This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json) Hash identifier: oLtzzvgOEWu9TVflsTeDxzdfkCZygqkEbGKsnD+ZueI= Subject key identifier: 42:B7:04:21:F2:F8:C9:D5:E3:A3:C3:E0:C7:D9:C5:A2:42:0C:F9:AB Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37 Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237 Certificate serial: 019B5DC051FA2D109E79DC8043B949BF6710 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft Manifest number: 11FB Signing time: Sat 27 Dec 2025 03:00:43 +0000 Manifest this update: Sat 27 Dec 2025 03:00:43 +0000 Manifest next update: Sun 28 Dec 2025 03:00:43 +0000 Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: Ba8I/8xm2H1kbjDR+e5ehsoGUpP2WCvRJW2CS7IqKAA=) 2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:51:fa:2d:10:9e:79:dc:80:43:b9:49:bf:67:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237 Validity Not Before: Dec 27 03:00:43 2025 GMT Not After : Dec 28 03:00:43 2025 GMT Subject: CN=42b70421f2f8c9d5e3a3c3e0c7d9c5a2420cf9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:68:11:91:30:66:87:95:4c:d5:82:5d:4f:1b: 30:3e:39:3e:4e:6e:07:40:f6:f3:43:e3:52:a1:21: e2:d4:96:5c:a7:0f:d0:63:13:a8:e5:36:a6:5d:d2: 17:ed:58:b0:3d:6d:c1:3f:0c:bf:fb:7a:f8:f1:69: c4:56:04:01:93:94:7c:c3:23:6e:00:49:32:9a:73: f7:8e:c4:2d:60:81:43:28:9f:ed:ae:de:df:e7:6b: f6:dd:b4:91:36:d9:c6:5a:43:1c:9b:8e:3e:73:cf: 95:ea:c2:70:7a:77:70:47:35:c4:90:0d:cd:6f:52: 93:75:5a:d5:33:5b:4c:b3:37:db:3d:00:6d:d4:94: 97:03:3b:08:9c:9d:35:b8:d8:3b:ab:72:c6:15:42: d6:b0:94:f7:5f:0f:d1:86:2c:35:9b:a3:a2:da:13: 74:06:61:e5:dc:ca:eb:a7:bc:84:b0:80:b2:44:63: 09:ce:ab:cc:83:cd:47:0f:e3:98:6d:88:59:1d:03: c3:9f:47:09:aa:ff:cd:15:aa:00:3b:42:5f:c3:f1: 61:35:88:51:0b:7f:1b:b2:30:b4:25:8e:25:94:7b: 21:c0:2a:8a:89:1b:4b:58:a0:a1:92:93:58:0d:24: dc:31:2a:d5:9c:34:84:c4:38:86:b7:87:bc:34:3d: d1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B7:04:21:F2:F8:C9:D5:E3:A3:C3:E0:C7:D9:C5:A2:42:0C:F9:AB X509v3 Authority Key Identifier: keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cf:9e:dd:1a:60:74:3d:dd:21:c0:b9:01:87:80:b8:f5:90: c5:55:02:fe:75:6e:fa:79:1f:28:4f:4a:4e:a3:a4:37:c1:dc: 5a:00:ac:56:8f:ef:22:a5:ee:24:54:60:97:9c:cf:8d:09:96: 2c:16:89:41:e8:6b:6b:97:a5:e5:f7:87:2e:63:ba:eb:a3:e6: f2:ff:29:1e:0b:7d:a4:19:db:30:64:2c:4b:bc:59:e9:2c:1a: fa:6c:4c:42:e6:70:6c:70:34:9c:a0:00:30:72:94:9c:78:ed: 9d:4a:2f:47:6c:fb:72:b9:46:66:88:8b:35:0c:0d:6a:69:72: 95:55:e5:e9:cf:76:c2:d5:7a:28:fa:08:65:c8:fc:07:35:9e: d1:56:ce:fc:9d:ce:eb:57:79:6a:85:80:dc:57:53:ca:96:8b: 59:0e:1a:de:50:11:8b:4d:42:97:90:5e:55:a8:52:32:c0:bf: 1b:28:35:68:d6:1a:1f:fa:0f:f9:ea:ac:b0:54:30:13:19:62: e7:12:7d:61:e1:c1:e0:d4:d2:28:8c:54:9b:de:39:a0:dd:a4: 57:de:92:ab:ca:6b:c8:11:95:17:ef:3d:a9:0d:92:54:06:cc: 58:d6:fa:70:76:58:07:84:60:d6:5d:81:9a:08:91:49:59:51: 49:bf:d4:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwFH6LRCeedyAQ7lJv2cQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy MjIyMzcwHhcNMjUxMjI3MDMwMDQzWhcNMjUxMjI4MDMwMDQzWjAzMTEwLwYDVQQD Eyg0MmI3MDQyMWYyZjhjOWQ1ZTNhM2MzZTBjN2Q5YzVhMjQyMGNmOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmgRkTBmh5VM1YJdTxswPjk+Tm4H QPbzQ+NSoSHi1JZcpw/QYxOo5TamXdIX7ViwPW3BPwy/+3r48WnEVgQBk5R8wyNu AEkymnP3jsQtYIFDKJ/trt7f52v23bSRNtnGWkMcm44+c8+V6sJwendwRzXEkA3N b1KTdVrVM1tMszfbPQBt1JSXAzsInJ01uNg7q3LGFULWsJT3Xw/Rhiw1m6Oi2hN0 BmHl3Mrrp7yEsICyRGMJzqvMg81HD+OYbYhZHQPDn0cJqv/NFaoAO0Jfw/FhNYhR C38bsjC0JY4llHshwCqKiRtLWKChkpNYDSTcMSrVnDSExDiGt4e8ND3R9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEK3BCHy+MnV46PD4MfZxaJCDPmrMB8GA1UdIwQY MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt MDM5NjFlMmIwNjAxLzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8+e3Rpg dD3dIcC5AYeAuPWQxVUC/nVu+nkfKE9KTqOkN8HcWgCsVo/vIqXuJFRgl5zPjQmW LBaJQehra5el5feHLmO666Pm8v8pHgt9pBnbMGQsS7xZ6Swa+mxMQuZwbHA0nKAA MHKUnHjtnUovR2z7crlGZoiLNQwNamlylVXl6c92wtV6KPoIZcj8BzWe0VbO/J3O 61d5aoWA3FdTypaLWQ4a3lARi01Cl5BeVahSMsC/Gyg1aNYaH/oP+eqssFQwExli 5xJ9YeHB4NTSKIxUm945oN2kV96Sq8pryBGVF+89qQ2SVAbMWNb6cHZYB4Rg1l2B mgiRSVlRSb/UnQ== -----END CERTIFICATE-----Generated at Sat Dec 27 10:04:09 2025 by rpki-client