This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft File: fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json) Hash identifier: FaFWRzG7OOeGNK6RKemkiGhcAPAYgIb4mLGo7WEW/Hw= Subject key identifier: C4:BA:B6:34:33:1C:6F:B9:30:F1:6B:47:E7:CC:C9:B2:80:50:03:98 Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 Certificate issuer: /CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Certificate serial: 019AF31C5C372ECDCDB4B5778EFB8FCD7242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft Manifest number: 0B88 Signing time: Sat 06 Dec 2025 10:01:53 +0000 Manifest this update: Sat 06 Dec 2025 10:01:53 +0000 Manifest next update: Sun 07 Dec 2025 10:01:53 +0000 Files and hashes: 1: CIh-n620dapiChf7Qz9UJJ0kAYM.roa (hash: FBemJczTUCPxIUZPk0jDQbmKS7wDmu5CZBeaJ9h/Hsg=) 2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: +V4iO7mamDEexijZVFykpRdXeozSqnoJGQ2W4mWOJl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:5c:37:2e:cd:cd:b4:b5:77:8e:fb:8f:cd:72:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83 Validity Not Before: Dec 6 10:01:53 2025 GMT Not After : Dec 7 10:01:53 2025 GMT Subject: CN=c4bab634331c6fb930f16b47e7ccc9b280500398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:da:9d:9e:04:fb:fe:09:a8:81:e4:28:3c:5d: 8e:f6:a4:25:ad:cd:be:00:bd:73:72:c2:d6:b2:b9: 39:19:42:be:e4:ca:c8:00:f9:e3:30:a9:2e:e9:d9: f0:00:a7:45:54:70:5c:75:da:9b:50:17:5c:ed:44: 3c:94:86:91:02:da:f3:53:3d:87:41:ac:07:61:43: 49:f1:43:61:dc:67:c2:e6:c8:68:a7:66:2e:87:7a: 00:1f:c5:a6:1c:35:ee:d3:6a:3f:c0:b1:ac:48:9a: d1:44:6f:89:87:40:a5:e2:ae:fb:34:9c:b4:fb:20: 9e:b4:79:dd:18:d3:dc:ee:a3:9c:b8:d8:4f:52:18: db:a6:b0:85:f5:52:ff:eb:0e:52:e8:e2:9b:ff:58: 40:67:e9:57:77:82:ad:66:33:1b:6e:3e:dd:0a:ec: 09:6f:ff:a1:17:10:48:3b:a8:10:46:78:5e:82:d1: d2:38:cf:a5:7d:bb:cf:0f:94:f7:62:73:b4:15:f2: ea:b5:d2:11:70:81:fd:32:9d:d0:c6:3d:23:57:e4: db:90:44:18:86:83:b3:9e:ce:88:0d:96:d8:e4:58: a1:e9:c5:61:18:67:7c:ab:c0:84:24:ba:49:cb:ed: a5:4c:0d:96:54:8c:71:1c:18:82:ee:a5:4c:be:9a: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BA:B6:34:33:1C:6F:B9:30:F1:6B:47:E7:CC:C9:B2:80:50:03:98 X509v3 Authority Key Identifier: keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8a:55:01:f2:05:86:fa:c6:b6:1d:8d:ab:0c:2f:3a:5c:dc: 4b:3c:69:a0:c3:38:1c:6c:45:4d:69:84:97:5c:ce:4f:41:7b: 77:d8:10:88:25:68:f4:3a:b7:a9:fe:00:2e:80:75:91:5d:54: c2:a8:1b:cf:59:ae:5e:6f:18:67:50:66:45:e4:7b:fe:b5:82: 60:23:1b:05:d2:88:d6:7e:79:bb:16:e6:a3:7a:bd:25:f2:bf: 7d:25:42:d5:3e:a7:fa:69:da:b7:63:f7:2b:49:b5:13:80:6e: a7:1e:4a:96:36:44:4e:41:4b:3d:e4:aa:ec:4a:d4:74:d4:41: e6:4b:9b:43:92:de:de:66:81:d3:cd:a8:cf:a2:c1:f4:fd:7a: e0:2f:9f:60:a4:a9:b9:9e:ba:ea:64:e9:b3:89:66:ba:e4:21: 69:7f:c8:ed:6b:dc:ee:ed:27:51:92:37:39:3f:60:96:0a:82: fc:58:da:5b:da:07:47:b3:0b:be:3f:fc:f0:3a:56:20:05:9a: 74:6c:0b:33:a9:aa:11:23:0f:b0:56:40:e1:c9:45:f8:53:03: 06:d8:07:32:7d:96:cb:c6:cd:41:84:71:46:c8:0e:71:17:41: 3d:95:ec:97:03:98:f1:3d:32:9e:45:19:9e:95:53:98:40:fc: a8:13:5d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFw3Ls3NtLV3jvuPzXJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmVkYTY5NTJiMDNlOGJhNDU5OTdiZTYxNWQ3YWJlZTE3 ODRmODMwHhcNMjUxMjA2MTAwMTUzWhcNMjUxMjA3MTAwMTUzWjAzMTEwLwYDVQQD EyhjNGJhYjYzNDMzMWM2ZmI5MzBmMTZiNDdlN2NjYzliMjgwNTAwMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNqdngT7/gmogeQoPF2O9qQlrc2+ AL1zcsLWsrk5GUK+5MrIAPnjMKku6dnwAKdFVHBcddqbUBdc7UQ8lIaRAtrzUz2H QawHYUNJ8UNh3GfC5shop2Yuh3oAH8WmHDXu02o/wLGsSJrRRG+Jh0Cl4q77NJy0 +yCetHndGNPc7qOcuNhPUhjbprCF9VL/6w5S6OKb/1hAZ+lXd4KtZjMbbj7dCuwJ b/+hFxBIO6gQRnhegtHSOM+lfbvPD5T3YnO0FfLqtdIRcIH9Mp3Qxj0jV+TbkEQY hoOzns6IDZbY5Fih6cVhGGd8q8CEJLpJy+2lTA2WVIxxHBiC7qVMvppqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS6tjQzHG+5MPFrR+fMybKAUAOYMB8GA1UdIwQY MBaAFH4u2mlSsD6LpFmXvmFder7heE+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEt MmYyMzAwYjZlM2Q5LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zODA0MDAtZGMyZS00OTRhLTg5MWEtMmYyMzAwYjZlM2Q5 LzEvZmk3YWFWS3dQb3VrV1plLVlWMTZ2dUY0VDRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4pVAfIF hvrGth2NqwwvOlzcSzxpoMM4HGxFTWmEl1zOT0F7d9gQiCVo9Dq3qf4ALoB1kV1U wqgbz1muXm8YZ1BmReR7/rWCYCMbBdKI1n55uxbmo3q9JfK/fSVC1T6n+mnat2P3 K0m1E4Bupx5KljZETkFLPeSq7ErUdNRB5kubQ5Le3maB082oz6LB9P164C+fYKSp uZ666mTps4lmuuQhaX/I7Wvc7u0nUZI3OT9glgqC/FjaW9oHR7MLvj/88DpWIAWa dGwLM6mqESMPsFZA4clF+FMDBtgHMn2Wy8bNQYRxRsgOcRdBPZXslwOY8T0ynkUZ npVTmED8qBNdNA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:37 2025 by rpki-client