This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json) Hash identifier: v90vF2PEIJSBa6aGrHJ41+ttX2Y9UwPIo3ZFJqt6/xo= Subject key identifier: 77:BC:99:66:99:B0:D0:33:AF:F5:D7:0A:A0:FE:37:12:0C:1F:D2:39 Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba Certificate serial: 019B32684EB4485DF4D79F836655F6E2A994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft Manifest number: 0A11 Signing time: Thu 18 Dec 2025 17:00:54 +0000 Manifest this update: Thu 18 Dec 2025 17:00:54 +0000 Manifest next update: Fri 19 Dec 2025 17:00:54 +0000 Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: gki09RW6BQA8TEPpKWZ5ayFEeSPzllt87Ys5++h1hkI=) 2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:4e:b4:48:5d:f4:d7:9f:83:66:55:f6:e2:a9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba Validity Not Before: Dec 18 17:00:54 2025 GMT Not After : Dec 19 17:00:54 2025 GMT Subject: CN=77bc996699b0d033aff5d70aa0fe37120c1fd239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d9:56:47:97:33:56:68:78:72:fb:5c:db:8c: d0:36:41:cd:aa:b4:16:85:65:83:00:3b:1a:86:ba: 6e:14:c7:65:6d:21:5a:7b:0a:04:c8:b1:25:0d:fb: 13:dc:f1:cc:7e:3b:79:69:31:80:17:5c:19:f0:2f: 92:d3:6e:f8:1e:92:53:40:47:0f:67:2a:7a:7a:19: 9c:d2:29:47:1e:e1:d4:fc:4d:d9:b1:ef:ee:94:5e: d4:df:8a:ef:73:3c:07:67:43:92:3c:8a:cf:af:a5: 20:7c:aa:62:c2:50:a0:a4:95:ca:9d:44:ed:a4:41: 23:c8:8c:2d:b9:b2:ba:a1:80:59:63:1d:26:65:c7: 10:32:b4:99:10:be:db:c5:ba:2a:2c:88:18:ac:16: 92:84:24:5f:66:8a:bd:b9:b9:34:60:3f:7c:f2:d9: 94:05:ae:48:48:a5:71:e8:61:b7:dd:b1:b9:6b:e3: e3:2b:6d:0a:af:37:5b:10:d3:f2:65:28:fc:6e:ba: c9:e5:a1:36:2f:8a:d8:51:3e:5c:e5:66:6d:3d:a0: c5:9e:ef:7d:c8:f7:01:d9:68:27:5e:cb:4f:60:3c: 97:ed:79:da:45:e9:6b:e5:1b:c6:24:87:7d:6e:29: e4:b0:3d:4d:7a:56:b9:bd:1e:35:86:9a:8d:4f:dd: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BC:99:66:99:B0:D0:33:AF:F5:D7:0A:A0:FE:37:12:0C:1F:D2:39 X509v3 Authority Key Identifier: keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:e2:6e:d5:94:70:78:ba:ac:c0:88:fc:27:2f:57:61:f0:ef: b8:64:1c:36:9f:51:72:fe:75:e8:fe:fb:9a:19:4a:71:d9:03: 6f:7b:94:5a:1a:6d:70:91:8d:8d:60:82:ce:3c:70:a8:7d:85: b5:39:41:6e:f9:51:41:72:df:95:b5:7a:10:94:d4:80:25:cf: 84:37:b4:50:c9:2d:34:21:1b:ed:62:91:3e:7b:e6:cd:6e:47: 03:81:7f:d2:a1:3a:be:2b:1d:cf:b0:4d:2d:9f:f9:d6:95:09: 0a:a5:af:e2:4b:cd:45:98:e2:bd:f5:4f:20:fa:c4:b2:41:35: bb:f9:37:2b:70:76:26:38:30:39:22:b9:3e:86:95:c7:67:da: 9b:8d:39:54:3f:be:a2:28:43:a9:f3:82:b1:a2:d0:05:c6:28: 10:52:fa:e3:20:b1:cb:e0:e7:13:b1:35:3e:44:33:37:3a:ba: 5e:dd:2b:36:4a:98:f2:70:50:85:a9:92:13:42:f4:b6:7c:6e: e7:48:3f:f9:b2:f8:27:fe:2f:30:9c:b3:dc:5c:c4:c9:5c:22: 19:d3:c2:cf:25:0a:ca:44:fc:44:98:c2:8c:80:49:3b:b7:6e: c4:1c:c6:ce:4e:91:5a:42:fe:15:f4:a2:94:66:c7:7a:97:e2: e6:e2:bf:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaE60SF3015+DZlX24qmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx N2E0YmEwHhcNMjUxMjE4MTcwMDU0WhcNMjUxMjE5MTcwMDU0WjAzMTEwLwYDVQQD Eyg3N2JjOTk2Njk5YjBkMDMzYWZmNWQ3MGFhMGZlMzcxMjBjMWZkMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptlWR5czVmh4cvtc24zQNkHNqrQW hWWDADsahrpuFMdlbSFaewoEyLElDfsT3PHMfjt5aTGAF1wZ8C+S0274HpJTQEcP Zyp6ehmc0ilHHuHU/E3Zse/ulF7U34rvczwHZ0OSPIrPr6UgfKpiwlCgpJXKnUTt pEEjyIwtubK6oYBZYx0mZccQMrSZEL7bxboqLIgYrBaShCRfZoq9ubk0YD988tmU Ba5ISKVx6GG33bG5a+PjK20KrzdbENPyZSj8brrJ5aE2L4rYUT5c5WZtPaDFnu99 yPcB2WgnXstPYDyX7XnaRelr5RvGJId9binksD1Nela5vR41hpqNT9316QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe8mWaZsNAzr/XXCqD+NxIMH9I5MB8GA1UdIwQY MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt NjQwZTA3NWJmODdmLzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOJu1ZRw eLqswIj8Jy9XYfDvuGQcNp9Rcv516P77mhlKcdkDb3uUWhptcJGNjWCCzjxwqH2F tTlBbvlRQXLflbV6EJTUgCXPhDe0UMktNCEb7WKRPnvmzW5HA4F/0qE6visdz7BN LZ/51pUJCqWv4kvNRZjivfVPIPrEskE1u/k3K3B2JjgwOSK5PoaVx2fam405VD++ oihDqfOCsaLQBcYoEFL64yCxy+DnE7E1PkQzNzq6Xt0rNkqY8nBQhamSE0L0tnxu 50g/+bL4J/4vMJyz3FzEyVwiGdPCzyUKykT8RJjCjIBJO7duxBzGzk6RWkL+FfSi lGbHepfi5uK/Cw== -----END CERTIFICATE-----Generated at Thu Dec 18 19:07:08 2025 by rpki-client