This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json) Hash identifier: AkGVZGNA8JGkaYV7DE3PD6m9AMKtzjAGtxbzD/ClW8w= Subject key identifier: 2F:AE:65:C1:E4:D1:A7:6D:09:90:1E:77:70:5C:AA:EA:05:BA:1E:65 Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019AF12E0DE8D62321E0B269A8FD3A9363B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft Manifest number: 0F7B Signing time: Sat 06 Dec 2025 01:01:58 +0000 Manifest this update: Sat 06 Dec 2025 01:01:58 +0000 Manifest next update: Sun 07 Dec 2025 01:01:58 +0000 Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: LXHmHYKmlhUcQWcgePkG8cRF/k1cFbAFcGx4uomkGJU=) 2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:0d:e8:d6:23:21:e0:b2:69:a8:fd:3a:93:63:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Dec 6 01:01:58 2025 GMT Not After : Dec 7 01:01:58 2025 GMT Subject: CN=2fae65c1e4d1a76d09901e77705caaea05ba1e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:d3:88:45:f8:f3:ee:35:52:3f:bf:ca:bb: 31:b6:d6:a4:84:4f:a8:fa:e0:62:fb:2e:bc:a1:08: bb:17:a0:f8:10:35:f2:2f:fc:40:87:e6:5b:8d:1c: be:d6:9b:1d:65:f0:23:24:f5:43:91:e5:3c:ef:66: d6:d6:b8:53:82:8d:e1:ce:fd:43:a1:9a:bc:e7:51: d5:26:36:93:f0:cf:2b:c9:f2:69:23:ec:13:b6:e9: ef:db:dc:68:38:22:1c:bf:c4:92:e0:30:4b:8d:ed: 2c:79:22:5b:30:55:27:a4:5b:c1:ee:83:74:0d:03: 7e:2d:35:99:30:7c:58:5f:aa:09:35:19:96:18:d2: 73:ff:e8:92:e2:28:d7:d6:c6:52:92:82:f7:da:3d: 7a:9a:c9:8a:68:27:15:32:16:1e:a4:ce:79:6b:90: ef:d1:19:13:58:75:05:ab:21:3e:28:c8:a6:ec:2f: 8b:92:55:7d:46:9a:b6:5b:d6:cd:eb:83:e3:6f:9e: 3d:9b:59:db:c0:44:ad:d5:63:7b:fc:fe:3c:3c:92: 45:54:21:4a:61:c3:b6:84:84:a7:de:93:4a:b6:01: 76:4d:39:35:c3:d1:fb:70:42:a0:2e:b9:c5:93:f6: 15:aa:35:69:90:4e:a4:11:67:eb:8a:ba:0b:13:16: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AE:65:C1:E4:D1:A7:6D:09:90:1E:77:70:5C:AA:EA:05:BA:1E:65 X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b4:c5:48:8b:55:07:bf:dd:9a:55:90:05:9a:0b:46:96:09: 7a:b9:09:fb:f5:04:d6:48:a3:35:d8:49:81:20:b6:40:1b:57: cd:bb:24:6b:7e:3e:26:7f:16:2f:2b:c9:4c:75:52:b4:3d:2e: f0:84:8a:a4:4e:8e:9e:43:45:2c:fe:db:ea:29:26:e7:1f:5c: 94:97:d4:d5:48:c3:7a:73:06:6f:6f:35:92:2f:cb:c2:f1:ab: 7e:fa:ac:51:e0:52:49:d0:bf:87:4c:87:9c:40:a1:72:54:b7: 26:2a:c0:b1:12:a9:1f:c5:e5:52:01:5d:84:ff:20:8f:36:81: c7:75:4b:7e:1d:87:f7:24:5f:d9:c2:fc:04:fb:06:34:18:68: a3:83:ee:7f:35:3e:cd:eb:56:9a:96:eb:7f:3b:df:94:d3:30: 25:44:0e:59:39:d8:6e:ef:db:e1:ef:b8:a2:d1:32:5f:d5:c7: cb:92:b2:cb:72:5b:fe:50:ae:51:72:fa:92:38:85:a7:c3:e7: 1f:45:b8:47:bc:bb:a8:2d:4b:f2:d3:29:9f:e0:da:70:d3:c3: 12:96:3d:f9:5f:49:25:58:07:a1:81:41:b2:15:29:85:0a:56: 79:cb:41:f8:3a:20:17:f0:ab:8e:84:bb:7c:90:75:d1:88:6f: a0:05:96:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLg3o1iMh4LJpqP06k2O3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjUxMjA2MDEwMTU4WhcNMjUxMjA3MDEwMTU4WjAzMTEwLwYDVQQD EygyZmFlNjVjMWU0ZDFhNzZkMDk5MDFlNzc3MDVjYWFlYTA1YmExZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHLTiEX48+41Uj+/yrsxttakhE+o +uBi+y68oQi7F6D4EDXyL/xAh+ZbjRy+1psdZfAjJPVDkeU872bW1rhTgo3hzv1D oZq851HVJjaT8M8ryfJpI+wTtunv29xoOCIcv8SS4DBLje0seSJbMFUnpFvB7oN0 DQN+LTWZMHxYX6oJNRmWGNJz/+iS4ijX1sZSkoL32j16msmKaCcVMhYepM55a5Dv 0RkTWHUFqyE+KMim7C+LklV9Rpq2W9bN64Pjb549m1nbwESt1WN7/P48PJJFVCFK YcO2hISn3pNKtgF2TTk1w9H7cEKgLrnFk/YVqjVpkE6kEWfriroLExYGjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+uZcHk0adtCZAed3BcquoFuh5lMB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLTFSItV B7/dmlWQBZoLRpYJerkJ+/UE1kijNdhJgSC2QBtXzbska34+Jn8WLyvJTHVStD0u 8ISKpE6OnkNFLP7b6ikm5x9clJfU1UjDenMGb281ki/LwvGrfvqsUeBSSdC/h0yH nEChclS3JirAsRKpH8XlUgFdhP8gjzaBx3VLfh2H9yRf2cL8BPsGNBhoo4PufzU+ zetWmpbrfzvflNMwJUQOWTnYbu/b4e+4otEyX9XHy5Kyy3Jb/lCuUXL6kjiFp8Pn H0W4R7y7qC1L8tMpn+DacNPDEpY9+V9JJVgHoYFBshUphQpWectB+DogF/CrjoS7 fJB10YhvoAWWPg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:56:21 2025 by rpki-client