This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft File: fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json) Hash identifier: 7mUj/aH8f9EO8MHDfTeASLgyM35LN9iUbtwTKK98Il0= Subject key identifier: F4:C0:EE:89:33:00:29:A5:BE:35:F0:5D:2B:23:E0:76:65:FD:F0:11 Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA Certificate issuer: /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Certificate serial: 019AF3F793C0C1E150FD0C2F6AD70AACBFF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft Manifest number: 1626 Signing time: Sat 06 Dec 2025 14:01:19 +0000 Manifest this update: Sat 06 Dec 2025 14:01:19 +0000 Manifest next update: Sun 07 Dec 2025 14:01:19 +0000 Files and hashes: 1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=) 2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: mJNzfignOSI/Z2YnuQp/Pu81v73UzQzKCCslp3CGL0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:93:c0:c1:e1:50:fd:0c:2f:6a:d7:0a:ac:bf:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca Validity Not Before: Dec 6 14:01:19 2025 GMT Not After : Dec 7 14:01:19 2025 GMT Subject: CN=f4c0ee89330029a5be35f05d2b23e07665fdf011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:dc:cd:1c:41:8c:be:17:df:f5:64:be:23: 8f:a9:8c:39:80:0f:06:6e:06:52:e7:83:b8:f9:99: 70:30:10:ef:01:48:31:3e:9c:0a:04:65:62:d9:81: bd:09:cc:18:d8:07:ba:36:aa:9b:9f:43:76:17:f3: 6f:17:95:e8:ce:9d:fc:1a:60:2b:f6:2e:e9:aa:fd: c2:62:e6:df:c6:34:37:64:81:d0:2d:f2:85:80:94: 16:02:3c:20:04:d5:5f:f9:56:c0:c9:91:83:06:c7: 8f:8e:86:a9:1a:09:52:76:ae:f1:17:01:63:4e:a4: cf:25:00:f6:1c:3b:41:4d:d0:58:90:a7:fa:e7:ad: 67:9e:28:f4:78:86:28:32:85:e9:c1:1c:48:9c:4f: 12:e2:4e:12:45:2b:33:02:3d:77:d2:dd:9e:c1:6a: ce:4f:7e:8a:24:11:f7:21:19:f4:58:fd:c6:e3:ac: 2f:46:f9:63:e4:a5:2b:4a:55:c1:68:15:f4:fb:86: 64:e1:7b:78:f4:96:52:16:8c:7c:04:d6:5c:96:f9: dc:d7:52:38:ea:95:91:c6:a9:64:13:0b:44:30:b7: db:0b:7b:04:ef:be:01:2b:18:2d:b1:5b:67:6b:d9: 4e:f6:15:cf:d7:01:78:e9:c7:0e:25:ba:ce:a5:86: 5d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:EE:89:33:00:29:A5:BE:35:F0:5D:2B:23:E0:76:65:FD:F0:11 X509v3 Authority Key Identifier: keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:76:94:c1:12:f2:c7:44:0e:f5:4c:be:11:9a:2c:1b:0d:7b: 3c:3e:65:98:c9:69:9b:81:a3:62:16:06:c4:3b:6d:40:9d:c1: d3:ec:b7:d8:78:6c:5d:22:fb:26:ab:ab:48:66:40:84:86:09: a9:32:5b:86:63:74:ee:d8:70:07:49:69:fa:60:01:3d:33:08: bc:02:f2:a4:08:c2:e2:7e:8b:06:94:a7:23:9b:60:60:f0:0e: 20:a8:58:4a:8d:8e:40:41:6b:34:a3:9c:59:01:18:91:b1:39: b0:33:e8:6b:28:0a:0d:94:17:0a:a0:b8:7d:f4:38:67:c6:ce: 25:26:cf:3c:70:24:c6:0a:66:f5:1d:a1:6a:20:9f:1f:aa:ce: fe:70:db:e9:12:80:d5:2e:88:14:dc:d1:cc:1c:22:52:b9:29: 6f:9f:ca:c1:cb:15:9c:b1:a2:bb:99:33:cb:fe:2d:62:da:12: 4d:2c:58:24:09:5c:70:76:66:36:8d:f4:71:2b:3f:e3:c4:2e: 0b:e3:ed:6b:22:04:98:ac:aa:3f:16:fb:9b:4a:fb:83:d4:2f: f1:2d:53:71:84:82:12:b3:b5:b6:57:47:98:35:9b:aa:4f:36: d6:22:49:d1:3e:29:bd:b7:c1:a9:17:06:0f:da:35:a9:a0:c0: a2:ee:fe:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95PAweFQ/QwvatcKrL/wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjdjZmQ2Yzg4MjZhNjdmNjQyYTM3M2QxMzE5NTUzMDhk OWMxY2EwHhcNMjUxMjA2MTQwMTE5WhcNMjUxMjA3MTQwMTE5WjAzMTEwLwYDVQQD EyhmNGMwZWU4OTMzMDAyOWE1YmUzNWYwNWQyYjIzZTA3NjY1ZmRmMDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCjczRxBjL4X3/VkviOPqYw5gA8G bgZS54O4+ZlwMBDvAUgxPpwKBGVi2YG9CcwY2Ae6Nqqbn0N2F/NvF5Xozp38GmAr 9i7pqv3CYubfxjQ3ZIHQLfKFgJQWAjwgBNVf+VbAyZGDBsePjoapGglSdq7xFwFj TqTPJQD2HDtBTdBYkKf6561nnij0eIYoMoXpwRxInE8S4k4SRSszAj130t2ewWrO T36KJBH3IRn0WP3G46wvRvlj5KUrSlXBaBX0+4Zk4Xt49JZSFox8BNZclvnc11I4 6pWRxqlkEwtEMLfbC3sE774BKxgtsVtna9lO9hXP1wF46ccOJbrOpYZdbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTA7okzACmlvjXwXSsj4HZl/fARMB8GA1UdIwQY MBaAFH33z9bIgmpn9kKjc9ExlVMI2cHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAt YmYxYzVjYzM2YjY2LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi83YTc4NzEtMDhmMy00NzU3LWE5ZjAtYmYxYzVjYzM2YjY2 LzEvZmZmUDFzaUNhbWYyUXFOejBUR1ZVd2pad2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHaUwRLy x0QO9Uy+EZosGw17PD5lmMlpm4GjYhYGxDttQJ3B0+y32HhsXSL7JqurSGZAhIYJ qTJbhmN07thwB0lp+mABPTMIvALypAjC4n6LBpSnI5tgYPAOIKhYSo2OQEFrNKOc WQEYkbE5sDPoaygKDZQXCqC4ffQ4Z8bOJSbPPHAkxgpm9R2haiCfH6rO/nDb6RKA 1S6IFNzRzBwiUrkpb5/KwcsVnLGiu5kzy/4tYtoSTSxYJAlccHZmNo30cSs/48Qu C+PtayIEmKyqPxb7m0r7g9Qv8S1TcYSCErO1tldHmDWbqk821iJJ0T4pvbfBqRcG D9o1qaDAou7+hA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:45:17 2025 by rpki-client