This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft File: feDSOhFHDiQw9S4b4uAwFOK4TuE.mft (raw, json) Hash identifier: bbftnAgVczJeWxx7D1WVAtgzEBses3RP8LK1l3dz7QE= Subject key identifier: 93:6C:01:35:F2:5B:89:DA:52:25:FC:E2:CA:41:00:B9:71:A6:7B:2B Authority key identifier: 7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 Certificate issuer: /CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Certificate serial: 019B3C10229A43D3798172682B757BFF9EC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft Manifest number: 0318 Signing time: Sat 20 Dec 2025 14:00:48 +0000 Manifest this update: Sat 20 Dec 2025 14:00:48 +0000 Manifest next update: Sun 21 Dec 2025 14:00:48 +0000 Files and hashes: 1: E2gg_EO0g5ogJ69Fn7MoQMdMaIw.roa (hash: K0keJyo9+vyobY1PR8SsbqM0uYhn2jaW3nrV1iu516U=) 2: feDSOhFHDiQw9S4b4uAwFOK4TuE.crl (hash: QZEefaNDAISgtpV/+vYDus/a7wq803uWNrWTWnBcblI=) 3: vXuEkJ-9mpU1nfQBFK_5iOp0K3I.roa (hash: lDQFg6jP9zzKp8GOQZTtX7RG+jBwgGpPUV7sKS2JAPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:22:9a:43:d3:79:81:72:68:2b:75:7b:ff:9e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de0d23a11470e2430f52e1be2e03014e2b84ee1 Validity Not Before: Dec 20 14:00:48 2025 GMT Not After : Dec 21 14:00:48 2025 GMT Subject: CN=936c0135f25b89da5225fce2ca4100b971a67b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a2:02:20:00:d1:3d:c9:b6:49:e5:1d:e4:14: c4:19:d3:ef:70:83:43:f7:80:ee:bb:ba:c5:77:a7: 52:fd:6d:b2:d1:ec:38:8c:7d:3e:43:af:b4:87:b7: 43:60:36:fa:ed:d0:45:6d:bc:8c:dd:6a:24:00:16: 11:a4:81:09:f9:b3:90:86:ad:b2:39:00:e7:00:e0: be:61:e1:a2:7f:50:a0:47:d9:72:8a:e9:11:f9:9d: 2e:86:9e:db:df:bb:40:20:c7:4a:69:01:7b:03:eb: 1c:2e:ad:e3:93:53:3a:85:db:88:d1:37:fd:48:ef: 1e:75:51:41:e2:43:03:d0:1c:75:9a:97:93:2e:ba: 1d:fd:26:8c:07:4c:42:57:d9:25:85:d6:e7:0f:29: 75:ac:92:32:0f:31:22:a0:80:9b:a3:c4:6c:1a:1c: ab:41:f7:58:9e:5b:05:71:e0:77:7b:2a:81:6b:f4: 93:39:19:4f:ad:f7:54:b7:51:02:6f:a8:ae:6f:3d: ae:5f:0b:3d:0b:4b:20:d2:7c:e0:13:38:31:e8:aa: d3:20:12:20:0d:89:e4:a7:a5:4c:29:4f:db:32:63: 2d:d9:94:70:3f:f6:8d:c5:ba:80:a5:6d:8d:88:0f: 82:e6:1e:10:3b:40:ad:8a:f8:0a:b0:f7:bc:6b:89: 5c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6C:01:35:F2:5B:89:DA:52:25:FC:E2:CA:41:00:B9:71:A6:7B:2B X509v3 Authority Key Identifier: