This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft File: fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft (raw, json) Hash identifier: Ul5h4Oeu3I3utj33AlFo7edB6TO+5oCuxPHyjLPJ8bQ= Subject key identifier: 17:33:91:11:19:B2:C2:B9:6E:89:7B:29:38:39:41:D0:FE:01:A8:E8 Authority key identifier: 7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67 Certificate issuer: /CN=7f31360ffc1afd5f1da66d81404e4663512d4967 Certificate serial: 019AF2AD37E53B5FAFCC6F55CC4A130C4605 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft Manifest number: 14EA Signing time: Sat 06 Dec 2025 08:00:29 +0000 Manifest this update: Sat 06 Dec 2025 08:00:29 +0000 Manifest next update: Sun 07 Dec 2025 08:00:29 +0000 Files and hashes: 1: OwIv7U97sC9dks6Rl4mlkK2f8GI.roa (hash: 8n+wp+UnJSkfB2nwEoGtaJ5dvj8q4nuluWU6IFbCLc8=) 2: fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl (hash: PO32XFFlHcIw1KknG2UAqNCcnjsDdVjQiA5AcSToPrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:37:e5:3b:5f:af:cc:6f:55:cc:4a:13:0c:46:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f31360ffc1afd5f1da66d81404e4663512d4967 Validity Not Before: Dec 6 08:00:29 2025 GMT Not After : Dec 7 08:00:29 2025 GMT Subject: CN=1733911119b2c2b96e897b29383941d0fe01a8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c8:63:c1:1e:8f:e4:7e:f4:3c:04:37:53:c1: 01:ab:c7:1e:25:40:5f:9f:5f:d1:8f:e5:4b:60:5e: 76:4c:04:9d:48:31:7a:bc:55:5d:47:c3:a4:72:b8: e8:53:17:eb:62:6e:19:e0:22:b6:92:f4:0c:c4:b8: 8b:56:42:4f:de:ae:a5:a7:60:0e:78:bb:c1:8e:13: f3:08:35:50:ee:dd:3c:10:9d:da:4d:55:cf:5f:6b: 17:a7:d3:dc:5a:73:42:5d:e2:8c:eb:7f:a5:90:d5: c1:42:05:7e:5f:fb:b4:ef:d9:81:cf:2b:b7:64:f4: 88:e0:6c:9b:f3:fd:e4:15:20:21:c8:96:ac:b1:0f: 56:a1:12:38:94:cd:d5:23:6c:82:48:fd:01:ed:0d: 52:d0:c5:c0:e6:80:e9:4b:74:64:13:11:0a:4a:c7: 55:a0:87:31:38:25:4f:2c:ec:b8:3b:55:cc:7b:47: 14:4d:7f:32:7e:c3:3d:45:f8:fa:24:7f:b6:c1:7f: f2:71:e4:50:09:c0:67:94:fb:ac:41:3b:c6:8a:68: f1:0f:87:de:cb:6c:f2:c4:74:61:6d:ed:3b:e5:e9: 3b:ed:db:08:a9:2e:a0:92:4d:eb:24:04:00:a3:a7: b5:df:f2:7c:b5:07:69:42:9a:e2:0d:e7:d3:86:01: 68:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:33:91:11:19:B2:C2:B9:6E:89:7B:29:38:39:41:D0:FE:01:A8:E8 X509v3 Authority Key Identifier: keyid:7F:31:36:0F:FC:1A:FD:5F:1D:A6:6D:81:40:4E:46:63:51:2D:49:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzE2D_wa_V8dpm2BQE5GY1EtSWc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/fef5dd-38ee-4bc5-82ff-584d78a25f8c/1/fzE2D_wa_V8dpm2BQE5GY1EtSWc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:a5:cf:98:3c:b7:7e:cd:bc:a4:21:28:71:3a:ad:d9:a7:2e: