This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json) Hash identifier: j0KnXeHBhJYS6nWg6jr4j7i9xwBK9SN9mRU1xTMZIZw= Subject key identifier: D0:24:6D:C2:CA:FB:A6:A0:43:8A:7A:A1:FE:77:6D:CB:61:6E:2D:01 Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93 Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893 Certificate serial: 019B6F216BF9DFB3DB61AC3C09DA7FBF90AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft Manifest number: 053D Signing time: Tue 30 Dec 2025 12:00:19 +0000 Manifest this update: Tue 30 Dec 2025 12:00:19 +0000 Manifest next update: Wed 31 Dec 2025 12:00:19 +0000 Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=) 2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: kKECaaSfJccjd2HjGJL5UuVQAJyZ5Himpm9nGnIaF5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:6b:f9:df:b3:db:61:ac:3c:09:da:7f:bf:90:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893 Validity Not Before: Dec 30 12:00:19 2025 GMT Not After : Dec 31 12:00:19 2025 GMT Subject: CN=d0246dc2cafba6a0438a7aa1fe776dcb616e2d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2d:b7:dd:08:53:c4:bf:f8:71:19:76:0e:ab: 6c:e0:9b:ac:61:14:ab:f8:82:c0:5b:02:95:58:17: 60:99:64:a9:b9:1d:8a:b5:97:d4:20:70:21:40:8e: a4:a2:b2:86:49:d6:86:6d:34:d2:77:a8:f9:48:be: d9:87:95:e9:3e:c0:25:bd:fd:8e:54:c6:ea:3c:72: d6:7a:13:2f:c3:71:79:7a:c0:98:bf:e9:87:3b:2f: b9:c2:4f:36:c9:1a:6d:a0:81:3c:64:71:92:c6:9f: 9b:d8:68:0d:36:77:db:44:2e:59:1b:7f:5a:5f:cb: 73:7e:a0:99:48:87:97:82:56:e5:74:27:14:53:98: 3c:d6:b3:83:92:d3:0a:8e:c4:5c:c9:a7:b4:41:8a: 2d:e5:ab:a8:3b:71:f6:7d:17:ab:58:af:7b:ee:3a: a9:c6:e6:98:e3:a9:1c:de:60:7d:27:87:29:04:10: c1:64:83:f9:73:de:ed:38:08:d8:bd:92:82:69:c0: 51:15:63:d0:4e:20:5c:0b:32:c8:1f:2c:46:ca:82: 6b:ed:3e:5e:97:25:fb:59:ee:31:fc:c9:2d:ef:84: 24:0a:00:43:d4:b1:b2:05:18:61:c2:2b:9d:15:98: 5e:47:95:31:38:c3:f2:e8:47:cd:f3:b6:ae:b0:a9: 1e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:24:6D:C2:CA:FB:A6:A0:43:8A:7A:A1:FE:77:6D:CB:61:6E:2D:01 X509v3 Authority Key Identifier: keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:1e:87:64:22:cb:f8:fa:be:3f:cb:76:c8:5f:b0:e0:73:77: 1b:ee:25:48:97:10:d4:03:37:80:cd:0c:53:4a:13:05:8c:9a: 2f:9e:30:e8:e8:02:62:7e:65:2c:43:95:53:21:53:8f:05:86: d6:8c:11:f7:17:a3:2e:2f:05:5c:ab:93:68:ad:e9:0f:70:c6: ab:8d:22:39:ad:c2:24:1f:b4:53:30:26:4e:0c:e5:27:3f:49: bf:69:54:d3:0f:95:cc:20:e5:42:e8:50:42:78:6d:2b:83:5e: 69:89:8b:35:8e:1c:eb:b4:59:2b:6d:b5:fd:59:ef:51:9f:7e: fc:3c:73:f1:83:fd:26:f0:59:d8:4e:1a:ef:8e:4b:0c:52:65: 87:45:f2:79:8b:47:58:fd:74:2f:2a:c9:f8:cf:88:ca:15:7c: 39:8f:7d:45:ee:48:a5:f1:bd:2c:60:9a:aa:c7:54:52:9c:7c: e4:43:5d:12:a6:b1:9d:15:10:ac:dd:0c:e6:87:49:1a:55:19: 79:75:25:cb:63:b9:a8:47:da:b5:62:cb:29:11:f4:2a:e4:34: 48:b7:78:ab:e2:78:3e:15:90:4d:54:65:17:d1:33:fb:21:ea: 3f:8c:69:c5:b8:4b:69:b9:33:ee:17:a2:cd:6a:d8:75:46:ee: c9:5e:78:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIWv537PbYaw8Cdp/v5CvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1 NzY4OTMwHhcNMjUxMjMwMTIwMDE5WhcNMjUxMjMxMTIwMDE5WjAzMTEwLwYDVQQD EyhkMDI0NmRjMmNhZmJhNmEwNDM4YTdhYTFmZTc3NmRjYjYxNmUyZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S233QhTxL/4cRl2Dqts4JusYRSr +ILAWwKVWBdgmWSpuR2KtZfUIHAhQI6korKGSdaGbTTSd6j5SL7Zh5XpPsAlvf2O VMbqPHLWehMvw3F5esCYv+mHOy+5wk82yRptoIE8ZHGSxp+b2GgNNnfbRC5ZG39a X8tzfqCZSIeXglbldCcUU5g81rODktMKjsRcyae0QYot5auoO3H2fRerWK977jqp xuaY46kc3mB9J4cpBBDBZIP5c97tOAjYvZKCacBRFWPQTiBcCzLIHyxGyoJr7T5e lyX7We4x/Mkt74QkCgBD1LGyBRhhwiudFZheR5UxOMPy6EfN87ausKkeywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAkbcLK+6agQ4p6of53bcthbi0BMB8GA1UdIwQY MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1 LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdx6HZCLL +Pq+P8t2yF+w4HN3G+4lSJcQ1AM3gM0MU0oTBYyaL54w6OgCYn5lLEOVUyFTjwWG 1owR9xejLi8FXKuTaK3pD3DGq40iOa3CJB+0UzAmTgzlJz9Jv2lU0w+VzCDlQuhQ QnhtK4NeaYmLNY4c67RZK221/VnvUZ9+/Dxz8YP9JvBZ2E4a745LDFJlh0XyeYtH WP10LyrJ+M+IyhV8OY99Re5IpfG9LGCaqsdUUpx85ENdEqaxnRUQrN0M5odJGlUZ eXUly2O5qEfatWLLKRH0KuQ0SLd4q+J4PhWQTVRlF9Ez+yHqP4xpxbhLabkz7hei zWrYdUbuyV54/A== -----END CERTIFICATE-----Generated at Tue Dec 30 14:19:27 2025 by rpki-client