This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft File: faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft (raw, json) Hash identifier: 7+ao5EhgK8fvs3L4rdoMsSoUb88lPvR96jeVGDgLlFE= Subject key identifier: 88:00:4B:D9:54:1D:85:CA:D0:F0:FB:4A:A3:E3:C3:CF:0C:37:D6:01 Authority key identifier: 7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9 Certificate issuer: /CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9 Certificate serial: 019B40C8E48F473492545BF758878D26DB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft Manifest number: 14BF Signing time: Sun 21 Dec 2025 12:01:06 +0000 Manifest this update: Sun 21 Dec 2025 12:01:06 +0000 Manifest next update: Mon 22 Dec 2025 12:01:06 +0000 Files and hashes: 1: faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl (hash: /tBu5qw24E2JOaUeVHSOjXIEUynpoHVgsUhan/Ijf3w=) 2: yKkZFLs6YVbkXytvzgCPIVXuU18.roa (hash: 3M+Qw4Xfzb67zSVF5cyn50VarUBuvPcrrFEH7s1xtH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:e4:8f:47:34:92:54:5b:f7:58:87:8d:26:db:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5cd652afd1f2f337c20d8ff7286cd2cf1bdf9 Validity Not Before: Dec 21 12:01:06 2025 GMT Not After : Dec 22 12:01:06 2025 GMT Subject: CN=88004bd9541d85cad0f0fb4aa3e3c3cf0c37d601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:27:55:ab:7e:f2:3c:a7:83:ff:08:32:25: c6:2f:88:2d:5b:2c:2c:60:d1:27:84:86:d3:7c:b1: c6:54:84:6c:02:a1:71:cd:c3:fc:ec:99:9c:82:78: 8b:e5:a4:52:50:af:c7:8f:2b:de:40:9c:74:87:76: 0d:a5:3d:a7:47:40:12:0e:ad:6d:9d:67:89:7c:c1: c6:51:4b:65:86:67:1d:9b:ff:c3:0b:01:89:1d:9d: 97:03:f8:c5:ba:3e:00:88:d5:df:92:1b:de:59:d4: 05:5d:dc:13:e5:ec:55:2a:5d:e6:18:32:23:1a:a9: 6d:9d:5b:43:c5:3b:09:7a:fc:db:4d:b6:be:ff:b9: ac:d3:56:73:4a:29:9c:11:2c:27:22:b9:e3:c8:20: 19:a8:4e:2e:aa:cf:d4:a9:3b:fa:83:52:4a:8c:e2: d9:00:64:1b:75:59:52:b9:7c:d6:d0:f4:e4:d2:7b: 11:c6:ab:3f:bd:9f:6d:63:a3:0b:71:72:44:00:91: 88:67:18:e2:19:30:15:28:a4:43:e2:c5:30:38:7c: 05:ef:e9:39:0b:27:a7:b5:12:83:31:e9:70:d2:79: 42:c6:c5:78:f2:1e:39:60:02:69:82:94:4e:00:4b: db:64:aa:01:9c:c2:d3:74:60:8e:56:7c:2e:e8:f4: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:00:4B:D9:54:1D:85:CA:D0:F0:FB:4A:A3:E3:C3:CF:0C:37:D6:01 X509v3 Authority Key Identifier: