This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json) Hash identifier: ObNBp2abEUEl+QT4mx0rmLAWxBXKjf5arL4sFeb3iNk= Subject key identifier: 33:75:64:A8:A2:F1:B3:65:4B:51:76:28:B3:6F:AA:47:14:DF:0F:A3 Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Certificate serial: 019AF1D25B65EBC1A68B88B86FBF5F410E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft Manifest number: 4E Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: 8TvvN/rf4W0/cR/5dMMlH2HC5wNQ3ThuaSeVhxnIOEA=) 2: PwNeEQK8cYVwYwRg-w7R3ta0-Wc.roa (hash: 5U7iTxxmR/k00/iziXJJLBxCbjSuEb3qsWlrxIkzh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5b:65:eb:c1:a6:8b:88:b8:6f:bf:5f:41:0e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=337564a8a2f1b3654b517628b36faa4714df0fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:1b:b7:ef:31:05:ce:b6:da:db:34:aa:55: b7:33:2b:7e:d2:c0:20:b6:9d:90:d2:bc:8e:04:55: fc:6f:f0:2b:0f:ad:1d:cb:83:0e:53:61:3c:3d:e9: d4:57:1d:61:87:20:d2:5e:1d:06:41:50:b2:d4:fa: d7:7d:02:d6:16:a6:ea:f9:8c:0e:02:cf:d1:1d:70: d9:10:f4:ed:90:6d:3d:a6:8d:2f:cf:7e:d9:ef:88: ea:0a:0a:c2:53:41:a7:c7:c0:ab:49:e5:2e:eb:cb: a2:5e:8d:cd:a8:1d:1b:85:0c:2e:b1:d2:a8:c1:43: 22:87:1a:4f:ba:1c:88:6d:95:37:2c:66:8c:7b:be: bd:14:2e:ed:c4:f8:37:2b:44:05:11:1d:6d:e1:d7: 3a:7f:68:30:74:94:14:c9:8a:7b:a5:03:c3:e5:f4: ac:78:1c:45:10:c5:a0:40:a9:f9:7b:92:7d:26:fa: 68:cc:2c:0e:55:f2:64:85:cb:90:bc:87:de:b0:50: 92:2f:b9:8c:37:c4:c8:7b:c8:d3:50:9f:2a:5a:ba: 37:39:ed:f5:02:f6:5b:9e:bd:be:d6:94:ca:47:23: 8c:f4:ee:8d:5e:2c:5f:07:47:d3:83:3c:88:f1:0c: 75:cc:40:0e:b1:b2:76:a6:38:a4:7f:16:2c:04:fe: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:75:64:A8:A2:F1:B3:65:4B:51:76:28:B3:6F:AA:47:14:DF:0F:A3 X509v3 Authority Key Identifier: keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:71:f6:15:02:d9:eb:91:fa:93:f2:79:bb:30:f6:05:9e:dc: f0:df:48:de:05:b5:19:a0:6d:78:2c:c6:5a:71:e4:a7:9d:fd: b2:71:d3:02:68:a9:cb:3a:23:5c:28:1f:18:80:ac:60:89:bc: d6:25:5b:e2:79:14:19:7d:9f:f9:9e:aa:eb:95:59:38:36:15: db:bb:82:b3:15:0c:bf:b4:ef:a1:82:f4:d3:0d:2e:5f:f9:f8: 08:91:54:b9:c6:60:09:02:5c:6c:50:93:35:15:ac:88:ed:6a: f7:b2:e6:c1:f4:de:5d:d1:96:fa:45:97:79:bb:c6:38:6f:cb: 0d:d9:b3:d5:0b:33:e9:c3:61:35:40:b3:4b:52:03:7e:3e:e5: dd:d4:26:f5:01:ad:4d:1c:10:16:04:ed:76:2c:95:32:b9:66: 53:b6:cb:77:57:95:24:30:6a:aa:da:66:e7:ba:71:69:a4:ef: e2:08:78:84:b0:81:6d:fb:4d:98:0a:56:79:9e:67:0b:2a:88: b6:5c:45:af:99:8a:ed:f1:db:38:b7:17:b1:71:88:6b:8f:24: ab:1f:36:15:e2:5b:f3:bc:81:c5:ce:47:bc:c9:1e:aa:59:9e: 92:0d:bd:c3:75:92:f6:55:1e:88:1b:55:59:92:63:a9:2a:b9: 0e:35:f2:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ltl68Gmi4i4b79fQQ6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjVjNDI3YjUwZWI5ZTJhYWY3YzVhY2MxYjIyODk2MzNh YjUzNTMwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EygzMzc1NjRhOGEyZjFiMzY1NGI1MTc2MjhiMzZmYWE0NzE0ZGYwZmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNYbt+8xBc622ts0qlW3Myt+0sAg tp2Q0ryOBFX8b/ArD60dy4MOU2E8PenUVx1hhyDSXh0GQVCy1PrXfQLWFqbq+YwO As/RHXDZEPTtkG09po0vz37Z74jqCgrCU0Gnx8CrSeUu68uiXo3NqB0bhQwusdKo wUMihxpPuhyIbZU3LGaMe769FC7txPg3K0QFER1t4dc6f2gwdJQUyYp7pQPD5fSs eBxFEMWgQKn5e5J9JvpozCwOVfJkhcuQvIfesFCSL7mMN8TIe8jTUJ8qWro3Oe31 AvZbnr2+1pTKRyOM9O6NXixfB0fTgzyI8Qx1zEAOsbJ2pjikfxYsBP7vJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN1ZKii8bNlS1F2KLNvqkcU3w+jMB8GA1UdIwQY MBaAFBX1xCe1DrniqvfFrMGyKJYzq1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAt YTVkMjM0NTg2ZDkwLzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAtYTVkMjM0NTg2ZDkw LzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3H2FQLZ 65H6k/J5uzD2BZ7c8N9I3gW1GaBteCzGWnHkp539snHTAmipyzojXCgfGICsYIm8 1iVb4nkUGX2f+Z6q65VZODYV27uCsxUMv7TvoYL00w0uX/n4CJFUucZgCQJcbFCT NRWsiO1q97LmwfTeXdGW+kWXebvGOG/LDdmz1Qsz6cNhNUCzS1IDfj7l3dQm9QGt TRwQFgTtdiyVMrlmU7bLd1eVJDBqqtpm57pxaaTv4gh4hLCBbftNmApWeZ5nCyqI tlxFr5mK7fHbOLcXsXGIa48kqx82FeJb87yBxc5HvMkeqlmekg29w3WS9lUeiBtV WZJjqSq5DjXyJw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:49 2025 by rpki-client