This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json) Hash identifier: HsgiGlT+/u+M39Q76BOFnNF2TLAJI4epdwd8r3QkcKk= Subject key identifier: C2:DF:93:4D:5E:DF:D0:01:7E:CE:13:85:8E:B0:D6:39:0F:03:8E:C9 Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba Certificate serial: 019B41DB933F32F78B8E79DB54770F5A5748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft Manifest number: 0A19 Signing time: Sun 21 Dec 2025 17:01:07 +0000 Manifest this update: Sun 21 Dec 2025 17:01:07 +0000 Manifest next update: Mon 22 Dec 2025 17:01:07 +0000 Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: aiau69/i1Oi8t1k5gttUxdMBj2XLXVKuanabU488HLU=) 2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:93:3f:32:f7:8b:8e:79:db:54:77:0f:5a:57:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba Validity Not Before: Dec 21 17:01:07 2025 GMT Not After : Dec 22 17:01:07 2025 GMT Subject: CN=c2df934d5edfd0017ece13858eb0d6390f038ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:bc:5f:2a:f0:24:ea:4d:bd:d8:a9:63:61: 18:cf:06:83:f7:e4:72:89:e9:7e:84:9f:71:c4:84: d4:df:88:76:65:f1:63:17:c7:57:9b:a3:24:01:2e: e8:ae:80:fd:f1:f2:ca:dc:72:be:53:2c:26:e9:34: 8e:21:bf:2a:6b:c3:bb:6e:6e:6a:c6:12:72:6b:e8: cd:f0:65:48:81:49:16:d8:de:47:b0:b9:99:61:4d: 88:67:d6:ca:10:4c:f6:ff:82:58:44:70:6a:24:c2: 48:e3:ca:15:2e:e8:7c:a8:32:1f:66:03:c2:10:cf: df:24:b6:0a:63:ed:ef:52:cf:ec:80:d4:86:e7:e3: 45:c8:56:d2:8b:8c:12:ad:47:18:3c:34:5c:ed:5d: 9e:2b:62:aa:c8:ab:2a:c6:d9:f3:9f:14:e9:c1:44: bf:58:9a:95:13:31:e7:e4:22:9f:44:64:db:d5:cb: fd:e3:35:0d:04:63:17:f7:72:c2:e1:92:48:0d:30: 41:09:c7:ab:e1:6d:3d:42:26:2e:e8:7c:44:bc:e9: 58:1a:08:d3:39:37:0f:71:cb:57:f8:3c:ca:ee:81: 00:e0:e6:3d:50:96:ea:27:cd:f0:27:17:a1:0a:41: 9a:41:b7:f3:99:c3:22:93:6a:34:6e:76:bc:ad:c0: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DF:93:4D:5E:DF:D0:01:7E:CE:13:85:8E:B0:D6:39:0F:03:8E:C9 X509v3 Authority Key Identifier: keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c6:fd:c5:97:72:e8:e1:01:0d:2b:41:b1:af:c1:03:59:3d: 6c:f3:fa:ce:28:1f:5d:74:6e:2a:c5:9d:6a:22:b1:2d:0c:e8: a8:ea:a3:c5:2f:41:3f:69:cb:9c:e9:0b:24:f3:c4:a6:88:ac: 89:f9:1a:92:63:5d:3c:78:9b:5d:c8:6c:95:57:4a:38:3b:ab: ac:50:1d:1d:f7:2b:9e:8a:b4:ab:c3:29:ea:bd:d1:cc:dd:72: 03:c3:48:7b:7a:4d:d2:88:58:ec:a8:26:2a:37:a9:7c:1e:d1: aa:01:18:71:b4:26:17:f4:19:69:56:8b:5e:b1:a6:72:6d:86: c4:7f:16:6f:40:82:4b:3b:32:5e:01:3b:9f:8f:46:26:6a:31: 7d:9d:b8:c4:3c:6f:93:e6:97:53:ad:12:e6:8a:fe:d4:b5:5f: a6:0a:ef:f7:fd:19:0d:6c:47:70:18:d5:00:85:78:b8:4a:35: 9d:7c:c3:97:1f:32:16:83:e3:89:4c:6f:0a:48:72:94:0b:1f: 41:3c:b6:34:84:dc:a2:17:5a:18:d8:98:a1:22:73:47:90:bb: b5:d4:41:ff:28:44:45:34:70:d6:e6:e9:f7:e3:aa:8b:6a:f5: de:6b:5b:6e:e3:96:81:c3:38:51:e0:c8:c2:87:25:ab:67:5a: ee:b7:e9:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25M/MveLjnnbVHcPWldIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx N2E0YmEwHhcNMjUxMjIxMTcwMTA3WhcNMjUxMjIyMTcwMTA3WjAzMTEwLwYDVQQD EyhjMmRmOTM0ZDVlZGZkMDAxN2VjZTEzODU4ZWIwZDYzOTBmMDM4ZWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDG8XyrwJOpNvdipY2EYzwaD9+Ry iel+hJ9xxITU34h2ZfFjF8dXm6MkAS7oroD98fLK3HK+Uywm6TSOIb8qa8O7bm5q xhJya+jN8GVIgUkW2N5HsLmZYU2IZ9bKEEz2/4JYRHBqJMJI48oVLuh8qDIfZgPC EM/fJLYKY+3vUs/sgNSG5+NFyFbSi4wSrUcYPDRc7V2eK2KqyKsqxtnznxTpwUS/ WJqVEzHn5CKfRGTb1cv94zUNBGMX93LC4ZJIDTBBCcer4W09QiYu6HxEvOlYGgjT OTcPcctX+DzK7oEA4OY9UJbqJ83wJxehCkGaQbfzmcMik2o0bna8rcAOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLfk01e39ABfs4ThY6w1jkPA47JMB8GA1UdIwQY MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt NjQwZTA3NWJmODdmLzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8b9xZdy 6OEBDStBsa/BA1k9bPP6zigfXXRuKsWdaiKxLQzoqOqjxS9BP2nLnOkLJPPEpois ifkakmNdPHibXchslVdKODurrFAdHfcrnoq0q8Mp6r3RzN1yA8NIe3pN0ohY7Kgm KjepfB7RqgEYcbQmF/QZaVaLXrGmcm2GxH8Wb0CCSzsyXgE7n49GJmoxfZ24xDxv k+aXU60S5or+1LVfpgrv9/0ZDWxHcBjVAIV4uEo1nXzDlx8yFoPjiUxvCkhylAsf QTy2NITcohdaGNiYoSJzR5C7tdRB/yhERTRw1ubp9+Oqi2r13mtbbuOWgcM4UeDI woclq2da7rfpxw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:29 2025 by rpki-client