keyid:7D:E0:D2:3A:11:47:0E:24:30:F5:2E:1B:E2:E0:30:14:E2:B8:4E:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feDSOhFHDiQw9S4b4uAwFOK4TuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f19060-3782-4bdf-83c0-0ce9813d4925/1/feDSOhFHDiQw9S4b4uAwFOK4TuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ae:e3:b3:fc:3e:74:20:db:fb:6d:2b:b5:4c:3a:29:95:72: 04:5b:0a:6b:ab:9f:87:13:92:bb:e0:65:6b:0b:f8:5c:a4:72: 1f:98:c9:f3:a1:91:29:5f:e9:e3:69:54:31:a4:0b:dc:b6:68: f0:b6:9a:87:2f:a0:51:3c:41:44:d5:a8:23:29:19:7c:17:d3: e0:5c:a4:45:61:76:d6:38:8c:8c:43:7a:a6:70:be:07:7e:ee: 25:f8:e1:4c:ff:82:71:71:95:ad:fa:b8:cd:50:27:9e:b2:30: 3b:b3:c0:24:92:46:61:88:45:ec:39:7b:cf:75:57:8b:b7:6e: 9a:f0:ce:79:e0:ec:54:68:d8:7d:9d:7e:b4:3e:c0:ff:d8:16: f4:98:9e:7d:e2:e8:2d:4d:85:07:e5:fd:f9:be:21:e2:78:46: 37:af:76:a9:9f:3a:71:5b:e4:ca:16:9f:86:45:c8:a5:4f:fb: ec:2c:53:a9:85:be:b9:26:df:35:db:2d:16:48:73:96:bb:1c: 31:e4:4c:4f:cd:a7:89:4e:c7:8d:02:8b:2b:45:6b:21:ac:f9: 7c:82:4b:05:db:76:1d:55:ff:aa:45:db:43:f3:d8:cd:11:b3: a2:87:a4:12:d5:b8:3c:85:60:c0:c9:7e:44:32:11:4b:12:1d: a4:93:ba:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ECKaQ9N5gXJoK3V7/57CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTBkMjNhMTE0NzBlMjQzMGY1MmUxYmUyZTAzMDE0ZTJi ODRlZTEwHhcNMjUxMjIwMTQwMDQ4WhcNMjUxMjIxMTQwMDQ4WjAzMTEwLwYDVQQD Eyg5MzZjMDEzNWYyNWI4OWRhNTIyNWZjZTJjYTQxMDBiOTcxYTY3YjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraICIADRPcm2SeUd5BTEGdPvcIND 94Duu7rFd6dS/W2y0ew4jH0+Q6+0h7dDYDb67dBFbbyM3WokABYRpIEJ+bOQhq2y OQDnAOC+YeGif1CgR9lyiukR+Z0uhp7b37tAIMdKaQF7A+scLq3jk1M6hduI0Tf9 SO8edVFB4kMD0Bx1mpeTLrod/SaMB0xCV9klhdbnDyl1rJIyDzEioICbo8RsGhyr QfdYnlsFceB3eyqBa/STORlPrfdUt1ECb6iubz2uXws9C0sg0nzgEzgx6KrTIBIg DYnkp6VMKU/bMmMt2ZRwP/aNxbqApW2NiA+C5h4QO0CtivgKsPe8a4lcPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNsATXyW4naUiX84spBALlxpnsrMB8GA1UdIwQY MBaAFH3g0joRRw4kMPUuG+LgMBTiuE7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAt MGNlOTgxM2Q0OTI1LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mMTkwNjAtMzc4Mi00YmRmLTgzYzAtMGNlOTgxM2Q0OTI1 LzEvZmVEU09oRkhEaVF3OVM0YjR1QXdGT0s0VHVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKa7js/w+ dCDb+20rtUw6KZVyBFsKa6ufhxOSu+Blawv4XKRyH5jJ86GRKV/p42lUMaQL3LZo 8Laahy+gUTxBRNWoIykZfBfT4FykRWF21jiMjEN6pnC+B37uJfjhTP+CcXGVrfq4 zVAnnrIwO7PAJJJGYYhF7Dl7z3VXi7dumvDOeeDsVGjYfZ1+tD7A/9gW9JiefeLo LU2FB+X9+b4h4nhGN692qZ86cVvkyhafhkXIpU/77CxTqYW+uSbfNdstFkhzlrsc MeRMT82niU7HjQKLK0VrIaz5fIJLBdt2HVX/qkXbQ/PYzRGzooekEtW4PIVgwMl+ RDIRSxIdpJO6hw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:08:59 2025 by rpki-client