keyid:7D:A5:CD:65:2A:FD:1F:2F:33:7C:20:D8:FF:72:86:CD:2C:F1:BD:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXNZSr9Hy8zfCDY_3KGzSzxvfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/73e009-f2f4-43ac-81a1-89aa8d2e8004/1/faXNZSr9Hy8zfCDY_3KGzSzxvfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:19:dc:3f:46:80:0b:71:f5:ea:b3:6b:66:63:a4:95:45: ec:ce:71:ef:a1:2c:ae:0b:e9:f2:96:95:72:4c:4b:48:d0:5f: f7:fa:b6:45:19:fa:28:d1:51:12:0b:87:b0:a0:ef:f2:8a:bc: de:30:fc:02:a6:b4:07:e8:c4:cf:2d:49:95:4e:08:75:cd:e6: 92:5c:77:cc:0b:e8:f2:f9:18:5c:b9:18:88:c0:b1:2f:72:a6: 06:e8:9d:4a:2b:c8:c4:f8:be:02:d2:cb:7b:68:e4:31:a4:bd: 2f:6d:5b:af:64:9b:bb:ce:1a:9e:90:9f:88:95:e9:21:be:84: d3:7b:09:78:7b:32:b0:e3:cb:0f:fd:81:75:45:de:b3:5f:dc: 49:dd:2b:f2:3a:42:f4:f8:e1:b8:43:85:c3:93:35:00:0f:0d: 4d:ee:e0:1a:11:9b:12:71:95:0c:d4:a5:f1:f2:fa:63:74:dc: 3c:6f:3b:52:36:52:7d:f2:f6:61:d4:02:a8:b4:43:f1:b2:28: 2f:b0:e2:f7:8c:af:2b:be:bc:55:d4:62:28:3e:10:12:65:9c: e9:3c:90:05:ac:02:21:1b:4c:fa:0b:11:aa:2f:fd:76:36:0e: 36:42:75:2c:90:d0:5a:ce:b6:93:61:a4:48:39:13:16:92:7d: 55:ea:de:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyOSPRzSSVFv3WIeNJtsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVjZDY1MmFmZDFmMmYzMzdjMjBkOGZmNzI4NmNkMmNm MWJkZjkwHhcNMjUxMjIxMTIwMTA2WhcNMjUxMjIyMTIwMTA2WjAzMTEwLwYDVQQD Eyg4ODAwNGJkOTU0MWQ4NWNhZDBmMGZiNGFhM2UzYzNjZjBjMzdkNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy0nVat+8jyng/8IMiXGL4gtWyws YNEnhIbTfLHGVIRsAqFxzcP87JmcgniL5aRSUK/HjyveQJx0h3YNpT2nR0ASDq1t nWeJfMHGUUtlhmcdm//DCwGJHZ2XA/jFuj4AiNXfkhveWdQFXdwT5exVKl3mGDIj GqltnVtDxTsJevzbTba+/7ms01ZzSimcESwnIrnjyCAZqE4uqs/UqTv6g1JKjOLZ AGQbdVlSuXzW0PTk0nsRxqs/vZ9tY6MLcXJEAJGIZxjiGTAVKKRD4sUwOHwF7+k5 CyentRKDMelw0nlCxsV48h45YAJpgpROAEvbZKoBnMLTdGCOVnwu6PR8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgAS9lUHYXK0PD7SqPjw88MN9YBMB8GA1UdIwQY MBaAFH2lzWUq/R8vM3wg2P9yhs0s8b35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEt ODlhYThkMmU4MDA0LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS83M2UwMDktZjJmNC00M2FjLTgxYTEtODlhYThkMmU4MDA0 LzEvZmFYTlpTcjlIeTh6ZkNEWV8zS0d6U3p4dmZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHMZ3D9G gAtx9eqza2ZjpJVF7M5x76Esrgvp8paVckxLSNBf9/q2RRn6KNFREguHsKDv8oq8 3jD8Aqa0B+jEzy1JlU4Idc3mklx3zAvo8vkYXLkYiMCxL3KmBuidSivIxPi+AtLL e2jkMaS9L21br2Sbu84anpCfiJXpIb6E03sJeHsysOPLD/2BdUXes1/cSd0r8jpC 9PjhuEOFw5M1AA8NTe7gGhGbEnGVDNSl8fL6Y3TcPG87UjZSffL2YdQCqLRD8bIo L7Di94yvK768VdRiKD4QEmWc6TyQBawCIRtM+gsRqi/9djYONkJ1LJDQWs62k2Gk SDkTFpJ9VereLg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:22:56 2025 by rpki-client