This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft File: FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft (raw, json) Hash identifier: o0WXypu34lX7ApQKe7TznlVTRx5pOkvZWbAXLZazOA0= Subject key identifier: EF:32:2D:20:BE:1B:46:CC:55:24:48:93:EC:12:1F:94:8A:27:92:F1 Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Certificate serial: 019AF27715B7104AA1F3BF4F5D9886DD40FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft Manifest number: 050E Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: AQb4NA0iIwYMaS4khoDyVt9RCG4.roa (hash: 58LXgLCBDudul5koOz+4VHQS0wDCBrVYTUIAiNkgAxo=) 2: FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl (hash: 2H1A/NU0TjEnl0fmt3PRGSOuC+YNEV6BAWrg+U8VwW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:15:b7:10:4a:a1:f3:bf:4f:5d:98:86:dd:40:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=ef322d20be1b46cc55244893ec121f948a2792f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:86:65:eb:48:a6:ef:66:ee:89:da:36:d2: 5a:04:7a:f7:c5:35:25:a6:41:32:85:43:3f:2c:83: 9a:8a:63:2b:b8:78:43:5b:03:2e:01:5b:ff:f2:7e: 18:5c:b5:fd:4e:97:90:17:fa:c8:8a:8b:19:d9:3f: 20:17:6e:c6:01:af:3a:c0:0e:96:b3:bf:00:db:d2: 69:fe:e2:de:3c:10:93:3d:6f:a7:a8:6d:48:d2:2b: bf:8a:88:b9:fc:11:91:97:1f:f8:79:4d:ba:a4:88: 82:f4:e1:2d:fe:f3:a4:aa:27:6c:8b:f2:2d:1d:4e: 89:6a:24:69:f4:bb:f0:10:04:81:46:5c:e2:be:f5: 46:7a:78:6b:4b:1f:65:7b:e7:2c:0c:99:6c:b9:99: 06:6b:c3:f3:52:ea:ff:fe:7e:92:cf:a3:10:59:c8: 66:ca:64:d9:56:c9:14:ab:d8:cc:3f:60:4d:1f:97: f6:d4:2d:57:b1:26:37:cd:0a:2b:b8:8b:10:e9:ae: 55:af:67:b0:79:62:ed:ee:79:7f:a0:85:c9:6e:33: 1c:e5:27:f2:ca:5b:19:22:0b:b5:d9:ca:6d:ac:e5: d6:74:40:3a:ce:e7:ac:f6:5a:d5:01:9e:d6:9b:8e: 3b:19:fa:38:54:c1:d4:52:51:13:7a:38:22:1c:4b: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:32:2D:20:BE:1B:46:CC:55:24:48:93:EC:12:1F:94:8A:27:92:F1 X509v3 Authority Key Identifier: keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:69:a3:a6:b1:e3:74:a5:bb:27:4d:9a:14:13:df:a2:0f:9c: c2:60:77:d2:60:ce:b1:da:a8:b9:27:ba:c7:ac:70:a5:cd:1b: b5:a1:cf:66:45:aa:7c:0a:3a:8e:ce:34:88:f3:27:f9:ae:15: 84:10:51:fd:3c:01:e3:07:87:76:8a:eb:6d:c7:e4:0c:bd:72: 32:ab:2a:4d:90:c9:65:fc:39:91:41:02:ae:e7:94:e4:50:07: 8d:e3:af:26:d4:70:9b:56:16:fc:81:0d:c5:a8:19:77:fa:a3: e4:96:a6:d5:49:e4:07:87:c1:f9:f2:e0:03:0c:6c:04:24:08: 6f:42:89:b8:97:11:fd:94:33:b7:1a:e0:60:80:cd:08:70:d5: 16:4e:7c:e8:d8:24:11:aa:80:bd:3b:48:19:88:86:12:1e:42: ff:c5:01:e1:6c:78:5d:0f:8c:36:c5:ca:46:07:90:d4:91:68: 04:e9:02:24:0b:7c:39:62:29:94:2f:8a:51:08:ba:7d:fa:01: 93:68:12:f3:59:e8:bd:ff:56:81:95:7d:df:ac:5b:c3:6a:58: 3c:c2:ed:ae:87:27:8b:9d:b5:2e:72:de:fc:2e:66:9d:e2:a9: 9e:5c:54:64:20:2b:10:69:9b:83:ad:a2:77:27:59:54:53:eb: 27:b3:6d:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxW3EEqh879PXZiG3UD8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjFmYjEyOTAzYTVjZDRiYzE3YWJiNTk4NzNjOWQ2ZGE3 ZTY5YjUwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EyhlZjMyMmQyMGJlMWI0NmNjNTUyNDQ4OTNlYzEyMWY5NDhhMjc5MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuiGZetIpu9m7onaNtJaBHr3xTUl pkEyhUM/LIOaimMruHhDWwMuAVv/8n4YXLX9TpeQF/rIiosZ2T8gF27GAa86wA6W s78A29Jp/uLePBCTPW+nqG1I0iu/ioi5/BGRlx/4eU26pIiC9OEt/vOkqidsi/It HU6JaiRp9LvwEASBRlzivvVGenhrSx9le+csDJlsuZkGa8PzUur//n6Sz6MQWchm ymTZVskUq9jMP2BNH5f21C1XsSY3zQoruIsQ6a5Vr2eweWLt7nl/oIXJbjMc5Sfy ylsZIgu12cptrOXWdEA6zues9lrVAZ7Wm447Gfo4VMHUUlETejgiHEv2iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8yLSC+G0bMVSRIk+wSH5SKJ5LxMB8GA1UdIwQY MBaAFBXx+xKQOlzUvBertZhzydbafmm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUt MmYyZjhiNTkwNTAzLzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUtMmYyZjhiNTkwNTAz LzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2mjprHj dKW7J02aFBPfog+cwmB30mDOsdqouSe6x6xwpc0btaHPZkWqfAo6js40iPMn+a4V hBBR/TwB4weHdorrbcfkDL1yMqsqTZDJZfw5kUECrueU5FAHjeOvJtRwm1YW/IEN xagZd/qj5Jam1UnkB4fB+fLgAwxsBCQIb0KJuJcR/ZQztxrgYIDNCHDVFk586Ngk EaqAvTtIGYiGEh5C/8UB4Wx4XQ+MNsXKRgeQ1JFoBOkCJAt8OWIplC+KUQi6ffoB k2gS81novf9WgZV936xbw2pYPMLtrocni521LnLe/C5mneKpnlxUZCArEGmbg62i dydZVFPrJ7NtXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:23:53 2025 by rpki-client