This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft File: FaevcHtYSLNTljanQxd51wFM2mE.mft (raw, json) Hash identifier: LFQbDbBMYxR3gF7Q3KcpDJUVm0uvFQ0JcbtT5/xtEH4= Subject key identifier: D4:68:5F:A1:05:96:80:61:70:30:92:B5:43:22:3A:B7:91:79:67:A5 Authority key identifier: 15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61 Certificate issuer: /CN=15a7af707b5848b3539636a7431779d7014cda61 Certificate serial: 019AF19B369A8CBCD65F25DC415E431FB12F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft Manifest number: 0666 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: FaevcHtYSLNTljanQxd51wFM2mE.crl (hash: kK83sfwpEmRus3f2hIwbEMmdBU+9EniQAy+chrzaHe4=) 2: bX3oZWjtTuzwx_xG-vCMVNG-cOc.roa (hash: d1VXe5ysdAxKyO5IduA6oLfO1V4ILKmPg+j75Lo6HnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:9a:8c:bc:d6:5f:25:dc:41:5e:43:1f:b1:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15a7af707b5848b3539636a7431779d7014cda61 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=d4685fa105968061703092b543223ab7917967a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:de:34:03:1e:5e:da:2a:f8:0b:fa:73:e2: 15:ab:5f:95:5c:93:61:76:9c:f3:63:90:eb:70:e6: 0f:fd:36:81:5a:4f:a8:d7:dd:bd:56:c9:09:6a:ac: 19:bf:b1:18:4f:40:b8:83:09:db:50:54:ed:75:24: fb:fe:44:15:34:ff:c6:1b:2a:9b:57:a2:77:e0:58: 5b:6f:29:08:45:05:d4:1e:7a:84:81:ed:c7:8e:ac: 8c:5d:09:70:e2:26:00:b5:a3:8b:d9:98:a9:ac:31: 76:eb:f4:20:4a:c9:e1:0b:ba:ef:db:71:e9:dc:26: 86:64:5d:a3:53:aa:77:57:f2:8c:df:e9:99:74:88: ad:bc:d1:6c:52:f5:64:d3:92:9b:d2:e6:c2:70:c7: 1d:e0:c6:e1:fe:9c:3d:48:7b:64:a2:3f:de:b7:c2: b7:75:59:a1:65:2a:8f:2c:7d:ef:99:99:26:61:1b: 3c:65:66:0e:f7:1b:e0:1a:87:25:04:4e:1f:99:60: ea:ff:a7:52:e5:b9:0e:e0:51:ad:b0:18:ed:ba:26: 6e:2f:b3:de:b9:60:78:fd:ce:d7:d8:b4:08:68:0b: 76:a3:af:ce:fe:44:9c:33:22:07:dc:dc:dd:d3:64: 5d:c2:16:e0:d7:dd:2c:8e:b3:b6:02:52:6e:64:1f: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:68:5F:A1:05:96:80:61:70:30:92:B5:43:22:3A:B7:91:79:67:A5 X509v3 Authority Key Identifier: keyid:15:A7:AF:70:7B:58:48:B3:53:96:36:A7:43:17:79:D7:01:4C:DA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaevcHtYSLNTljanQxd51wFM2mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/dd50de-8e2a-490c-a418-60116862616a/1/FaevcHtYSLNTljanQxd51wFM2mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e3:8b:e4:67:d3:db:a6:22:fa:0d:b8:78:d6:aa:2b:36:12: 1c:8c:f2:6c:01:94:a7:aa:d9:cb:ba:9c:6c:db:eb:c1:82:18: 55:01:3b:e0:a3:79:fc:af:ca:0e:be:23:85:6f:be:e8:5b:c0: 05:b2:95:b3:db:58:ad:20:00:9f:d1:f6:82:f0:46:01:60:02: 61:5a:4c:5f:40:c2:0a:f6:7c:2e:33:88:71:52:8f:e3:7f:05: f9:75:6d:ed:06:c9:f6:e0:ad:36:f4:0a:f5:e4:39:1c:a7:d3: 37:04:30:8d:72:f7:07:2f:c3:4f:eb:f2:fe:00:87:18:a0:f4: b6:b5:ec:f7:9a:57:c5:a2:2c:84:45:c1:92:4c:91:ad:f8:db: 4f:3e:b7:79:8f:1b:c3:92:40:3a:39:88:70:98:72:c4:a7:30: 48:5b:c6:87:96:ca:e2:20:8e:3d:34:da:8b:55:7d:2f:ee:94: 3b:88:b7:24:7a:b7:cc:8e:b2:97:43:a5:4e:74:91:2a:35:fb: 8e:17:4c:37:fd:a6:a2:0a:f9:ef:92:ec:12:9c:a1:4f:62:17: 14:9f:8b:a6:46:61:9a:33:b3:e9:3b:34:7e:8d:b9:92:25:f5: 9e:0b:bd:a6:0e:31:aa:69:1a:35:09:0a:0c:9d:3e:cc:79:38: 38:f9:b4:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzaajLzWXyXcQV5DH7EvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YTdhZjcwN2I1ODQ4YjM1Mzk2MzZhNzQzMTc3OWQ3MDE0 Y2RhNjEwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD EyhkNDY4NWZhMTA1OTY4MDYxNzAzMDkyYjU0MzIyM2FiNzkxNzk2N2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlfeNAMeXtoq+Av6c+IVq1+VXJNh dpzzY5DrcOYP/TaBWk+o1929VskJaqwZv7EYT0C4gwnbUFTtdST7/kQVNP/GGyqb V6J34FhbbykIRQXUHnqEge3HjqyMXQlw4iYAtaOL2ZiprDF26/QgSsnhC7rv23Hp 3CaGZF2jU6p3V/KM3+mZdIitvNFsUvVk05Kb0ubCcMcd4Mbh/pw9SHtkoj/et8K3 dVmhZSqPLH3vmZkmYRs8ZWYO9xvgGoclBE4fmWDq/6dS5bkO4FGtsBjtuiZuL7Pe uWB4/c7X2LQIaAt2o6/O/kScMyIH3Nzd02Rdwhbg190sjrO2AlJuZB+9+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRoX6EFloBhcDCStUMiOreReWelMB8GA1UdIwQY MBaAFBWnr3B7WEizU5Y2p0MXedcBTNphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgt NjAxMTY4NjI2MTZhLzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9kZDUwZGUtOGUyYS00OTBjLWE0MTgtNjAxMTY4NjI2MTZh LzEvRmFldmNIdFlTTE5UbGphblF4ZDUxd0ZNMm1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuOL5GfT 26Yi+g24eNaqKzYSHIzybAGUp6rZy7qcbNvrwYIYVQE74KN5/K/KDr4jhW++6FvA BbKVs9tYrSAAn9H2gvBGAWACYVpMX0DCCvZ8LjOIcVKP438F+XVt7QbJ9uCtNvQK 9eQ5HKfTNwQwjXL3By/DT+vy/gCHGKD0trXs95pXxaIshEXBkkyRrfjbTz63eY8b w5JAOjmIcJhyxKcwSFvGh5bK4iCOPTTai1V9L+6UO4i3JHq3zI6yl0OlTnSRKjX7 jhdMN/2mogr575LsEpyhT2IXFJ+LpkZhmjOz6Ts0fo25kiX1ngu9pg4xqmkaNQkK DJ0+zHk4OPm0Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:50 2025 by rpki-client