b3:bc:17:29:a8:8d:ee:e3:0e:02:66:1f:c7:d4:57:e2:76:12: 37:ef:08:78:ec:e0:64:f9:91:1e:b5:31:cf:f0:22:7f:93:c0: e4:0f:11:98:9c:8e:35:f8:b4:61:ea:de:5d:e4:8e:a1:14:f9: 2f:e1:e1:86:7f:92:9d:98:f0:81:b3:5a:6b:ea:4e:28:d2:05: 57:5f:86:3e:70:62:24:d4:92:7a:e3:33:b7:96:86:6c:b3:2c: 96:76:b1:c5:f0:60:cd:06:a2:f0:7b:c6:a5:63:47:f7:68:77: 06:72:ee:57:0a:72:8b:ef:62:51:fa:8a:f7:d2:88:7a:ba:26: 48:f1:d8:70:b4:d4:48:b4:a5:9d:fb:43:54:84:69:ca:3d:fa: 13:f5:4d:a1:ae:57:b9:d4:30:4d:e8:19:db:1e:54:dd:29:db: 5f:c3:33:3d:2f:e0:65:0e:16:7c:2f:f1:20:1e:24:b4:80:60: c5:e0:2e:be:b6:b9:ba:79:f3:41:f7:42:84:6a:b8:10:ef:47: 2a:00:f6:34:c8:ce:8b:41:d4:e2:eb:f4:05:ce:38:d5:bc:5e: fb:08:f8:ce:19:fe:94:0f:9e:3e:59:5a:41:7f:04:81:62:09: 2b:57:99:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrTflO1+vzG9VzEoTDEYFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMzEzNjBmZmMxYWZkNWYxZGE2NmQ4MTQwNGU0NjYzNTEy ZDQ5NjcwHhcNMjUxMjA2MDgwMDI5WhcNMjUxMjA3MDgwMDI5WjAzMTEwLwYDVQQD EygxNzMzOTExMTE5YjJjMmI5NmU4OTdiMjkzODM5NDFkMGZlMDFhOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMhjwR6P5H70PAQ3U8EBq8ceJUBf n1/Rj+VLYF52TASdSDF6vFVdR8OkcrjoUxfrYm4Z4CK2kvQMxLiLVkJP3q6lp2AO eLvBjhPzCDVQ7t08EJ3aTVXPX2sXp9PcWnNCXeKM63+lkNXBQgV+X/u079mBzyu3 ZPSI4Gyb8/3kFSAhyJassQ9WoRI4lM3VI2yCSP0B7Q1S0MXA5oDpS3RkExEKSsdV oIcxOCVPLOy4O1XMe0cUTX8yfsM9Rfj6JH+2wX/yceRQCcBnlPusQTvGimjxD4fe y2zyxHRhbe075ek77dsIqS6gkk3rJAQAo6e13/J8tQdpQpriDefThgFoaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBczkREZssK5bol7KTg5QdD+AajoMB8GA1UdIwQY MBaAFH8xNg/8Gv1fHaZtgUBORmNRLUlnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYt NTg0ZDc4YTI1ZjhjLzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9mZWY1ZGQtMzhlZS00YmM1LTgyZmYtNTg0ZDc4YTI1Zjhj LzEvZnpFMkRfd2FfVjhkcG0yQlFFNUdZMUV0U1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqXPmDy3 fs28pCEocTqt2acus7wXKaiN7uMOAmYfx9RX4nYSN+8IeOzgZPmRHrUxz/Aif5PA 5A8RmJyONfi0YereXeSOoRT5L+Hhhn+SnZjwgbNaa+pOKNIFV1+GPnBiJNSSeuMz t5aGbLMslnaxxfBgzQai8HvGpWNH92h3BnLuVwpyi+9iUfqK99KIeromSPHYcLTU SLSlnftDVIRpyj36E/VNoa5XudQwTegZ2x5U3SnbX8MzPS/gZQ4WfC/xIB4ktIBg xeAuvra5unnzQfdChGq4EO9HKgD2NMjOi0HU4uv0Bc441bxe+wj4zhn+lA+ePlla QX8EgWIJK1eZdw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:04 2025 by rpki-client