This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json) Hash identifier: zIeyAWfmgnffKKPjhuKSjv93z6WZiaPN39+HuaVJzOs= Subject key identifier: 59:14:84:6D:19:D6:E5:8D:51:84:79:02:BA:90:B7:33:BF:69:A1:54 Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba Certificate serial: 019AF0BF6F0DBC3B4525F81F8327DEB32B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft Manifest number: 09EF Signing time: Fri 05 Dec 2025 23:01:08 +0000 Manifest this update: Fri 05 Dec 2025 23:01:08 +0000 Manifest next update: Sat 06 Dec 2025 23:01:08 +0000 Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: FACrsC9sbdkFySvFRmwbSLbdTj1HBuwLlawG4C59xQ4=) 2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:6f:0d:bc:3b:45:25:f8:1f:83:27:de:b3:2b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba Validity Not Before: Dec 5 23:01:08 2025 GMT Not After : Dec 6 23:01:08 2025 GMT Subject: CN=5914846d19d6e58d51847902ba90b733bf69a154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:18:5b:68:56:a6:4b:fc:c6:8f:ee:ef:1b: 29:8f:68:92:fe:46:b9:0c:e9:b2:ea:3d:f5:dc:12: 9c:88:76:ed:3e:3d:01:27:98:31:f1:7d:0b:ba:3e: 4d:d0:59:bc:d7:4b:8c:9c:0b:1d:c4:e8:a3:9e:5b: d6:4b:e9:d4:10:60:17:2b:9c:7e:58:89:f9:37:02: dc:8a:90:bb:4f:26:06:3c:ed:f9:23:36:b8:f4:71: 86:bd:a1:a9:03:20:c2:e6:b1:14:e7:8b:33:81:6a: 9b:0f:24:b5:ca:40:44:a8:f6:49:6e:4d:8e:d3:6b: 21:5a:b2:69:21:d3:bd:32:2d:60:fe:c5:20:3d:07: b3:0e:ca:19:6d:2f:70:17:c3:5b:58:7c:90:23:33: 4a:f8:b9:22:20:6d:fa:1b:31:09:db:22:67:5d:78: 59:9d:0f:c9:aa:fb:1b:f0:8c:a1:4f:42:bf:8b:1d: 0c:c2:fa:ff:42:6b:e5:3f:06:46:88:78:35:3c:f8: f6:6f:73:a5:ab:4f:11:ba:85:de:cd:fb:2e:d8:b9: fd:1d:6b:b4:d4:13:a6:19:02:de:e5:75:0d:6c:b9: f1:3f:48:77:d9:f0:3b:e9:1a:bf:88:8b:85:e3:53: df:56:a3:60:c9:8f:2a:af:86:5c:8c:23:ea:5b:1b: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:14:84:6D:19:D6:E5:8D:51:84:79:02:BA:90:B7:33:BF:69:A1:54 X509v3 Authority Key Identifier: keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:4f:dc:89:54:fc:f3:b4:40:e7:41:09:71:3a:ed:ac:8a: be:4d:28:c5:2f:47:bc:45:be:1f:9f:81:d7:7f:d6:04:ae:8d: 17:a6:da:61:33:56:88:0d:7a:3a:62:35:bb:7f:37:c3:15:66: 51:fc:5b:12:7a:8c:56:93:c7:a8:90:82:25:c5:d2:ad:8d:9f: 5b:08:07:35:70:c0:9d:00:d8:42:7f:a9:86:4d:7d:47:4a:6e: 03:2f:25:d9:9e:df:76:f2:9c:56:56:c5:62:ab:22:a8:aa:86: 78:55:7f:48:8a:cd:96:77:87:7a:a1:53:84:8f:30:cc:3b:7f: e3:c1:29:03:f1:47:e8:b8:5e:83:ba:4a:de:22:9d:23:cd:3c: ff:3d:65:cb:49:25:92:a4:be:1d:1d:29:11:74:c7:a2:1b:19: f3:9d:a0:6c:5e:08:ee:fc:ff:05:56:bf:ab:3d:29:15:12:a9: 74:7c:40:72:cc:04:fd:ab:45:89:63:c6:7f:2e:28:ea:4e:ac: 0f:4a:fd:a6:3b:30:79:0e:88:77:39:cc:63:f4:49:87:1c:ef: 88:f3:0f:89:25:2c:62:36:82:be:cf:38:d8:62:64:26:48:d2: 5c:77:91:42:a3:c4:d9:00:67:7e:fe:c7:6c:5a:b7:d1:ac:b1: c6:66:4e:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv28NvDtFJfgfgyfesytqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx N2E0YmEwHhcNMjUxMjA1MjMwMTA4WhcNMjUxMjA2MjMwMTA4WjAzMTEwLwYDVQQD Eyg1OTE0ODQ2ZDE5ZDZlNThkNTE4NDc5MDJiYTkwYjczM2JmNjlhMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DQYW2hWpkv8xo/u7xspj2iS/ka5 DOmy6j313BKciHbtPj0BJ5gx8X0Luj5N0Fm810uMnAsdxOijnlvWS+nUEGAXK5x+ WIn5NwLcipC7TyYGPO35Iza49HGGvaGpAyDC5rEU54szgWqbDyS1ykBEqPZJbk2O 02shWrJpIdO9Mi1g/sUgPQezDsoZbS9wF8NbWHyQIzNK+LkiIG36GzEJ2yJnXXhZ nQ/Jqvsb8IyhT0K/ix0Mwvr/QmvlPwZGiHg1PPj2b3Olq08RuoXezfsu2Ln9HWu0 1BOmGQLe5XUNbLnxP0h32fA76Rq/iIuF41PfVqNgyY8qr4ZcjCPqWxutiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkUhG0Z1uWNUYR5ArqQtzO/aaFUMB8GA1UdIwQY MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt NjQwZTA3NWJmODdmLzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQBP3IlU /PO0QOdBCXE67ayKvk0oxS9HvEW+H5+B13/WBK6NF6baYTNWiA16OmI1u383wxVm UfxbEnqMVpPHqJCCJcXSrY2fWwgHNXDAnQDYQn+phk19R0puAy8l2Z7fdvKcVlbF YqsiqKqGeFV/SIrNlneHeqFThI8wzDt/48EpA/FH6Lheg7pK3iKdI808/z1ly0kl kqS+HR0pEXTHohsZ852gbF4I7vz/BVa/qz0pFRKpdHxAcswE/atFiWPGfy4o6k6s D0r9pjsweQ6IdznMY/RJhxzviPMPiSUsYjaCvs842GJkJkjSXHeRQqPE2QBnfv7H bFq30ayxxmZO0w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:52 2025 by rpki-client