This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft File: felj7OLwup93SayjhUIPnXAuqos.mft (raw, json) Hash identifier: zJgIinkLv9OE/P7uDQV1mo8VBu4E02akqiJWJoaEjfc= Subject key identifier: E7:10:EC:71:62:72:97:AA:6E:12:BB:2B:9D:BD:F0:D3:6E:6B:85:31 Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B Certificate issuer: /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Certificate serial: 019AF23FD070DEFADA441F1385C48563C87F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft Manifest number: 1014 Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=) 2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: ufyEPDrrH8WdHrna1X4xpf4gCdNtdhnkQ+vI5Bxp72g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d0:70:de:fa:da:44:1f:13:85:c4:85:63:c8:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=e710ec71627297aa6e12bb2b9dbdf0d36e6b8531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:fb:4d:0b:54:84:3e:32:0b:24:2c:59:e8: 52:bf:25:c2:40:0d:9d:9e:e5:0f:95:b6:e8:f3:2e: 1f:e3:b1:fb:9d:1f:39:61:6a:24:e4:80:35:de:01: f2:cf:41:ff:c4:25:00:8f:f6:9a:66:68:ba:cb:59: ba:64:7c:fd:a3:2f:cf:8a:16:d9:ea:a4:ce:7e:0f: 01:c6:81:13:ba:0b:24:a4:e6:93:6f:8e:1a:3f:c9: e1:b6:39:48:aa:02:41:9b:4e:3b:5a:76:d6:20:d9: b8:67:70:ca:0f:98:5c:bd:c4:35:18:0f:91:4c:00: d2:56:19:4f:44:70:35:9f:8a:81:f9:af:b1:6c:8d: 89:95:8b:55:fd:5d:ed:a8:e8:6b:0b:db:9f:99:ce: 13:76:4b:55:e9:01:01:12:44:b9:8d:b8:91:47:8d: 5a:7e:e3:d6:11:10:12:99:31:f2:78:57:a5:a2:ee: 26:d1:8a:e1:58:ee:ce:93:bd:55:d7:ee:be:a4:9c: a0:51:29:b5:29:02:4d:cd:18:b7:8e:77:6f:a0:4d: c2:b6:8c:01:28:cc:5c:2c:71:5d:56:2a:82:81:4f: df:9d:71:70:b2:df:b6:29:b8:14:5c:fa:5b:99:48: 40:0a:ae:69:2b:48:92:76:e0:65:1c:64:39:9b:b8: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:10:EC:71:62:72:97:AA:6E:12:BB:2B:9D:BD:F0:D3:6E:6B:85:31 X509v3 Authority Key Identifier: keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:8b:60:e4:e6:0f:07:7e:d6:7c:ca:db:95:4d:15:ea:c5:22: 9d:48:4c:57:2f:2c:0c:51:56:3f:26:2a:56:d6:2a:5e:5c:f0: fa:11:44:cf:1a:84:99:ae:de:1f:5a:3c:15:2a:24:9d:8f:95: f8:88:95:e1:91:d1:c0:d4:16:e1:46:c8:38:18:39:d3:3e:44: 19:7d:90:cf:77:76:45:e8:96:1f:c8:71:50:30:02:3d:6c:96: 13:22:79:af:73:5f:ff:58:82:d3:08:fd:9c:42:56:16:40:9b: 07:25:4a:58:7b:86:54:ba:d8:5e:0e:64:9e:44:68:66:39:3e: 02:4c:4f:3e:1c:69:61:6c:9e:df:e1:2b:e5:b6:f6:07:e6:5a: 3d:68:9a:f2:43:3b:79:d6:4e:7b:2e:79:94:b9:87:bb:69:d2: 18:cf:9a:1d:03:3f:41:8a:be:1f:ac:58:ad:11:95:cf:bf:2b: d0:20:74:65:8f:3d:5c:91:b0:9e:e4:64:ed:55:38:c0:30:01: d7:79:1f:c7:15:57:2c:50:aa:51:87:6d:5f:3f:b3:3e:54:24: c9:55:89:b1:3f:be:fd:63:f5:8e:bc:bb:ef:77:7b:33:91:70: 8b:b0:ad:28:e2:15:ea:45:a1:d1:81:15:d0:23:c2:30:c0:e0: 92:21:ea:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9Bw3vraRB8ThcSFY8h/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTk2M2VjZTJmMGJhOWY3NzQ5YWNhMzg1NDIwZjlkNzAy ZWFhOGIwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EyhlNzEwZWM3MTYyNzI5N2FhNmUxMmJiMmI5ZGJkZjBkMzZlNmI4NTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyj7TQtUhD4yCyQsWehSvyXCQA2d nuUPlbbo8y4f47H7nR85YWok5IA13gHyz0H/xCUAj/aaZmi6y1m6ZHz9oy/PihbZ 6qTOfg8BxoETugskpOaTb44aP8nhtjlIqgJBm047WnbWINm4Z3DKD5hcvcQ1GA+R TADSVhlPRHA1n4qB+a+xbI2JlYtV/V3tqOhrC9ufmc4TdktV6QEBEkS5jbiRR41a fuPWERASmTHyeFelou4m0YrhWO7Ok71V1+6+pJygUSm1KQJNzRi3jndvoE3CtowB KMxcLHFdViqCgU/fnXFwst+2KbgUXPpbmUhACq5pK0iSduBlHGQ5m7hk9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcQ7HFicpeqbhK7K5298NNua4UxMB8GA1UdIwQY MBaAFH3pY+zi8Lqfd0mso4VCD51wLqqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2Et NmUyZGVhMDNkNTk2LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mZjYwNTItZmE4MC00NGI4LWFmY2EtNmUyZGVhMDNkNTk2 LzEvZmVsajdPTHd1cDkzU2F5amhVSVBuWEF1cW9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYtg5OYP B37WfMrblU0V6sUinUhMVy8sDFFWPyYqVtYqXlzw+hFEzxqEma7eH1o8FSoknY+V +IiV4ZHRwNQW4UbIOBg50z5EGX2Qz3d2ReiWH8hxUDACPWyWEyJ5r3Nf/1iC0wj9 nEJWFkCbByVKWHuGVLrYXg5knkRoZjk+AkxPPhxpYWye3+Er5bb2B+ZaPWia8kM7 edZOey55lLmHu2nSGM+aHQM/QYq+H6xYrRGVz78r0CB0ZY89XJGwnuRk7VU4wDAB 13kfxxVXLFCqUYdtXz+zPlQkyVWJsT++/WP1jry773d7M5Fwi7CtKOIV6kWh0YEV 0CPCMMDgkiHqaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:28:57 2025 by rpki-client