This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft File: ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft (raw, json) Hash identifier: yhhlaGmVbIrlnra3Ig1rxk8AXrJmRSamgxL7WitmcZo= Subject key identifier: 0A:43:03:18:0F:65:42:C5:7F:E7:FC:32:C0:4E:7C:D7:E1:75:F3:39 Authority key identifier: 7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 Certificate issuer: /CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Certificate serial: 019B329F06E09703041C6825058D60F87FB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 18:00:41 +0000 Manifest this update: Thu 18 Dec 2025 18:00:41 +0000 Manifest next update: Fri 19 Dec 2025 18:00:41 +0000 Files and hashes: 1: Hdo0JQgTFMLfp514_zX_eH0BV28.roa (hash: 1zoX3E+YpaDl71akpZOBfWw1Iq/htQIg0CTgRLbNZSk=) 2: ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl (hash: vLZgffu5jWfYzkwFpraV+toNUivkSGVOcSJJPmgMQ3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:9f:06:e0:97:03:04:1c:68:25:05:8d:60:f8:7f:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df11a3160db8ce7918bf3ec58b5c5e1e3e93821 Validity Not Before: Dec 18 18:00:41 2025 GMT Not After : Dec 19 18:00:41 2025 GMT Subject: CN=0a4303180f6542c57fe7fc32c04e7cd7e175f339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:35:64:a6:7d:fd:a8:cd:55:c2:a9:cb:d6:ba: 6b:15:1a:9c:4e:9b:fb:1c:f1:b0:bd:dc:2f:ba:eb: 66:a7:62:94:42:57:3f:15:89:64:9e:9d:64:91:e7: c2:89:b9:0b:3d:29:80:65:6b:98:fe:f5:8a:c1:3a: 37:ad:83:0f:0b:c9:ed:c3:d2:aa:99:c3:da:b7:7f: ca:0c:dc:f6:20:54:85:b6:61:9c:11:de:81:56:92: f8:f2:46:ed:21:2b:ca:76:39:dd:35:99:29:aa:ef: 33:75:1f:ab:b0:69:ec:d9:1a:91:11:f9:8a:dc:1e: e2:8c:56:9d:79:7d:2c:2e:cc:c5:9f:44:40:31:23: 1c:28:c0:5d:ab:b9:e8:ab:a7:8b:66:0f:04:a8:01: 33:c9:eb:51:8a:7e:b3:65:63:7b:8b:8f:14:91:bb: 00:29:a4:d1:c7:63:63:36:cc:4d:63:93:31:f1:1e: 42:b3:b6:f2:06:ee:34:6a:a2:be:41:f3:67:61:36: f2:2b:97:56:d0:30:73:b5:31:13:e5:1f:8e:ca:0c: ea:aa:16:15:34:ba:37:1f:4e:97:39:75:e9:c9:b6: 2f:25:ec:60:a6:0a:57:c9:47:80:0a:70:22:60:b0: 37:90:8b:4f:f1:85:f7:29:74:c0:57:32:8e:27:d9: 20:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:43:03:18:0F:65:42:C5:7F:E7:FC:32:C0:4E:7C:D7:E1:75:F3:39 X509v3 Authority Key Identifier: keyid:7D:F1:1A:31:60:DB:8C:E7:91:8B:F3:EC:58:B5:C5:E1:E3:E9:38:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEaMWDbjOeRi_PsWLXF4ePpOCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/85b29b-0ea2-4741-b439-e4b66a3fe5bc/1/ffEaMWDbjOeRi_PsWLXF4ePpOCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:74:ee:ce:ae:55:be:f1:dd:99:32:ac:ba:d9:5f:cd:85:65: