This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json) Hash identifier: nQ8GurkFLd4wjVayJHNVlseKN9Nco5Rj1XK8REk7zx0= Subject key identifier: 2A:6F:CC:4F:C7:23:94:3C:9D:29:A6:65:15:ED:98:D8:5A:50:26:0F Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61 Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61 Certificate serial: 019B40C90750DC390B445129FC6AC4A41CEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft Manifest number: 068F Signing time: Sun 21 Dec 2025 12:01:14 +0000 Manifest this update: Sun 21 Dec 2025 12:01:14 +0000 Manifest next update: Mon 22 Dec 2025 12:01:14 +0000 Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: UIKxa0fQcITmS2seiOaG4cBijftZPqWtYpmhNLxejTg=) 2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:07:50:dc:39:0b:44:51:29:fc:6a:c4:a4:1c:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61 Validity Not Before: Dec 21 12:01:14 2025 GMT Not After : Dec 22 12:01:14 2025 GMT Subject: CN=2a6fcc4fc723943c9d29a66515ed98d85a50260f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:14:4d:b0:f2:02:3e:c6:13:b9:e0:51:d9: 66:23:b7:ba:20:6a:05:0a:79:32:7f:78:03:c8:86: 52:a6:7a:cf:1d:aa:2a:16:ad:de:9c:6c:50:1c:b6: 6e:c2:82:5f:5a:09:8d:c2:ca:4d:a5:e7:6f:e1:71: 24:56:66:5f:c9:61:b2:e4:37:88:3a:fb:b0:2f:cc: b2:16:ed:f3:aa:81:b3:d3:a8:50:1a:cd:fd:dd:40: 1f:cb:7f:2d:5c:87:43:92:6b:02:26:a2:03:3d:76: 45:29:88:ef:45:88:51:92:b6:cd:13:91:d0:a1:78: 23:db:74:02:ed:5a:a0:42:ac:7f:26:df:6b:e0:b0: ad:1e:09:01:05:c1:10:e4:fd:5e:4b:c9:4c:02:5a: 3a:20:fe:c4:ab:80:85:ef:ae:5e:0b:2b:05:b4:16: 61:87:1e:da:75:64:ac:64:f6:03:e3:71:45:b3:bf: 38:27:f9:4b:f0:1f:58:0b:81:7b:57:1b:af:c3:be: 91:bb:a5:e6:7b:fa:e8:16:da:bf:b0:03:b0:25:2e: c7:59:ce:cd:bd:72:55:f6:05:4d:d9:bd:ac:2a:bf: f5:68:34:72:da:87:56:20:5b:73:d6:d4:ce:a5:99: c0:ca:e9:77:cd:58:70:55:b1:5c:3f:fa:91:88:4a: 9a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6F:CC:4F:C7:23:94:3C:9D:29:A6:65:15:ED:98:D8:5A:50:26:0F X509v3 Authority Key Identifier: keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:60:1c:57:1e:b1:91:93:af:8e:33:23:6a:81:f8:95:68:fc: 95:dd:a0:73:4e:23:4b:50:78:64:09:1f:12:d1:53:fe:e1:9a: 08:5a:e2:46:e4:26:56:11:b9:5c:05:94:d8:fd:11:55:8d:4d: e7:20:88:85:ad:ad:24:76:ac:05:ee:98:bf:82:4c:69:ab:4e: d3:d2:56:9e:e4:0b:46:39:57:04:70:44:93:55:70:86:f9:11: c7:c0:6e:76:41:ee:a9:e9:3d:d5:ee:3a:24:88:e6:e6:7f:ce: 9a:65:46:03:04:d9:31:98:f6:19:22:45:ba:d7:d8:c7:e7:d3: db:67:79:0f:cd:db:4a:b5:da:51:df:36:3e:6e:5b:e2:37:22: a9:59:88:1e:b8:c7:7b:3e:27:17:d1:ca:8e:8a:7e:83:a2:31: 2e:1c:f4:76:a6:aa:6b:ba:63:38:e4:99:36:e7:b3:06:30:90: 47:0b:b3:c5:c2:a4:d8:c1:50:cb:02:50:cf:da:ad:ff:a1:52: 2f:4f:d5:0a:43:f2:df:18:82:23:3f:c2:e5:55:fe:b9:3b:73: de:44:52:9c:75:bd:78:1b:94:6a:d4:b0:0e:e1:de:f7:ae:2a: 91:6d:02:9c:bf:9a:4b:ef:d2:35:40:cb:b4:99:a6:d7:76:66: dc:aa:3d:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyQdQ3DkLRFEp/GrEpBzrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0 Y2RhNjEwHhcNMjUxMjIxMTIwMTE0WhcNMjUxMjIyMTIwMTE0WjAzMTEwLwYDVQQD EygyYTZmY2M0ZmM3MjM5NDNjOWQyOWE2NjUxNWVkOThkODVhNTAyNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLUUTbDyAj7GE7ngUdlmI7e6IGoF Cnkyf3gDyIZSpnrPHaoqFq3enGxQHLZuwoJfWgmNwspNpedv4XEkVmZfyWGy5DeI OvuwL8yyFu3zqoGz06hQGs393UAfy38tXIdDkmsCJqIDPXZFKYjvRYhRkrbNE5HQ oXgj23QC7VqgQqx/Jt9r4LCtHgkBBcEQ5P1eS8lMAlo6IP7Eq4CF765eCysFtBZh hx7adWSsZPYD43FFs784J/lL8B9YC4F7Vxuvw76Ru6Xme/roFtq/sAOwJS7HWc7N vXJV9gVN2b2sKr/1aDRy2odWIFtz1tTOpZnAyul3zVhwVbFcP/qRiEqaSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpvzE/HI5Q8nSmmZRXtmNhaUCYPMB8GA1UdIwQY MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK2AcVx6x kZOvjjMjaoH4lWj8ld2gc04jS1B4ZAkfEtFT/uGaCFriRuQmVhG5XAWU2P0RVY1N 5yCIha2tJHasBe6Yv4JMaatO09JWnuQLRjlXBHBEk1VwhvkRx8BudkHuqek91e46 JIjm5n/OmmVGAwTZMZj2GSJFutfYx+fT22d5D83bSrXaUd82Pm5b4jciqVmIHrjH ez4nF9HKjop+g6IxLhz0dqaqa7pjOOSZNuezBjCQRwuzxcKk2MFQywJQz9qt/6FS L0/VCkPy3xiCIz/C5VX+uTtz3kRSnHW9eBuUatSwDuHe964qkW0CnL+aS+/SNUDL tJmm13Zm3Ko99g== -----END CERTIFICATE-----Generated at Sun Dec 21 14:59:15 2025 by rpki-client