This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json) Hash identifier: ETomAMhLjNqaq+ZY2fysOXQsM2Ll+MCzVv2E+YQKpfU= Subject key identifier: 66:A2:94:B6:59:01:8B:BB:73:BA:CF:CC:C0:77:D3:87:56:D4:B3:62 Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Certificate serial: 019B3C1007480B24014BBC3CFAD4B397FED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft Manifest number: 0840 Signing time: Sat 20 Dec 2025 14:00:41 +0000 Manifest this update: Sat 20 Dec 2025 14:00:41 +0000 Manifest next update: Sun 21 Dec 2025 14:00:41 +0000 Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=) 2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: UqYKNjBT7UcjWjLOBuvFMJORicBwgKHE8dmVfT+OVUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:07:48:0b:24:01:4b:bc:3c:fa:d4:b3:97:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Validity Not Before: Dec 20 14:00:41 2025 GMT Not After : Dec 21 14:00:41 2025 GMT Subject: CN=66a294b659018bbb73bacfccc077d38756d4b362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a6:b0:d5:53:0e:50:04:32:15:4a:62:df:0a: 43:f4:68:49:c2:f2:56:76:62:5a:3f:33:09:93:65: 15:24:11:65:20:dd:a1:2c:cf:e1:e1:fa:df:7e:a9: 0c:0d:d3:55:f5:f5:d2:b7:97:7a:70:ea:cb:21:78: 6c:eb:dd:a2:51:05:6d:c5:6b:08:aa:36:d8:11:3f: f7:12:df:bd:b9:42:6c:4d:ee:aa:df:b5:ef:01:69: f1:d3:e4:80:5f:7f:29:6f:24:19:b8:32:a1:ca:75: 8e:ac:a0:68:4d:c3:08:e4:73:a3:97:06:bd:c9:cd: 44:84:a4:77:f5:4b:8a:96:a9:28:38:d8:00:28:b9: ef:c7:59:26:97:f4:65:63:ab:f8:29:da:3e:92:95: 44:74:9c:b0:eb:eb:27:9a:c2:b1:01:d6:f0:1a:10: 1c:00:2b:66:84:da:15:22:96:15:1a:3e:be:25:3c: b6:22:1f:0b:80:74:56:91:25:41:ad:80:b5:96:61: e9:ef:70:09:5b:b3:4a:20:f3:ef:c9:4d:c0:12:49: ee:cb:9b:b5:e8:f8:ac:11:84:37:75:1e:75:9e:b2: de:4d:b8:5f:5f:a5:2d:0c:5a:7c:75:20:01:25:11: f4:cb:3e:77:fe:c8:8a:d4:e4:d4:43:f9:c1:6f:cc: 7b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A2:94:B6:59:01:8B:BB:73:BA:CF:CC:C0:77:D3:87:56:D4:B3:62 X509v3 Authority Key Identifier: keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a9:ba:e7:0a:9b:f3:0e:8b:4d:3a:66:29:b3:b7:78:51:21: b8:70:e4:90:7d:43:fe:38:2e:8f:66:0c:57:f9:3f:ad:0a:63: 53:68:bd:14:e2:8a:91:5f:d4:64:59:a0:95:79:cd:7b:d0:2d: e3:e6:59:89:97:5f:7f:b1:b5:94:f6:37:e5:60:31:1e:ee:a9: d7:2c:ae:41:19:d5:34:ac:b8:bb:ea:93:7d:94:87:31:ec:96: 88:af:ce:ee:c8:80:87:79:b2:05:eb:d6:13:ea:ee:d4:a1:0c: c9:16:00:fd:b4:d2:d3:6c:4c:32:1b:ac:1a:2c:64:d1:d9:43: ef:1c:6f:20:e0:00:3e:f5:32:e8:5b:21:80:f4:97:e9:dd:02: 98:1d:c4:23:57:7f:93:49:08:3a:d1:69:0d:52:67:47:52:78: 16:da:f9:cc:55:2e:b9:d3:ef:4b:ca:da:e0:f6:77:69:30:6c: 4e:ed:18:17:8a:2a:95:1d:03:7b:f3:d9:5b:4e:bf:4a:b0:16: 5b:09:f1:31:8f:99:d7:11:6a:d7:f3:c1:4c:16:ee:2f:76:51: 16:c7:ab:9f:b8:06:40:a5:31:f4:7d:4b:d9:59:06:7c:f5:6a: 1c:70:d6:fe:ca:a4:ff:45:3a:08:6a:16:5e:cf:2e:82:78:b9: 41:ae:0e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EAdICyQBS7w8+tSzl/7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy OTY1Y2EwHhcNMjUxMjIwMTQwMDQxWhcNMjUxMjIxMTQwMDQxWjAzMTEwLwYDVQQD Eyg2NmEyOTRiNjU5MDE4YmJiNzNiYWNmY2NjMDc3ZDM4NzU2ZDRiMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKaw1VMOUAQyFUpi3wpD9GhJwvJW dmJaPzMJk2UVJBFlIN2hLM/h4frffqkMDdNV9fXSt5d6cOrLIXhs692iUQVtxWsI qjbYET/3Et+9uUJsTe6q37XvAWnx0+SAX38pbyQZuDKhynWOrKBoTcMI5HOjlwa9 yc1EhKR39UuKlqkoONgAKLnvx1kml/RlY6v4Kdo+kpVEdJyw6+snmsKxAdbwGhAc ACtmhNoVIpYVGj6+JTy2Ih8LgHRWkSVBrYC1lmHp73AJW7NKIPPvyU3AEknuy5u1 6PisEYQ3dR51nrLeTbhfX6UtDFp8dSABJRH0yz53/siK1OTUQ/nBb8x7/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGailLZZAYu7c7rPzMB304dW1LNiMB8GA1UdIwQY MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3 LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKm65wqb 8w6LTTpmKbO3eFEhuHDkkH1D/jguj2YMV/k/rQpjU2i9FOKKkV/UZFmglXnNe9At 4+ZZiZdff7G1lPY35WAxHu6p1yyuQRnVNKy4u+qTfZSHMeyWiK/O7siAh3myBevW E+ru1KEMyRYA/bTS02xMMhusGixk0dlD7xxvIOAAPvUy6FshgPSX6d0CmB3EI1d/ k0kIOtFpDVJnR1J4Ftr5zFUuudPvS8ra4PZ3aTBsTu0YF4oqlR0De/PZW06/SrAW WwnxMY+Z1xFq1/PBTBbuL3ZRFsern7gGQKUx9H1L2VkGfPVqHHDW/sqk/0U6CGoW Xs8ugni5Qa4OVg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:12:51 2025 by rpki-client