b1:94:26:74:ed:69:b3:db:fe:6b:ed:c0:8a:ab:96:5a:aa:1c: 38:12:9e:88:0a:72:10:92:ed:77:17:6c:f4:75:5b:55:e3:46: 77:63:7f:14:97:91:7c:3b:1f:f5:b5:a5:f0:ba:bb:31:b6:a7: 2f:06:d5:fb:54:4d:19:b1:b9:c9:7f:6e:16:ce:36:14:22:4a: 14:14:21:c9:e4:2a:e9:4a:7d:4c:06:60:77:c8:28:f6:9c:07: 2e:c1:4d:e7:94:ee:6a:bc:25:73:61:01:59:ee:88:01:d9:f1: 67:7b:0b:84:a4:55:8d:ec:1a:98:09:46:2d:7b:7a:ca:04:37: 86:98:a6:36:0c:6d:8a:54:4c:aa:11:3d:4d:58:ae:2c:7f:9b: d8:a8:91:9d:34:2d:14:6b:99:68:e3:b0:24:2f:b2:3e:fe:f9: 33:f6:0e:30:6d:26:d6:f7:04:bd:49:a7:aa:f1:70:9b:a2:f4: 93:1a:be:12:3b:69:ba:d4:82:55:bf:1e:3f:69:c5:47:5f:95: 3c:a6:00:9f:db:ca:3d:86:ee:83:f3:5f:05:ea:2b:f2:27:13: ad:8d:d4:e0:bc:9e:28:e9:9e:35:b6:1d:68:04:da:8a:22:3d: 90:e8:24:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsynwbglwMEHGglBY1g+H+1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjExYTMxNjBkYjhjZTc5MThiZjNlYzU4YjVjNWUxZTNl OTM4MjEwHhcNMjUxMjE4MTgwMDQxWhcNMjUxMjE5MTgwMDQxWjAzMTEwLwYDVQQD EygwYTQzMDMxODBmNjU0MmM1N2ZlN2ZjMzJjMDRlN2NkN2UxNzVmMzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzVkpn39qM1VwqnL1rprFRqcTpv7 HPGwvdwvuutmp2KUQlc/FYlknp1kkefCibkLPSmAZWuY/vWKwTo3rYMPC8ntw9Kq mcPat3/KDNz2IFSFtmGcEd6BVpL48kbtISvKdjndNZkpqu8zdR+rsGns2RqREfmK 3B7ijFadeX0sLszFn0RAMSMcKMBdq7noq6eLZg8EqAEzyetRin6zZWN7i48UkbsA KaTRx2NjNsxNY5Mx8R5Cs7byBu40aqK+QfNnYTbyK5dW0DBztTET5R+OygzqqhYV NLo3H06XOXXpybYvJexgpgpXyUeACnAiYLA3kItP8YX3KXTAVzKOJ9kguQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApDAxgPZULFf+f8MsBOfNfhdfM5MB8GA1UdIwQY MBaAFH3xGjFg24znkYvz7Fi1xeHj6TghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0Mzkt ZTRiNjZhM2ZlNWJjLzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy84NWIyOWItMGVhMi00NzQxLWI0MzktZTRiNjZhM2ZlNWJj LzEvZmZFYU1XRGJqT2VSaV9Qc1dMWEY0ZVBwT0NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEnTuzq5V vvHdmTKsutlfzYVlsZQmdO1ps9v+a+3AiquWWqocOBKeiApyEJLtdxds9HVbVeNG d2N/FJeRfDsf9bWl8Lq7MbanLwbV+1RNGbG5yX9uFs42FCJKFBQhyeQq6Up9TAZg d8go9pwHLsFN55Tuarwlc2EBWe6IAdnxZ3sLhKRVjewamAlGLXt6ygQ3hpimNgxt ilRMqhE9TViuLH+b2KiRnTQtFGuZaOOwJC+yPv75M/YOMG0m1vcEvUmnqvFwm6L0 kxq+EjtputSCVb8eP2nFR1+VPKYAn9vKPYbug/NfBeor8icTrY3U4LyeKOmeNbYd aATaiiI9kOgkJA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:09:50 2025 by rpki-client