This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft File: fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json) Hash identifier: OVBsxcjgKsysQeYbJ9ZA5Lr0S8UQ8OwHVQfwKv44R64= Subject key identifier: 46:71:97:D1:D6:92:AE:26:31:DB:03:08:53:2F:3D:42:73:2C:33:B7 Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B Certificate issuer: /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Certificate serial: 019B3DFEC5C91FF8550417A4EE2C074E3AC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft Manifest number: 15DE Signing time: Sat 20 Dec 2025 23:01:05 +0000 Manifest this update: Sat 20 Dec 2025 23:01:05 +0000 Manifest next update: Sun 21 Dec 2025 23:01:05 +0000 Files and hashes: 1: YRfkigtRLNkJN8VNtKbb3fRiIKs.roa (hash: CvzEdkr6eZNRd+mAapP+a07GKzLUJC/WQEw0I1mUkjI=) 2: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: sXo/wIZwMf6CnkighuMQ5fC4n5YQx8+gsS1jnxdEIsQ=) 3: hhzUk5P34fAewxviCp7L4orLbt4.roa (hash: anfj4g1I4XRHIljE+q3F4S8rJ8XQNKffMq+11otVUbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:c5:c9:1f:f8:55:04:17:a4:ee:2c:07:4e:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b Validity Not Before: Dec 20 23:01:05 2025 GMT Not After : Dec 21 23:01:05 2025 GMT Subject: CN=467197d1d692ae2631db0308532f3d42732c33b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:07:90:c4:cf:7f:c4:b9:1e:16:0a:16:20: fe:bf:20:80:d9:96:aa:8b:67:32:5d:09:e0:cd:4b: 10:b9:55:a5:aa:cc:c4:2d:4b:c5:1b:f1:3f:d8:3b: 50:ec:9d:4b:1a:9f:e0:08:30:b4:2f:69:3f:3d:c1: 41:23:b6:e6:68:f6:fd:71:35:5c:db:84:33:f0:8e: 07:7f:dd:f4:d2:94:d5:fc:c7:9a:09:49:cd:36:7f: 18:e3:7e:26:82:d3:d5:cc:1e:1a:b5:f1:84:71:16: 12:f2:c7:3a:c6:84:e1:7b:a6:ba:fc:64:02:1a:ee: b4:ac:86:f6:b4:fa:85:f6:56:21:9d:26:c0:01:0c: ab:b2:97:a3:88:5d:48:d3:a9:54:65:b1:cf:20:11: 4d:39:35:00:ef:d5:da:75:ca:a2:60:2b:14:c5:92: 90:10:db:22:02:7c:86:a0:93:b1:a1:39:3c:fe:0c: 06:e9:22:ac:15:f8:1a:7b:63:7e:19:7c:d8:54:22: b1:e0:ed:fb:c8:36:60:10:ed:f8:27:15:59:4a:2d: 46:0e:6b:01:71:b3:07:d5:2e:94:22:77:35:21:a6: 8a:73:37:fc:18:da:ed:e6:49:7f:93:34:2a:de:8a: 6b:bd:c7:18:27:85:23:24:74:d6:de:c9:d1:f6:28: fc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:97:D1:D6:92:AE:26:31:DB:03:08:53:2F:3D:42:73:2C:33:B7 X509v3 Authority Key Identifier: keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:84:ba:eb:fd:39:af:38:23:bd:f3:b0:9e:c1:86:d6:d9:50: fb:62:56:1a:1f:8f:17:85:73:39:21:e5:b4:73:70:56:e2:5b: 51:c7:3f:10:b1:3a:4a:c0:04:e1:00:e0:a4:d8:23:c4:d1:98: ea:0f:61:69:00:2f:d7:78:4a:ae:6e:fa:67:1a:98:2f:ac:e0: c1:53:14:74:58:12:45:cd:10:b1:9d:9e:92:e6:db:13:55:93: a4:97:e2:26:25:41:2d:39:f5:ac:b8:77:0e:1c:1d:ea:73:1e: 5d:75:91:e8:34:9d:f7:53:2b:21:ac:a5:2c:8b:bf:18:e9:ce: 86:8c:0b:f3:00:03:c7:f4:16:32:a3:83:e2:8b:88:e4:71:78: ff:d5:fb:57:b8:4e:6b:7d:5c:c6:7e:df:aa:68:64:05:63:5a: ef:dc:dd:cb:4c:7c:e0:1f:39:21:9a:b3:e1:ea:bf:77:9f:73: 7f:8e:4f:a4:ca:92:50:7e:1d:99:1b:f0:e1:3a:e7:a0:97:9e: ac:3b:a1:c2:bd:33:4d:cf:1e:86:59:8b:7b:d9:12:6b:3b:7a: 89:7d:25:27:72:ea:09:94:9e:1f:19:d4:bb:f0:dd:9e:bc:47: d8:a6:b3:cd:a1:7d:19:d4:99:af:33:95:81:d6:6c:ae:1e:39: 78:f4:c8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/sXJH/hVBBek7iwHTjrAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNGI1NGRmZDQxNjEwNzc0ZmU3ZjI0MmQ3ZGQzODczYTY1 ODQ3M2IwHhcNMjUxMjIwMjMwMTA1WhcNMjUxMjIxMjMwMTA1WjAzMTEwLwYDVQQD Eyg0NjcxOTdkMWQ2OTJhZTI2MzFkYjAzMDg1MzJmM2Q0MjczMmMzM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw08HkMTPf8S5HhYKFiD+vyCA2Zaq i2cyXQngzUsQuVWlqszELUvFG/E/2DtQ7J1LGp/gCDC0L2k/PcFBI7bmaPb9cTVc 24Qz8I4Hf9300pTV/MeaCUnNNn8Y434mgtPVzB4atfGEcRYS8sc6xoThe6a6/GQC Gu60rIb2tPqF9lYhnSbAAQyrspejiF1I06lUZbHPIBFNOTUA79XadcqiYCsUxZKQ ENsiAnyGoJOxoTk8/gwG6SKsFfgae2N+GXzYVCKx4O37yDZgEO34JxVZSi1GDmsB cbMH1S6UInc1IaaKczf8GNrt5kl/kzQq3oprvccYJ4UjJHTW3snR9ij8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZxl9HWkq4mMdsDCFMvPUJzLDO3MB8GA1UdIwQY MBaAFH5LVN/UFhB3T+fyQtfdOHOmWEc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEt Nzc0NGVmM2MwYjk5LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS8xYjM1YzUtN2FjNi00MjUzLTg2ZWEtNzc0NGVmM2MwYjk5 LzEvZmt0VTM5UVdFSGRQNV9KQzE5MDRjNlpZUnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIS66/05 rzgjvfOwnsGG1tlQ+2JWGh+PF4VzOSHltHNwVuJbUcc/ELE6SsAE4QDgpNgjxNGY 6g9haQAv13hKrm76ZxqYL6zgwVMUdFgSRc0QsZ2ekubbE1WTpJfiJiVBLTn1rLh3 Dhwd6nMeXXWR6DSd91MrIaylLIu/GOnOhowL8wADx/QWMqOD4ouI5HF4/9X7V7hO a31cxn7fqmhkBWNa79zdy0x84B85IZqz4eq/d59zf45PpMqSUH4dmRvw4TrnoJee rDuhwr0zTc8ehlmLe9kSazt6iX0lJ3LqCZSeHxnUu/DdnrxH2KazzaF9GdSZrzOV gdZsrh45ePTIVw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:36:24 2025 by rpki-client