This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json) Hash identifier: RQTS6+pW1iX6bZPK0Xh7yiniLwgNjGJviDZHttDFlEc= Subject key identifier: AD:6E:14:8E:2E:14:9A:9A:FD:DD:1A:1F:4E:C5:28:79:44:D0:D0:E7 Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Certificate serial: 019AF277203A58DF26CD2C2570F865DE2CDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: NJkv0Bq03TM8lLLNLjrqTMVh9q+AuIt53bgcnKF/Vs4=) 2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:20:3a:58:df:26:cd:2c:25:70:f8:65:de:2c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=ad6e148e2e149a9afddd1a1f4ec5287944d0d0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:58:f1:6b:b7:ee:c7:13:0b:0d:b3:fd:76:10: d6:ee:e4:24:25:61:a8:0c:8b:2b:03:9f:61:97:57: cb:8a:50:1f:a0:8e:16:75:23:c8:b8:77:bb:c4:45: 1d:dd:06:37:b9:ae:81:1c:7b:e4:76:88:93:bd:6c: 1d:4e:39:64:78:49:8d:5c:8a:6d:f5:a5:8d:0d:a0: ec:dd:26:c8:b9:81:c1:32:ee:fe:57:43:01:6b:42: cd:cd:db:40:78:da:9e:b3:a0:e8:86:70:d6:16:1e: 42:11:30:1d:14:e7:a7:ff:7b:93:3d:20:27:1a:06: 8e:d1:9f:d9:72:4b:21:44:56:a1:49:f8:28:cd:83: fb:07:b4:41:66:2e:a7:58:d1:ca:5c:9e:27:7c:b6: 32:15:aa:48:a0:7c:f0:c3:dd:cf:23:a3:db:5d:42: a7:eb:f0:9a:15:ef:ce:8d:eb:44:91:c6:c8:f0:10: 0f:19:c2:a0:da:14:fb:32:89:78:d3:2a:a0:6e:7f: e6:dd:ab:e0:c7:05:52:bf:fd:22:68:65:34:74:e5: 40:af:8d:83:9e:8c:0e:c0:93:6f:15:8c:dd:dc:15: 2b:09:23:d1:98:63:cc:3e:3e:9a:71:2b:60:5d:92: c5:90:ad:2c:36:01:6b:37:92:12:e4:b3:52:6d:7e: c8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:6E:14:8E:2E:14:9A:9A:FD:DD:1A:1F:4E:C5:28:79:44:D0:D0:E7 X509v3 Authority Key Identifier: keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:82:f8:e4:e2:4c:dd:df:70:bc:6f:e0:a7:45:1a:d4:36:9d: f9:86:82:0b:03:82:4b:34:97:5c:33:ec:05:f5:ec:df:cc:34: 98:bf:86:1f:b3:b0:ca:52:35:9d:00:bf:45:e9:65:60:8a:93: f3:43:f0:39:e4:7a:27:84:1c:44:92:1e:f2:47:fa:fd:ce:94: 4f:ef:3d:de:d1:1d:91:84:aa:25:53:b2:f6:f0:31:ff:25:11: 4c:a5:45:7b:ad:20:40:3f:b8:dc:6f:3e:0d:c9:b8:16:ea:e7: ad:8f:44:c4:50:33:6a:b8:67:9f:e5:24:46:ed:43:27:d9:6a: ff:92:73:ee:c8:88:47:06:6d:97:d2:dc:37:44:88:49:32:e3: c1:8f:a9:dc:10:5c:51:ed:b6:5c:73:49:7f:89:ea:b5:af:7a: b3:62:7b:99:45:b1:b3:b9:48:82:8f:4b:d5:99:59:5e:dc:7b: 3b:4f:e4:cd:c7:00:21:f7:8a:13:ff:84:45:8f:d1:ab:09:9d: 5f:c3:40:fd:24:0e:dd:70:a9:7d:a9:05:82:fd:b4:7a:e0:b9: 44:90:ff:f9:bd:2c:f9:b3:e9:cb:60:e6:73:da:7e:bf:fe:09: 6d:72:76:a6:01:bc:fd:f9:57:20:47:a2:61:3a:d6:52:ae:25: 78:99:cd:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyA6WN8mzSwlcPhl3izdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx NTQyOTMwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD EyhhZDZlMTQ4ZTJlMTQ5YTlhZmRkZDFhMWY0ZWM1Mjg3OTQ0ZDBkMGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVjxa7fuxxMLDbP9dhDW7uQkJWGo DIsrA59hl1fLilAfoI4WdSPIuHe7xEUd3QY3ua6BHHvkdoiTvWwdTjlkeEmNXIpt 9aWNDaDs3SbIuYHBMu7+V0MBa0LNzdtAeNqes6DohnDWFh5CETAdFOen/3uTPSAn GgaO0Z/ZckshRFahSfgozYP7B7RBZi6nWNHKXJ4nfLYyFapIoHzww93PI6PbXUKn 6/CaFe/OjetEkcbI8BAPGcKg2hT7Mol40yqgbn/m3avgxwVSv/0iaGU0dOVAr42D nowOwJNvFYzd3BUrCSPRmGPMPj6acStgXZLFkK0sNgFrN5IS5LNSbX7IGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1uFI4uFJqa/d0aH07FKHlE0NDnMB8GA1UdIwQY MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4L45OJM 3d9wvG/gp0Ua1Dad+YaCCwOCSzSXXDPsBfXs38w0mL+GH7OwylI1nQC/RellYIqT 80PwOeR6J4QcRJIe8kf6/c6UT+893tEdkYSqJVOy9vAx/yURTKVFe60gQD+43G8+ Dcm4FurnrY9ExFAzarhnn+UkRu1DJ9lq/5Jz7siIRwZtl9LcN0SISTLjwY+p3BBc Ue22XHNJf4nqta96s2J7mUWxs7lIgo9L1ZlZXtx7O0/kzccAIfeKE/+ERY/Rqwmd X8NA/SQO3XCpfakFgv20euC5RJD/+b0s+bPpy2Dmc9p+v/4JbXJ2pgG8/flXIEei YTrWUq4leJnNNg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:57 2025 by rpki-client