 03:01:09 2025 GMT Not After : Dec 22 03:01:09 2025 GMT Subject: CN=5f2ea94ce2abd2a406297eb025e5bd4e92eca6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fe:ff:fb:e4:95:ab:d0:fd:8f:2c:b5:00:9a: 62:70:76:bb:3a:10:80:27:d3:c4:a3:6e:24:84:ca: 32:f9:84:bb:a3:d0:4c:b8:9d:b4:8c:65:01:f7:78: 03:00:3a:2c:86:6c:11:b9:b8:15:2a:14:3a:d4:d5: f9:61:ba:8a:3e:5f:d6:4d:d1:df:95:31:13:a1:e6: 87:f3:2e:cf:d2:3a:21:94:ff:85:35:88:f9:f9:84: 60:bf:a5:96:5f:ef:de:e5:b7:d8:ec:b3:96:2e:fb: 7a:97:26:a4:92:99:fe:ca:98:89:ce:94:10:ed:17: eb:96:10:51:14:40:b8:9e:29:8b:74:a8:ba:cf:e0: cf:de:00:dc:da:4a:c1:f1:82:78:17:6b:7a:ea:de: 92:50:68:1c:74:20:87:0e:63:ff:c9:7f:94:02:46: 3b:88:9c:e5:c4:35:a6:02:aa:3a:95:eb:d8:64:fe: 26:24:95:43:81:d8:f0:c2:48:8f:d5:f6:f9:e9:4e: 16:c5:2d:f3:05:a0:35:40:15:18:21:a1:c4:4b:27: c9:0a:e6:fa:f9:45:fe:19:81:60:c4:44:62:4f:17: c3:aa:de:dc:42:34:02:0a:2d:9d:22:98:61:56:72: 62:08:b3:1a:ea:1a:93:3f:9e:da:c4:16:08:a6:fd: 67:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:2E:A9:4C:E2:AB:D2:A4:06:29:7E:B0:25:E5:BD:4E:92:EC:A6:A5 X509v3 Authority Key Identifier: keyid:FD:F5:4B:18:79:A1:45:39:7F:AC:0D:35:8E:FA:BD:2F:5F:D0:AC:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fVLGHmhRTl_rA01jvq9L1_QrKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/49b462-75ae-4acc-b52e-71186e2b516a/1/_fVLGHmhRTl_rA01jvq9L1_QrKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a6:00:d1:ac:0a:96:96:f5:61:3b:1e:b0:9a:c8:6d:3e:88: 52:08:dd:83:c0:dc:50:4c:5d:2c:cc:d5:cd:9b:35:46:94:79: 18:3f:40:9a:d0:ae:5f:76:8e:0f:ca:2e:cc:b2:b0:7d:09:68: 97:8e:22:8a:63:6f:88:97:d7:d3:9c:3c:9b:62:1b:48:18:4d: a3:72:70:51:4b:7a:6d:ed:18:33:65:72:21:97:48:f7:01:88: 88:4e:56:77:79:21:22:fe:37:c7:82:8a:4c:36:4d:c9:b0:eb: cf:b0:a2:31:02:3b:14:62:44:a1:92:35:f5:2d:46:ba:db:9f: c0:58:b3:75:6c:60:94:2d:ff:c1:b4:5c:58:4f:5d:01:70:fd: 50:97:bf:c1:bd:7a:5f:81:3f:dc:b4:dd:6b:30:a8:51:a6:f9: 4f:0d:dc:53:55:3e:d4:0b:c8:52:1f:bd:ce:ed:45:7d:d1:d7: 88:13:fc:2d:30:74:c8:2c:61:fa:a4:c4:f2:97:09:8b:45:07: 46:e9:ae:aa:f4:10:7c:0f:04:63:08:62:8a:7a:ba:4f:b9:2c: d3:bc:3f:97:c6:20:b9:e5:d1:57:69:8d:3b:0c:ef:03:2a:c3: 55:49:d6:b0:15:b4:21:ad:c1:95:f4:39:2a:20:9c:b1:e5:30: 24:99:11:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2o/ZiUunO1Irt+a/tMqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjU0YjE4NzlhMTQ1Mzk3ZmFjMGQzNThlZmFiZDJmNWZk MGFjYTEwHhcNMjUxMjIxMDMwMTA5WhcNMjUxMjIyMDMwMTA5WjAzMTEwLwYDVQQD Eyg1ZjJlYTk0Y2UyYWJkMmE0MDYyOTdlYjAyNWU1YmQ0ZTkyZWNhNmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzf7/++SVq9D9jyy1AJpicHa7OhCA J9PEo24khMoy+YS7o9BMuJ20jGUB93gDADoshmwRubgVKhQ61NX5YbqKPl/WTdHf lTEToeaH8y7P0johlP+FNYj5+YRgv6WWX+/e5bfY7LOWLvt6lyakkpn+ypiJzpQQ 7RfrlhBRFEC4nimLdKi6z+DP3gDc2krB8YJ4F2t66t6SUGgcdCCHDmP/yX+UAkY7 iJzlxDWmAqo6levYZP4mJJVDgdjwwkiP1fb56U4WxS3zBaA1QBUYIaHESyfJCub6 +UX+GYFgxERiTxfDqt7cQjQCCi2dIphhVnJiCLMa6hqTP57axBYIpv1n9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8uqUziq9KkBil+sCXlvU6S7KalMB8GA1UdIwQY MBaAFP31Sxh5oUU5f6wNNY76vS9f0KyhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUt NzExODZlMmI1MTZhLzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC80OWI0NjItNzVhZS00YWNjLWI1MmUtNzExODZlMmI1MTZh LzEvX2ZWTEdIbWhSVGxfckEwMWp2cTlMMV9RcktFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoaYA0awK lpb1YTsesJrIbT6IUgjdg8DcUExdLMzVzZs1RpR5GD9AmtCuX3aOD8ouzLKwfQlo l44iimNviJfX05w8m2IbSBhNo3JwUUt6be0YM2VyIZdI9wGIiE5Wd3khIv43x4KK TDZNybDrz7CiMQI7FGJEoZI19S1GutufwFizdWxglC3/wbRcWE9dAXD9UJe/wb16 X4E/3LTdazCoUab5Tw3cU1U+1AvIUh+9zu1FfdHXiBP8LTB0yCxh+qTE8pcJi0UH RumuqvQQfA8EYwhiinq6T7ks07w/l8YgueXRV2mNOwzvAyrDVUnWsBW0Ia3BlfQ5 KiCcseUwJJkRlA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:50 2025 by rpki-client