This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json) Hash identifier: 8KnuzBEolTzi/ZqMbmRRpPe2ZK8gwKoZTZY4c4l0sgY= Subject key identifier: 20:11:E8:E2:4C:DB:F8:84:1C:30:C3:F9:1E:27:B0:63:EB:7C:03:B7 Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e Certificate serial: 019AF31D5F213C9A033CC3208FDE59F6C234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: OY9mwUNdSnIS2qAmS+buammdiiHbH3l0ba+tZH2LV6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5f:21:3c:9a:03:3c:c3:20:8f:de:59:f6:c2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=2011e8e24cdbf8841c30c3f91e27b063eb7c03b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:64:f9:37:f4:50:16:1f:20:18:20:b5:4d:50: f7:a0:22:f6:fa:28:08:5a:c1:b1:c5:f3:f0:d9:5a: 08:e3:09:b8:77:e1:a7:f6:95:2c:d4:62:16:00:87: a6:30:40:c9:65:55:91:c3:52:a0:29:2f:27:c1:d4: a5:69:8d:ee:8b:58:26:23:ff:59:07:22:1f:7e:0b: 01:67:33:34:33:df:b0:e9:98:e7:ae:2f:dc:8d:9d: f0:44:ba:9e:d7:8d:03:f4:e8:ba:06:58:ef:fb:da: fc:32:6f:f4:64:78:85:fa:b1:4e:93:f3:97:7f:56: f2:f3:6a:ec:5b:2c:12:af:00:c6:50:30:ab:68:21: 93:ad:2c:f9:b6:b2:55:41:31:12:61:e5:a2:bd:d4: f1:7f:5d:18:12:f5:a9:b4:9a:2d:de:b5:1e:9e:1d: 15:ec:78:5f:81:dc:39:e2:9e:fd:44:3d:85:c5:11: 3a:46:8a:1e:3e:56:90:36:bb:5d:e7:b9:9b:b1:89: 7b:46:94:3a:0d:e4:a2:f7:06:af:53:de:d9:ba:90: 46:5e:ac:b1:3b:d3:3a:f4:0e:1a:82:73:39:e5:c8: 3c:52:5a:b0:f2:a4:91:a9:0f:c7:dd:22:cf:3f:f3: 9f:9c:4c:43:42:e7:9a:fb:88:27:34:c3:24:10:06: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:11:E8:E2:4C:DB:F8:84:1C:30:C3:F9:1E:27:B0:63:EB:7C:03:B7 X509v3 Authority Key Identifier: keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:67:1b:f2:de:e9:97:a2:bd:0f:f0:fc:cd:cc:39:40:18:8b: 7e:32:e0:c5:ed:63:e2:d2:af:59:e8:4c:9e:5f:5e:93:ea:10: 6a:e8:a5:9b:86:9a:43:ee:c5:34:4b:55:14:7d:24:3a:a2:7d: 3f:d3:6c:cd:7d:39:4f:75:26:16:4c:cd:cc:c9:61:7b:c1:1e: 5f:cf:d9:82:0e:e4:08:d3:e4:e6:b8:12:71:17:e7:b6:47:97: 14:e5:c3:e7:5c:ae:df:96:6d:30:03:aa:2a:b9:ef:82:53:c8: 03:ae:29:29:78:cc:4e:62:6d:f7:b2:4b:03:ed:2f:1c:7e:6c: 56:43:6d:f4:1a:58:ff:14:12:6c:60:49:97:cc:18:18:6b:08: 23:a1:1a:b2:df:9f:91:8f:15:8d:2d:fe:1e:02:0f:f3:b4:64: e6:c3:31:6d:97:5a:b1:cb:6a:e2:c6:a8:d0:3a:25:8c:b7:98: dc:44:c6:ad:be:e7:1d:54:1c:50:6b:5f:7e:7b:b6:9f:45:83: 57:dd:88:27:82:04:24:c6:ab:ae:d1:ad:0d:1b:80:2f:70:a5: a5:c5:de:aa:4f:4d:b0:a3:c1:49:68:5d:89:0e:6d:f1:76:1e: 4a:e2:62:fc:8f:f6:6c:9f:c8:3c:5f:c4:af:b2:bb:7c:90:e9: 0a:20:79:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV8hPJoDPMMgj95Z9sI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDc3YzViNzc2Y2RiN2NmN2JjMzVkNmI0NDJlMzY3NzZh YjBjNmUwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD EygyMDExZThlMjRjZGJmODg0MWMzMGMzZjkxZTI3YjA2M2ViN2MwM2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWT5N/RQFh8gGCC1TVD3oCL2+igI WsGxxfPw2VoI4wm4d+Gn9pUs1GIWAIemMEDJZVWRw1KgKS8nwdSlaY3ui1gmI/9Z ByIffgsBZzM0M9+w6Zjnri/cjZ3wRLqe140D9Oi6Bljv+9r8Mm/0ZHiF+rFOk/OX f1by82rsWywSrwDGUDCraCGTrSz5trJVQTESYeWivdTxf10YEvWptJot3rUenh0V 7Hhfgdw54p79RD2FxRE6RooePlaQNrtd57mbsYl7RpQ6DeSi9wavU97ZupBGXqyx O9M69A4agnM55cg8Ulqw8qSRqQ/H3SLPP/OfnExDQuea+4gnNMMkEAZ09wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAR6OJM2/iEHDDD+R4nsGPrfAO3MB8GA1UdIwQY MBaAFBQHfFt3bNt897w11rRC42d2qwxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4Zjct NjNhNGNhZWRiMzhlLzEvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4ZjctNjNhNGNhZWRiMzhl LzEvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWcb8t7p l6K9D/D8zcw5QBiLfjLgxe1j4tKvWehMnl9ek+oQauilm4aaQ+7FNEtVFH0kOqJ9 P9NszX05T3UmFkzNzMlhe8EeX8/Zgg7kCNPk5rgScRfntkeXFOXD51yu35ZtMAOq KrnvglPIA64pKXjMTmJt97JLA+0vHH5sVkNt9BpY/xQSbGBJl8wYGGsII6East+f kY8VjS3+HgIP87Rk5sMxbZdasctq4sao0DoljLeY3ETGrb7nHVQcUGtffnu2n0WD V92IJ4IEJMarrtGtDRuAL3ClpcXeqk9NsKPBSWhdiQ5t8XYeSuJi/I/2bJ/IPF/E r7K7fJDpCiB53Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:25 2025 by rpki-client