This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json) Hash identifier: 5zZdhB268ff6B9VN2FsUj+kSQNlbwpyR3jtuJvvkgow= Subject key identifier: 35:80:AE:DB:06:F1:73:DE:AB:6B:49:F5:23:98:7D:84:F2:B1:D0:4C Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Certificate serial: 019AF2ADCB500234905C82CDE7B115EF5F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft Manifest number: 081A Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=) 2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: za9SSKDpHf9zZMSwT+NGIdcf0xxlraV50TB1TF4Wh2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cb:50:02:34:90:5c:82:cd:e7:b1:15:ef:5f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=3580aedb06f173deab6b49f523987d84f2b1d04c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2f:dd:67:43:54:ac:6c:09:9a:51:a2:e1:eb: 01:5a:13:a5:20:9b:79:2a:2f:cd:8d:e7:a7:3a:5d: d8:28:e2:2d:4f:08:2a:33:81:ef:ed:12:82:f9:65: b7:43:b0:07:e7:20:03:86:f2:15:c2:a0:46:5b:f4: 6d:ef:e7:2e:04:75:9c:41:bc:5a:10:a4:f9:39:49: 36:78:8e:cf:9d:10:eb:cb:76:3a:23:2b:a6:1b:7c: 57:d2:83:84:b0:a4:99:5e:d1:62:c5:73:b9:9c:9b: f5:15:0f:b9:ed:d8:8a:93:d4:0c:33:5e:d7:aa:8d: 5e:a0:ef:50:aa:7c:2f:39:07:5b:00:0d:3e:8e:5e: b2:b6:ba:ef:e6:1c:2f:22:27:34:e4:ae:ae:34:4e: e8:5e:84:48:9b:fc:57:36:ed:d1:1a:13:ec:8b:24: a3:b2:4b:5d:c9:95:47:84:94:7d:bb:e2:63:8c:0f: c6:1f:e3:a8:7b:5d:40:d1:e8:a9:05:f7:ea:46:c1: e3:14:bc:a5:6b:4d:ff:a3:8c:15:cb:0c:b1:91:12: a5:2e:95:67:8e:23:2b:de:86:a3:d5:ef:91:c1:37: 8a:ab:88:64:40:11:e2:65:6b:15:73:96:45:23:fa: ec:c2:53:76:a4:25:9f:67:7b:b2:5a:9e:5a:ae:d4: e4:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:80:AE:DB:06:F1:73:DE:AB:6B:49:F5:23:98:7D:84:F2:B1:D0:4C X509v3 Authority Key Identifier: keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:be:3f:4f:6c:de:d1:46:65:1f:3f:1c:1f:dd:24:d0:65: 20:ca:2a:cd:bf:54:fa:4b:ea:54:c5:64:c9:8a:ef:d8:9f:23: 3f:95:ac:07:55:db:2a:de:93:cf:88:dc:78:8d:b5:a8:93:3e: ae:1a:ea:d8:e0:d5:ee:4d:83:77:58:d0:78:58:d8:8a:0a:17: 7d:b8:b3:04:ab:73:2e:62:ff:e2:24:fa:ce:3f:70:37:a6:8b: 4a:e9:d8:5c:bb:f8:e6:d2:fe:77:02:3e:44:2f:e0:54:ef:65: e0:74:45:8f:04:06:8d:be:cf:43:64:35:8f:d2:36:ec:93:53: 58:e9:47:5c:a3:8c:0c:98:1f:dc:60:2b:fc:c5:30:f7:c1:94: a5:22:0c:d4:c8:cc:46:5a:d8:25:29:88:15:43:5d:e2:ed:b9: 84:fd:a2:cf:b2:93:b8:d2:1b:61:c5:d5:a3:64:89:58:4e:19: 26:54:40:a1:df:25:98:6f:44:0a:e7:ad:0e:92:e1:50:51:82: d7:f2:fd:aa:eb:a1:e5:d1:09:83:02:0b:e5:d1:bd:9f:d1:50: 31:3d:3a:bc:d7:a5:c4:c0:ae:3c:72:d0:d5:06:a4:c4:3b:29: 21:fc:7b:ae:e2:15:f8:ed:2a:e9:62:87:e6:64:0b:87:92:ce: ea:44:b7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrctQAjSQXILN57EV7180MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy OTY1Y2EwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygzNTgwYWVkYjA2ZjE3M2RlYWI2YjQ5ZjUyMzk4N2Q4NGYyYjFkMDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzC/dZ0NUrGwJmlGi4esBWhOlIJt5 Ki/NjeenOl3YKOItTwgqM4Hv7RKC+WW3Q7AH5yADhvIVwqBGW/Rt7+cuBHWcQbxa EKT5OUk2eI7PnRDry3Y6IyumG3xX0oOEsKSZXtFixXO5nJv1FQ+57diKk9QMM17X qo1eoO9QqnwvOQdbAA0+jl6ytrrv5hwvIic05K6uNE7oXoRIm/xXNu3RGhPsiySj sktdyZVHhJR9u+JjjA/GH+Ooe11A0eipBffqRsHjFLyla03/o4wVywyxkRKlLpVn jiMr3oaj1e+RwTeKq4hkQBHiZWsVc5ZFI/rswlN2pCWfZ3uyWp5artTkLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWArtsG8XPeq2tJ9SOYfYTysdBMMB8GA1UdIwQY MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3 LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX6+P09s 3tFGZR8/HB/dJNBlIMoqzb9U+kvqVMVkyYrv2J8jP5WsB1XbKt6Tz4jceI21qJM+ rhrq2ODV7k2Dd1jQeFjYigoXfbizBKtzLmL/4iT6zj9wN6aLSunYXLv45tL+dwI+ RC/gVO9l4HRFjwQGjb7PQ2Q1j9I27JNTWOlHXKOMDJgf3GAr/MUw98GUpSIM1MjM RlrYJSmIFUNd4u25hP2iz7KTuNIbYcXVo2SJWE4ZJlRAod8lmG9ECuetDpLhUFGC 1/L9quuh5dEJgwIL5dG9n9FQMT06vNelxMCuPHLQ1QakxDspIfx7ruIV+O0q6WKH 5mQLh5LO6kS33Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:49 2025 by rpki-client