This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft File: FAa0-f1RaOt3gegksUU-mfXmVTw.mft (raw, json) Hash identifier: 8lgTEvzCZ2sCpmO6b9NIOVyysRyFfGbzxQuere0Ke3M= Subject key identifier: A2:4A:F9:23:E0:8B:3C:6C:34:55:F0:E6:EE:53:24:D0:92:1E:C9:77 Authority key identifier: 14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C Certificate issuer: /CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c Certificate serial: 019AF49C6AC3FAAABD89C359722A6AEF8B00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 17:01:22 +0000 Manifest this update: Sat 06 Dec 2025 17:01:22 +0000 Manifest next update: Sun 07 Dec 2025 17:01:22 +0000 Files and hashes: 1: FAa0-f1RaOt3gegksUU-mfXmVTw.crl (hash: nI0ubo8QxIB0i1YI/grSlDomBwm+SQBQOC2SCvVJFVc=) 2: c3go-15xGcBaQkyMFCkLYeR3zYQ.roa (hash: 4H2iOu8gLLffNi536xCsuCivAwnItfPi2vTZ/W207ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:6a:c3:fa:aa:bd:89:c3:59:72:2a:6a:ef:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1406b4f9fd5168eb7781e824b1453e99f5e6553c Validity Not Before: Dec 6 17:01:22 2025 GMT Not After : Dec 7 17:01:22 2025 GMT Subject: CN=a24af923e08b3c6c3455f0e6ee5324d0921ec977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:83:49:4c:77:37:2f:ed:27:0b:29:a4:29: 8c:b1:6c:9f:a6:a2:97:f0:0f:65:40:f0:93:45:d6: 46:80:a1:c9:07:af:52:c1:1d:fa:ae:fd:54:ef:cb: f3:d9:e5:3e:26:b4:4a:2e:df:dd:d6:eb:41:a9:75: 54:c0:55:8c:2f:45:59:4e:62:66:a2:78:14:49:af: 3f:51:3e:a1:f0:56:c6:a4:dd:bf:52:aa:5a:b0:cb: f4:a0:ba:0c:4f:ba:b1:6c:fb:c5:eb:51:2f:d4:50: 81:6d:c0:3b:43:e5:d1:9c:94:cc:02:84:57:17:d3: 9f:a4:08:7d:6b:74:d6:92:70:6a:60:43:6a:c4:ef: e7:aa:b8:d3:c5:f5:23:c8:31:d7:86:f4:a6:21:5b: 35:de:b0:f1:0b:76:10:dd:c5:f0:08:4b:f2:a4:d0: 61:d8:f5:77:e8:02:cd:47:b6:03:52:33:4f:18:5b: a6:71:5c:90:b2:69:57:f0:af:c2:89:2f:fb:04:ab: 3c:42:43:1d:86:fd:58:9f:da:2b:61:41:13:df:56: 59:64:d5:f0:b3:3a:17:16:25:e7:87:e2:51:c0:1e: 8d:da:39:dc:83:ab:25:05:e6:64:a0:73:64:05:00: dc:86:a7:89:82:5a:2a:1e:6b:b9:bc:65:cf:6a:c5: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4A:F9:23:E0:8B:3C:6C:34:55:F0:E6:EE:53:24:D0:92:1E:C9:77 X509v3 Authority Key Identifier: keyid:14:06:B4:F9:FD:51:68:EB:77:81:E8:24:B1:45:3E:99:F5:E6:55:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAa0-f1RaOt3gegksUU-mfXmVTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/86d512-499b-418e-a420-c161246c825a/1/FAa0-f1RaOt3gegksUU-mfXmVTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:11:bc:e4:f2:46:ad:90:2c:1a:64:22:64:8c:e6:4c:e2:7f: