This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft File: FdaRyV0UuLzeZpKgMgzA4odWsFk.mft (raw, json) Hash identifier: 4UsEKSKUCSPeMGUDhJahPnRYVxhpReSeSYIZiZ5n6Ls= Subject key identifier: B4:AF:D0:46:44:A2:20:57:FB:74:28:27:1A:C5:A3:95:96:4C:73:4E Authority key identifier: 15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59 Certificate issuer: /CN=15d691c95d14b8bcde6692a0320cc0e28756b059 Certificate serial: 019AF24008749DF623E68DF247204D6103F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft Manifest number: 058F Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: FdaRyV0UuLzeZpKgMgzA4odWsFk.crl (hash: cmEGFNaHgN7xYwvf4EyImFwEBmUNeEPYtxa5fMFGwe8=) 2: l3kIS-H41zLKlD417TNejtnJFY4.roa (hash: FXoM//hoNobYIufdMl7hBHWJsSDmxoPmDOYAZonvSC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:08:74:9d:f6:23:e6:8d:f2:47:20:4d:61:03:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15d691c95d14b8bcde6692a0320cc0e28756b059 Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=b4afd04644a22057fb7428271ac5a395964c734e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:09:1c:99:e5:c3:2a:65:7f:64:ef:b1:2e:05: 54:f1:bf:3b:42:13:d1:87:17:a2:81:2e:65:44:7d: ea:04:c8:72:d6:ac:43:69:ca:51:f6:b7:07:bd:65: 51:7d:8a:30:1a:15:1e:78:4e:30:9f:af:ad:27:ba: b8:d4:f3:dd:1f:be:33:f0:a8:13:25:d2:fa:ee:c9: be:b8:5f:aa:98:a3:78:6d:6f:85:85:2b:38:a3:75: 60:44:c1:41:90:60:07:6f:28:20:87:00:8f:bc:33: 96:1c:ce:a7:80:49:e8:24:6a:04:01:18:55:02:96: 31:9d:b1:ca:78:d4:d0:20:76:c8:d4:88:db:e9:35: d6:71:0c:0b:d9:5b:5b:10:8b:68:a0:76:18:20:9c: a8:72:06:a0:9f:c6:6e:66:5e:dc:17:49:2f:38:91: 0d:c9:48:37:76:40:ad:d1:b3:b0:46:66:d6:51:4f: 94:e7:d4:ab:5d:ce:4d:29:6c:2e:ab:ad:5b:fb:eb: 23:4f:78:1e:16:72:e5:be:84:32:92:f6:96:b5:1a: ee:2b:68:38:3b:2f:2e:5b:f4:87:3a:07:df:1c:eb: 20:93:dc:9b:56:7f:f5:22:4c:f0:4e:bd:6d:81:54: d0:0a:dd:68:75:04:ba:f3:26:04:e4:29:f4:92:68: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:AF:D0:46:44:A2:20:57:FB:74:28:27:1A:C5:A3:95:96:4C:73:4E X509v3 Authority Key Identifier: keyid:15:D6:91:C9:5D:14:B8:BC:DE:66:92:A0:32:0C:C0:E2:87:56:B0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FdaRyV0UuLzeZpKgMgzA4odWsFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5d6e29-942f-4caf-98a8-fd5d55b61ec4/1/FdaRyV0UuLzeZpKgMgzA4odWsFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7d:89:92:a6:4a:7d:94:b8:51:bc:9f:d8:cc:34:78:ec:82: 5a:72:01:62:59:c7:4c:36:bb:ac:07:31:60:ba:b0:0b:d3:cc: 6c:4f:75:5a:5a:26:f3:c3:e6:40:59:6c:5b:ae:6c:65:ff:13: a5:42:88:05:7b:21:80:fa:ac:55:8a:ec:ce:70:3f:e7:7e:20: a7:da:1a:68:d8:8e:72:67:33:75:23:5b:f4:d1:37:5e:4b:fa: 78:9c:64:2a:ee:39:33:ff:1c:ed:42:3a:b7:f8:08:46:33:e4: d6:38:ca:4d:b0:af:b0:7d:89:91:aa:5b:12:03:96:c7:7d:ab: e8:ac:20:6c:27:5d:4f:44:26:e4:1d:3f:2d:23:ca:d7:5e:5d: af:0e:27:ff:35:f4:cc:f0:be:0c:77:01:e1:76:38:7c:7b:36: 35:c5:32:fe:a6:d0:dc:4b:7d:2f:f0:37:d7:6b:66:07:23:09: 2c:3e:b7:8d:e3:81:33:c8:ce:2e:7e:c8:15:15:c1:16:03:88: 82:4d:93:2f:9b:5c:45:18:97:7f:3a:5f:28:4f:30:5f:ad:59: a9:0f:c3:f7:f0:d5:c8:44:83:ab:ac:bf:31:0d:c3:83:88:e4: fb:4b:f2:dd:c0:f5:b5:4a:39:02:06:72:82:3d:42:da:f8:19: 41:87:35:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAh0nfYj5o3yRyBNYQP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZDY5MWM5NWQxNGI4YmNkZTY2OTJhMDMyMGNjMGUyODc1 NmIwNTkwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhiNGFmZDA0NjQ0YTIyMDU3ZmI3NDI4MjcxYWM1YTM5NTk2NGM3MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwkcmeXDKmV/ZO+xLgVU8b87QhPR hxeigS5lRH3qBMhy1qxDacpR9rcHvWVRfYowGhUeeE4wn6+tJ7q41PPdH74z8KgT JdL67sm+uF+qmKN4bW+FhSs4o3VgRMFBkGAHbygghwCPvDOWHM6ngEnoJGoEARhV ApYxnbHKeNTQIHbI1Ijb6TXWcQwL2VtbEItooHYYIJyocgagn8ZuZl7cF0kvOJEN yUg3dkCt0bOwRmbWUU+U59SrXc5NKWwuq61b++sjT3geFnLlvoQykvaWtRruK2g4 Oy8uW/SHOgffHOsgk9ybVn/1IkzwTr1tgVTQCt1odQS68yYE5Cn0kmi5+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLSv0EZEoiBX+3QoJxrFo5WWTHNOMB8GA1UdIwQY MBaAFBXWkcldFLi83maSoDIMwOKHVrBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgt ZmQ1ZDU1YjYxZWM0LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81ZDZlMjktOTQyZi00Y2FmLTk4YTgtZmQ1ZDU1YjYxZWM0 LzEvRmRhUnlWMFV1THplWnBLZ01nekE0b2RXc0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVX2JkqZK fZS4Ubyf2Mw0eOyCWnIBYlnHTDa7rAcxYLqwC9PMbE91Wlom88PmQFlsW65sZf8T pUKIBXshgPqsVYrsznA/534gp9oaaNiOcmczdSNb9NE3Xkv6eJxkKu45M/8c7UI6 t/gIRjPk1jjKTbCvsH2JkapbEgOWx32r6KwgbCddT0Qm5B0/LSPK115drw4n/zX0 zPC+DHcB4XY4fHs2NcUy/qbQ3Et9L/A312tmByMJLD63jeOBM8jOLn7IFRXBFgOI gk2TL5tcRRiXfzpfKE8wX61ZqQ/D9/DVyESDq6y/MQ3Dg4jk+0vy3cD1tUo5AgZy gj1C2vgZQYc1vw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:07 2025 by rpki-client