This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json) Hash identifier: MW6xIAB0MR4yG0SciM+7Hz+Ke9HLrx6FZ6aCkrS14i8= Subject key identifier: 33:C6:B7:02:21:FC:56:D5:63:39:6F:5D:F7:9A:84:75:C5:10:32:D4 Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Certificate serial: 019AF1D1BD261E274AA75B7DEEA1807CD933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=) 2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: DwLwAfrVQ88X48v0OIiEaQak6kaC5B4ns8kwzJfYfLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:26:1e:27:4a:a7:5b:7d:ee:a1:80:7c:d9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=33c6b70221fc56d563396f5df79a8475c51032d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ab:5a:7f:92:e5:b4:f7:81:80:8a:ea:00:90: 30:a6:f9:e4:40:02:f6:08:13:94:2a:f3:c4:ed:cd: cd:d4:7a:2f:92:59:4b:9b:77:f2:79:89:d6:0e:72: 4d:11:de:30:fa:31:d8:6f:3d:72:d3:42:53:c1:04: bd:c1:21:7b:76:fb:eb:16:00:4c:5f:c5:01:14:21: e0:0a:d4:3f:46:6d:9b:f3:63:78:17:d5:a6:dc:cc: a5:2c:0d:96:41:35:21:c0:c6:3d:c5:08:58:1b:a3: 46:17:e1:b6:d0:21:2c:fb:02:0f:b6:84:0e:9e:5b: 58:ba:dc:41:d0:d5:12:8a:4c:44:bc:ea:da:f5:85: 5a:4f:3d:e8:46:aa:96:4f:0a:09:38:01:5b:fc:f1: 4a:c3:a5:dc:11:06:94:2d:c2:e9:b0:cf:06:d4:70: 21:dc:32:84:a7:21:07:4f:a2:21:0e:bc:b7:4a:ab: 00:ec:29:bb:d3:cd:b8:e6:e6:24:80:2f:d2:c1:79: 87:03:23:1b:34:3b:be:1b:59:19:cb:21:ee:43:eb: 55:41:88:bf:0d:ad:45:0a:50:b5:14:cd:51:9e:83: 73:cb:d7:9d:c2:e4:1c:e0:40:4d:d6:83:59:d4:9b: aa:bb:08:9d:5f:04:31:f7:40:54:c7:b9:29:5c:77: 37:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C6:B7:02:21:FC:56:D5:63:39:6F:5D:F7:9A:84:75:C5:10:32:D4 X509v3 Authority Key Identifier: keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b0:3c:8b:76:d3:6c:b5:d1:85:be:31:a5:fc:d8:ef:bb:86: c8:8a:a4:a5:01:cb:d5:35:89:2d:e7:a5:c4:eb:02:63:07:a5: 58:f6:11:8d:31:84:b3:06:06:9d:d2:30:d6:22:ec:d5:bf:9c: e3:3e:83:00:20:cf:cd:4f:14:8c:10:bf:f4:41:f2:65:6e:d9: e8:84:03:4b:35:24:1a:d5:27:fd:35:39:b8:22:23:b3:d7:61: aa:dd:fe:39:91:cb:40:4b:fa:e1:90:1e:5d:18:1b:15:15:8a: cd:9b:9e:4f:7c:79:7b:32:eb:68:78:18:ca:88:48:ba:2f:36: c8:5d:bc:19:dd:da:0a:65:1e:20:e8:c0:88:77:5e:87:f2:a6: 3f:69:3c:02:22:36:e1:9f:b3:b5:16:0b:29:9a:3b:52:04:a9: 88:2b:6c:ea:0f:b5:76:6a:89:2c:33:b5:fd:ba:16:4d:28:d0: 59:81:9c:9f:e9:5d:97:e6:5e:56:bd:fe:2c:b5:b2:d2:7e:4a: 24:b6:ec:8a:6f:88:44:da:75:86:45:7d:6e:02:4e:e1:a5:f5: 84:af:f7:4c:4c:64:a5:9f:34:f4:d4:06:04:b5:26:0c:29:9d: 8b:17:d6:4a:ad:10:74:7f:0e:64:6e:e7:74:f2:55:bf:b9:32: b1:1c:cb:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b0mHidKp1t97qGAfNkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw YzE0NmYwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EygzM2M2YjcwMjIxZmM1NmQ1NjMzOTZmNWRmNzlhODQ3NWM1MTAzMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6taf5LltPeBgIrqAJAwpvnkQAL2 CBOUKvPE7c3N1HovkllLm3fyeYnWDnJNEd4w+jHYbz1y00JTwQS9wSF7dvvrFgBM X8UBFCHgCtQ/Rm2b82N4F9Wm3MylLA2WQTUhwMY9xQhYG6NGF+G20CEs+wIPtoQO nltYutxB0NUSikxEvOra9YVaTz3oRqqWTwoJOAFb/PFKw6XcEQaULcLpsM8G1HAh 3DKEpyEHT6IhDry3SqsA7Cm708245uYkgC/SwXmHAyMbNDu+G1kZyyHuQ+tVQYi/ Da1FClC1FM1RnoNzy9edwuQc4EBN1oNZ1JuquwidXwQx90BUx7kpXHc34QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPGtwIh/FbVYzlvXfeahHXFEDLUMB8GA1UdIwQY MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrA8i3bT bLXRhb4xpfzY77uGyIqkpQHL1TWJLeelxOsCYwelWPYRjTGEswYGndIw1iLs1b+c 4z6DACDPzU8UjBC/9EHyZW7Z6IQDSzUkGtUn/TU5uCIjs9dhqt3+OZHLQEv64ZAe XRgbFRWKzZueT3x5ezLraHgYyohIui82yF28Gd3aCmUeIOjAiHdeh/KmP2k8AiI2 4Z+ztRYLKZo7UgSpiCts6g+1dmqJLDO1/boWTSjQWYGcn+ldl+ZeVr3+LLWy0n5K JLbsim+IRNp1hkV9bgJO4aX1hK/3TExkpZ809NQGBLUmDCmdixfWSq0QdH8OZG7n dPJVv7kysRzLvw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:54 2025 by rpki-client