This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json) Hash identifier: eQ/a7azn7NVH+OIOndgXG7sPBqpQSps8JlrZy+P3WmA= Subject key identifier: C0:25:47:A5:DF:35:61:96:78:73:52:F4:B7:67:9F:B5:7C:3F:CE:19 Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Certificate serial: 019B3DC76B18DE2D55B3F0E13BF340CF2956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 22:00:37 +0000 Manifest this update: Sat 20 Dec 2025 22:00:37 +0000 Manifest next update: Sun 21 Dec 2025 22:00:37 +0000 Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: iUkSG2U1TPjVrT5BUJ5AUfNFiQ4ji19MB64PBYWYunY=) 2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:6b:18:de:2d:55:b3:f0:e1:3b:f3:40:cf:29:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Validity Not Before: Dec 20 22:00:37 2025 GMT Not After : Dec 21 22:00:37 2025 GMT Subject: CN=c02547a5df356196787352f4b7679fb57c3fce19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:4a:e3:65:e8:96:9b:75:b7:ae:cb:67:e1: ec:9b:16:28:18:12:9d:c4:c0:7e:7f:4a:2c:31:4e: 97:a0:40:35:4f:ea:11:ba:9f:ce:66:4e:f2:8b:09: a5:e1:b1:17:df:f9:08:8a:0c:0a:1d:34:39:df:45: ec:c1:ec:60:82:a4:ab:2a:70:4a:2b:db:3b:31:e6: ed:f3:5b:4f:03:dc:3e:7f:d9:1e:27:92:29:23:6e: 79:17:3b:3b:c4:9e:fb:dc:54:9b:bb:2a:fc:99:70: e6:4d:e1:66:e4:98:49:d6:59:1e:fa:74:8e:58:d3: 68:24:9e:ae:1b:06:4f:43:c2:80:07:71:46:de:9d: dc:c0:17:0e:c8:df:f6:cb:6b:dd:94:b3:c7:ef:15: 69:eb:33:7c:42:75:4c:1a:dc:e5:46:4e:b2:32:ba: b3:a2:64:0e:42:8d:4a:11:64:90:2e:a0:2b:22:b5: 6a:e7:0c:63:dc:9c:7b:a5:12:36:9a:46:b5:63:e8: 34:84:33:7a:5a:0b:78:18:73:34:fa:04:77:42:8f: 43:56:d5:80:cc:d9:9b:64:99:6b:c3:bf:a4:b1:cb: a8:cc:19:7a:a9:34:84:ae:cc:5c:2d:57:bd:a9:d6: b5:2b:92:8f:41:b3:30:0f:6d:ef:4f:57:52:62:3e: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:47:A5:DF:35:61:96:78:73:52:F4:B7:67:9F:B5:7C:3F:CE:19 X509v3 Authority Key Identifier: keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:f4:b4:78:a3:3a:f5:62:d9:7d:29:68:da:66:ce:d2:81:32: 43:0a:77:de:7d:ee:8a:98:26:a6:58:8e:b7:67:cc:19:ba:46: 4f:8f:1a:65:74:46:b4:64:29:67:98:e1:e5:d7:a8:f6:ef:77: bf:d2:5d:a8:c2:d3:bd:75:ac:da:22:36:7f:a9:6b:1c:96:8d: 02:6a:e2:98:24:cb:ee:43:df:1d:60:67:d1:63:36:74:36:36: a6:e1:ae:0d:ba:6d:56:e1:d4:5a:22:6c:5b:9e:d7:e7:7f:79: e3:1b:59:0c:ed:f1:79:3c:a3:1c:3f:9f:39:c0:32:cc:a8:aa: dc:17:69:4b:df:2c:4c:2b:00:61:6c:bd:cb:2c:e2:3d:6a:88: 46:da:ad:94:77:8c:48:43:7f:a8:a1:e5:5c:1f:71:49:80:b3: 23:36:5a:ec:01:bc:5d:60:ce:ad:9b:f7:4f:89:3d:37:26:9b: 38:f7:a7:89:e9:85:45:43:c5:0d:26:81:31:ff:da:79:97:8a: 9f:41:36:12:67:b5:14:e8:21:b5:ec:4c:f7:d2:5f:02:29:29: 75:1f:09:f0:8e:b4:03:df:0d:1c:9c:d0:2c:f8:9d:a0:8c:08: 60:86:ac:f1:63:dc:89:d8:f2:9f:67:24:ad:0c:a0:0e:ed:6e: 86:55:ad:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x2sY3i1Vs/DhO/NAzylWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx NTQyOTMwHhcNMjUxMjIwMjIwMDM3WhcNMjUxMjIxMjIwMDM3WjAzMTEwLwYDVQQD EyhjMDI1NDdhNWRmMzU2MTk2Nzg3MzUyZjRiNzY3OWZiNTdjM2ZjZTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZlK42Xolpt1t67LZ+HsmxYoGBKd xMB+f0osMU6XoEA1T+oRup/OZk7yiwml4bEX3/kIigwKHTQ530XswexggqSrKnBK K9s7Mebt81tPA9w+f9keJ5IpI255Fzs7xJ773FSbuyr8mXDmTeFm5JhJ1lke+nSO WNNoJJ6uGwZPQ8KAB3FG3p3cwBcOyN/2y2vdlLPH7xVp6zN8QnVMGtzlRk6yMrqz omQOQo1KEWSQLqArIrVq5wxj3Jx7pRI2mka1Y+g0hDN6Wgt4GHM0+gR3Qo9DVtWA zNmbZJlrw7+kscuozBl6qTSErsxcLVe9qda1K5KPQbMwD23vT1dSYj6jswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAlR6XfNWGWeHNS9Ldnn7V8P84ZMB8GA1UdIwQY MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPS0eKM6 9WLZfSlo2mbO0oEyQwp33n3uipgmpliOt2fMGbpGT48aZXRGtGQpZ5jh5deo9u93 v9JdqMLTvXWs2iI2f6lrHJaNAmrimCTL7kPfHWBn0WM2dDY2puGuDbptVuHUWiJs W57X53954xtZDO3xeTyjHD+fOcAyzKiq3BdpS98sTCsAYWy9yyziPWqIRtqtlHeM SEN/qKHlXB9xSYCzIzZa7AG8XWDOrZv3T4k9NyabOPeniemFRUPFDSaBMf/aeZeK n0E2Eme1FOghtexM99JfAikpdR8J8I60A98NHJzQLPidoIwIYIas8WPcidjyn2ck rQygDu1uhlWteA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:57:09 2025 by rpki-client