This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft File: fi3yT4V3zASMPHn7jbFIPnt14l0.mft (raw, json) Hash identifier: HC7C3UMdVcUkkuUEVzM8zzd5V02Bgbz8qWuQnprAtWQ= Subject key identifier: 84:E3:0D:F2:CB:F2:AE:A0:3C:72:34:37:36:48:E4:DA:54:DE:D1:61 Authority key identifier: 7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D Certificate issuer: /CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d Certificate serial: 019B45B800D3602FD464C183224CD4ACCE99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft Manifest number: 0215 Signing time: Mon 22 Dec 2025 11:00:45 +0000 Manifest this update: Mon 22 Dec 2025 11:00:45 +0000 Manifest next update: Tue 23 Dec 2025 11:00:45 +0000 Files and hashes: 1: fi3yT4V3zASMPHn7jbFIPnt14l0.crl (hash: HztBb4w7158VP/lfpicZ5GB7g8aB5b+bjDK9GEJwpAs=) 2: hyvVkmYmp_Y-JQm2DlccYLeH864.roa (hash: VaFEZ5cWbIO/7jTIbMlqrCVV+YCmqTrdOrKl1z8IWMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:00:d3:60:2f:d4:64:c1:83:22:4c:d4:ac:ce:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2df24f8577cc048c3c79fb8db1483e7b75e25d Validity Not Before: Dec 22 11:00:45 2025 GMT Not After : Dec 23 11:00:45 2025 GMT Subject: CN=84e30df2cbf2aea03c7234373648e4da54ded161 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:01:1d:07:92:ad:4b:7c:a4:e3:90:e0:f8: 6e:da:c6:a6:97:30:5e:d1:0e:0b:d8:51:9a:73:02: 49:e1:26:65:e6:1a:88:17:e7:6e:9b:c9:49:2e:a5: 15:cf:23:4f:38:25:02:b3:94:86:bf:eb:39:d6:45: 92:0b:cb:8e:af:11:2c:8d:99:72:b4:70:f4:d1:5b: 08:09:52:ed:bc:d1:eb:a8:ba:e2:ff:af:b5:67:9f: 33:11:0d:6c:eb:72:e2:53:eb:19:41:90:ec:fd:d6: ae:cf:a5:be:6d:ea:ab:8b:d2:c0:70:20:23:00:b1: 95:63:82:49:cd:ed:87:c6:a9:02:d5:94:e7:0a:2e: fe:e2:fe:bb:a3:8a:b9:38:6f:a5:4e:ce:f4:d3:7e: e2:6d:4b:d9:43:97:8b:9d:c4:6f:79:80:bd:2f:39: 2d:9e:1e:77:7b:30:a6:88:eb:0f:cb:ab:57:39:04: 26:06:c8:53:11:7e:1b:c5:37:c8:35:47:b5:2b:48: e0:86:90:07:6a:49:b0:9c:0e:91:0f:e0:c5:e6:5a: b5:43:4b:60:c0:e7:86:9a:63:df:fd:39:d6:a3:f9: d5:f8:d0:d4:50:5a:81:a9:ff:4a:5e:e4:37:41:5b: 90:63:36:b3:41:0c:14:45:f8:a1:f2:90:0c:63:fa: fc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:0D:F2:CB:F2:AE:A0:3C:72:34:37:36:48:E4:DA:54:DE:D1:61 X509v3 Authority Key Identifier: keyid:7E:2D:F2:4F:85:77:CC:04:8C:3C:79:FB:8D:B1:48:3E:7B:75:E2:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi3yT4V3zASMPHn7jbFIPnt14l0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eb9402-353a-4967-a314-b775f1ccac6a/1/fi3yT4V3zASMPHn7jbFIPnt14l0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1b:dd:0f:44:59:97:b7:1f:c3:85:17:85:8f:9e:18:58:b9: 