This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft File: fIJLILMxe7jIm-pPDzTQlC0dcU4.mft (raw, json) Hash identifier: gRuzN+Tt6VQssLZhiKZ0w5TCrP/0Wc2x0WB/ZMFuNYQ= Subject key identifier: D1:F0:00:4E:02:E4:F4:4F:C9:80:95:57:8A:24:31:DA:92:9E:0B:C3 Authority key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E Certificate issuer: /CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e Certificate serial: 019AF2AD5DEBAAF79DA8A24E4374DD091D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: fIJLILMxe7jIm-pPDzTQlC0dcU4.crl (hash: EJQASQbjmbp2Ittx8WrFHj8H98VwQL5dBBe0r/zA6h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5d:eb:aa:f7:9d:a8:a2:4e:43:74:dd:09:1d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=d1f0004e02e4f44fc98095578a2431da929e0bc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fc:28:55:2c:36:4a:04:54:f4:4f:8a:3c:fb: d3:c1:e8:3d:e7:f5:bd:fc:85:f9:fd:7f:d1:4e:d2: f1:fb:6d:13:5e:3c:34:04:e0:b8:cd:d5:1b:84:8d: 8e:b9:4a:d9:e7:61:34:66:fd:84:22:56:31:83:92: 50:5c:14:12:ea:ed:e8:d3:3a:3c:4a:05:ae:40:47: 46:68:9e:ba:6f:53:f2:1f:4e:72:29:76:01:aa:ac: b6:02:f2:32:17:30:de:47:83:80:57:e0:31:4a:64: 7b:48:07:bf:f2:81:d6:c9:a2:6a:12:58:98:72:a3: 29:bb:e8:fa:6a:70:aa:50:6d:07:a6:12:ee:15:0a: 16:aa:8f:10:44:58:5d:e0:a7:cb:78:61:64:34:bc: 8a:19:82:79:86:fe:2d:5c:20:83:52:58:d6:89:a9: 4a:fb:c5:cf:d2:02:c4:67:c4:93:bf:92:f9:fa:6a: be:f6:7d:5f:b7:92:95:7b:96:62:dc:d9:8e:3d:15: 09:7b:8b:db:9b:ed:a1:fa:26:ed:f9:0f:d5:1a:76: 82:8f:80:c0:60:4f:ae:82:84:cd:bb:df:91:f6:81: 51:b0:78:ea:c4:4b:20:37:52:f5:31:8b:c0:da:9d: db:45:e3:bd:de:ac:84:b1:fe:c8:da:c7:53:ac:eb: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F0:00:4E:02:E4:F4:4F:C9:80:95:57:8A:24:31:DA:92:9E:0B:C3 X509v3 Authority Key Identifier: keyid:7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:4c:c6:b9:0b:00:00:bb:02:66:fd:26:f9:a7:49:85:82:b6: 96:17:5d:75:63:5f:2f:e3:2f:12:ef:8d:6f:b6:14:a4:23:78: b3:45:32:3e:3d:24:97:21:59:b7:19:4f:b1:f2:a8:34:05:69: 2d:d8:1e:41:90:2f:f2:04:98:d5:f1:a0:bb:7b:ca:44:2f:8a: 6b:b3:07:07:2a:fb:de:60:0d:5d:cf:4d:4d:d6:80:ea:1b:4e: 00:80:0b:b1:0f:a5:f7:65:04:f3:4f:a9:02:28:58:67:cd:f9: bd:23:51:e8:c9:33:21:bf:8c:01:e4:4c:28:0c:b6:e1:b2:48: e7:4c:ff:a4:03:52:44:5a:2a:61:6b:d3:ef:00:d8:22:42:65: 46:bf:55:eb:bc:89:e5:de:51:9a:c4:59:f3:76:8c:a7:f3:e5: 6f:f8:5f:20:c7:97:91:bc:f3:96:3b:3f:cd:e8:46:25:02:25: af:8a:e8:6b:ae:93:e3:11:24:36:50:0d:83:1f:35:36:33:77: 83:c6:49:17:3c:43:ee:96:5d:3c:8c:93:30:78:88:96:51:c7: d4:cd:fe:42:b6:2b:a7:39:c5:48:64:b4:dc:c3:e6:0a:a4:c3: 87:b0:34:70:d0:65:ca:f6:5b:b3:b0:67:04:36:df:61:14:1a: e4:38:14:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV3rqvedqKJOQ3TdCR1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODI0YjIwYjMzMTdiYjhjODliZWE0ZjBmMzRkMDk0MmQx ZDcxNGUwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EyhkMWYwMDA0ZTAyZTRmNDRmYzk4MDk1NTc4YTI0MzFkYTkyOWUwYmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovwoVSw2SgRU9E+KPPvTweg95/W9 /IX5/X/RTtLx+20TXjw0BOC4zdUbhI2OuUrZ52E0Zv2EIlYxg5JQXBQS6u3o0zo8 SgWuQEdGaJ66b1PyH05yKXYBqqy2AvIyFzDeR4OAV+AxSmR7SAe/8oHWyaJqEliY cqMpu+j6anCqUG0HphLuFQoWqo8QRFhd4KfLeGFkNLyKGYJ5hv4tXCCDUljWialK +8XP0gLEZ8STv5L5+mq+9n1ft5KVe5Zi3NmOPRUJe4vbm+2h+ibt+Q/VGnaCj4DA YE+ugoTNu9+R9oFRsHjqxEsgN1L1MYvA2p3bReO93qyEsf7I2sdTrOvd3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHwAE4C5PRPyYCVV4okMdqSngvDMB8GA1UdIwQY MBaAFHyCSyCzMXu4yJvqTw800JQtHXFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zODJmZGYtYjczYy00OTc5LTg2YzUt ZWQ0NDk4MTE1MDMzLzEvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zODJmZGYtYjczYy00OTc5LTg2YzUtZWQ0NDk4MTE1MDMz LzEvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0zGuQsA ALsCZv0m+adJhYK2lhdddWNfL+MvEu+Nb7YUpCN4s0UyPj0klyFZtxlPsfKoNAVp LdgeQZAv8gSY1fGgu3vKRC+Ka7MHByr73mANXc9NTdaA6htOAIALsQ+l92UE80+p AihYZ835vSNR6MkzIb+MAeRMKAy24bJI50z/pANSRFoqYWvT7wDYIkJlRr9V67yJ 5d5RmsRZ83aMp/Plb/hfIMeXkbzzljs/zehGJQIlr4roa66T4xEkNlANgx81NjN3 g8ZJFzxD7pZdPIyTMHiIllHH1M3+QrYrpznFSGS03MPmCqTDh7A0cNBlyvZbs7Bn BDbfYRQa5DgUPA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:20:58 2025 by rpki-client