This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json) Hash identifier: 6oJY9OigTyE5eqWYZ3YJIsPvMpCqj1YYxlfGfSoaymQ= Subject key identifier: F0:61:70:AB:B6:81:49:10:76:31:EA:E7:81:C1:4F:E1:B8:DE:66:C8 Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f Certificate serial: 019AF12D3257DEF6C213DDE76F90F4A19275 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: /vPlVH9wxDU7Le1xoQP376T8A+vwwyDqmiwJiWRZQpw=) 2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:32:57:de:f6:c2:13:dd:e7:6f:90:f4:a1:92:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=f06170abb68149107631eae781c14fe1b8de66c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:7e:65:86:a3:f1:7c:93:d5:96:b3:3e:7d: 05:ca:88:a6:f7:15:5c:3a:eb:17:98:28:a7:17:10: 9a:8e:1a:13:98:29:b1:e9:51:d0:51:5a:b7:78:34: 32:7c:ff:e6:98:e9:9a:4a:a2:02:ac:dc:cc:c6:a9: f1:e1:b8:0e:95:79:42:00:24:d9:3f:d1:a5:22:14: 40:41:aa:25:4c:3c:99:87:45:90:f5:2c:25:30:a9: f9:69:81:4d:9e:e1:8f:db:49:13:bb:69:66:10:30: 9f:82:2f:b6:10:bd:65:ee:8b:50:33:02:c0:52:96: 73:09:a1:49:fa:64:4f:d7:23:93:2b:68:b6:9c:75: 3f:d5:9c:c7:7d:34:7e:03:46:f9:29:3b:b9:32:dd: bf:b5:57:f4:5f:13:be:7e:37:8b:74:75:ce:c2:de: cc:62:9a:6b:7b:f5:1a:bb:43:57:6e:26:65:64:5f: ec:cf:fe:d8:8e:1e:c0:b0:12:c0:89:a1:62:63:ff: 73:27:09:27:e3:4e:16:ea:d9:49:62:8b:b9:26:a3: 4a:2b:e2:6b:d2:4c:fb:78:97:fd:30:45:0c:b9:1f: 77:8e:3e:14:27:68:a3:66:23:33:c1:28:a1:ba:cf: e5:ef:94:3a:eb:38:cc:03:77:5b:9a:4a:05:a5:d8: ce:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:61:70:AB:B6:81:49:10:76:31:EA:E7:81:C1:4F:E1:B8:DE:66:C8 X509v3 Authority Key Identifier: keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3c:28:87:c9:bc:e3:7a:4b:81:c0:7a:2c:1d:ed:d2:6a:55: 66:f5:21:45:9c:82:f3:79:ed:ba:2a:42:0f:70:fb:81:36:47: 44:63:7e:1e:ad:a7:48:c7:f7:58:e5:f8:63:1f:c4:75:3a:94: 37:c0:05:19:39:4a:49:d0:ec:f3:bc:c1:c9:08:08:ef:30:48: 1d:79:9a:4a:fe:7f:a3:ac:19:31:5c:8a:8d:1c:e4:a3:94:5f: 57:72:1a:e7:4a:56:7c:01:ca:b8:c5:fc:02:df:f3:8a:b3:21: db:df:39:b5:6e:68:0a:02:0c:1e:77:f5:c6:70:90:4a:70:c6: 2d:07:c1:69:0d:a8:ba:84:39:0a:2e:f6:76:89:3c:20:d3:21: 79:d2:d4:9f:24:60:34:33:fd:a9:4a:4f:5a:e9:cf:4b:22:f6: 72:9c:d7:57:b9:05:cb:3f:6a:93:98:4d:b9:8b:5f:e7:d6:73: 8a:a8:0d:8e:3c:d0:e5:f8:bd:be:f1:83:08:29:72:07:b9:1e: b1:b5:5c:f7:5e:41:19:d5:0c:35:e8:27:d8:f3:cd:05:2d:49: e1:b7:b0:5b:86:a5:29:87:e9:29:45:15:7f:74:4b:76:88:de: 3e:ea:55:26:4d:e7:e7:c4:bb:0f:44:cd:44:d0:86:e4:62:a2: 04:b1:5c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTJX3vbCE93nb5D0oZJ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk ODE1NmYwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD EyhmMDYxNzBhYmI2ODE0OTEwNzYzMWVhZTc4MWMxNGZlMWI4ZGU2NmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntB+ZYaj8XyT1ZazPn0Fyoim9xVc OusXmCinFxCajhoTmCmx6VHQUVq3eDQyfP/mmOmaSqICrNzMxqnx4bgOlXlCACTZ P9GlIhRAQaolTDyZh0WQ9SwlMKn5aYFNnuGP20kTu2lmEDCfgi+2EL1l7otQMwLA UpZzCaFJ+mRP1yOTK2i2nHU/1ZzHfTR+A0b5KTu5Mt2/tVf0XxO+fjeLdHXOwt7M Yppre/Uau0NXbiZlZF/sz/7Yjh7AsBLAiaFiY/9zJwkn404W6tlJYou5JqNKK+Jr 0kz7eJf9MEUMuR93jj4UJ2ijZiMzwSihus/l75Q66zjMA3dbmkoFpdjO/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBhcKu2gUkQdjHq54HBT+G43mbIMB8GA1UdIwQY MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHjwoh8m8 43pLgcB6LB3t0mpVZvUhRZyC83ntuipCD3D7gTZHRGN+Hq2nSMf3WOX4Yx/EdTqU N8AFGTlKSdDs87zByQgI7zBIHXmaSv5/o6wZMVyKjRzko5RfV3Ia50pWfAHKuMX8 At/zirMh2985tW5oCgIMHnf1xnCQSnDGLQfBaQ2ouoQ5Ci72dok8INMhedLUnyRg NDP9qUpPWunPSyL2cpzXV7kFyz9qk5hNuYtf59ZziqgNjjzQ5fi9vvGDCClyB7ke sbVc915BGdUMNegn2PPNBS1J4bewW4alKYfpKUUVf3RLdojePupVJk3n58S7D0TN RNCG5GKiBLFcNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:23 2025 by rpki-client