This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft File: fi4pGEMoSetx6V3EDRB56oZfYQk.mft (raw, json) Hash identifier: uPczME7WPOQzpLComWp1rYBGGZHDnBFJQiIPiC74xmQ= Subject key identifier: CF:8E:46:EE:A5:8E:66:BC:E0:6A:46:41:ED:1D:4F:CB:78:1A:DE:DB Authority key identifier: 7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09 Certificate issuer: /CN=7e2e2918432849eb71e95dc40d1079ea865f6109 Certificate serial: 019AF6F917EC42FA16EB1357F4C8EAA4D37A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft Manifest number: 0A7F Signing time: Sun 07 Dec 2025 04:01:50 +0000 Manifest this update: Sun 07 Dec 2025 04:01:50 +0000 Manifest next update: Mon 08 Dec 2025 04:01:50 +0000 Files and hashes: 1: S1dC-8FvWd5r91Ep_3NW-RYRFSM.roa (hash: WN6IJU4enC30WWGrEp1TUJBHxrmIxnrzAFySxPEWWA0=) 2: fi4pGEMoSetx6V3EDRB56oZfYQk.crl (hash: PSrlXrdCcpjaEZiBIPcFW6+gPOL/9kiHDm4G8FT0zVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:17:ec:42:fa:16:eb:13:57:f4:c8:ea:a4:d3:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2e2918432849eb71e95dc40d1079ea865f6109 Validity Not Before: Dec 7 04:01:50 2025 GMT Not After : Dec 8 04:01:50 2025 GMT Subject: CN=cf8e46eea58e66bce06a4641ed1d4fcb781adedb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b3:f4:bb:7f:db:20:c9:bb:83:53:58:af:22: 4d:c4:9b:a5:e0:de:09:dc:5f:90:d6:ab:7d:1b:f1: dc:bf:03:77:73:82:5d:34:91:6f:fb:e5:bf:30:4d: 44:da:70:46:8e:ba:cc:45:b3:4f:a2:62:c5:bd:21: 01:9e:f8:e3:41:1d:ff:ab:b5:7e:59:f8:d2:43:c4: ce:f0:6a:b7:ec:b2:ee:5a:ab:99:26:19:94:37:f1: a6:9d:02:08:4a:85:c1:07:21:80:6a:f4:eb:03:84: 74:02:bf:6d:b4:90:bf:c0:c4:03:ab:b0:03:5f:10: f1:ea:c4:19:5d:8c:1c:db:8e:65:74:00:d6:fd:c0: 50:1a:11:85:c8:ff:d2:28:95:36:4d:ce:06:cb:9c: da:2b:21:cc:66:ef:ba:a4:ad:5c:ba:0a:b8:2e:07: 86:e7:f6:fa:d6:af:70:5d:aa:f6:63:0d:04:ca:79: 5f:55:3f:4c:ae:52:fc:6d:36:8a:60:f5:c4:31:11: e0:0e:7f:a5:f1:8c:3e:83:bb:56:a8:2b:f9:fb:b3: dc:10:e0:6a:23:ae:fc:aa:65:c0:5d:d4:84:a6:6c: f1:a4:87:63:38:d2:fe:c5:db:6e:88:7d:16:e1:9b: c9:0a:24:dd:51:c6:23:6b:4e:8e:94:3e:1c:f7:d2: e0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:46:EE:A5:8E:66:BC:E0:6A:46:41:ED:1D:4F:CB:78:1A:DE:DB X509v3 Authority Key Identifier: keyid:7E:2E:29:18:43:28:49:EB:71:E9:5D:C4:0D:10:79:EA:86:5F:61:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi4pGEMoSetx6V3EDRB56oZfYQk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d85f41-7701-44c2-bf2e-c5619859450c/1/fi4pGEMoSetx6V3EDRB56oZfYQk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:5d:79:4f:bb:59:87:c7:ac:a2:4a:cb:15:74:20:16:bc:68: 