This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json) Hash identifier: TPevroy5fEVs6ruPIIGzbe9DWdfgWwTDiuxQIigvOuA= Subject key identifier: 25:28:E0:6E:4E:F7:7E:1C:50:48:E7:F7:57:AD:DA:EC:20:8A:58:C8 Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e Certificate serial: 019B3C7DC2FD3E744EB3A4ABAE554979E6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft Manifest number: 10FD Signing time: Sat 20 Dec 2025 16:00:33 +0000 Manifest this update: Sat 20 Dec 2025 16:00:33 +0000 Manifest next update: Sun 21 Dec 2025 16:00:33 +0000 Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=) 2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: CBovIkLJPIo8M+1GhDvzZZwfQhbjTBssvUuw2w13HBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c2:fd:3e:74:4e:b3:a4:ab:ae:55:49:79:e6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=144b315ae0f24c891fca18456c66917792af165e Validity Not Before: Dec 20 16:00:33 2025 GMT Not After : Dec 21 16:00:33 2025 GMT Subject: CN=2528e06e4ef77e1c5048e7f757addaec208a58c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:68:3a:7d:8a:e4:1a:91:7d:f9:71:c3:35:70: 4c:c6:5a:c9:fc:fe:59:a5:df:5f:a6:06:98:1c:80: 12:97:b8:c1:6e:af:9d:45:dd:86:d5:46:81:b8:b4: ce:38:c8:80:fd:ed:a5:eb:21:1c:e3:ff:b2:78:7c: bc:40:db:6f:88:ef:a6:3f:15:5d:12:f8:fb:13:1a: 80:76:f4:21:be:4d:aa:17:77:d4:a5:90:c4:f5:44: fb:2f:5a:cf:7e:1f:5e:64:b5:fa:00:0a:7e:03:ca: 02:c1:1e:2a:a1:bf:b5:3d:49:85:89:30:8b:6c:d0: d4:80:10:25:59:87:a2:87:45:d3:9f:3b:62:b3:da: 92:8c:eb:f0:f3:1f:93:d3:6a:b3:27:ec:2c:df:ff: 54:bc:27:e3:f2:25:88:db:bc:ca:ed:7d:2a:a9:10: ed:2e:86:3f:9a:6f:ce:2e:8b:08:69:10:2a:7a:03: 57:28:7e:7f:9b:21:c7:62:1d:4c:07:ba:77:83:5f: 31:7e:75:b6:79:6c:e8:2e:92:36:1f:b3:f4:57:ad: bd:cb:2b:86:83:2a:43:44:00:3a:92:3c:98:f4:07: f1:fa:02:ee:2b:7d:82:2f:56:67:3b:39:40:e7:c2: 83:5e:db:a9:05:f9:40:f4:cf:65:02:37:b8:3f:b4: 9b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:28:E0:6E:4E:F7:7E:1C:50:48:E7:F7:57:AD:DA:EC:20:8A:58:C8 X509v3 Authority Key Identifier: keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:52:ce:a5:d7:34:bb:59:53:ac:88:08:b3:50:2d:dc:9a:9c: 61:8f:54:f0:73:9c:d3:dc:36:40:cb:02:fe:c5:d9:23:d9:a7: a6:03:7b:8b:a9:4f:34:48:f5:d9:44:fc:37:84:68:73:17:97: ec:9d:02:05:84:1c:0f:28:0e:c5:b5:84:80:07:98:50:05:de: eb:95:7f:ce:c2:23:0a:fd:c7:26:dd:58:0c:aa:c3:e7:18:7b: 55:a0:f0:18:ab:a1:8d:5d:64:26:e8:a3:cf:e6:e5:ac:98:87: 20:bc:d3:71:6e:d2:e9:bc:eb:5e:4f:94:fa:e4:2e:54:bf:9d: 66:24:20:86:d9:98:d3:aa:d1:ba:f4:c8:3c:4b:46:27:60:aa: a1:58:54:d6:75:28:77:c0:4a:79:dd:83:dc:e0:73:59:4e:ca: b1:89:a4:ed:e4:a3:d9:11:f1:92:e7:8c:22:b4:e5:6f:fe:8e: 76:ed:6c:fc:0e:5e:1f:5b:01:39:94:b1:02:2d:98:45:13:52: 79:d9:01:05:01:62:ce:ad:2a:b8:4a:7a:d8:2f:70:a5:f6:91: d3:74:27:40:41:9a:f9:7d:ba:d7:f7:78:e1:00:59:4f:7c:2c: dd:bb:c9:d2:2f:c0:12:cd:b7:9c:e9:7a:a5:b5:39:54:1f:7c: a2:34:3c:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcL9PnROs6SrrlVJeeasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh ZjE2NWUwHhcNMjUxMjIwMTYwMDMzWhcNMjUxMjIxMTYwMDMzWjAzMTEwLwYDVQQD EygyNTI4ZTA2ZTRlZjc3ZTFjNTA0OGU3Zjc1N2FkZGFlYzIwOGE1OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2g6fYrkGpF9+XHDNXBMxlrJ/P5Z pd9fpgaYHIASl7jBbq+dRd2G1UaBuLTOOMiA/e2l6yEc4/+yeHy8QNtviO+mPxVd Evj7ExqAdvQhvk2qF3fUpZDE9UT7L1rPfh9eZLX6AAp+A8oCwR4qob+1PUmFiTCL bNDUgBAlWYeih0XTnztis9qSjOvw8x+T02qzJ+ws3/9UvCfj8iWI27zK7X0qqRDt LoY/mm/OLosIaRAqegNXKH5/myHHYh1MB7p3g18xfnW2eWzoLpI2H7P0V629yyuG gypDRAA6kjyY9Afx+gLuK32CL1ZnOzlA58KDXtupBflA9M9lAje4P7SbGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUo4G5O934cUEjn91et2uwgiljIMB8GA1UdIwQY MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFLOpdc0 u1lTrIgIs1At3JqcYY9U8HOc09w2QMsC/sXZI9mnpgN7i6lPNEj12UT8N4RocxeX 7J0CBYQcDygOxbWEgAeYUAXe65V/zsIjCv3HJt1YDKrD5xh7VaDwGKuhjV1kJuij z+blrJiHILzTcW7S6bzrXk+U+uQuVL+dZiQghtmY06rRuvTIPEtGJ2CqoVhU1nUo d8BKed2D3OBzWU7KsYmk7eSj2RHxkueMIrTlb/6Odu1s/A5eH1sBOZSxAi2YRRNS edkBBQFizq0quEp62C9wpfaR03QnQEGa+X261/d44QBZT3ws3bvJ0i/AEs23nOl6 pbU5VB98ojQ8dQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:20:05 2025 by rpki-client