This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json) Hash identifier: b4zOTVmGAyqYsB8LGXg26obS8Cs7lrNGlkjUgFOqd+k= Subject key identifier: 7E:E0:7E:F9:43:81:D8:8C:74:2B:69:74:83:9C:AC:F6:B4:E4:01:B9 Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Certificate serial: 019B5418A9AE4B4AE8BC20A9A15C81B27A74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft Manifest number: 1298 Signing time: Thu 25 Dec 2025 06:01:00 +0000 Manifest this update: Thu 25 Dec 2025 06:01:00 +0000 Manifest next update: Fri 26 Dec 2025 06:01:00 +0000 Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=) 2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=) 3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=) 4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=) 5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: ou5t7pFR0Z8jroc9TpAsHffB4tvgLGw6vrkR3MfbMCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:a9:ae:4b:4a:e8:bc:20:a9:a1:5c:81:b2:7a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Validity Not Before: Dec 25 06:01:00 2025 GMT Not After : Dec 26 06:01:00 2025 GMT Subject: CN=7ee07ef94381d88c742b6974839cacf6b4e401b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e5:e2:db:75:28:bc:58:b0:55:f1:5e:6d:2c: 5a:d2:3f:6a:8e:d7:b7:0d:d7:c2:59:d5:30:e2:df: 64:08:9e:21:18:c6:74:fb:f1:34:14:a7:0d:5d:36: 93:79:b3:9f:ce:08:1e:76:22:8b:cf:f8:af:db:f3: 31:9d:bf:c1:e0:2b:6b:db:03:ed:23:7b:ce:c9:f0: b8:01:56:ea:7e:27:62:80:29:6d:3d:c4:aa:32:93: 9e:a2:2f:02:eb:ba:5d:be:6c:7e:70:2d:5f:e8:50: ef:67:89:df:bb:5b:f2:7c:06:21:b1:49:1c:81:c9: a1:91:01:ee:d3:57:ed:dd:4a:27:69:79:3a:51:cc: 36:c7:23:fb:c5:0a:e4:4f:54:a2:8c:01:a5:4c:36: bf:6b:3c:da:9a:ec:13:3c:b4:84:0e:80:10:68:42: b2:8a:11:00:15:18:f8:34:34:a1:bc:d7:e8:4c:b9: a4:aa:a6:22:2b:92:f5:b9:cd:b2:e5:e4:ba:38:8e: a7:d4:c2:35:01:02:48:de:4a:6b:43:d2:c5:7b:3d: ee:72:8b:f4:b5:d9:64:f7:78:9c:16:e8:96:ce:b3: 69:77:31:03:6c:5f:ad:60:f2:bf:3f:a9:84:89:04: d0:f0:76:c1:59:25:4a:1a:96:2c:2a:89:f4:a9:fa: c6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E0:7E:F9:43:81:D8:8C:74:2B:69:74:83:9C:AC:F6:B4:E4:01:B9 X509v3 Authority Key Identifier: keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d6:2c:02:7f:39:a6:34:0c:95:1c:90:a3:5a:ca:17:ce:5e: 99:35:59:84:1d:35:f6:92:10:8b:db:01:74:7c:4a:5c:82:7d: 63:2b:4e:bc:7c:b1:49:98:c5:fb:0a:13:56:6a:e9:cb:16:6c: 4d:53:55:f7:de:32:f4:e0:d2:26:92:21:97:e1:8e:9d:8c:89: d7:dd:bb:6b:75:7f:b6:2e:e2:f4:6d:0e:0e:89:b1:73:e8:28: 3a:7d:95:88:27:6c:ba:3f:ba:c8:02:ac:16:fa:71:fa:1c:a2: e9:b3:d5:12:37:51:b2:59:d0:aa:92:55:07:4b:94:e2:11:e0: 39:d1:0e:19:af:d5:1a:c5:de:63:cf:8f:8d:3d:f7:97:71:88: 01:3c:ae:d3:16:b3:7b:bc:9c:da:d1:84:83:eb:90:1c:dd:ab: 2e:1b:34:a2:23:db:a3:be:6e:74:6c:e3:4f:57:52:16:01:4b: 4d:c9:45:10:28:53:e4:03:a3:d9:85:a6:d3:47:d0:9f:95:d2: f9:2d:4f:02:d9:c8:7e:a3:25:24:01:d8:a4:e6:c7:b6:62:ec: 4f:8b:3d:9f:d7:3c:ef:43:3d:ea:72:9e:da:51:71:d9:19:70: 71:e3:ba:c7:a4:58:aa:4a:99:d6:1a:75:04:03:3f:d2:d6:da: bf:fd:77:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGKmuS0rovCCpoVyBsnp0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi NTlkZDYwHhcNMjUxMjI1MDYwMTAwWhcNMjUxMjI2MDYwMTAwWjAzMTEwLwYDVQQD Eyg3ZWUwN2VmOTQzODFkODhjNzQyYjY5NzQ4MzljYWNmNmI0ZTQwMWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uXi23UovFiwVfFebSxa0j9qjte3 DdfCWdUw4t9kCJ4hGMZ0+/E0FKcNXTaTebOfzggediKLz/iv2/Mxnb/B4Ctr2wPt I3vOyfC4AVbqfidigCltPcSqMpOeoi8C67pdvmx+cC1f6FDvZ4nfu1vyfAYhsUkc gcmhkQHu01ft3UonaXk6Ucw2xyP7xQrkT1SijAGlTDa/azzamuwTPLSEDoAQaEKy ihEAFRj4NDShvNfoTLmkqqYiK5L1uc2y5eS6OI6n1MI1AQJI3kprQ9LFez3ucov0 tdlk93icFuiWzrNpdzEDbF+tYPK/P6mEiQTQ8HbBWSVKGpYsKon0qfrG4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7gfvlDgdiMdCtpdIOcrPa05AG5MB8GA1UdIwQY MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt NzUyOTUyNTFiMWU4LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4 LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNYsAn85 pjQMlRyQo1rKF85emTVZhB019pIQi9sBdHxKXIJ9YytOvHyxSZjF+woTVmrpyxZs TVNV994y9ODSJpIhl+GOnYyJ1927a3V/ti7i9G0ODomxc+goOn2ViCdsuj+6yAKs Fvpx+hyi6bPVEjdRslnQqpJVB0uU4hHgOdEOGa/VGsXeY8+PjT33l3GIATyu0xaz e7yc2tGEg+uQHN2rLhs0oiPbo75udGzjT1dSFgFLTclFEChT5AOj2YWm00fQn5XS +S1PAtnIfqMlJAHYpObHtmLsT4s9n9c870M96nKe2lFx2RlwceO6x6RYqkqZ1hp1 BAM/0tbav/13fw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:20:56 2025 by rpki-client