73:7c:19:f7:16:4b:0a:a4:cc:0d:e8:8c:44:97:d0:0d:e8:54: 19:5e:0b:d8:06:ec:0b:fb:3d:24:e0:d4:27:a8:ab:90:d4:35: df:ea:74:10:e9:38:22:51:35:e4:c6:97:3b:0f:4c:05:5f:d1: 14:cf:1c:f7:89:e3:57:78:3a:eb:85:7e:2b:bd:a0:3b:0b:b0: 5a:a9:0e:f8:d5:32:78:4f:e9:a6:66:14:30:4d:de:4e:a3:f5: 2e:42:05:24:7e:fe:f6:89:a8:90:1e:0f:74:5d:61:97:a6:fd: 0a:12:77:77:53:66:98:5e:92:d7:bd:5b:0b:80:a1:5e:5c:08: f0:7c:60:9b:ae:04:67:8c:0b:68:97:39:d2:c8:bb:46:1b:af: db:2b:dd:9d:a0:72:cd:bd:f2:25:63:de:75:a5:35:1b:af:7d: ad:6e:08:ec:92:e3:6f:f8:3d:06:3e:50:23:6b:7e:6b:a5:f1: 48:79:01:7c:86:6a:9a:52:7c:4c:25:5f:d5:3f:63:c5:b8:ac: 15:5b:30:70:6e:1b:ca:14:08:d6:dc:91:39:9f:1c:8b:18:54: 18:f1:e6:f5:38:d6:39:5d:9a:e5:de:c9:6d:4e:9d:d1:7e:cd: b2:80:23:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuADTYC/UZMGDIkzUrM6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmRmMjRmODU3N2NjMDQ4YzNjNzlmYjhkYjE0ODNlN2I3 NWUyNWQwHhcNMjUxMjIyMTEwMDQ1WhcNMjUxMjIzMTEwMDQ1WjAzMTEwLwYDVQQD Eyg4NGUzMGRmMmNiZjJhZWEwM2M3MjM0MzczNjQ4ZTRkYTU0ZGVkMTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQBHQeSrUt8pOOQ4Phu2samlzBe 0Q4L2FGacwJJ4SZl5hqIF+dum8lJLqUVzyNPOCUCs5SGv+s51kWSC8uOrxEsjZly tHD00VsICVLtvNHrqLri/6+1Z58zEQ1s63LiU+sZQZDs/dauz6W+beqri9LAcCAj ALGVY4JJze2HxqkC1ZTnCi7+4v67o4q5OG+lTs70037ibUvZQ5eLncRveYC9Lzkt nh53ezCmiOsPy6tXOQQmBshTEX4bxTfINUe1K0jghpAHakmwnA6RD+DF5lq1Q0tg wOeGmmPf/TnWo/nV+NDUUFqBqf9KXuQ3QVuQYzazQQwURfih8pAMY/r8PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITjDfLL8q6gPHI0NzZI5NpU3tFhMB8GA1UdIwQY MBaAFH4t8k+Fd8wEjDx5+42xSD57deJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9lYjk0MDItMzUzYS00OTY3LWEzMTQt Yjc3NWYxY2NhYzZhLzEvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9lYjk0MDItMzUzYS00OTY3LWEzMTQtYjc3NWYxY2NhYzZh LzEvZmkzeVQ0VjN6QVNNUEhuN2piRklQbnQxNGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhvdD0RZ l7cfw4UXhY+eGFi5c3wZ9xZLCqTMDeiMRJfQDehUGV4L2AbsC/s9JODUJ6irkNQ1 3+p0EOk4IlE15MaXOw9MBV/RFM8c94njV3g664V+K72gOwuwWqkO+NUyeE/ppmYU ME3eTqP1LkIFJH7+9omokB4PdF1hl6b9ChJ3d1NmmF6S171bC4ChXlwI8Hxgm64E Z4wLaJc50si7Rhuv2yvdnaByzb3yJWPedaU1G699rW4I7JLjb/g9Bj5QI2t+a6Xx SHkBfIZqmlJ8TCVf1T9jxbisFVswcG4byhQI1tyROZ8cixhUGPHm9TjWOV2a5d7J bU6d0X7NsoAjvA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:42:42 2025 by rpki-client