This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json) Hash identifier: zLQzXgybI1dbvO6SnEaKVJHUcloHrMIaZQgyVLl/tjc= Subject key identifier: 5C:7D:00:6C:BE:76:31:46:24:1C:9C:1A:4F:52:73:B2:88:6D:2B:90 Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Certificate serial: 019B657AAD9D9D3F315EAC410E5E974FD218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft Manifest number: 06ED Signing time: Sun 28 Dec 2025 15:01:37 +0000 Manifest this update: Sun 28 Dec 2025 15:01:37 +0000 Manifest next update: Mon 29 Dec 2025 15:01:37 +0000 Files and hashes: 1: PEg5N3hiRtOVV8rz1xnm1FLpzfA.asa (hash: /eJ9DZOYmS6hBGU+9TUQE3rgjFypqVE71n2H5f3gxU8=) 2: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: CCFhTQckk8Y0Pp2b93q+Tg/XUIE+DveGJZ9XbCYOtq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:ad:9d:9d:3f:31:5e:ac:41:0e:5e:97:4f:d2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Validity Not Before: Dec 28 15:01:37 2025 GMT Not After : Dec 29 15:01:37 2025 GMT Subject: CN=5c7d006cbe763146241c9c1a4f5273b2886d2b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0e:10:7a:32:56:d3:35:f7:48:2b:e3:b5:de: 5e:d8:dd:01:d0:2a:59:66:19:72:2d:0d:c6:af:4f: e2:97:56:1c:20:a7:6a:ff:cd:29:bf:b5:40:b7:43: 1c:2c:b4:a1:f6:98:90:8d:3d:68:3b:40:c6:73:81: 1a:7e:f9:2c:a8:cb:b0:97:68:8e:92:89:49:ef:ad: 77:ec:98:4d:19:63:b1:7c:23:0a:fd:b4:1a:80:c4: f5:70:db:43:dd:96:a9:8a:4e:43:aa:3b:bf:95:c7: 9f:a9:38:27:31:0d:c2:0e:24:1d:7b:4c:da:b9:a8: 07:f5:e1:17:45:12:53:f7:0b:46:7b:74:0e:8c:26: 51:b0:b8:2f:a3:d7:77:90:74:b0:42:18:84:fb:27: e5:83:42:7c:99:8b:b7:b1:d1:3f:f7:23:be:ac:db: 3e:17:ee:cb:56:ec:fe:a2:f0:71:7d:db:73:02:fb: 2e:21:e8:3c:f1:f4:a5:a7:73:dd:5b:57:fe:b0:3c: 7f:d2:96:b3:f1:29:a7:c2:8e:f6:3d:e4:ed:cb:0e: 11:2e:ed:3a:9b:02:05:98:66:d4:f2:66:11:76:7f: 38:c2:32:39:14:36:dc:1e:d6:fc:45:11:a8:b2:28: 0b:0f:2f:a0:d0:7a:74:f0:42:95:44:01:18:e5:af: dd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:00:6C:BE:76:31:46:24:1C:9C:1A:4F:52:73:B2:88:6D:2B:90 X509v3 Authority Key Identifier: keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7c:26:27:1c:b7:25:bd:35:bb:45:25:14:05:d9:24:59:bb: 7b:22:52:a6:0a:e2:c5:5d:4e:29:79:81:9e:1a:1a:fe:22:ad: bc:44:2f:b6:3b:3a:82:ef:fa:51:5a:5e:5d:56:98:5b:36:a4: dd:7a:5f:71:9a:14:31:0d:be:c9:94:77:b2:db:9f:25:bf:47: 0c:4a:4d:c9:37:21:e2:0f:6e:3f:4c:57:bf:59:b7:71:5d:3f: 18:85:de:af:99:b0:c7:73:09:95:81:b5:1e:be:a7:68:80:cb: de:c0:18:8e:d4:88:9b:05:61:5e:e2:5e:27:f5:9b:3c:47:23: 5d:47:4a:39:20:65:42:50:3c:82:f9:64:a0:6e:a9:91:56:13: e8:5b:e2:b6:68:73:34:a5:71:40:1c:4f:4d:bd:18:78:ae:aa: 26:a9:ae:0d:c1:53:cc:6a:fb:fb:f4:a2:6f:1f:0d:c3:69:11: c2:8c:ae:a3:8e:2d:a6:ef:87:35:17:ef:65:22:13:fe:99:ae: 6c:27:98:c2:60:16:1b:73:4c:3d:02:83:3c:f4:c3:fb:d3:90: cc:bd:e1:35:6d:61:a6:7b:9e:bf:c7:b8:85:7e:71:1f:d6:fd: 67:4f:98:fe:e5:4c:d3:2c:7b:81:54:25:e1:a4:0c:42:99:b8: 1b:93:f8:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtleq2dnT8xXqxBDl6XT9IYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGFlNTdlZTZlMGE5YzUxMDFmYzE0YTg3YTUzMzQxNTBi YmFiNDYwHhcNMjUxMjI4MTUwMTM3WhcNMjUxMjI5MTUwMTM3WjAzMTEwLwYDVQQD Eyg1YzdkMDA2Y2JlNzYzMTQ2MjQxYzljMWE0ZjUyNzNiMjg4NmQyYjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A4QejJW0zX3SCvjtd5e2N0B0CpZ ZhlyLQ3Gr0/il1YcIKdq/80pv7VAt0McLLSh9piQjT1oO0DGc4EafvksqMuwl2iO kolJ76137JhNGWOxfCMK/bQagMT1cNtD3Zapik5Dqju/lcefqTgnMQ3CDiQde0za uagH9eEXRRJT9wtGe3QOjCZRsLgvo9d3kHSwQhiE+yflg0J8mYu3sdE/9yO+rNs+ F+7LVuz+ovBxfdtzAvsuIeg88fSlp3PdW1f+sDx/0paz8Smnwo72PeTtyw4RLu06 mwIFmGbU8mYRdn84wjI5FDbcHtb8RRGosigLDy+g0Hp08EKVRAEY5a/dhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx9AGy+djFGJBycGk9Sc7KIbSuQMB8GA1UdIwQY MBaAFH9K5X7m4KnFEB/BSoelM0FQu6tGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0Njgt NWI1ZDk4ZjUzNjFlLzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0NjgtNWI1ZDk4ZjUzNjFl LzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHwmJxy3 Jb01u0UlFAXZJFm7eyJSpgrixV1OKXmBnhoa/iKtvEQvtjs6gu/6UVpeXVaYWzak 3XpfcZoUMQ2+yZR3stufJb9HDEpNyTch4g9uP0xXv1m3cV0/GIXer5mwx3MJlYG1 Hr6naIDL3sAYjtSImwVhXuJeJ/WbPEcjXUdKOSBlQlA8gvlkoG6pkVYT6Fvitmhz NKVxQBxPTb0YeK6qJqmuDcFTzGr7+/Sibx8Nw2kRwoyuo44tpu+HNRfvZSIT/pmu bCeYwmAWG3NMPQKDPPTD+9OQzL3hNW1hpnuev8e4hX5xH9b9Z0+Y/uVM0yx7gVQl 4aQMQpm4G5P4yg== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:26 2025 by rpki-client