This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft File: fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json) Hash identifier: y/ltYjjEacwNpKFpxavq4l3VAc8vTeBdHaA7RHpDRgg= Subject key identifier: 86:FE:1F:76:B7:4D:7D:94:72:59:1A:AB:79:09:70:8F:BC:55:7D:AA Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE Certificate issuer: /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Certificate serial: 019AF0BF430DDCC10EB384B7A986C52E35C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft Manifest number: 06CF Signing time: Fri 05 Dec 2025 23:00:57 +0000 Manifest this update: Fri 05 Dec 2025 23:00:57 +0000 Manifest next update: Sat 06 Dec 2025 23:00:57 +0000 Files and hashes: 1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: eEabSDiTViTGCH1g147jy6oRtkvNXlJLdZJc9+lq4PE=) 2: jXBUCLrGPcb5J_lVILF4CB21e-I.roa (hash: dGKplm/JNC81Y01bHZhHHlwu7oIXFhOtp/y83oreUvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:43:0d:dc:c1:0e:b3:84:b7:a9:86:c5:2e:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace Validity Not Before: Dec 5 23:00:57 2025 GMT Not After : Dec 6 23:00:57 2025 GMT Subject: CN=86fe1f76b74d7d9472591aab7909708fbc557daa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:73:5d:94:1e:cf:5e:20:c5:5f:8e:45:d6:f3: 73:cb:75:75:89:6f:8f:fa:8d:a4:17:35:ae:65:ce: a9:99:41:c1:e6:1d:3f:af:77:3c:84:f4:15:92:62: f5:36:b5:ad:dd:90:6d:0d:69:c1:03:67:55:17:73: 15:a5:cc:79:d4:53:67:af:8c:a1:63:ae:d4:98:71: ad:9d:51:c9:21:42:2f:12:6f:d7:f9:1e:f0:3f:31: 56:5a:9f:a4:b4:b1:b2:62:dc:70:a9:46:e8:ca:f7: 51:83:51:04:98:45:96:d2:a6:10:9d:b6:fd:e2:20: bd:23:89:70:75:b7:63:de:b8:f1:9b:41:b8:00:55: cf:6e:c6:a2:85:e7:2b:25:1e:29:2d:09:ed:9f:6f: 42:b4:cc:f9:4e:c1:9e:4e:d7:5c:e2:97:68:72:32: 88:1c:17:56:4d:5b:fc:c9:1b:47:08:18:06:28:37: 73:0e:e4:d2:e2:c1:b8:47:15:49:19:df:29:76:ac: fd:a9:f5:e8:b6:96:45:e3:95:ea:22:2d:be:66:c3: e4:95:52:34:15:2f:fc:d3:c4:58:28:70:db:b0:90: 7c:72:c0:e8:de:68:09:11:ae:84:2e:bc:4e:48:98: 93:b8:b4:6c:34:be:93:91:95:e3:ed:9e:de:e9:9b: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:1F:76:B7:4D:7D:94:72:59:1A:AB:79:09:70:8F:BC:55:7D:AA X509v3 Authority Key Identifier: keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:84:e2:f8:6b:d6:20:1d:7e:d3:01:68:a8:70:9e:55:84:39: 8c:05:52:0c:07:40:70:1c:80:2d:05:5a:40:82:58:78:66:da: 0d:3c:d3:dd:91:c3:a4:0d:d5:5c:ff:99:7e:11:65:e9:0a:b2: e9:39:70:83:34:3e:d3:67:38:89:84:17:49:ac:ad:15:97:2b: 89:c9:02:ed:99:c8:cf:cc:17:c0:0d:40:a9:17:27:44:8c:38: c6:78:09:55:97:00:81:00:9c:0e:0c:d7:8b:b0:d5:0c:01:c6: 10:4a:ee:04:c8:e5:4e:7b:b2:98:ed:16:fe:45:f2:53:3f:d9: 71:4b:d7:73:70:ed:12:99:fe:c4:1f:5f:33:9f:ed:02:3a:47: 32:81:44:f0:a1:58:a4:0b:8f:33:f9:f5:09:9a:79:bc:4b:b1: 1c:63:81:69:81:ea:71:b4:7d:45:bf:db:b1:20:6b:33:b3:bb: dd:3c:59:74:e7:d7:54:2e:c1:aa:fa:85:2c:19:4a:da:0d:b3: d1:0d:ae:80:ab:45:c6:f3:0e:ae:b1:46:7d:85:bc:89:9c:4e: 19:1b:f0:b9:1b:4e:87:2c:0b:8f:bc:4d:bf:6b:e0:53:e3:59: b7:80:4f:36:dc:28:cc:d4:64:f3:2d:3c:9c:30:81:47:ad:68: 56:77:93:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0MN3MEOs4S3qYbFLjXAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0 YjlhY2UwHhcNMjUxMjA1MjMwMDU3WhcNMjUxMjA2MjMwMDU3WjAzMTEwLwYDVQQD Eyg4NmZlMWY3NmI3NGQ3ZDk0NzI1OTFhYWI3OTA5NzA4ZmJjNTU3ZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HNdlB7PXiDFX45F1vNzy3V1iW+P +o2kFzWuZc6pmUHB5h0/r3c8hPQVkmL1NrWt3ZBtDWnBA2dVF3MVpcx51FNnr4yh Y67UmHGtnVHJIUIvEm/X+R7wPzFWWp+ktLGyYtxwqUboyvdRg1EEmEWW0qYQnbb9 4iC9I4lwdbdj3rjxm0G4AFXPbsaihecrJR4pLQntn29CtMz5TsGeTtdc4pdocjKI HBdWTVv8yRtHCBgGKDdzDuTS4sG4RxVJGd8pdqz9qfXotpZF45XqIi2+ZsPklVI0 FS/808RYKHDbsJB8csDo3mgJEa6ELrxOSJiTuLRsNL6TkZXj7Z7e6Zt/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb+H3a3TX2Uclkaq3kJcI+8VX2qMB8GA1UdIwQY MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkYTi+GvW IB1+0wFoqHCeVYQ5jAVSDAdAcByALQVaQIJYeGbaDTzT3ZHDpA3VXP+ZfhFl6Qqy 6TlwgzQ+02c4iYQXSaytFZcrickC7ZnIz8wXwA1AqRcnRIw4xngJVZcAgQCcDgzX i7DVDAHGEEruBMjlTnuymO0W/kXyUz/ZcUvXc3DtEpn+xB9fM5/tAjpHMoFE8KFY pAuPM/n1CZp5vEuxHGOBaYHqcbR9Rb/bsSBrM7O73TxZdOfXVC7BqvqFLBlK2g2z 0Q2ugKtFxvMOrrFGfYW8iZxOGRvwuRtOhywLj7xNv2vgU+NZt4BPNtwozNRk8y08 nDCBR61oVneTUg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:19 2025 by rpki-client