This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft File: fZ4KWRzFKRTMcA44de11qR7JjCg.mft (raw, json) Hash identifier: pDT3mdZndwnHUdMh2VOmaSIh4GrvMHlRhs7z0E5HxOc= Subject key identifier: B0:D2:5F:9E:3B:6C:97:E2:03:CC:C1:E4:B5:6E:47:23:D1:FF:3E:1D Authority key identifier: 7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 Certificate issuer: /CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Certificate serial: 019AF12CCE5D7947BECDBB562F8448898FC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:00:36 +0000 Manifest this update: Sat 06 Dec 2025 01:00:36 +0000 Manifest next update: Sun 07 Dec 2025 01:00:36 +0000 Files and hashes: 1: fZ4KWRzFKRTMcA44de11qR7JjCg.crl (hash: pqSTVi/cOEdNETtPiIrjPOIpbI52J0P5wlHgtGpllVk=) 2: k81sGP_nTYcnr-ydvL_qIPOJOvk.roa (hash: 5IYqtPSCzWY5rft+/OTv7pak8S3Yrmu5rpVtbzra1bc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ce:5d:79:47:be:cd:bb:56:2f:84:48:89:8f:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9e0a591cc52914cc700e3875ed75a91ec98c28 Validity Not Before: Dec 6 01:00:36 2025 GMT Not After : Dec 7 01:00:36 2025 GMT Subject: CN=b0d25f9e3b6c97e203ccc1e4b56e4723d1ff3e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5f:c5:3b:da:b2:4a:cd:ad:a6:40:3d:bb:9c: c5:28:48:ea:28:1d:16:a3:ed:d4:e0:88:03:53:31: e2:06:b0:30:aa:fa:cb:cd:9d:11:6d:9d:c7:65:1a: d5:23:72:7a:cf:39:a5:b3:4c:70:9c:e3:c2:45:ae: 99:0f:97:bf:6e:61:2a:c5:37:73:6a:71:b7:ab:63: 9f:c1:12:26:8c:db:b1:f8:60:83:f6:eb:48:5f:1e: b3:99:17:18:0f:9b:f5:8e:23:da:a1:61:45:92:d2: 4c:42:33:d4:46:27:94:26:00:0b:ef:67:47:e5:7b: 6a:0f:86:c2:d5:ee:df:8c:b6:59:c9:1d:f7:9e:d4: e6:30:84:e9:88:e2:88:a7:5d:98:62:42:6c:1c:2f: 5d:b5:38:a7:bb:93:73:3e:3f:c9:01:17:70:cb:82: a4:4b:78:11:06:ea:24:44:9e:3a:b3:6f:ee:40:56: 15:0e:8c:9a:ec:d8:30:68:f3:f9:1e:13:f0:bb:07: 82:1a:1b:e1:d0:71:a1:04:36:09:93:cd:19:1f:e2: 60:0d:81:53:3f:36:da:87:6c:e7:20:59:0c:f5:74: de:33:42:61:6b:87:f0:6e:f7:a9:41:53:74:0c:1f: 11:cf:58:24:fd:ff:a5:d4:b5:14:60:55:4a:de:0e: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D2:5F:9E:3B:6C:97:E2:03:CC:C1:E4:B5:6E:47:23:D1:FF:3E:1D X509v3 Authority Key Identifier: keyid:7D:9E:0A:59:1C:C5:29:14:CC:70:0E:38:75:ED:75:A9:1E:C9:8C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ4KWRzFKRTMcA44de11qR7JjCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/04b6f7-3f64-474f-acd2-c4d88b13f13a/1/fZ4KWRzFKRTMcA44de11qR7JjCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ce:29:25:a6:6b:c2:16:bf:48:db:1c:9f:ff:86:88:10:8d: f3:35:89:f8:9c:fa:1e:25:80:5f:ee:46:00:31:98:af:34:69: c9:99:5f:8c:df:20:21:a9:78:c6:ce:57:3d:12:c6:3d:8d:bc: e3:26:a7:fc:55:65:d0:62:86:cf:99:5f:40:4d:36:81:34:19: a2:47:9e:2b:84:0e:9c:0a:18:6a:d2:9f:18:54:3e:b3:8d:10: 3a:76:2f:6f:c4:4c:22:b5:c6:3e:2b:92:f8:55:30:05:0a:4a: 72:f4:fa:c6:c1:09:5e:7e:b4:a7:08:95:8f:9c:a1:06:ca:b0: 8a:04:40:9b:05:37:2d:ac:4e:13:c4:49:1e:31:06:18:61:e3: 43:4c:fb:3a:2a:28:d2:f4:89:71:c3:6b:f8:b8:50:f9:d4:c6: e3:05:37:ee:c2:6a:3d:14:37:95:6c:c1:9a:3a:9c:0f:ab:e2: ab:7e:8d:af:e3:b0:8d:e8:34:5d:23:91:7d:d4:09:85:8b:fd: 6f:8b:74:ee:f5:cb:ce:ac:4d:e5:1a:97:5a:4d:19:e2:b2:d3: 67:df:92:88:55:15:d6:64:d0:a4:39:47:43:bf:8d:3e:89:3a: 20:60:fc:63:64:92:df:f2:28:b6:ea:61:a8:0b:79:0c:81:83: a1:91:27:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLM5deUe+zbtWL4RIiY/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOWUwYTU5MWNjNTI5MTRjYzcwMGUzODc1ZWQ3NWE5MWVj OThjMjgwHhcNMjUxMjA2MDEwMDM2WhcNMjUxMjA3MDEwMDM2WjAzMTEwLwYDVQQD EyhiMGQyNWY5ZTNiNmM5N2UyMDNjY2MxZTRiNTZlNDcyM2QxZmYzZTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1/FO9qySs2tpkA9u5zFKEjqKB0W o+3U4IgDUzHiBrAwqvrLzZ0RbZ3HZRrVI3J6zzmls0xwnOPCRa6ZD5e/bmEqxTdz anG3q2OfwRImjNux+GCD9utIXx6zmRcYD5v1jiPaoWFFktJMQjPURieUJgAL72dH 5XtqD4bC1e7fjLZZyR33ntTmMITpiOKIp12YYkJsHC9dtTinu5NzPj/JARdwy4Kk S3gRBuokRJ46s2/uQFYVDoya7NgwaPP5HhPwuweCGhvh0HGhBDYJk80ZH+JgDYFT Pzbah2znIFkM9XTeM0Jha4fwbvepQVN0DB8Rz1gk/f+l1LUUYFVK3g7DIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDSX547bJfiA8zB5LVuRyPR/z4dMB8GA1UdIwQY MBaAFH2eClkcxSkUzHAOOHXtdakeyYwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDIt YzRkODhiMTNmMTNhLzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wNGI2ZjctM2Y2NC00NzRmLWFjZDItYzRkODhiMTNmMTNh LzEvZlo0S1dSekZLUlRNY0E0NGRlMTFxUjdKakNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg84pJaZr wha/SNscn/+GiBCN8zWJ+Jz6HiWAX+5GADGYrzRpyZlfjN8gIal4xs5XPRLGPY28 4yan/FVl0GKGz5lfQE02gTQZokeeK4QOnAoYatKfGFQ+s40QOnYvb8RMIrXGPiuS +FUwBQpKcvT6xsEJXn60pwiVj5yhBsqwigRAmwU3LaxOE8RJHjEGGGHjQ0z7Oioo 0vSJccNr+LhQ+dTG4wU37sJqPRQ3lWzBmjqcD6viq36Nr+Owjeg0XSORfdQJhYv9 b4t07vXLzqxN5RqXWk0Z4rLTZ9+SiFUV1mTQpDlHQ7+NPok6IGD8Y2SS3/Iotuph qAt5DIGDoZEnDw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:50 2025 by rpki-client