This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft File: 97FD9k1RC6MSl8uuVoL9QbLIEZY.mft (raw, json) Hash identifier: aJWLYKVkjWJFjNkvtSibKmjLrcoVndnZfxqWQEBHJAY= Subject key identifier: 86:FB:5F:3B:DD:92:FA:63:01:D1:CE:33:C2:AC:81:C6:71:38:97:9D Authority key identifier: F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96 Certificate issuer: /CN=f7b143f64d510ba31297cbae5682fd41b2c81196 Certificate serial: 019B2C2F6D0FA3A2EA61D4FC38028F3AC7B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft Manifest number: 0B1C Signing time: Wed 17 Dec 2025 12:01:04 +0000 Manifest this update: Wed 17 Dec 2025 12:01:04 +0000 Manifest next update: Thu 18 Dec 2025 12:01:04 +0000 Files and hashes: 1: 97FD9k1RC6MSl8uuVoL9QbLIEZY.crl (hash: nb/MCohvn4N0rDFmoV0WywQAkisX6dkZl0aexOSm/p8=) 2: Q9uvUMUGF4tW9TpLUtXmiB_YDYU.roa (hash: 6w5t2feWmLv2FpcZk6E6i1f0DCsFUL0L2nW9iOpOGYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:6d:0f:a3:a2:ea:61:d4:fc:38:02:8f:3a:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b143f64d510ba31297cbae5682fd41b2c81196 Validity Not Before: Dec 17 12:01:04 2025 GMT Not After : Dec 18 12:01:04 2025 GMT Subject: CN=86fb5f3bdd92fa6301d1ce33c2ac81c67138979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:81:6a:0e:77:36:f2:c7:f7:5f:47:41:30: 97:2e:bf:34:3c:62:d5:ca:1d:8d:cf:d7:73:e6:2e: 6d:f7:2d:29:3c:bd:64:84:44:97:17:e7:70:30:ba: 8c:ac:0e:12:41:60:df:fd:5d:14:d0:cb:40:fe:97: fe:f5:07:eb:29:1a:6d:9f:b4:82:12:57:cc:30:ec: ec:49:68:1e:42:fe:9b:32:6c:00:9f:0e:bc:33:15: ab:b5:be:12:68:07:e6:a1:63:c8:72:6c:5c:74:92: 38:67:47:6c:4e:16:72:16:00:8a:33:cc:53:9a:1a: 0b:cc:35:ff:c8:3a:f3:41:68:d5:00:bd:4c:42:22: ce:a8:0a:b8:25:5f:7d:68:4a:c6:4e:86:ac:e4:81: 35:9b:b1:fa:83:07:3a:7a:28:a4:3e:3d:07:2b:37: c2:a8:ca:a2:08:61:fc:6e:5a:20:8b:27:4a:3e:51: ee:b2:ad:cf:3f:1d:0c:6d:44:af:8b:df:8c:27:bb: c0:b4:67:29:2b:dc:ce:47:ad:ee:a9:1e:71:bb:e5: 28:97:07:f2:97:61:6c:d1:01:2b:66:2a:a8:2d:33: 60:28:9c:42:05:3e:d5:fc:15:c5:fb:d9:aa:78:cb: 90:43:4c:d1:3f:24:28:6c:70:38:23:c4:fd:7f:b5: 64:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:5F:3B:DD:92:FA:63:01:D1:CE:33:C2:AC:81:C6:71:38:97:9D X509v3 Authority Key Identifier: keyid:F7:B1:43:F6:4D:51:0B:A3:12:97:CB:AE:56:82:FD:41:B2:C8:11:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97FD9k1RC6MSl8uuVoL9QbLIEZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b92d9d-21a8-4522-97de-0fbe2de0636d/1/97FD9k1RC6MSl8uuVoL9QbLIEZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:47:30:31:14:ee:b9:b3:03:7c:36:d9:ef:78:fe:2d:05:a8: