This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json) Hash identifier: S/ikdlJ4HwTStkIZyGzZqoYEXvf3g+9EmMYlmz6XJ0s= Subject key identifier: E9:71:18:61:2D:5E:C9:69:0A:1F:C8:A9:EE:3E:1B:A5:51:7D:21:35 Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e Certificate serial: 019AF50A3976E767C03572D93A56D3E8F3EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft Manifest number: 10D8 Signing time: Sat 06 Dec 2025 19:01:19 +0000 Manifest this update: Sat 06 Dec 2025 19:01:19 +0000 Manifest next update: Sun 07 Dec 2025 19:01:19 +0000 Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=) 2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: 3o4anQB7xL98Kr3jVBdWxYLAkKQ4E8aGTp65VqQ+C5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:39:76:e7:67:c0:35:72:d9:3a:56:d3:e8:f3:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=144b315ae0f24c891fca18456c66917792af165e Validity Not Before: Dec 6 19:01:19 2025 GMT Not After : Dec 7 19:01:19 2025 GMT Subject: CN=e97118612d5ec9690a1fc8a9ee3e1ba5517d2135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:9f:d8:a3:92:2b:28:6a:c9:66:48:2f:ad: 6f:75:10:f1:fa:9f:ce:d5:8a:06:9d:ef:36:c5:52: b2:56:d9:75:46:87:7f:49:9e:d6:b7:8b:cf:3b:dd: 59:c4:c0:a9:b1:15:75:6b:6c:f2:fc:b5:21:38:0d: 62:67:9f:2f:09:d2:0f:a2:42:ae:82:14:82:42:13: d2:c6:97:e7:f3:2c:95:e4:cc:db:f1:5b:5c:c0:7f: e4:9e:1d:e9:91:b6:9c:c3:0b:5e:6e:ac:db:94:af: ab:17:68:15:2e:eb:71:3f:a4:a4:a7:86:b2:f0:55: 14:a5:b9:c2:d6:bc:69:88:d8:80:79:b5:15:9d:5e: b7:a0:99:24:c9:c6:b3:28:e8:1e:ed:84:1d:e6:12: 32:f4:85:cc:f4:60:98:66:7f:4b:14:79:9b:5c:aa: 6c:c5:bc:58:a6:bb:bb:bc:0a:38:e5:bc:25:db:65: 74:19:10:1a:d1:c1:70:51:0b:bd:27:aa:9b:6a:2d: 65:1a:43:5e:6c:ef:b2:d0:4a:46:db:bd:cd:d8:80: 16:70:07:d1:44:25:de:3d:c4:ba:7a:c6:de:4d:c9: b9:0f:02:a2:64:b3:ac:ad:74:8d:c0:e3:31:ac:d8: eb:0c:cb:02:8d:71:5c:8f:30:f6:95:da:43:1a:64: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:71:18:61:2D:5E:C9:69:0A:1F:C8:A9:EE:3E:1B:A5:51:7D:21:35 X509v3 Authority Key Identifier: keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:35:42:37:45:06:5d:ec:70:8d:47:2d:e5:c0:c2:b2:c8:3b: 77:42:59:40:35:46:78:eb:fb:c9:d9:17:1f:b0:13:b2:35:09: 9f:db:55:39:df:d2:cc:57:2d:4c:b7:b9:e7:dc:ef:ac:f6:59: b0:7b:dc:d5:9f:78:89:7f:65:9e:e9:ae:ff:75:01:62:c7:81: 78:db:ff:66:6a:51:81:c7:78:29:ed:6c:f7:c4:76:b2:a6:66: 53:46:c1:35:27:8b:5e:e9:c1:6b:4d:1a:ba:c7:fc:9c:ce:6d: d1:6b:15:33:10:7f:3e:7a:35:d3:bd:05:90:a6:7e:f4:c6:73: c4:e7:b5:88:d9:6f:0f:e0:d2:7d:a9:3c:0c:53:dc:fc:b9:6d: 8c:af:3c:6d:49:b3:82:c2:6d:92:8f:b4:a8:47:a9:13:da:6f: e8:e9:30:49:9f:8d:fb:c3:24:dc:33:e8:94:05:09:d4:55:a9: e1:f9:c4:dd:99:92:21:90:fa:fe:f8:9f:fd:bb:e3:3f:ee:65: e2:a9:ff:de:76:9f:c1:32:7b:e6:f8:6c:86:33:47:bb:70:a9: 13:a2:ab:36:0a:91:f5:f3:93:28:8f:34:3c:99:19:cf:e4:7f: 11:0e:48:bd:bc:2a:4e:d2:76:02:6a:f5:24:5d:02:2d:e2:39: ee:48:c1:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cjl252fANXLZOlbT6PPqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh ZjE2NWUwHhcNMjUxMjA2MTkwMTE5WhcNMjUxMjA3MTkwMTE5WjAzMTEwLwYDVQQD EyhlOTcxMTg2MTJkNWVjOTY5MGExZmM4YTllZTNlMWJhNTUxN2QyMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqWf2KOSKyhqyWZIL61vdRDx+p/O 1YoGne82xVKyVtl1Rod/SZ7Wt4vPO91ZxMCpsRV1a2zy/LUhOA1iZ58vCdIPokKu ghSCQhPSxpfn8yyV5Mzb8VtcwH/knh3pkbacwwtebqzblK+rF2gVLutxP6Skp4ay 8FUUpbnC1rxpiNiAebUVnV63oJkkycazKOge7YQd5hIy9IXM9GCYZn9LFHmbXKps xbxYpru7vAo45bwl22V0GRAa0cFwUQu9J6qbai1lGkNebO+y0EpG273N2IAWcAfR RCXePcS6esbeTcm5DwKiZLOsrXSNwOMxrNjrDMsCjXFcjzD2ldpDGmQ8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlxGGEtXslpCh/Iqe4+G6VRfSE1MB8GA1UdIwQY MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjVCN0UG XexwjUct5cDCssg7d0JZQDVGeOv7ydkXH7ATsjUJn9tVOd/SzFctTLe559zvrPZZ sHvc1Z94iX9lnumu/3UBYseBeNv/ZmpRgcd4Ke1s98R2sqZmU0bBNSeLXunBa00a usf8nM5t0WsVMxB/Pno1070FkKZ+9MZzxOe1iNlvD+DSfak8DFPc/LltjK88bUmz gsJtko+0qEepE9pv6OkwSZ+N+8Mk3DPolAUJ1FWp4fnE3ZmSIZD6/vif/bvjP+5l 4qn/3nafwTJ75vhshjNHu3CpE6KrNgqR9fOTKI80PJkZz+R/EQ5IvbwqTtJ2Amr1 JF0CLeI57kjBbw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:02:33 2025 by rpki-client