This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json) Hash identifier: kU0oqIQdg4qqIPbmqcXIro2Sa8TlHaqGMM54ms/Lae4= Subject key identifier: 82:C6:F1:D1:BC:03:BE:FA:09:3F:2A:53:89:0E:8B:2C:44:F0:B4:9A Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Certificate serial: 019B3C7E7A8C4B1977FBA384F9410E2E58FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft Manifest number: 0C95 Signing time: Sat 20 Dec 2025 16:01:20 +0000 Manifest this update: Sat 20 Dec 2025 16:01:20 +0000 Manifest next update: Sun 21 Dec 2025 16:01:20 +0000 Files and hashes: 1: RdszoR0XDemrxWZ7ZuzRpfNYzZk.roa (hash: YWnaBwFSvymmXHCPjERkvxYdDqJ7Cm5zkK0Huya48uA=) 2: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: 5dafgpAjVUsVO31RB4q63jaEpmalB4Wueu7reGhxwKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:7a:8c:4b:19:77:fb:a3:84:f9:41:0e:2e:58:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Validity Not Before: Dec 20 16:01:20 2025 GMT Not After : Dec 21 16:01:20 2025 GMT Subject: CN=82c6f1d1bc03befa093f2a53890e8b2c44f0b49a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:d5:ae:ef:64:92:1d:0f:2b:53:7d:62:db: 8e:3d:34:a1:9d:e1:12:76:aa:b8:a4:46:cb:f7:69: 92:9c:80:c2:0b:46:0b:9d:92:65:cd:4e:68:9f:77: d0:7e:e6:df:58:06:a9:a0:b7:bd:1f:8c:3b:6e:dd: 46:22:30:da:49:28:95:e6:d8:ae:d3:f1:29:8c:bf: d6:d0:b7:30:cc:5e:f9:79:ed:56:dc:7d:65:ab:d8: df:95:1d:a4:b3:43:d9:22:3a:cf:fc:b6:38:30:d1: a8:06:22:1e:85:2b:8b:3c:30:ad:e8:7b:a4:cd:70: f4:a8:1d:bd:ac:09:c6:e6:68:1e:ff:32:c9:93:46: 87:69:70:bd:9b:60:82:7b:3b:f2:6e:e3:47:1b:bf: f4:f6:1d:29:23:3a:0b:c2:ce:7f:a9:64:28:f4:cb: 88:2c:0f:64:99:89:3e:2b:a6:d9:a7:0e:33:af:01: b6:4a:b3:2a:27:3b:e7:5c:16:0b:9b:7a:66:22:84: 9f:04:7b:e5:e2:50:32:9b:92:1c:69:56:e7:32:0a: ea:f2:e7:fc:7f:80:0c:1b:f3:47:a0:f7:ab:de:af: 61:f6:ea:f6:e0:10:ec:9b:2c:ff:c0:3a:ee:9d:dd: f8:6b:b0:13:53:fe:fa:b2:76:56:5e:46:cc:65:aa: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C6:F1:D1:BC:03:BE:FA:09:3F:2A:53:89:0E:8B:2C:44:F0:B4:9A X509v3 Authority Key Identifier: keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:dc:9c:73:46:c1:a7:fb:94:73:79:25:08:3f:40:0e:50:3c: f4:e5:27:56:60:34:47:aa:21:90:df:32:ce:68:e7:2b:38:a8: 3f:cc:71:10:47:d1:70:56:3a:59:01:0c:e7:21:e0:f0:b5:5d: 9e:36:7f:1e:1b:6f:f0:75:84:45:21:fa:bd:00:04:41:39:75: c3:3a:aa:ad:5e:07:e1:26:10:5d:78:0a:db:32:2b:3a:b7:d7: 5a:a4:4d:30:d9:76:c2:b4:06:43:6d:c0:22:37:ad:a7:d8:53: 96:c1:c7:ee:73:9e:33:a0:ee:05:86:22:b1:31:8d:8f:75:ff: 0f:a3:48:0d:6d:5f:75:3f:4e:96:80:d8:7c:a6:0b:3d:9e:30: ef:10:4d:a3:1d:e0:79:7c:38:d7:35:67:56:82:c3:d1:3b:cf: 5f:1f:4c:a4:48:1a:00:64:cf:41:b9:94:65:a6:3c:e1:77:5f: 19:4c:34:14:43:51:70:52:b6:82:af:90:89:4a:bc:50:f5:5c: 1d:0a:b7:a0:84:8b:73:12:3c:57:64:3c:83:99:4d:5c:22:e7: 0b:97:8f:6d:9c:df:0e:92:e7:e8:6a:d4:03:d5:9b:74:dd:94: cf:60:24:45:fd:09:bf:15:33:67:c1:9e:97:a1:de:27:a1:97: 9b:d7:9e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fnqMSxl3+6OE+UEOLlj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDU2NzJmYzQyYmRkMzNlNTQ1MzM4YTc0MTdlODE3MWEw NGVlM2YwHhcNMjUxMjIwMTYwMTIwWhcNMjUxMjIxMTYwMTIwWjAzMTEwLwYDVQQD Eyg4MmM2ZjFkMWJjMDNiZWZhMDkzZjJhNTM4OTBlOGIyYzQ0ZjBiNDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqnVru9kkh0PK1N9YtuOPTShneES dqq4pEbL92mSnIDCC0YLnZJlzU5on3fQfubfWAapoLe9H4w7bt1GIjDaSSiV5tiu 0/EpjL/W0LcwzF75ee1W3H1lq9jflR2ks0PZIjrP/LY4MNGoBiIehSuLPDCt6Huk zXD0qB29rAnG5mge/zLJk0aHaXC9m2CCezvybuNHG7/09h0pIzoLws5/qWQo9MuI LA9kmYk+K6bZpw4zrwG2SrMqJzvnXBYLm3pmIoSfBHvl4lAym5IcaVbnMgrq8uf8 f4AMG/NHoPer3q9h9ur24BDsmyz/wDrund34a7ATU/76snZWXkbMZao4tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILG8dG8A776CT8qU4kOiyxE8LSaMB8GA1UdIwQY MBaAFHxFZy/EK90z5UUzinQX6BcaBO4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDct OTRiZWRiNWQwMzM0LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDctOTRiZWRiNWQwMzM0 LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWdycc0bB p/uUc3klCD9ADlA89OUnVmA0R6ohkN8yzmjnKzioP8xxEEfRcFY6WQEM5yHg8LVd njZ/Hhtv8HWERSH6vQAEQTl1wzqqrV4H4SYQXXgK2zIrOrfXWqRNMNl2wrQGQ23A Ijetp9hTlsHH7nOeM6DuBYYisTGNj3X/D6NIDW1fdT9OloDYfKYLPZ4w7xBNox3g eXw41zVnVoLD0TvPXx9MpEgaAGTPQbmUZaY84XdfGUw0FENRcFK2gq+QiUq8UPVc HQq3oISLcxI8V2Q8g5lNXCLnC5ePbZzfDpLn6GrUA9WbdN2Uz2AkRf0JvxUzZ8Ge l6HeJ6GXm9eekQ== -----END CERTIFICATE-----Generated at Sat Dec 20 19:28:32 2025 by rpki-client