ed:ba:60:00:b8:4b:96:96:38:a0:96:5a:45:52:3f:68:e8:37: 02:f2:54:ad:7c:f6:30:a7:03:28:cd:59:af:99:a6:0e:6d:26: 44:a2:2f:b9:6a:60:5f:d7:13:62:f3:ca:e5:d8:e0:57:e4:f7: 96:2f:2f:06:c2:18:59:88:21:3a:71:ed:72:10:f3:de:f6:a5: 38:03:8a:99:1b:de:b0:91:10:7f:6b:8e:35:c2:13:99:38:f9: cc:3a:ce:f3:57:f6:82:23:65:cf:68:09:1d:45:91:cd:10:ea: 5e:f3:ff:25:30:d9:40:34:b6:2d:4d:22:92:13:a6:9c:1c:6d: 17:2f:0b:58:95:ca:b9:6a:d7:19:f6:e7:2d:12:32:2e:f9:72: 03:7d:98:20:7e:82:63:b6:af:aa:da:8d:dd:5d:e9:0e:18:a3: db:d2:4c:b5:52:6b:81:ca:32:74:9a:18:49:b0:ed:25:3d:82: 33:a9:72:be:3c:57:5c:08:cf:56:b4:c5:fa:a5:b1:33:ab:e7: 09:eb:6d:f5:7f:a0:98:f2:07:ec:23:07:8c:0f:87:aa:73:56: ee:33:13:7a:d6:0b:30:aa:08:54:5a:16:1f:74:16:7a:4d:3e: 25:47:7d:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGrD+qq9icNZcipq74sAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDZiNGY5ZmQ1MTY4ZWI3NzgxZTgyNGIxNDUzZTk5ZjVl NjU1M2MwHhcNMjUxMjA2MTcwMTIyWhcNMjUxMjA3MTcwMTIyWjAzMTEwLwYDVQQD EyhhMjRhZjkyM2UwOGIzYzZjMzQ1NWYwZTZlZTUzMjRkMDkyMWVjOTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnseDSUx3Ny/tJwsppCmMsWyfpqKX 8A9lQPCTRdZGgKHJB69SwR36rv1U78vz2eU+JrRKLt/d1utBqXVUwFWML0VZTmJm ongUSa8/UT6h8FbGpN2/UqpasMv0oLoMT7qxbPvF61Ev1FCBbcA7Q+XRnJTMAoRX F9OfpAh9a3TWknBqYENqxO/nqrjTxfUjyDHXhvSmIVs13rDxC3YQ3cXwCEvypNBh 2PV36ALNR7YDUjNPGFumcVyQsmlX8K/CiS/7BKs8QkMdhv1Yn9orYUET31ZZZNXw szoXFiXnh+JRwB6N2jncg6slBeZkoHNkBQDchqeJgloqHmu5vGXPasWirwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJK+SPgizxsNFXw5u5TJNCSHsl3MB8GA1UdIwQY MBaAFBQGtPn9UWjrd4HoJLFFPpn15lU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAt YzE2MTI0NmM4MjVhLzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84NmQ1MTItNDk5Yi00MThlLWE0MjAtYzE2MTI0NmM4MjVh LzEvRkFhMC1mMVJhT3QzZ2Vna3NVVS1tZlhtVlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxG85PJG rZAsGmQiZIzmTOJ/7bpgALhLlpY4oJZaRVI/aOg3AvJUrXz2MKcDKM1Zr5mmDm0m RKIvuWpgX9cTYvPK5djgV+T3li8vBsIYWYghOnHtchDz3valOAOKmRvesJEQf2uO NcITmTj5zDrO81f2giNlz2gJHUWRzRDqXvP/JTDZQDS2LU0ikhOmnBxtFy8LWJXK uWrXGfbnLRIyLvlyA32YIH6CY7avqtqN3V3pDhij29JMtVJrgcoydJoYSbDtJT2C M6lyvjxXXAjPVrTF+qWxM6vnCett9X+gmPIH7CMHjA+HqnNW7jMTetYLMKoIVFoW H3QWek0+JUd9pg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:59 2025 by rpki-client