This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json) Hash identifier: 87Bwxi8rqy859qtz/q/1KW7w+w12E3ShKzU19+LAvJI= Subject key identifier: 3A:79:F8:6D:8B:75:57:FB:70:AD:34:6E:59:CD:B1:5A:43:14:09:70 Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e Certificate serial: 019B3E6C64B27CDED5A8047FC58517CA7FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft Manifest number: 10FE Signing time: Sun 21 Dec 2025 01:00:49 +0000 Manifest this update: Sun 21 Dec 2025 01:00:49 +0000 Manifest next update: Mon 22 Dec 2025 01:00:49 +0000 Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=) 2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: lgxAgA0lsPHyGU9ZzEqvZNPzT+984FTtxSjG8O3PkUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:64:b2:7c:de:d5:a8:04:7f:c5:85:17:ca:7f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=144b315ae0f24c891fca18456c66917792af165e Validity Not Before: Dec 21 01:00:49 2025 GMT Not After : Dec 22 01:00:49 2025 GMT Subject: CN=3a79f86d8b7557fb70ad346e59cdb15a43140970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:43:f7:a4:3a:08:c8:4e:f5:0e:1f:10:a7: 53:18:47:43:1b:8f:5f:01:bd:bb:d1:dd:14:14:3f: 0e:f8:40:a8:6f:27:e9:c6:be:70:0e:3b:7e:8d:27: 75:1d:74:9c:0e:09:df:32:c1:72:c6:6a:99:30:56: 19:84:50:97:22:98:b4:d0:78:dd:81:bf:a2:9a:8b: 86:95:22:a2:03:9d:83:37:53:fd:f1:09:21:fd:e1: d6:87:7f:d8:f6:ce:49:b6:8e:3e:bc:12:1d:fd:f9: 20:b7:b6:b8:a1:83:52:cd:4f:63:a2:21:c0:33:8e: 3b:46:8a:68:2a:f8:f8:de:ab:5c:8a:d3:f3:ea:17: 68:96:8b:87:ec:b7:74:52:d1:2c:a4:05:cc:d9:5c: 73:75:db:57:c2:d5:99:bb:5a:a2:6c:4b:02:f6:f6: 15:fd:83:02:67:76:1a:14:c3:90:56:e2:7f:fe:7e: 4f:a2:41:28:46:b0:0c:6e:ac:34:de:13:64:7d:19: 45:f1:b0:98:ba:bd:92:b6:55:9e:3f:86:fa:30:64: 8b:de:d2:9d:1e:15:44:cc:fd:5d:32:38:86:11:5b: 33:7a:31:0e:9c:98:50:54:2f:3a:30:ba:2c:83:fd: c1:c5:af:20:f3:c5:ef:71:26:17:46:b0:6b:ae:1c: 69:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:F8:6D:8B:75:57:FB:70:AD:34:6E:59:CD:B1:5A:43:14:09:70 X509v3 Authority Key Identifier: keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:5e:10:98:48:03:13:78:1a:9a:ea:e5:cf:f3:b3:0e:86:51: b6:3c:f2:78:c8:77:f7:98:ac:45:cf:da:04:92:f5:44:d4:7e: 1b:7d:d6:1a:5e:06:93:14:33:82:33:a3:14:ce:1d:76:1c:4a: 2a:8c:af:d0:14:c0:2f:65:ee:27:71:6b:cc:81:77:32:ea:52: 17:06:42:02:ad:70:43:32:30:8a:c6:11:26:38:37:bf:0f:65: 5d:26:6b:6b:e2:24:1d:39:92:4c:cd:14:a8:f7:70:ee:26:03: ca:2b:a4:19:2f:76:eb:37:45:89:ad:af:21:50:48:85:4c:d6: 78:45:e1:2a:c1:ea:d9:76:eb:61:43:c3:8f:4b:80:e4:62:95: 67:33:d9:c2:44:ff:dd:93:b3:b3:55:9d:47:ac:2a:56:ac:33: 2d:1c:ef:6a:2e:f1:af:65:17:b7:e3:77:2e:65:ab:5b:e4:c7: 18:52:e8:c9:59:4f:4a:4d:37:85:33:9c:11:3e:f4:72:42:5b: 37:5f:ad:9d:1d:6a:67:ca:2a:65:c4:40:59:55:60:3f:23:3a: ac:02:eb:b3:bc:bc:6c:9a:66:0e:cb:60:18:25:78:9c:10:25: 0e:bd:64:3a:a8:ed:ee:58:a9:41:42:93:62:f7:5a:a1:4b:ff: 99:d5:46:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bGSyfN7VqAR/xYUXyn+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh ZjE2NWUwHhcNMjUxMjIxMDEwMDQ5WhcNMjUxMjIyMDEwMDQ5WjAzMTEwLwYDVQQD EygzYTc5Zjg2ZDhiNzU1N2ZiNzBhZDM0NmU1OWNkYjE1YTQzMTQwOTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupJD96Q6CMhO9Q4fEKdTGEdDG49f Ab270d0UFD8O+ECobyfpxr5wDjt+jSd1HXScDgnfMsFyxmqZMFYZhFCXIpi00Hjd gb+imouGlSKiA52DN1P98Qkh/eHWh3/Y9s5Jto4+vBId/fkgt7a4oYNSzU9joiHA M447RopoKvj43qtcitPz6hdolouH7Ld0UtEspAXM2VxzddtXwtWZu1qibEsC9vYV /YMCZ3YaFMOQVuJ//n5PokEoRrAMbqw03hNkfRlF8bCYur2StlWeP4b6MGSL3tKd HhVEzP1dMjiGEVszejEOnJhQVC86MLosg/3Bxa8g88XvcSYXRrBrrhxpOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp5+G2LdVf7cK00blnNsVpDFAlwMB8GA1UdIwQY MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaF4QmEgD E3gamurlz/OzDoZRtjzyeMh395isRc/aBJL1RNR+G33WGl4GkxQzgjOjFM4ddhxK Koyv0BTAL2XuJ3FrzIF3MupSFwZCAq1wQzIwisYRJjg3vw9lXSZra+IkHTmSTM0U qPdw7iYDyiukGS926zdFia2vIVBIhUzWeEXhKsHq2XbrYUPDj0uA5GKVZzPZwkT/ 3ZOzs1WdR6wqVqwzLRzvai7xr2UXt+N3LmWrW+THGFLoyVlPSk03hTOcET70ckJb N1+tnR1qZ8oqZcRAWVVgPyM6rALrs7y8bJpmDstgGCV4nBAlDr1kOqjt7lipQUKT YvdaoUv/mdVGKA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:14:56 2025 by rpki-client