This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json) Hash identifier: Uy0Ueq4ItGE99ZkrnjFvKQ+NdaBeaGTpXvpgWN94G1E= Subject key identifier: E8:FA:4B:06:E3:45:AD:E7:F4:54:E4:40:BB:41:61:13:D2:FC:76:94 Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Certificate serial: 019B421204A70842DBA1B298C72094C696F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 18:00:35 +0000 Manifest this update: Sun 21 Dec 2025 18:00:35 +0000 Manifest next update: Mon 22 Dec 2025 18:00:35 +0000 Files and hashes: 1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=) 2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: JQnfFkAKwCKgpkDR98HI41j9lvEQZFT+n6tWugXNwyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:04:a7:08:42:db:a1:b2:98:c7:20:94:c6:96:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Validity Not Before: Dec 21 18:00:35 2025 GMT Not After : Dec 22 18:00:35 2025 GMT Subject: CN=e8fa4b06e345ade7f454e440bb416113d2fc7694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1d:5e:2d:29:76:9b:80:d1:64:f8:1f:5e:b3: 2b:81:ee:29:d1:1d:ec:bf:96:74:94:62:64:f9:90: a3:b2:8d:71:07:48:5b:64:c7:82:05:cb:10:46:eb: d1:5f:ff:d2:1e:f2:68:45:2f:b5:a6:61:67:d2:ad: 2e:61:bb:96:2c:0f:32:48:ea:88:ab:ec:06:bf:24: aa:6f:96:fb:0a:c2:71:a2:84:13:a4:2c:26:a0:3f: f6:58:fa:05:bb:e2:54:e7:81:26:74:0c:52:ca:64: 94:4f:05:29:dc:9b:ee:0d:9c:ff:0d:26:6e:f8:48: af:f4:56:a0:01:1f:1b:ed:d6:4c:b3:44:74:30:7e: 2b:f2:ea:b7:f4:a1:3e:ab:be:04:91:e0:36:e2:54: 2b:ef:35:9a:d0:66:ac:5f:68:fa:63:19:ee:4a:f6: 38:71:1f:42:4d:70:d0:5f:73:20:6d:58:45:9b:ae: 5d:81:5e:37:50:de:91:b6:aa:98:f1:94:7d:21:ab: 5b:7c:09:c6:d6:62:a5:2e:19:74:18:b7:a2:5e:f9: 5a:e1:80:9c:9b:b2:7a:a7:49:4b:b8:70:f0:00:83: 9a:ea:ba:51:86:46:0f:fc:b1:f2:0e:62:2b:be:d0: 53:91:fd:80:f0:c5:60:a4:42:a1:42:67:7d:d8:87: ed:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FA:4B:06:E3:45:AD:E7:F4:54:E4:40:BB:41:61:13:D2:FC:76:94 X509v3 Authority Key Identifier: keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:42:ee:49:a7:bc:1e:f0:a3:19:08:e1:34:31:98:2d:9c:47: 35:fa:22:6d:b9:63:4d:43:96:d3:29:a3:94:59:72:94:a9:0b: 57:20:04:8a:2c:13:da:4b:f2:b7:83:eb:96:c8:7e:7d:03:5d: 96:a9:ec:5b:22:09:cb:13:6b:5e:93:61:f0:e3:20:0b:5c:df: e3:de:2c:e8:95:c4:2c:23:59:93:1b:6a:41:4c:43:b9:62:62: 19:2a:f2:08:0a:51:e8:cb:a4:db:e6:88:49:60:cf:58:bc:0f: c1:10:32:53:a1:b7:48:03:44:1d:af:9c:5c:a0:fa:76:c9:6a: cd:17:37:9d:e1:73:c0:5a:a7:58:13:b1:f9:06:b9:f3:98:0e: 83:ef:3f:08:ae:d2:ea:d1:d4:57:1c:fd:4d:4c:1f:f2:92:cb: fc:92:be:d4:6b:2c:61:62:ea:81:36:b5:ab:62:28:b6:87:dd: d5:ba:6d:92:54:9e:4f:78:66:ec:5d:02:9c:0f:da:85:1e:6a: e4:39:9d:09:85:ff:11:f9:95:bd:06:2d:dc:3d:0b:e2:b9:c0: ed:f8:a1:7f:0b:08:3e:d8:37:98:d5:7f:af:a0:48:f1:8d:e4: de:85:aa:7e:c1:a8:f3:b4:82:8e:89:e8:e9:93:c3:e1:b9:e3: 5d:53:96:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEgSnCELbobKYxyCUxpbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjExYTMxNjBkYjhjZTc5MThiZjNlYzU4YjVjNWUxZTNl OTM4MjEwHhcNMjUxMjIxMTgwMDM1WhcNMjUxMjIyMTgwMDM1WjAzMTEwLwYDVQQD EyhlOGZhNGIwNmUzNDVhZGU3ZjQ1NGU0NDBiYjQxNjExM2QyZmM3Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB1eLSl2m4DRZPgfXrMrge4p0R3s v5Z0lGJk+ZCjso1xB0hbZMeCBcsQRuvRX//SHvJoRS+1pmFn0q0uYbuWLA8ySOqI q+wGvySqb5b7CsJxooQTpCwmoD/2WPoFu+JU54EmdAxSymSUTwUp3JvuDZz/DSZu +Eiv9FagAR8b7dZMs0R0MH4r8uq39KE+q74EkeA24lQr7zWa0GasX2j6YxnuSvY4 cR9CTXDQX3MgbVhFm65dgV43UN6RtqqY8ZR9IatbfAnG1mKlLhl0GLeiXvla4YCc m7J6p0lLuHDwAIOa6rpRhkYP/LHyDmIrvtBTkf2A8MVgpEKhQmd92IftNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj6SwbjRa3n9FTkQLtBYRPS/HaUMB8GA1UdIwQY MBaAFH3xGjFg24znkYvz7Fi1xeHj6TghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0Mzkt ZTRiNjZhM2ZlNWJjLzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0MzktZTRiNjZhM2ZlNWJj LzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkLuSae8 HvCjGQjhNDGYLZxHNfoibbljTUOW0ymjlFlylKkLVyAEiiwT2kvyt4Prlsh+fQNd lqnsWyIJyxNrXpNh8OMgC1zf494s6JXELCNZkxtqQUxDuWJiGSryCApR6Muk2+aI SWDPWLwPwRAyU6G3SANEHa+cXKD6dslqzRc3neFzwFqnWBOx+Qa585gOg+8/CK7S 6tHUVxz9TUwf8pLL/JK+1GssYWLqgTa1q2Iotofd1bptklSeT3hm7F0CnA/ahR5q 5DmdCYX/EfmVvQYt3D0L4rnA7fihfwsIPtg3mNV/r6BI8Y3k3oWqfsGo87SCjono 6ZPD4bnjXVOWuQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:28 2025 by rpki-client