This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json) Hash identifier: AGiDY7uYcyeDFZDU1B1RsPKC1kwIK/Zyp3O61EmaalM= Subject key identifier: 49:81:CD:4F:39:D1:70:8E:07:C0:F4:19:55:83:13:7C:0B:2F:0E:A9 Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed Certificate serial: 019B273FA0CAE5CDC9432F41AF1E5804720D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 13:00:39 +0000 Manifest this update: Tue 16 Dec 2025 13:00:39 +0000 Manifest next update: Wed 17 Dec 2025 13:00:39 +0000 Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: hUmhFHrVSnEpAYapLLJywikIGgPH2RXjvigqJIFsqm0=) 2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:a0:ca:e5:cd:c9:43:2f:41:af:1e:58:04:72:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed Validity Not Before: Dec 16 13:00:39 2025 GMT Not After : Dec 17 13:00:39 2025 GMT Subject: CN=4981cd4f39d1708e07c0f4195583137c0b2f0ea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:c8:c1:87:88:7f:1c:72:c6:73:58:d0:2c: 4a:12:92:95:1a:d0:95:3b:c7:ce:5a:fb:d9:c2:a2: cf:d3:9e:33:8c:09:67:8b:a8:e6:b1:e3:95:49:36: e2:a9:52:11:7d:4a:e6:aa:e8:c3:5a:9d:7f:d8:08: 10:2e:d2:10:c9:b0:c9:fb:df:00:c8:b1:70:da:23: 0b:6c:a5:ba:0f:36:46:93:63:21:d1:ef:51:17:05: f1:3f:5e:33:0d:0e:98:3b:9e:e3:95:bc:54:eb:e8: 79:bb:cd:28:3d:5e:3d:10:ea:21:6c:f9:35:02:6d: e0:62:f9:44:cc:86:d2:4b:79:99:2b:31:b8:4f:85: 7e:b6:c8:27:f9:6c:89:4b:3e:de:e2:31:cd:85:04: 66:9a:f7:5e:22:f4:18:02:9f:fe:6c:9a:a8:f2:b6: 3e:dc:d3:85:1f:cb:fd:18:4c:57:24:53:57:ea:d0: 8c:4b:44:81:6f:a3:bb:5d:98:ad:1a:bd:91:0f:98: 40:32:fc:18:7f:9e:96:01:e7:d0:06:c1:e1:e1:ee: ce:cd:13:c7:28:b9:74:69:fc:f9:70:e3:f8:5e:4a: de:de:38:e5:5e:2a:95:af:dc:1f:d1:7b:69:38:40: 37:4d:f5:21:f8:c9:a0:1c:c3:84:42:ab:9e:ec:f3: b7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:81:CD:4F:39:D1:70:8E:07:C0:F4:19:55:83:13:7C:0B:2F:0E:A9 X509v3 Authority Key Identifier: keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f2:4c:92:da:0e:34:c4:46:c6:7c:0d:60:32:de:fd:8d:1b: 34:2c:c8:43:e7:e7:00:16:6b:29:6c:e7:5f:01:76:0e:ff:9f: 8f:a6:2e:c5:e4:25:ce:8e:db:96:a6:bb:aa:84:3d:5c:fa:e1: 54:49:e6:8d:c4:33:f3:13:c3:95:56:51:c3:e0:2a:22:45:8f: 6f:a9:c2:d4:25:4e:ec:db:c1:d6:86:c5:16:0a:17:42:0a:b2: de:af:cf:5e:55:a0:02:75:33:b3:9c:45:a7:af:f3:30:0f:c3: cf:d6:fe:c1:c8:7c:f0:8d:be:9a:a3:34:08:02:fb:e9:d3:d2: f5:ed:45:d8:76:8f:c8:62:c2:56:7b:11:e7:a2:41:d8:aa:2d: a1:b1:fe:73:2f:34:49:97:46:ec:60:0b:02:74:f8:6f:1f:a0: a1:ec:59:81:c7:e9:a2:67:20:f7:a1:34:40:e3:82:b8:15:3c: 86:f3:fe:f3:17:da:fa:40:c0:60:89:6b:d7:e1:b0:63:33:25: c2:07:a2:2d:14:a1:e6:ad:02:7b:83:9b:b6:9c:0f:16:a8:08: 1e:e2:48:39:5a:7b:b6:4d:71:0e:6f:03:4e:c3:19:72:e2:58: 9c:f1:74:0f:9e:d4:7e:9b:17:bb:8b:ca:49:29:85:8d:00:4c: 8a:00:2e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP6DK5c3JQy9Brx5YBHINMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm MDkxZWQwHhcNMjUxMjE2MTMwMDM5WhcNMjUxMjE3MTMwMDM5WjAzMTEwLwYDVQQD Eyg0OTgxY2Q0ZjM5ZDE3MDhlMDdjMGY0MTk1NTgzMTM3YzBiMmYwZWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquTIwYeIfxxyxnNY0CxKEpKVGtCV O8fOWvvZwqLP054zjAlni6jmseOVSTbiqVIRfUrmqujDWp1/2AgQLtIQybDJ+98A yLFw2iMLbKW6DzZGk2Mh0e9RFwXxP14zDQ6YO57jlbxU6+h5u80oPV49EOohbPk1 Am3gYvlEzIbSS3mZKzG4T4V+tsgn+WyJSz7e4jHNhQRmmvdeIvQYAp/+bJqo8rY+ 3NOFH8v9GExXJFNX6tCMS0SBb6O7XZitGr2RD5hAMvwYf56WAefQBsHh4e7OzRPH KLl0afz5cOP4Xkre3jjlXiqVr9wf0XtpOEA3TfUh+MmgHMOEQque7PO3mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmBzU850XCOB8D0GVWDE3wLLw6pMB8GA1UdIwQY MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPJMktoO NMRGxnwNYDLe/Y0bNCzIQ+fnABZrKWznXwF2Dv+fj6YuxeQlzo7blqa7qoQ9XPrh VEnmjcQz8xPDlVZRw+AqIkWPb6nC1CVO7NvB1obFFgoXQgqy3q/PXlWgAnUzs5xF p6/zMA/Dz9b+wch88I2+mqM0CAL76dPS9e1F2HaPyGLCVnsR56JB2KotobH+cy80 SZdG7GALAnT4bx+goexZgcfpomcg96E0QOOCuBU8hvP+8xfa+kDAYIlr1+GwYzMl wgeiLRSh5q0Ce4ObtpwPFqgIHuJIOVp7tk1xDm8DTsMZcuJYnPF0D57UfpsXu4vK SSmFjQBMigAuRA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:33:24 2025 by rpki-client