This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft File: fWNA43zPwSrrqsKl8z1F6gqIeoo.mft (raw, json) Hash identifier: 0A74zbxVlfkTqxTgP9j5+mMEd2DKjTYJhr1gNOMudus= Subject key identifier: 9D:45:EE:9B:29:40:4A:F0:43:31:BB:2F:05:AD:00:87:20:04:62:1D Authority key identifier: 7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A Certificate issuer: /CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Certificate serial: 019AF352716D1CE1C80E9A9DA1A1566CA5CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft Manifest number: 11AB Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: fWNA43zPwSrrqsKl8z1F6gqIeoo.crl (hash: zrl8gOYLWpS60XeXY3DGluf+KdPrfP93ZI03rXujJ0I=) 2: jRJwX_ZKuADln4pES5WgoVS__88.roa (hash: K3aJVjlqhUCHgSM5vEOmY3eFV+XqReoMzhLc+qeCd0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:71:6d:1c:e1:c8:0e:9a:9d:a1:a1:56:6c:a5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d6340e37ccfc12aebaac2a5f33d45ea0a887a8a Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=9d45ee9b29404af04331bb2f05ad00872004621d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ea:35:9b:eb:f3:59:6e:3e:e1:9f:d6:d1:e8: 84:3b:f5:46:b9:f2:0a:ef:9f:31:5e:12:ae:27:03: e9:b5:07:a4:02:d5:10:72:f3:7b:84:c5:55:50:fb: 44:90:f1:19:83:0e:cd:1d:f0:6d:9f:2a:74:c0:43: c5:18:a3:c2:d4:e4:d1:66:ca:bd:b2:be:7b:d4:05: 73:0a:e3:09:9c:f9:f8:09:ec:7b:e1:97:a6:30:3f: c9:33:66:d4:10:d1:bb:1e:59:9a:5d:90:35:80:05: 58:68:94:20:2b:de:4c:74:db:d5:96:00:15:3a:13: 87:db:d5:08:60:08:4b:95:3a:9c:b8:6d:03:26:ed: 52:77:2d:f6:42:dd:93:ad:3e:4f:4b:24:b8:c0:30: a9:b3:d5:c3:9e:fc:b5:f5:fb:a4:96:57:eb:7f:55: bb:13:bf:5f:72:d0:53:3a:53:4e:81:84:8c:ad:08: ae:ff:a2:4c:f0:74:a9:e7:3f:39:b0:23:5e:b3:8e: 33:05:8f:7c:72:ac:1a:97:22:77:4d:ef:bf:59:54: ae:66:07:e3:a9:72:9c:82:83:94:ac:00:61:c8:e2: 2e:2d:ec:64:56:12:9e:1a:72:d2:46:22:aa:f6:8c: 8b:72:32:d2:9d:29:2e:2f:7a:50:bc:a3:20:32:d1: 65:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:EE:9B:29:40:4A:F0:43:31:BB:2F:05:AD:00:87:20:04:62:1D X509v3 Authority Key Identifier: keyid:7D:63:40:E3:7C:CF:C1:2A:EB:AA:C2:A5:F3:3D:45:EA:0A:88:7A:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWNA43zPwSrrqsKl8z1F6gqIeoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b1ce34-e043-45a8-bebd-8982b7a8f614/1/fWNA43zPwSrrqsKl8z1F6gqIeoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:95:51:34:53:de:b6:f9:f2:96:57:e7:8f:74:bf:74:e6:cf: 97:20:8f:19:1f:cc:71:94:85:24:27:9e:8b:97:d6:84:ce:60: 01:9d:b3:cb:04:6c:02:5c:6b:8d:5f:6e:b9:61:f5:4a:43:ee: 23:f9:f3:0e:0b:5d:48:cc:26:d1:cd:31:74:ed:53:e2:ea:d1: e5:5c:c8:cd:be:a0:1b:70:a3:f1:59:6f:a8:56:5b:ed:5d:1f: 89:a8:39:4e:dd:9d:81:73:d0:a3:1f:c2:3c:e2:08:91:d8:a0: b6:59:17:57:d7:36:8f:3c:b7:68:11:5d:26:29:e9:5b:60:50: e8:18:62:ef:4b:8f:7e:31:45:30:b2:18:39:2b:9f:db:aa:e0: 05:04:a3:ef:98:41:db:21:38:a1:21:60:f5:15:88:51:20:9c: e9:98:3a:06:9c:4a:d9:72:ae:4d:35:b1:48:d1:8f:25:8f:0b: bd:d7:a7:f1:a3:f1:e7:ba:00:53:ab:1d:3b:18:3b:62:3e:af: 88:fe:19:9c:82:5f:65:7a:32:bb:fc:d7:b2:ba:a1:e0:c6:87: eb:ff:0f:f6:41:6c:29:3b:c0:3c:39:7c:7e:42:2a:e3:2c:14: d7:6c:2c:4f:62:66:dc:c5:32:62:c2:30:27:e6:bd:a5:e0:0d: a0:a1:0d:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnFtHOHIDpqdoaFWbKXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNjM0MGUzN2NjZmMxMmFlYmFhYzJhNWYzM2Q0NWVhMGE4 ODdhOGEwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg5ZDQ1ZWU5YjI5NDA0YWYwNDMzMWJiMmYwNWFkMDA4NzIwMDQ2MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOo1m+vzWW4+4Z/W0eiEO/VGufIK 758xXhKuJwPptQekAtUQcvN7hMVVUPtEkPEZgw7NHfBtnyp0wEPFGKPC1OTRZsq9 sr571AVzCuMJnPn4Cex74ZemMD/JM2bUENG7HlmaXZA1gAVYaJQgK95MdNvVlgAV OhOH29UIYAhLlTqcuG0DJu1Sdy32Qt2TrT5PSyS4wDCps9XDnvy19fukllfrf1W7 E79fctBTOlNOgYSMrQiu/6JM8HSp5z85sCNes44zBY98cqwalyJ3Te+/WVSuZgfj qXKcgoOUrABhyOIuLexkVhKeGnLSRiKq9oyLcjLSnSkuL3pQvKMgMtFl+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1F7pspQErwQzG7LwWtAIcgBGIdMB8GA1UdIwQY MBaAFH1jQON8z8Eq66rCpfM9ReoKiHqKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQt ODk4MmI3YThmNjE0LzEvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iMWNlMzQtZTA0My00NWE4LWJlYmQtODk4MmI3YThmNjE0 LzEvZldOQTQzelB3U3JycXNLbDh6MUY2Z3FJZW9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5VRNFPe tvnyllfnj3S/dObPlyCPGR/McZSFJCeei5fWhM5gAZ2zywRsAlxrjV9uuWH1SkPu I/nzDgtdSMwm0c0xdO1T4urR5VzIzb6gG3Cj8VlvqFZb7V0fiag5Tt2dgXPQox/C POIIkdigtlkXV9c2jzy3aBFdJinpW2BQ6Bhi70uPfjFFMLIYOSuf26rgBQSj75hB 2yE4oSFg9RWIUSCc6Zg6BpxK2XKuTTWxSNGPJY8Lvden8aPx57oAU6sdOxg7Yj6v iP4ZnIJfZXoyu/zXsrqh4MaH6/8P9kFsKTvAPDl8fkIq4ywU12wsT2Jm3MUyYsIw J+a9peANoKENIA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:20 2025 by rpki-client