This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json) Hash identifier: PS6DYp5hT7+bZxToh2Ul9xPCNznZdd/IMRfp7mMJxkQ= Subject key identifier: 19:94:D8:E4:98:29:5A:1B:9D:A9:E0:DF:B0:87:B5:6B:26:A3:9F:B8 Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019B51BC8F9080254348D1C6E0303F2A5B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft Manifest number: 0FAD Signing time: Wed 24 Dec 2025 19:01:10 +0000 Manifest this update: Wed 24 Dec 2025 19:01:10 +0000 Manifest next update: Thu 25 Dec 2025 19:01:10 +0000 Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: v7RdJSybxn+P4Y9feR/027cadAXbFIBT2KRdsBx3NKM=) 2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:8f:90:80:25:43:48:d1:c6:e0:30:3f:2a:5b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Dec 24 19:01:10 2025 GMT Not After : Dec 25 19:01:10 2025 GMT Subject: CN=1994d8e498295a1b9da9e0dfb087b56b26a39fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:61:d0:b0:07:19:e8:98:1d:31:f7:e3:68:0f: 9c:48:a3:44:69:7b:18:91:e8:ac:69:d1:d9:1a:20: 6c:c2:d3:fa:6a:27:18:db:45:f0:24:3b:90:9f:9a: b5:0d:87:1c:13:2b:2c:97:7f:c2:76:26:cf:43:6f: c3:a1:5d:08:b5:2c:68:68:5f:45:f6:bc:76:b0:95: c3:0a:f7:65:e1:4d:ba:3b:47:9f:98:78:8b:47:ce: ef:c5:79:f7:9c:ae:f0:61:58:90:22:2a:f4:52:44: 01:22:ba:03:d2:c9:8f:9f:09:10:79:2c:91:e9:85: b1:b6:f3:f6:86:fa:6a:84:88:a9:17:61:c4:a4:4b: 58:41:ff:89:00:d8:2a:7d:c3:73:a4:a1:1c:3e:8b: 96:7a:21:d7:e8:1a:5d:5a:ed:7c:66:f7:69:1a:70: 70:a9:6d:d7:6f:db:3e:75:0e:7e:1b:2a:e9:77:de: 35:c7:d6:4a:0c:68:be:a1:fc:0a:09:da:7d:9a:c0: ac:63:27:16:3a:71:04:9c:f9:dc:c6:69:2f:6a:55: 3f:6f:81:d5:97:de:a0:9c:5f:63:d4:8f:42:ea:6a: 71:17:4b:bc:49:6a:3f:d1:2b:1c:af:4b:80:5f:f7: cd:e0:ff:20:fe:0b:49:7f:eb:ee:51:e7:03:f8:04: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:94:D8:E4:98:29:5A:1B:9D:A9:E0:DF:B0:87:B5:6B:26:A3:9F:B8 X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:96:a8:0f:80:ae:5e:ce:1d:e0:52:80:dc:ce:df:18:a0:3d: e6:73:ab:7c:44:4c:2c:be:9b:78:2a:7d:0a:5e:1a:21:d8:e0: ed:82:a6:c9:07:07:f7:fa:88:d0:63:ec:41:06:08:f8:a3:81: 39:82:51:6a:73:bd:3c:47:37:c9:29:9b:05:52:29:3a:f6:ea: 64:d6:a4:09:07:e0:33:54:9d:0f:0f:21:13:dc:8c:6b:72:65: d3:8b:fc:ac:c5:d9:93:8d:ab:b5:f4:f4:84:2c:59:db:ef:6e: 04:f0:9c:e0:f5:62:d6:37:6a:83:f9:4f:9e:e1:a1:89:93:d1: a3:e3:61:88:a5:de:ef:bf:d7:fa:46:ff:0c:40:0e:1f:28:1a: 05:86:95:3c:97:49:ff:f1:8d:a5:7e:5c:e6:22:e8:c9:2d:2b: dd:fd:4a:88:3c:28:b2:48:2c:d2:d1:21:e7:1e:c4:58:fa:68: 00:21:df:14:82:07:5e:76:40:bc:9a:18:7a:14:07:aa:3b:05: f6:65:4d:bc:37:db:b1:5e:bb:68:b0:82:39:c9:6a:44:08:75: 1c:45:1a:bd:a4:06:43:33:30:a6:0f:1e:10:42:e1:a8:c7:81: d3:04:a2:40:f1:f0:c9:ef:b2:12:1a:bf:ad:27:22:93:3e:12: 8d:af:f2:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvI+QgCVDSNHG4DA/KluRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjUxMjI0MTkwMTEwWhcNMjUxMjI1MTkwMTEwWjAzMTEwLwYDVQQD EygxOTk0ZDhlNDk4Mjk1YTFiOWRhOWUwZGZiMDg3YjU2YjI2YTM5ZmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWHQsAcZ6JgdMffjaA+cSKNEaXsY keisadHZGiBswtP6aicY20XwJDuQn5q1DYccEyssl3/CdibPQ2/DoV0ItSxoaF9F 9rx2sJXDCvdl4U26O0efmHiLR87vxXn3nK7wYViQIir0UkQBIroD0smPnwkQeSyR 6YWxtvP2hvpqhIipF2HEpEtYQf+JANgqfcNzpKEcPouWeiHX6BpdWu18ZvdpGnBw qW3Xb9s+dQ5+Gyrpd941x9ZKDGi+ofwKCdp9msCsYycWOnEEnPncxmkvalU/b4HV l96gnF9j1I9C6mpxF0u8SWo/0Sscr0uAX/fN4P8g/gtJf+vuUecD+AQK8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmU2OSYKVobnang37CHtWsmo5+4MB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpaoD4Cu Xs4d4FKA3M7fGKA95nOrfERMLL6beCp9Cl4aIdjg7YKmyQcH9/qI0GPsQQYI+KOB OYJRanO9PEc3ySmbBVIpOvbqZNakCQfgM1SdDw8hE9yMa3Jl04v8rMXZk42rtfT0 hCxZ2+9uBPCc4PVi1jdqg/lPnuGhiZPRo+NhiKXe77/X+kb/DEAOHygaBYaVPJdJ //GNpX5c5iLoyS0r3f1KiDwoskgs0tEh5x7EWPpoACHfFIIHXnZAvJoYehQHqjsF 9mVNvDfbsV67aLCCOclqRAh1HEUavaQGQzMwpg8eEELhqMeB0wSiQPHwye+yEhq/ rScikz4Sja/yag== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:34 2025 by rpki-client