This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json) Hash identifier: 9X4vt4OcPYNAYIspVkjLJGFYr2CpIPR+vX6LqUnxk5A= Subject key identifier: 20:33:1C:03:E8:76:8E:B9:1B:90:66:C7:AE:5E:71:96:54:37:77:63 Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Certificate serial: 019B514E427096107B939DF4A8C8B7CF39B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 17:00:41 +0000 Manifest this update: Wed 24 Dec 2025 17:00:41 +0000 Manifest next update: Thu 25 Dec 2025 17:00:41 +0000 Files and hashes: 1: _RPvfjikj0iax2XrX7kBOpxgmjQ.roa (hash: VpB33gFRy5WKsX1Z1hgRswTD+xePv0JXdiIfDbuLSIU=) 2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: T9GU/kU+ZfRFpXaSxEcckvuX+koifNhIlTbUOrCsdYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:4e:42:70:96:10:7b:93:9d:f4:a8:c8:b7:cf:39:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Validity Not Before: Dec 24 17:00:41 2025 GMT Not After : Dec 25 17:00:41 2025 GMT Subject: CN=20331c03e8768eb91b9066c7ae5e719654377763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d6:f9:4d:23:29:ee:2d:13:30:45:52:78:27: 54:2f:ba:17:6a:ea:81:a8:99:72:f4:8f:73:03:f8: b6:ac:0e:1a:86:ec:43:6e:d5:e3:4c:ac:ef:d2:30: 6c:6c:a2:d8:a0:6f:23:2d:3b:a5:f8:6b:64:88:79: 7c:e7:57:64:04:2f:99:f6:7f:a0:d9:f3:9e:c9:f5: 22:ac:7e:94:d4:3a:12:52:7e:12:30:50:73:80:d8: 28:df:b3:4c:c5:6b:fb:26:f1:a4:84:1a:ef:5f:32: 56:aa:d3:40:e8:16:c1:22:d5:5e:dd:20:23:68:98: 72:ce:ed:51:de:1f:e6:c5:5d:cf:c5:01:0c:0d:0e: 9e:4e:58:87:b6:be:6d:a9:d2:9d:ea:d0:c0:68:83: 60:23:17:a7:89:eb:6c:b9:65:6b:a7:84:e6:d7:e4: 43:a7:15:0c:08:00:16:20:ad:61:29:3a:d6:8d:7c: 6d:77:df:b7:03:73:a6:2b:7b:32:d0:7f:6f:b7:86: 6b:f5:be:e8:91:98:cb:d5:a9:d8:8e:59:02:e1:95: 3e:57:8e:36:7f:ea:6a:4d:b1:28:97:50:22:e0:11: bf:e4:a2:67:65:42:ed:20:35:53:8c:82:9f:2f:df: c6:67:77:84:cc:fc:c0:5a:7f:54:25:a7:8b:0e:46: fb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:33:1C:03:E8:76:8E:B9:1B:90:66:C7:AE:5E:71:96:54:37:77:63 X509v3 Authority Key Identifier: keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a9:46:6d:c0:bb:52:19:6f:0b:7a:20:05:57:aa:ca:bf:ae: f8:71:20:53:76:89:34:42:31:f2:32:2b:2c:a2:b7:67:3d:41: 85:36:fe:1c:df:e7:5a:3a:e4:36:f0:7b:44:4a:9a:7d:ee:a7: 9e:7a:14:f2:a2:04:ac:91:40:32:7a:6d:78:22:1b:f8:88:f7: ea:6d:eb:88:ed:50:02:5a:f6:99:f0:da:b1:66:2c:26:d8:ae: 91:0e:b0:41:38:60:14:63:6e:bc:c8:0f:6c:4e:d8:85:3f:17: 61:2c:9d:b0:de:f3:26:11:95:27:b5:fe:6e:2a:07:56:3a:8b: 82:b8:d2:c0:2d:6a:2b:07:04:cb:b9:2f:c9:0b:47:c8:e8:9c: 04:6b:55:b4:2c:46:be:23:7e:8c:87:c3:9d:49:12:fc:32:50: 08:1a:0b:15:8d:32:dd:6b:7d:25:4a:b4:bb:a0:4f:7f:f2:05: 3b:d5:93:d9:97:c2:47:c9:02:f5:60:f3:04:82:51:c1:2d:97: 58:cc:89:56:dc:cd:08:ae:84:ef:a2:2b:fb:68:d4:3f:cc:2c: 3a:06:4c:45:9b:c5:c8:9c:59:74:c7:1e:eb:13:51:33:7e:fb: 75:13:c8:2b:3a:30:0f:10:a3:1c:e3:08:58:b3:a1:87:5e:79: 56:38:ea:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRTkJwlhB7k530qMi3zzmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm NTY1NjgwHhcNMjUxMjI0MTcwMDQxWhcNMjUxMjI1MTcwMDQxWjAzMTEwLwYDVQQD EygyMDMzMWMwM2U4NzY4ZWI5MWI5MDY2YzdhZTVlNzE5NjU0Mzc3NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdb5TSMp7i0TMEVSeCdUL7oXauqB qJly9I9zA/i2rA4ahuxDbtXjTKzv0jBsbKLYoG8jLTul+GtkiHl851dkBC+Z9n+g 2fOeyfUirH6U1DoSUn4SMFBzgNgo37NMxWv7JvGkhBrvXzJWqtNA6BbBItVe3SAj aJhyzu1R3h/mxV3PxQEMDQ6eTliHtr5tqdKd6tDAaINgIxenietsuWVrp4Tm1+RD pxUMCAAWIK1hKTrWjXxtd9+3A3OmK3sy0H9vt4Zr9b7okZjL1anYjlkC4ZU+V442 f+pqTbEol1Ai4BG/5KJnZULtIDVTjIKfL9/GZ3eEzPzAWn9UJaeLDkb7RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAzHAPodo65G5Bmx65ecZZUN3djMB8GA1UdIwQY MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt MDI3NGY0NDZkMzMxLzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYalGbcC7 UhlvC3ogBVeqyr+u+HEgU3aJNEIx8jIrLKK3Zz1BhTb+HN/nWjrkNvB7REqafe6n nnoU8qIErJFAMnpteCIb+Ij36m3riO1QAlr2mfDasWYsJtiukQ6wQThgFGNuvMgP bE7YhT8XYSydsN7zJhGVJ7X+bioHVjqLgrjSwC1qKwcEy7kvyQtHyOicBGtVtCxG viN+jIfDnUkS/DJQCBoLFY0y3Wt9JUq0u6BPf/IFO9WT2ZfCR8kC9WDzBIJRwS2X WMyJVtzNCK6E76Ir+2jUP8wsOgZMRZvFyJxZdMce6xNRM377dRPIKzowDxCjHOMI WLOhh155VjjqDg== -----END CERTIFICATE-----Generated at Wed Dec 24 21:33:32 2025 by rpki-client