This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft File: FAd8W3ds23z3vDXWtELjZ3arDG4.mft (raw, json) Hash identifier: G4D1k/uTUDpgQZ29oGyPjIo/FW84grTupSx4uTn6feE= Subject key identifier: BB:A5:68:9E:25:C9:D9:D2:CB:66:3D:12:B4:7B:62:E3:FB:08:0B:06 Authority key identifier: 14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E Certificate issuer: /CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e Certificate serial: 019B25531EB5EED9458B09D2149C1A053D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft Manifest number: 1779 Signing time: Tue 16 Dec 2025 04:02:42 +0000 Manifest this update: Tue 16 Dec 2025 04:02:42 +0000 Manifest next update: Wed 17 Dec 2025 04:02:42 +0000 Files and hashes: 1: FAd8W3ds23z3vDXWtELjZ3arDG4.crl (hash: Jmg8iFgmOBtj1SxvkX6sxBmErfFzcDH7iZ1NgJweRg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:53:1e:b5:ee:d9:45:8b:09:d2:14:9c:1a:05:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14077c5b776cdb7cf7bc35d6b442e36776ab0c6e Validity Not Before: Dec 16 04:02:42 2025 GMT Not After : Dec 17 04:02:42 2025 GMT Subject: CN=bba5689e25c9d9d2cb663d12b47b62e3fb080b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:80:df:67:44:45:ae:a3:6d:9c:96:43:96:d1: 2e:28:45:46:5f:44:f5:07:a5:cf:97:a3:af:c6:e9: 30:b1:22:01:89:36:d2:b9:6e:e6:13:07:f1:7d:53: dc:4d:73:87:6e:69:4b:be:48:fe:b0:e4:6d:f4:f0: 01:e1:eb:73:74:41:db:43:f3:5e:04:05:6d:52:10: 15:90:db:94:6d:6a:38:d7:57:e4:9d:2e:a0:10:4a: ea:37:a4:d6:b1:f7:ab:9f:cf:bc:39:d8:47:f5:c6: 53:00:f5:ca:e4:8e:5f:9c:6b:7d:70:3c:e2:1b:a8: ec:1a:32:96:e4:31:9d:33:94:5f:56:f0:46:b9:38: 83:14:ee:33:ea:91:46:b4:d7:99:af:fa:61:1a:8e: a6:42:fc:d5:57:49:81:0d:74:62:c4:ae:4b:e2:b4: 2e:0e:c4:31:2f:ea:41:88:a3:59:a4:ed:0a:3e:f4: 09:d7:4b:11:8f:b7:ff:5b:30:4a:45:25:ca:b5:b1: 30:a7:c5:46:74:7a:66:50:6c:f0:c3:a6:be:8d:3b: be:bc:df:d1:a4:e1:7c:10:ff:7d:28:96:5d:32:5f: c6:f2:eb:55:91:64:7d:26:55:e0:cf:25:2a:92:36: 45:f4:22:e2:a4:a9:3d:c8:c8:b0:03:dd:39:4b:ea: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A5:68:9E:25:C9:D9:D2:CB:66:3D:12:B4:7B:62:E3:FB:08:0B:06 X509v3 Authority Key Identifier: keyid:14:07:7C:5B:77:6C:DB:7C:F7:BC:35:D6:B4:42:E3:67:76:AB:0C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAd8W3ds23z3vDXWtELjZ3arDG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b711d7-ea06-4e42-98f7-63a4caedb38e/1/FAd8W3ds23z3vDXWtELjZ3arDG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:44:6b:0c:58:0f:07:e4:cc:02:86:fc:38:56:e8:dc:be:83: f6:59:0c:c6:60:dc:be:b1:80:bf:99:f0:a9:b8:8f:ec:a6:a7: 37:b0:25:93:37:43:b2:5d:cc:dc:e5:20:b0:41:40:3e:27:c8: b9:17:27:3e:2d:6c:e7:46:ba:0a:1b:39:10:78:c1:b3:4a:af: 96:0c:26:6d:d7:24:27:79:eb:4e:c6:27:8d:ab:39:f0:eb:77: 4b:cd:9b:e9:e8:6a:a3:33:26:c4:04:e1:5b:07:97:89:98:85: 00:f0:a8:d7:13:ec:ba:92:26:92:b8:50:38:8d:b8:c1:b4:49: 5d:ad:90:29:cd:ef:0e:a3:bf:c0:cd:35:9d:b2:33:a2:0d:78: c5:3f:d0:c8:db:34:c5:d2:46:3a:bd:fd:e7:f3:8f:ec:27:8d: 20:ae:78:ba:a2:09:e8:59:38:62:1b:d1:93:88:04:82:c2:03: 97:54:83:bd:f3:28:b6:66:97:0a:b6:94:ad:36:f3:32:28:42: c8:46:ec:6e:9f:cd:00:cc:fd:6a:3e:e7:8a:0d:ae:85:30:fd: e7:18:a9:8d:ea:ff:f8:4f:18:11:34:2c:a4:d1:37:fa:3e:e2: 9d:9b:95:f7:81:27:3f:d4:e8:7a:8c:97:5e:7e:70:25:52:52: 20:fa:be:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUx617tlFiwnSFJwaBT1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDc3YzViNzc2Y2RiN2NmN2JjMzVkNmI0NDJlMzY3NzZh YjBjNmUwHhcNMjUxMjE2MDQwMjQyWhcNMjUxMjE3MDQwMjQyWjAzMTEwLwYDVQQD EyhiYmE1Njg5ZTI1YzlkOWQyY2I2NjNkMTJiNDdiNjJlM2ZiMDgwYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4DfZ0RFrqNtnJZDltEuKEVGX0T1 B6XPl6OvxukwsSIBiTbSuW7mEwfxfVPcTXOHbmlLvkj+sORt9PAB4etzdEHbQ/Ne BAVtUhAVkNuUbWo411fknS6gEErqN6TWsfern8+8OdhH9cZTAPXK5I5fnGt9cDzi G6jsGjKW5DGdM5RfVvBGuTiDFO4z6pFGtNeZr/phGo6mQvzVV0mBDXRixK5L4rQu DsQxL+pBiKNZpO0KPvQJ10sRj7f/WzBKRSXKtbEwp8VGdHpmUGzww6a+jTu+vN/R pOF8EP99KJZdMl/G8utVkWR9JlXgzyUqkjZF9CLipKk9yMiwA905S+rBHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLulaJ4lydnSy2Y9ErR7YuP7CAsGMB8GA1UdIwQY MBaAFBQHfFt3bNt897w11rRC42d2qwxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4Zjct NjNhNGNhZWRiMzhlLzEvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9iNzExZDctZWEwNi00ZTQyLTk4ZjctNjNhNGNhZWRiMzhl LzEvRkFkOFczZHMyM3ozdkRYV3RFTGpaM2FyREc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVURrDFgP B+TMAob8OFbo3L6D9lkMxmDcvrGAv5nwqbiP7KanN7AlkzdDsl3M3OUgsEFAPifI uRcnPi1s50a6Chs5EHjBs0qvlgwmbdckJ3nrTsYnjas58Ot3S82b6ehqozMmxATh WweXiZiFAPCo1xPsupImkrhQOI24wbRJXa2QKc3vDqO/wM01nbIzog14xT/QyNs0 xdJGOr395/OP7CeNIK54uqIJ6Fk4YhvRk4gEgsIDl1SDvfMotmaXCraUrTbzMihC yEbsbp/NAMz9aj7nig2uhTD95xipjer/+E8YETQspNE3+j7inZuV94EnP9ToeoyX Xn5wJVJSIPq+ZQ== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:44 2025 by rpki-client