e4:cc:a0:3e:58:76:3c:3a:30:cf:6e:87:67:a4:b1:80:29:1c: 75:cb:d8:9b:f9:86:a8:00:37:9d:a4:06:f5:b7:91:42:2a:56: 79:b7:f4:ba:39:7d:f9:5e:ee:6d:f4:c8:d2:e7:87:28:45:99: 07:09:33:df:0b:b4:cc:f7:f0:3d:48:1c:17:de:91:cb:a8:48: 79:d3:93:4f:8f:a9:0f:88:37:33:f0:87:1f:33:51:d7:ce:cc: b5:59:d7:c1:0a:63:8f:6f:d5:57:11:ed:25:c8:f7:2f:c9:5d: 6d:c3:8f:98:17:be:5e:ef:96:0a:ba:5d:06:63:3f:b9:c1:d1: c6:2a:fb:f0:fb:82:3f:4f:af:2f:53:d3:bd:65:e2:2d:23:55: 54:2f:70:95:6d:63:77:2b:90:5e:81:11:41:7e:0f:48:c7:f2: 37:b7:06:5f:af:5a:fb:5b:fd:82:63:49:84:dc:5a:55:d0:a0: 96:a3:4e:c0:b1:b6:ea:66:35:75:e3:4d:f2:21:e7:b9:ca:8d: 5d:a0:17:a3:37:2d:1d:4e:2c:d5:a1:00:47:d1:20:42:e7:39: 1a:88:21:bd:9c:05:23:2b:a3:6c:23:34:39:b4:28:d3:56:4b: 92:f6:51:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL20Po6LqYdT8OAKPOsewMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjE0M2Y2NGQ1MTBiYTMxMjk3Y2JhZTU2ODJmZDQxYjJj ODExOTYwHhcNMjUxMjE3MTIwMTA0WhcNMjUxMjE4MTIwMTA0WjAzMTEwLwYDVQQD Eyg4NmZiNWYzYmRkOTJmYTYzMDFkMWNlMzNjMmFjODFjNjcxMzg5NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/CBag53NvLH919HQTCXLr80PGLV yh2Nz9dz5i5t9y0pPL1khESXF+dwMLqMrA4SQWDf/V0U0MtA/pf+9QfrKRptn7SC ElfMMOzsSWgeQv6bMmwAnw68MxWrtb4SaAfmoWPIcmxcdJI4Z0dsThZyFgCKM8xT mhoLzDX/yDrzQWjVAL1MQiLOqAq4JV99aErGToas5IE1m7H6gwc6eiikPj0HKzfC qMqiCGH8blogiydKPlHusq3PPx0MbUSvi9+MJ7vAtGcpK9zOR63uqR5xu+Uolwfy l2Fs0QErZiqoLTNgKJxCBT7V/BXF+9mqeMuQQ0zRPyQobHA4I8T9f7VkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb7XzvdkvpjAdHOM8KsgcZxOJedMB8GA1UdIwQY MBaAFPexQ/ZNUQujEpfLrlaC/UGyyBGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUt MGZiZTJkZTA2MzZkLzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iOTJkOWQtMjFhOC00NTIyLTk3ZGUtMGZiZTJkZTA2MzZk LzEvOTdGRDlrMVJDNk1TbDh1dVZvTDlRYkxJRVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUcwMRTu ubMDfDbZ73j+LQWo5MygPlh2PDowz26HZ6SxgCkcdcvYm/mGqAA3naQG9beRQipW ebf0ujl9+V7ubfTI0ueHKEWZBwkz3wu0zPfwPUgcF96Ry6hIedOTT4+pD4g3M/CH HzNR187MtVnXwQpjj2/VVxHtJcj3L8ldbcOPmBe+Xu+WCrpdBmM/ucHRxir78PuC P0+vL1PTvWXiLSNVVC9wlW1jdyuQXoERQX4PSMfyN7cGX69a+1v9gmNJhNxaVdCg lqNOwLG26mY1deNN8iHnucqNXaAXozctHU4s1aEAR9EgQuc5GoghvZwFIyujbCM0 ObQo01ZLkvZRrA== -----END CERTIFICATE-----Generated at Wed Dec 17 19:13:24 2025 by rpki-client