This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft File: feY3584h1skbVKBojiD5JBYiIjc.mft (raw, json) Hash identifier: 3Vn9e+wfDEuYAECwZIlUeoub28Pcxm2GtRiaEWgLdXY= Subject key identifier: 6B:BC:2A:AB:59:BA:D5:CD:96:4A:C9:7E:90:82:B2:E6:BD:32:62:51 Authority key identifier: 7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37 Certificate issuer: /CN=7de637e7ce21d6c91b54a0688e20f92416222237 Certificate serial: 019AF19ACEC6DCB1D4774273AF1A726160E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft Manifest number: 11C3 Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: feY3584h1skbVKBojiD5JBYiIjc.crl (hash: GMHgH0lWTEDg6YfTujZ4BQThmafHUGmtMn7SMuDZsWE=) 2: gSkIa_heLgXoxXWpRCNJvp9Xs88.roa (hash: 5vrs6puP5YdpeYb/igpgdkuukfc/yg5fXJ/pSyPNWx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ce:c6:dc:b1:d4:77:42:73:af:1a:72:61:60:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7de637e7ce21d6c91b54a0688e20f92416222237 Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=6bbc2aab59bad5cd964ac97e9082b2e6bd326251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8d:0f:c8:3c:06:c7:66:a5:67:5b:fa:73:4b: 35:a1:8c:4f:e2:6c:c5:45:f6:eb:36:60:e1:cc:87: 11:75:fb:88:0c:0f:00:78:e5:09:59:2c:11:d2:c0: d2:d5:fc:84:6c:71:6a:62:c2:de:63:f9:0f:38:fc: 94:fe:5a:1c:64:e7:e6:dd:57:f3:2e:fb:c6:8e:81: b5:98:4b:c9:3d:d4:a8:17:e7:de:e9:ae:cd:83:69: db:b8:e7:a9:e3:d0:9b:09:50:06:d0:b5:ff:95:9a: 53:8a:fb:7e:4d:7d:60:c0:de:4a:5a:d0:98:ad:59: 02:7e:24:8f:64:7f:98:3e:10:00:48:47:36:7b:b2: ce:14:6c:61:b4:1a:f4:67:06:e3:df:ff:ca:e7:64: df:15:be:e6:9e:49:54:76:6e:7c:bf:33:c1:d6:10: 68:ca:c4:d3:85:60:55:58:38:49:fe:02:5a:c6:16: 7c:ec:62:f1:d5:a5:02:0f:f5:f9:fd:4b:bd:7c:7f: 71:0b:dd:eb:d8:cd:45:82:d7:8e:c0:b8:18:e6:ba: e3:61:8e:32:22:92:0a:64:5b:f1:54:a8:fd:2f:28: 2e:b1:7f:18:0d:57:5f:b6:4c:78:01:e8:2c:8c:1e: 67:08:53:73:76:72:d0:0c:52:c5:66:97:06:cb:2f: fa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BC:2A:AB:59:BA:D5:CD:96:4A:C9:7E:90:82:B2:E6:BD:32:62:51 X509v3 Authority Key Identifier: keyid:7D:E6:37:E7:CE:21:D6:C9:1B:54:A0:68:8E:20:F9:24:16:22:22:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/feY3584h1skbVKBojiD5JBYiIjc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7dd48b-331f-457a-849d-03961e2b0601/1/feY3584h1skbVKBojiD5JBYiIjc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:e9:ca:78:ae:61:09:db:27:71:60:31:d7:5f:62:cf:3d:2d: aa:7d:40:5c:34:ed:ce:cf:af:bb:27:2c:19:49:cf:bc:0c:ef: d6:15:1d:76:70:4d:a7:9e:ad:28:9c:85:a9:c0:d4:40:e2:a8: c9:c2:9a:23:05:3c:9f:5e:6f:0d:9f:a8:62:49:5e:c6:1f:07: 96:d9:4b:54:9e:db:57:ee:47:e9:41:a6:1d:e3:49:dc:14:f8: 70:ca:4b:69:bb:dd:d6:24:cc:3a:85:36:8e:03:c5:2d:ca:69: 90:3c:c3:41:27:e8:cb:f5:0f:65:7f:43:db:fe:43:67:47:96: ed:70:af:07:bf:ee:65:37:fa:84:c5:60:9d:f0:4d:5b:ae:c2: d4:7e:e1:4c:8a:61:35:cc:d3:35:8e:96:06:50:4f:cc:d9:74: 6e:97:29:28:d4:09:e6:92:aa:34:b4:27:35:a7:6a:b3:72:3a: fe:b5:ae:0b:d5:b0:89:a4:69:3d:12:30:55:c0:19:f1:f4:7b: 00:b6:08:a1:6c:55:c5:c6:f8:df:ef:27:ea:2b:8d:73:3c:ac: 1c:e4:a6:ef:86:04:42:40:58:f3:35:54:33:ae:cb:88:12:fb: f8:3a:e3:e9:33:40:76:39:b5:b3:10:ce:4e:05:35:85:43:82: ae:0a:9e:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxms7G3LHUd0JzrxpyYWDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZTYzN2U3Y2UyMWQ2YzkxYjU0YTA2ODhlMjBmOTI0MTYy MjIyMzcwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD Eyg2YmJjMmFhYjU5YmFkNWNkOTY0YWM5N2U5MDgyYjJlNmJkMzI2MjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o0PyDwGx2alZ1v6c0s1oYxP4mzF RfbrNmDhzIcRdfuIDA8AeOUJWSwR0sDS1fyEbHFqYsLeY/kPOPyU/locZOfm3Vfz LvvGjoG1mEvJPdSoF+fe6a7Ng2nbuOep49CbCVAG0LX/lZpTivt+TX1gwN5KWtCY rVkCfiSPZH+YPhAASEc2e7LOFGxhtBr0Zwbj3//K52TfFb7mnklUdm58vzPB1hBo ysTThWBVWDhJ/gJaxhZ87GLx1aUCD/X5/Uu9fH9xC93r2M1FgteOwLgY5rrjYY4y IpIKZFvxVKj9LygusX8YDVdftkx4AegsjB5nCFNzdnLQDFLFZpcGyy/6eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu8KqtZutXNlkrJfpCCsua9MmJRMB8GA1UdIwQY MBaAFH3mN+fOIdbJG1SgaI4g+SQWIiI3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQt MDM5NjFlMmIwNjAxLzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83ZGQ0OGItMzMxZi00NTdhLTg0OWQtMDM5NjFlMmIwNjAx LzEvZmVZMzU4NGgxc2tiVktCb2ppRDVKQllpSWpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQenKeK5h CdsncWAx119izz0tqn1AXDTtzs+vuycsGUnPvAzv1hUddnBNp56tKJyFqcDUQOKo ycKaIwU8n15vDZ+oYklexh8HltlLVJ7bV+5H6UGmHeNJ3BT4cMpLabvd1iTMOoU2 jgPFLcppkDzDQSfoy/UPZX9D2/5DZ0eW7XCvB7/uZTf6hMVgnfBNW67C1H7hTIph NczTNY6WBlBPzNl0bpcpKNQJ5pKqNLQnNadqs3I6/rWuC9WwiaRpPRIwVcAZ8fR7 ALYIoWxVxcb43+8n6iuNczysHOSm74YEQkBY8zVUM67LiBL7+Drj6TNAdjm1sxDO TgU1hUOCrgqeVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:09 2025 by rpki-client