This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json) Hash identifier: ZyWJ7gvmj6gOxdgEoo7mlnUWrRpYmy59dIwEesd3drI= Subject key identifier: 14:ED:AE:37:BA:42:1C:2F:5F:9C:DE:72:F0:80:46:D2:EE:6A:12:99 Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67 Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967 Certificate serial: 019B2AAE6799D3DF1EB352FBCDF7F8394CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft Manifest number: 1507 Signing time: Wed 17 Dec 2025 05:00:31 +0000 Manifest this update: Wed 17 Dec 2025 05:00:31 +0000 Manifest next update: Thu 18 Dec 2025 05:00:31 +0000 Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=) 2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: z+ZFxPjih/Bpc0I2l93BncuDqwLVZRxULPbcGWvFaXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:67:99:d3:df:1e:b3:52:fb:cd:f7:f8:39:4c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967 Validity Not Before: Dec 17 05:00:31 2025 GMT Not After : Dec 18 05:00:31 2025 GMT Subject: CN=14edae37ba421c2f5f9cde72f08046d2ee6a1299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:db:7d:f3:30:24:0e:68:6b:4b:e4:35:88:26: 30:24:25:68:d1:d7:9a:40:d6:bb:dc:66:02:67:82: a9:c7:ed:e6:a6:57:8b:fd:af:49:89:c1:36:a9:9e: 25:c0:08:7d:f0:a2:d5:f4:c7:43:c3:e4:e8:81:a5: cc:b8:1d:c2:8b:d1:ae:4c:0d:6d:7b:53:69:2d:6b: be:6d:d4:cb:19:c8:91:75:eb:7a:de:6b:d2:30:fa: f5:c6:de:f7:c0:ca:57:35:5e:27:63:14:fa:37:b5: e1:6b:51:07:72:40:90:ca:5e:96:cb:8c:31:e0:c2: 52:15:d8:2d:60:d4:bc:8e:eb:5a:14:82:43:a5:75: 79:ec:a7:5b:45:9c:14:dc:3b:ca:a0:f0:c5:49:9b: ff:9e:f7:80:82:49:f8:24:0b:54:b6:1d:bc:3e:33: 65:8f:6e:34:ef:09:53:42:b7:c5:58:7e:6c:4b:d4: fc:10:11:d3:1d:85:f3:78:b6:2f:7b:ad:64:2b:a9: 9c:d9:b1:ad:9c:8a:bd:42:15:99:9e:22:85:df:e0: fa:26:1f:7f:16:79:ff:6d:40:19:69:38:82:3e:a5: ce:45:1e:ee:14:09:30:d3:c5:f3:fa:b9:f4:eb:f6: d7:ef:74:1d:5a:e5:88:a5:41:bb:c1:5a:47:91:e9: 05:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:ED:AE:37:BA:42:1C:2F:5F:9C:DE:72:F0:80:46:D2:EE:6A:12:99 X509v3 Authority Key Identifier: keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:76:e3:19:f9:27:8b:4e:10:ec:06:05:27:f8:c4:22:b3:30: 3b:7a:a5:74:45:2f:a5:82:41:9b:19:5e:6d:9e:46:79:22:58: a8:59:3e:08:f8:6e:bb:4c:1a:2b:28:56:63:62:05:09:66:5b: 48:76:3b:33:b5:f6:db:24:0e:80:cf:75:10:c8:9c:77:af:31: b4:9d:f0:5f:be:47:95:ec:e9:19:67:b6:3e:c3:03:5d:86:4a: e0:c6:42:97:8c:ed:02:6d:b5:78:29:2b:16:b3:cd:7f:27:10: 07:e3:7e:e6:4b:e0:ca:7c:0c:a1:d8:b7:27:42:b5:b4:8c:f3: c0:e7:06:21:8b:18:9a:3d:4c:6b:bd:bb:a8:9f:65:ee:52:f2: a8:ea:d1:7a:9a:06:d2:a8:40:1e:9a:9a:5c:0f:a2:55:13:8c: ba:96:df:17:f6:dd:38:6a:65:11:00:a1:db:ff:dd:69:e0:a6: 2c:79:1d:bc:ed:09:04:58:cf:40:6a:50:b2:b7:63:99:cc:11: 6f:19:4d:6f:5d:2a:a3:f7:8e:f7:55:b8:9f:60:41:5b:a7:1a: 70:4a:c5:72:14:2b:2d:fe:24:38:8b:9b:5c:ea:07:c6:af:4b: 4b:73:e1:e1:95:0a:86:6e:3b:94:96:0d:b4:c7:e2:09:22:66: c4:be:46:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrmeZ098es1L7zff4OUzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMzEzNjBmZmMxYWZkNWYxZGE2NmQ4MTQwNGU0NjYzNTEy ZDQ5NjcwHhcNMjUxMjE3MDUwMDMxWhcNMjUxMjE4MDUwMDMxWjAzMTEwLwYDVQQD EygxNGVkYWUzN2JhNDIxYzJmNWY5Y2RlNzJmMDgwNDZkMmVlNmExMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdt98zAkDmhrS+Q1iCYwJCVo0dea QNa73GYCZ4Kpx+3mpleL/a9JicE2qZ4lwAh98KLV9MdDw+TogaXMuB3Ci9GuTA1t e1NpLWu+bdTLGciRdet63mvSMPr1xt73wMpXNV4nYxT6N7Xha1EHckCQyl6Wy4wx 4MJSFdgtYNS8jutaFIJDpXV57KdbRZwU3DvKoPDFSZv/nveAgkn4JAtUth28PjNl j2407wlTQrfFWH5sS9T8EBHTHYXzeLYve61kK6mc2bGtnIq9QhWZniKF3+D6Jh9/ Fnn/bUAZaTiCPqXORR7uFAkw08Xz+rn06/bX73QdWuWIpUG7wVpHkekFXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTtrje6QhwvX5zecvCARtLuahKZMB8GA1UdIwQY MBaAFH8xNg/8Gv1fHaZtgUBORmNRLUlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYt NTg0ZDc4YTI1ZjhjLzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYtNTg0ZDc4YTI1Zjhj LzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3bjGfkn i04Q7AYFJ/jEIrMwO3qldEUvpYJBmxlebZ5GeSJYqFk+CPhuu0waKyhWY2IFCWZb SHY7M7X22yQOgM91EMicd68xtJ3wX75HlezpGWe2PsMDXYZK4MZCl4ztAm21eCkr FrPNfycQB+N+5kvgynwModi3J0K1tIzzwOcGIYsYmj1Ma727qJ9l7lLyqOrRepoG 0qhAHpqaXA+iVROMupbfF/bdOGplEQCh2//daeCmLHkdvO0JBFjPQGpQsrdjmcwR bxlNb10qo/eO91W4n2BBW6cacErFchQrLf4kOIubXOoHxq9LS3Ph4ZUKhm47lJYN tMfiCSJmxL5G+g== -----END CERTIFICATE-----Generated at Wed Dec 17 11:21:28 2025 by rpki-client