This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json) Hash identifier: HgMwkD4icWeNJhgRuvIimsnFx7ScSP/N3EFIndqYRk4= Subject key identifier: 31:9A:22:BA:05:03:C6:14:61:D0:0E:08:C5:F2:19:01:9D:B2:53:0B Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Certificate serial: 019B4AA81D13005337DACC740AD319B83E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft Manifest number: 7C Signing time: Tue 23 Dec 2025 10:01:29 +0000 Manifest this update: Tue 23 Dec 2025 10:01:29 +0000 Manifest next update: Wed 24 Dec 2025 10:01:29 +0000 Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: Wz3jDyc1OQXh9w5dJ/iBsEZsQM8DYwu7NMVPeeaU3Pw=) 2: PwNeEQK8cYVwYwRg-w7R3ta0-Wc.roa (hash: 5U7iTxxmR/k00/iziXJJLBxCbjSuEb3qsWlrxIkzh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:1d:13:00:53:37:da:cc:74:0a:d3:19:b8:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Validity Not Before: Dec 23 10:01:29 2025 GMT Not After : Dec 24 10:01:29 2025 GMT Subject: CN=319a22ba0503c61461d00e08c5f219019db2530b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:61:08:d3:08:c9:82:f5:13:56:38:64:4a:29: 87:32:09:5e:b7:13:ab:dc:52:85:0d:a6:93:f7:27: 52:c6:ae:dd:a0:9d:d8:51:ba:9f:cc:bc:30:6c:fb: 75:f0:63:4d:c5:fe:19:bd:24:b4:1f:b9:14:13:64: 73:df:ba:c9:a0:c1:65:67:4b:44:8e:89:6c:cc:75: 9c:fb:b6:03:dc:87:51:9d:7a:0e:a3:88:83:03:17: 2a:61:c2:81:dd:d3:ee:e0:4a:45:b8:2e:3a:40:91: 1e:fb:ec:ee:0d:4f:d6:9b:9f:43:a9:cc:e3:25:ba: f6:19:5c:5c:9f:5e:97:75:b2:14:39:94:f0:19:bb: 78:f4:c1:a0:c1:29:a4:15:6f:09:fd:d9:68:b0:31: c6:f9:8d:86:d3:18:76:22:ab:0b:fd:b2:01:2b:17: 17:7a:cd:a0:8d:a1:6a:6f:63:53:41:57:0c:26:d1: e2:56:0b:82:fb:da:a7:76:60:af:24:66:ad:f1:49: 82:a8:50:ab:93:e9:f1:a4:b4:19:94:64:07:9b:90: 45:14:7a:80:3e:2e:14:1c:5f:dd:15:22:c5:d7:c5: f9:b5:97:41:44:40:50:bd:20:e3:01:9d:3f:1d:92: 27:20:92:b8:1c:65:1a:01:64:6d:73:9f:f5:9d:70: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:22:BA:05:03:C6:14:61:D0:0E:08:C5:F2:19:01:9D:B2:53:0B X509v3 Authority Key Identifier: keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b0:81:69:a1:a3:91:e5:2e:e7:7a:23:2a:72:a1:2d:7f:fa: d8:7b:05:8b:3d:85:f9:55:eb:29:d9:f3:02:dc:01:0e:d2:d4: f8:c2:d7:22:95:f6:85:0d:00:05:d8:d5:d4:4d:d9:01:d1:de: 95:01:ef:ad:12:cf:c4:56:84:e5:39:7a:86:4c:de:dc:ec:19: e1:43:70:8e:20:9b:d4:6e:f1:75:57:c3:72:88:87:c4:73:e6: 1c:6a:3d:82:0d:14:cc:f2:64:e3:f5:15:9e:8e:f3:f3:6e:5e: 84:c3:17:7e:ae:da:7b:c2:cf:bf:34:57:07:cc:ca:66:99:0b: 6d:f0:c1:71:12:5d:f8:e9:d8:6c:36:d7:ef:02:4e:c9:72:45: 3b:08:d0:f5:0f:1d:f9:99:8e:21:87:fe:57:77:d3:99:8f:ea: 90:06:25:db:a5:76:ca:f2:f5:5d:c7:99:da:3d:6f:de:ba:26: da:71:a5:fa:a2:a7:20:98:8c:ed:62:86:95:a5:d8:e9:e5:fb: d0:fd:ff:0e:00:8a:7b:91:3e:d2:62:17:3c:e8:46:1e:63:af: 73:70:d9:49:d6:22:f7:79:2e:61:66:14:90:38:a7:e0:a2:15: 53:8b:0a:5c:68:79:1f:4d:e0:f0:56:d3:0e:00:16:87:5d:c3: 8a:64:0a:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqB0TAFM32sx0CtMZuD5eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjVjNDI3YjUwZWI5ZTJhYWY3YzVhY2MxYjIyODk2MzNh YjUzNTMwHhcNMjUxMjIzMTAwMTI5WhcNMjUxMjI0MTAwMTI5WjAzMTEwLwYDVQQD EygzMTlhMjJiYTA1MDNjNjE0NjFkMDBlMDhjNWYyMTkwMTlkYjI1MzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWEI0wjJgvUTVjhkSimHMgletxOr 3FKFDaaT9ydSxq7doJ3YUbqfzLwwbPt18GNNxf4ZvSS0H7kUE2Rz37rJoMFlZ0tE jolszHWc+7YD3IdRnXoOo4iDAxcqYcKB3dPu4EpFuC46QJEe++zuDU/Wm59Dqczj Jbr2GVxcn16XdbIUOZTwGbt49MGgwSmkFW8J/dlosDHG+Y2G0xh2IqsL/bIBKxcX es2gjaFqb2NTQVcMJtHiVguC+9qndmCvJGat8UmCqFCrk+nxpLQZlGQHm5BFFHqA Pi4UHF/dFSLF18X5tZdBREBQvSDjAZ0/HZInIJK4HGUaAWRtc5/1nXAetQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGaIroFA8YUYdAOCMXyGQGdslMLMB8GA1UdIwQY MBaAFBX1xCe1DrniqvfFrMGyKJYzq1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAt YTVkMjM0NTg2ZDkwLzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAtYTVkMjM0NTg2ZDkw LzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR7CBaaGj keUu53ojKnKhLX/62HsFiz2F+VXrKdnzAtwBDtLU+MLXIpX2hQ0ABdjV1E3ZAdHe lQHvrRLPxFaE5Tl6hkze3OwZ4UNwjiCb1G7xdVfDcoiHxHPmHGo9gg0UzPJk4/UV no7z825ehMMXfq7ae8LPvzRXB8zKZpkLbfDBcRJd+OnYbDbX7wJOyXJFOwjQ9Q8d +ZmOIYf+V3fTmY/qkAYl26V2yvL1XceZ2j1v3rom2nGl+qKnIJiM7WKGlaXY6eX7 0P3/DgCKe5E+0mIXPOhGHmOvc3DZSdYi93kuYWYUkDin4KIVU4sKXGh5H03g8FbT DgAWh13DimQKxw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:29:16 2025 by rpki-client