98:f9:66:1c:66:11:db:97:50:eb:4e:40:e8:22:dc:df:e4:3f: 45:73:e5:28:35:a5:bd:a5:33:12:2f:ce:8a:ba:f8:08:1a:27: 4a:2e:b8:b9:8c:22:bd:9f:ce:dc:61:d1:2d:17:36:87:98:15: f1:4c:7d:71:77:e6:cd:d5:16:60:ed:6b:80:b4:90:fc:57:af: 30:aa:5e:3f:78:c2:bf:b8:60:01:ec:02:2d:17:24:da:4f:f9: 04:3b:eb:1f:70:36:28:93:e5:d6:b2:06:c1:e6:c0:96:06:02: b8:1c:2f:a7:41:11:25:9d:69:82:c5:24:ca:ed:94:d1:51:47: 0f:50:c3:7c:f8:a1:d1:55:1b:8a:45:c4:e4:9c:89:64:9a:05: 91:d4:f8:21:7d:9d:f6:ec:38:5d:3c:17:d4:29:79:63:b2:d9: b8:2e:55:3c:b6:27:db:86:9a:36:c3:c5:00:e9:83:a1:66:71: d8:8c:f4:b5:e3:51:2a:de:57:b3:73:f1:ae:c2:f5:cc:9b:4c: b8:3d:e1:b2:8a:e0:a9:ed:f1:31:6c:c8:0b:7d:de:87:ae:d7: 01:34:c9:af:3a:b5:7c:2d:e1:bd:68:be:75:8a:16:dd:67:f5: b9:4d:2a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+RfsQvoW6xNX9MjqpNN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmUyOTE4NDMyODQ5ZWI3MWU5NWRjNDBkMTA3OWVhODY1 ZjYxMDkwHhcNMjUxMjA3MDQwMTUwWhcNMjUxMjA4MDQwMTUwWjAzMTEwLwYDVQQD EyhjZjhlNDZlZWE1OGU2NmJjZTA2YTQ2NDFlZDFkNGZjYjc4MWFkZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27P0u3/bIMm7g1NYryJNxJul4N4J 3F+Q1qt9G/HcvwN3c4JdNJFv++W/ME1E2nBGjrrMRbNPomLFvSEBnvjjQR3/q7V+ WfjSQ8TO8Gq37LLuWquZJhmUN/GmnQIISoXBByGAavTrA4R0Ar9ttJC/wMQDq7AD XxDx6sQZXYwc245ldADW/cBQGhGFyP/SKJU2Tc4Gy5zaKyHMZu+6pK1cugq4LgeG 5/b61q9wXar2Yw0EynlfVT9MrlL8bTaKYPXEMRHgDn+l8Yw+g7tWqCv5+7PcEOBq I678qmXAXdSEpmzxpIdjONL+xdtuiH0W4ZvJCiTdUcYja06OlD4c99LgNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+ORu6ljma84GpGQe0dT8t4Gt7bMB8GA1UdIwQY MBaAFH4uKRhDKEnrceldxA0QeeqGX2EJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUt YzU2MTk4NTk0NTBjLzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kODVmNDEtNzcwMS00NGMyLWJmMmUtYzU2MTk4NTk0NTBj LzEvZmk0cEdFTW9TZXR4NlYzRURSQjU2b1pmWVFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAll15T7tZ h8esokrLFXQgFrxomPlmHGYR25dQ605A6CLc3+Q/RXPlKDWlvaUzEi/Oirr4CBon Si64uYwivZ/O3GHRLRc2h5gV8Ux9cXfmzdUWYO1rgLSQ/FevMKpeP3jCv7hgAewC LRck2k/5BDvrH3A2KJPl1rIGwebAlgYCuBwvp0ERJZ1pgsUkyu2U0VFHD1DDfPih 0VUbikXE5JyJZJoFkdT4IX2d9uw4XTwX1Cl5Y7LZuC5VPLYn24aaNsPFAOmDoWZx 2Iz0teNRKt5Xs3PxrsL1zJtMuD3hsorgqe3xMWzIC33eh67XATTJrzq1fC3hvWi+ dYoW3Wf1uU0qjQ== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:48 2025 by rpki-client