This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json) Hash identifier: jQsix98MWyn+L/vLauCHAWSm1l3/+vMdQ7gq2yFt1JA= Subject key identifier: E7:C6:23:9B:7B:60:BD:5A:D1:9B:56:0B:C9:1C:05:DC:40:DC:EA:E9 Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Certificate serial: 019B3C7EEC075D3CC6B03851293FED134DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft Manifest number: 0BAE Signing time: Sat 20 Dec 2025 16:01:49 +0000 Manifest this update: Sat 20 Dec 2025 16:01:49 +0000 Manifest next update: Sun 21 Dec 2025 16:01:49 +0000 Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=) 2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: vuUKORSJwlyLOrHXdHxh+a1DvNePB2WfQzHz1FHPAEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:ec:07:5d:3c:c6:b0:38:51:29:3f:ed:13:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Validity Not Before: Dec 20 16:01:49 2025 GMT Not After : Dec 21 16:01:49 2025 GMT Subject: CN=e7c6239b7b60bd5ad19b560bc91c05dc40dceae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ca:5e:3c:82:99:43:44:2c:64:fa:ed:2c:b8: 53:23:e1:3a:92:f8:5c:ef:dc:96:95:e0:39:c4:8b: 02:f2:9c:40:55:b3:fe:4e:c6:0d:eb:2f:76:12:2d: dd:50:fb:39:14:84:0b:da:c2:c2:90:e0:c2:75:db: 95:76:fc:5b:24:61:28:ff:bf:d8:61:21:c3:46:e8: 2d:c4:54:b3:83:06:3d:2d:dd:d8:c8:c2:eb:b6:73: 57:0a:c0:88:34:db:a3:8d:7f:a9:bf:88:5f:53:3a: 1e:1a:47:9e:9e:ea:f9:19:40:43:2f:0c:7a:05:18: de:99:c3:81:82:cf:13:1d:00:1f:cc:11:36:99:b3: 09:a4:85:48:36:ce:7c:8a:f3:8a:a6:c9:89:09:fd: 62:7c:be:a6:4c:99:b9:b1:9e:e1:5e:c3:89:ac:ba: c9:ae:a3:f6:9c:2f:6c:7e:d4:50:9c:4c:9d:f7:b7: b1:2a:be:be:6d:2a:d2:c4:cf:22:f4:8c:45:93:2b: 75:75:d7:06:03:46:50:1d:de:15:1e:17:cd:b0:1e: 0a:a1:05:80:e3:e9:55:47:ad:3b:5c:f0:26:ef:f3: 9f:c2:ec:0b:d0:12:e3:01:9a:1a:18:73:4d:f9:ab: 47:8f:63:7c:4e:75:90:70:0c:a1:67:ae:ea:bc:eb: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:23:9B:7B:60:BD:5A:D1:9B:56:0B:C9:1C:05:DC:40:DC:EA:E9 X509v3 Authority Key Identifier: keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:a8:f1:e8:a2:aa:a6:9c:a1:38:11:73:a4:11:d4:bb:fa:1a: a0:8f:bb:ce:c7:bb:40:41:7a:8e:8f:05:9b:00:64:85:89:6c: 3a:1d:60:77:27:2b:d5:bd:00:6a:7a:77:a5:2a:fa:b5:a0:ca: 54:cb:10:9c:10:6a:2e:7c:1a:a1:42:e2:3e:1f:29:60:9e:ec: c9:cb:8c:3f:38:de:48:b7:09:a2:51:10:de:a7:67:0d:7d:dd: 96:d2:ab:1c:91:ee:a6:19:91:e5:85:7c:85:fc:3d:4a:a7:8f: d2:82:5e:6d:26:94:cb:94:f4:47:5a:a7:04:93:16:f7:8c:bf: c2:c5:a9:58:2c:51:d9:61:4f:13:67:27:0e:67:19:65:82:0d: dd:76:b7:ed:05:e8:b2:8a:17:d4:0b:2c:e9:3d:25:c3:07:42: ac:7a:2c:82:cb:6b:9a:ed:cf:d4:04:0e:91:d8:7d:c7:5c:c1: 43:69:e3:1d:fa:0a:3e:37:16:bd:ae:6a:2a:99:ab:b0:fc:7a: 11:8c:34:96:58:4b:79:66:6f:46:bc:ee:e9:ab:34:1f:42:fe: 69:e4:0f:2b:50:14:0c:e5:ac:d7:4c:37:9d:44:db:e3:03:e1: 1b:17:61:be:6c:ed:8b:7d:27:9f:9b:65:7d:48:58:3f:bf:97: 00:5a:d2:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuwHXTzGsDhRKT/tE02sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3 ODRmODMwHhcNMjUxMjIwMTYwMTQ5WhcNMjUxMjIxMTYwMTQ5WjAzMTEwLwYDVQQD EyhlN2M2MjM5YjdiNjBiZDVhZDE5YjU2MGJjOTFjMDVkYzQwZGNlYWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApspePIKZQ0QsZPrtLLhTI+E6kvhc 79yWleA5xIsC8pxAVbP+TsYN6y92Ei3dUPs5FIQL2sLCkODCdduVdvxbJGEo/7/Y YSHDRugtxFSzgwY9Ld3YyMLrtnNXCsCINNujjX+pv4hfUzoeGkeenur5GUBDLwx6 BRjemcOBgs8THQAfzBE2mbMJpIVINs58ivOKpsmJCf1ifL6mTJm5sZ7hXsOJrLrJ rqP2nC9sftRQnEyd97exKr6+bSrSxM8i9IxFkyt1ddcGA0ZQHd4VHhfNsB4KoQWA 4+lVR607XPAm7/OfwuwL0BLjAZoaGHNN+atHj2N8TnWQcAyhZ67qvOvo+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfGI5t7YL1a0ZtWC8kcBdxA3OrpMB8GA1UdIwQY MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5 LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUajx6KKq ppyhOBFzpBHUu/oaoI+7zse7QEF6jo8FmwBkhYlsOh1gdycr1b0Aanp3pSr6taDK VMsQnBBqLnwaoULiPh8pYJ7sycuMPzjeSLcJolEQ3qdnDX3dltKrHJHuphmR5YV8 hfw9SqeP0oJebSaUy5T0R1qnBJMW94y/wsWpWCxR2WFPE2cnDmcZZYIN3Xa37QXo sooX1Ass6T0lwwdCrHosgstrmu3P1AQOkdh9x1zBQ2njHfoKPjcWva5qKpmrsPx6 EYw0llhLeWZvRrzu6as0H0L+aeQPK1AUDOWs10w3nUTb4wPhGxdhvmzti30nn5tl fUhYP7+XAFrSug== -----END CERTIFICATE-----Generated at Sat Dec 20 21:18:13 2025 by rpki-client