This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json) Hash identifier: 0ShCuhvrbpQlK1T3z2zHofQV06EmtKnfeabj8Am1s0w= Subject key identifier: 10:30:D7:69:34:87:52:DD:B1:A1:B2:0A:DF:D6:A2:D3:B1:F2:2B:31 Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Certificate serial: 019B5DF70FBD9516CCF6E3B2584D4B54301C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft Manifest number: 072A Signing time: Sat 27 Dec 2025 04:00:30 +0000 Manifest this update: Sat 27 Dec 2025 04:00:30 +0000 Manifest next update: Sun 28 Dec 2025 04:00:30 +0000 Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: 8NKbUMW/04t9hElMIg2Hoj5dUVpLo9jcLgdKyt2dz3M=) 2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:0f:bd:95:16:cc:f6:e3:b2:58:4d:4b:54:30:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Validity Not Before: Dec 27 04:00:30 2025 GMT Not After : Dec 28 04:00:30 2025 GMT Subject: CN=1030d769348752ddb1a1b20adfd6a2d3b1f22b31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:e6:0b:57:3f:7b:7f:2f:1a:86:eb:9a:fb: 3d:0c:3d:c2:b3:42:4c:ce:8c:19:83:1c:b3:91:be: b5:08:47:b5:a0:5f:65:d2:e0:32:cf:ef:48:ed:76: 27:f1:b3:02:8d:d9:1c:74:03:5f:c6:fd:db:12:bc: a3:16:ab:c4:3a:51:e3:dc:74:73:bf:6a:de:77:4b: bf:49:58:3d:54:7b:30:b9:2c:a9:e5:51:04:f8:27: 70:18:af:b0:e8:ce:41:5d:c2:75:9b:83:2c:11:1d: eb:b2:62:f9:70:1a:77:c4:9d:58:19:ba:12:5a:86: 3e:a3:10:90:75:f4:f3:c9:da:1b:83:0e:b4:7d:6d: a9:11:a7:b9:bf:15:ae:68:e2:59:86:b0:b1:38:68: 13:02:ad:03:4e:cf:d5:ca:b5:b0:48:ab:07:c3:4b: 55:98:4d:d4:d8:fb:6c:97:d1:41:ff:65:2b:75:dc: fa:ea:ac:36:5d:a8:ab:d4:0c:37:7f:0f:8d:08:9b: 7a:0e:61:33:87:61:02:59:0d:f2:e2:6d:4b:de:17: 29:4d:d3:49:47:14:4f:ed:24:77:39:3f:b9:92:b7: 98:e7:d5:6a:2f:66:4e:ca:b1:6f:64:e2:25:1f:6c: 87:27:54:f5:4e:f1:62:08:84:74:97:28:d3:74:6b: e0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:30:D7:69:34:87:52:DD:B1:A1:B2:0A:DF:D6:A2:D3:B1:F2:2B:31 X509v3 Authority Key Identifier: keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:63:88:85:ff:13:23:55:07:0c:01:6f:ff:aa:ce:fd:87:a9: f7:00:bd:26:dd:2c:84:3c:54:65:0d:f0:c6:b0:45:91:c6:02: 64:18:79:24:0b:60:60:a4:1c:45:d9:69:15:6b:e3:96:02:f5: db:bc:71:52:93:a7:20:27:3f:c8:76:99:b8:cb:3e:15:2f:d8: 9f:9c:81:00:05:7e:88:9e:b0:2d:64:bf:0a:e0:20:69:0f:4f: 18:07:fe:50:21:11:47:26:ce:f5:2f:78:63:3c:b3:22:8e:b5: f3:0c:8d:88:8c:48:86:d0:85:11:1f:04:3f:b0:04:18:9b:ca: 13:89:f3:24:54:10:fd:54:e8:77:9e:87:7d:3f:73:86:5f:da: 40:f2:5c:a7:db:a0:a6:c7:93:35:22:ca:3e:59:8b:4b:8d:26: 92:46:82:75:86:48:4e:f1:c7:fd:29:a9:dc:e7:48:59:2f:1a: cc:94:89:29:8a:b8:68:1d:64:ea:b4:af:39:92:ae:9e:17:df: 2f:78:39:7b:ce:4f:f5:31:b6:72:12:c5:78:ea:32:8f:86:ea: da:42:33:60:84:7b:1f:72:a4:d9:c0:7e:e1:31:38:b3:cb:9f: f4:e9:97:b9:58:84:22:ec:bd:5b:f1:05:35:e8:1f:41:96:63: fe:6e:08:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd9w+9lRbM9uOyWE1LVDAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1 YWQ2MjIwHhcNMjUxMjI3MDQwMDMwWhcNMjUxMjI4MDQwMDMwWjAzMTEwLwYDVQQD EygxMDMwZDc2OTM0ODc1MmRkYjFhMWIyMGFkZmQ2YTJkM2IxZjIyYjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sXmC1c/e38vGobrmvs9DD3Cs0JM zowZgxyzkb61CEe1oF9l0uAyz+9I7XYn8bMCjdkcdANfxv3bEryjFqvEOlHj3HRz v2red0u/SVg9VHswuSyp5VEE+CdwGK+w6M5BXcJ1m4MsER3rsmL5cBp3xJ1YGboS WoY+oxCQdfTzydobgw60fW2pEae5vxWuaOJZhrCxOGgTAq0DTs/VyrWwSKsHw0tV mE3U2Ptsl9FB/2Urddz66qw2Xair1Aw3fw+NCJt6DmEzh2ECWQ3y4m1L3hcpTdNJ RxRP7SR3OT+5kreY59VqL2ZOyrFvZOIlH2yHJ1T1TvFiCIR0lyjTdGvgJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAw12k0h1LdsaGyCt/WotOx8isxMB8GA1UdIwQY MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3 LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWOIhf8T I1UHDAFv/6rO/Yep9wC9Jt0shDxUZQ3wxrBFkcYCZBh5JAtgYKQcRdlpFWvjlgL1 27xxUpOnICc/yHaZuMs+FS/Yn5yBAAV+iJ6wLWS/CuAgaQ9PGAf+UCERRybO9S94 YzyzIo618wyNiIxIhtCFER8EP7AEGJvKE4nzJFQQ/VTod56HfT9zhl/aQPJcp9ug pseTNSLKPlmLS40mkkaCdYZITvHH/Smp3OdIWS8azJSJKYq4aB1k6rSvOZKunhff L3g5e85P9TG2chLFeOoyj4bq2kIzYIR7H3Kk2cB+4TE4s8uf9OmXuViEIuy9W/EF NegfQZZj/m4ISw== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:46 2025 by rpki-client