This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft File: ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft (raw, json) Hash identifier: TtGknXcEVWdQcxw7zt/MoclwZkOgn8rdGWdoNEv7MwY= Subject key identifier: CE:A1:1F:18:BF:4F:9D:6B:FB:B0:A5:FE:49:CF:B8:AE:92:22:B9:A4 Authority key identifier: 7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6 Certificate issuer: /CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6 Certificate serial: 019AF509FE4AE0F1959B606ACDB5B1F25BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft Manifest number: 0EF0 Signing time: Sat 06 Dec 2025 19:01:04 +0000 Manifest this update: Sat 06 Dec 2025 19:01:04 +0000 Manifest next update: Sun 07 Dec 2025 19:01:04 +0000 Files and hashes: 1: ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl (hash: q1JGO0iHDbrJpcvxNqA4oyIHko9Nq5NjrrRophrM6+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fe:4a:e0:f1:95:9b:60:6a:cd:b5:b1:f2:5b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dfbb4fbd91f0eae3cc22f6c4ebb50cd80a88fd6 Validity Not Before: Dec 6 19:01:04 2025 GMT Not After : Dec 7 19:01:04 2025 GMT Subject: CN=cea11f18bf4f9d6bfbb0a5fe49cfb8ae9222b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:c3:89:75:95:31:21:52:59:b8:f8:78:06: 43:f5:e0:58:37:13:86:02:1b:47:cd:08:a6:b6:e1: 45:8a:9b:fd:43:94:2e:7b:be:57:b6:41:b8:4a:09: 22:71:c5:3b:d6:7d:cd:e4:e0:b0:b8:f3:87:ee:0e: 4d:16:fd:f0:38:c0:d2:7c:07:d7:f4:8b:26:47:2d: 97:d3:d0:af:5d:26:6b:44:d2:2c:2c:81:ae:0d:3f: 9f:23:3b:c4:05:bb:ba:9a:91:b4:65:3e:06:8b:81: 88:f4:80:23:06:fc:f8:cc:93:16:31:e7:20:10:78: ab:e2:07:4b:a8:93:46:6c:4a:51:a3:b2:ea:9f:58: 8e:0b:98:79:cc:c8:9a:29:24:9b:ee:fa:b6:a0:7d: 11:12:ab:54:cc:53:0a:b5:00:de:68:80:ad:58:b9: e6:f3:fc:9b:78:05:84:a7:1a:21:28:62:a5:3b:12: 11:f3:75:52:79:24:0f:b9:56:fb:af:2f:97:4f:86: e2:71:17:79:4a:c3:9a:b7:62:d0:0f:54:b5:6c:38: 98:f2:a3:3f:6a:98:62:d6:79:b8:6d:17:fe:91:ae: 36:19:ec:02:33:57:6d:8a:3e:9c:75:40:7a:29:53: fe:1f:1d:7d:a8:69:fb:d5:27:2c:ed:ad:e0:d3:7c: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A1:1F:18:BF:4F:9D:6B:FB:B0:A5:FE:49:CF:B8:AE:92:22:B9:A4 X509v3 Authority Key Identifier: keyid:7D:FB:B4:FB:D9:1F:0E:AE:3C:C2:2F:6C:4E:BB:50:CD:80:A8:8F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffu0-9kfDq48wi9sTrtQzYCoj9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0bd7e2-8f56-49d5-bb8c-0d17ddbfe3b6/1/ffu0-9kfDq48wi9sTrtQzYCoj9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:a5:3d:ce:ad:d1:3b:1f:c4:a3:e1:8a:ec:83:1c:62:99: 51:47:f3:83:e9:50:e3:43:f3:70:a9:1b:1a:cc:73:c3:ea:27: f4:eb:54:c1:1d:f9:c8:1d:ab:dd:ec:2c:20:53:5c:a8:a7:41: 03:82:af:d8:0e:cf:23:28:bb:ee:1b:98:3f:62:cd:7c:10:25: 4f:54:27:a5:69:ea:2f:2f:5d:f2:cc:53:7f:01:2b:90:d0:46: 11:02:45:a2:33:27:15:e1:9a:05:54:35:ab:dc:76:50:a7:fc: d3:28:89:3e:e8:30:5a:3c:8d:24:59:d5:81:d7:84:61:0d:6c: 7b:f6:09:a6:cd:91:63:b3:e4:e4:81:26:78:76:e4:cd:cd:08: 9f:aa:f6:71:54:9c:53:ba:14:e2:cc:e3:68:72:52:e2:60:f9: 3d:56:f0:fe:a3:73:0f:4e:d8:07:c5:bc:84:0e:96:54:ae:12: 69:ea:13:80:b5:1a:08:81:57:96:d7:0f:d7:ba:02:cd:0a:33: 25:ba:38:d1:42:8a:b8:df:94:81:00:ad:b8:5e:bc:e1:2b:f7: e8:db:2d:63:28:1e:1c:47:85:da:fc:d8:39:6d:72:fd:8c:33: 1e:63:d8:1a:1e:3b:b4:15:96:f2:e2:14:9e:62:ba:b1:0c:c9: 32:5b:8a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cf5K4PGVm2BqzbWx8lvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZmJiNGZiZDkxZjBlYWUzY2MyMmY2YzRlYmI1MGNkODBh ODhmZDYwHhcNMjUxMjA2MTkwMTA0WhcNMjUxMjA3MTkwMTA0WjAzMTEwLwYDVQQD EyhjZWExMWYxOGJmNGY5ZDZiZmJiMGE1ZmU0OWNmYjhhZTkyMjJiOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPXDiXWVMSFSWbj4eAZD9eBYNxOG AhtHzQimtuFFipv9Q5Que75XtkG4SgkiccU71n3N5OCwuPOH7g5NFv3wOMDSfAfX 9IsmRy2X09CvXSZrRNIsLIGuDT+fIzvEBbu6mpG0ZT4Gi4GI9IAjBvz4zJMWMecg EHir4gdLqJNGbEpRo7Lqn1iOC5h5zMiaKSSb7vq2oH0REqtUzFMKtQDeaICtWLnm 8/ybeAWEpxohKGKlOxIR83VSeSQPuVb7ry+XT4bicRd5SsOat2LQD1S1bDiY8qM/ aphi1nm4bRf+ka42GewCM1dtij6cdUB6KVP+Hx19qGn71Scs7a3g03xumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6hHxi/T51r+7Cl/knPuK6SIrmkMB8GA1UdIwQY MBaAFH37tPvZHw6uPMIvbE67UM2AqI/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMt MGQxN2RkYmZlM2I2LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYmQ3ZTItOGY1Ni00OWQ1LWJiOGMtMGQxN2RkYmZlM2I2 LzEvZmZ1MC05a2ZEcTQ4d2k5c1RydFF6WUNvajlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1mlPc6t 0TsfxKPhiuyDHGKZUUfzg+lQ40PzcKkbGsxzw+on9OtUwR35yB2r3ewsIFNcqKdB A4Kv2A7PIyi77huYP2LNfBAlT1QnpWnqLy9d8sxTfwErkNBGEQJFojMnFeGaBVQ1 q9x2UKf80yiJPugwWjyNJFnVgdeEYQ1se/YJps2RY7Pk5IEmeHbkzc0In6r2cVSc U7oU4szjaHJS4mD5PVbw/qNzD07YB8W8hA6WVK4SaeoTgLUaCIFXltcP17oCzQoz Jbo40UKKuN+UgQCtuF684Sv36NstYygeHEeF2vzYOW1y/YwzHmPYGh47tBWW8uIU nmK6sQzJMluKcQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:44 2025 by rpki-client