This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft File: fZ9lKePCbtCMlfdP5j17Lush9XE.mft (raw, json) Hash identifier: skf2kiItIXw6Wa778hxurj7K6LVCdbs9TP1kqVbIZ18= Subject key identifier: FE:DA:FA:05:5D:38:48:AD:C1:2B:11:E2:6D:EC:65:F2:E8:0C:80:8A Authority key identifier: 7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 Certificate issuer: /CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571 Certificate serial: 019AF12ECC8736C7D3A92C374A05A680DF45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft Manifest number: 03F4 Signing time: Sat 06 Dec 2025 01:02:47 +0000 Manifest this update: Sat 06 Dec 2025 01:02:47 +0000 Manifest next update: Sun 07 Dec 2025 01:02:47 +0000 Files and hashes: 1: fZ9lKePCbtCMlfdP5j17Lush9XE.crl (hash: 2sy83zIgFfGmvip2z2iFQ50SgR4PiF2s9uaSxh6XVB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:cc:87:36:c7:d3:a9:2c:37:4a:05:a6:80:df:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d9f6529e3c26ed08c95f74fe63d7b2eeb21f571 Validity Not Before: Dec 6 01:02:47 2025 GMT Not After : Dec 7 01:02:47 2025 GMT Subject: CN=fedafa055d3848adc12b11e26dec65f2e80c808a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:1d:8d:28:73:51:c4:1a:42:b6:23:39:50:c6: 0d:41:68:28:d6:55:f8:a0:73:71:1c:41:31:ec:df: 89:72:b1:b1:25:31:67:a3:2f:1d:eb:08:02:72:a4: 32:75:89:81:6e:21:49:9d:36:95:cb:c7:38:48:0b: 38:cf:12:6b:c4:30:65:5d:21:09:c9:a8:c4:05:75: 0f:df:e5:32:32:4d:ca:97:51:34:49:1a:d4:e2:5f: e4:c7:e6:55:74:9d:76:16:84:c1:17:07:dc:ef:96: fc:79:59:82:dc:f9:41:0f:ee:bd:b7:14:85:99:4d: 97:15:a6:ee:d0:0a:00:f2:19:a7:17:f5:82:32:1b: 6c:17:c9:3d:b0:0c:da:6c:6a:de:2a:fe:f0:f0:f5: e6:1d:37:ed:79:8a:34:64:b5:e4:19:40:a1:ab:16: 8a:3b:03:66:1d:df:47:a7:9d:e9:0d:a2:41:f3:2e: cf:32:c2:ee:af:3e:63:bd:e4:41:22:48:59:39:30: e5:62:01:31:b2:77:6c:2d:a0:ab:6e:fe:68:ba:dc: b0:fe:8f:f0:a6:ec:0f:92:05:23:e2:ad:ec:9c:ac: aa:91:dd:d0:66:7e:f1:42:8d:46:d9:cb:b9:ea:b9: 4e:96:ff:fa:b5:ab:54:d4:eb:04:c4:c2:f0:47:f1: 80:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:FA:05:5D:38:48:AD:C1:2B:11:E2:6D:EC:65:F2:E8:0C:80:8A X509v3 Authority Key Identifier: keyid:7D:9F:65:29:E3:C2:6E:D0:8C:95:F7:4F:E6:3D:7B:2E:EB:21:F5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZ9lKePCbtCMlfdP5j17Lush9XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/267b51-9adb-4038-b24c-926240aa5f05/1/fZ9lKePCbtCMlfdP5j17Lush9XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:e0:79:38:0f:3a:76:ad:ef:f7:af:93:58:e5:18:be:12: b3:73:ee:e8:04:60:d9:85:fd:e4:45:bb:ff:83:31:07:a3:8d: f9:2e:3d:d2:b8:4e:fd:86:fc:83:9e:ab:f5:ea:80:d4:10:1b: 7f:cf:c4:74:be:75:9f:19:36:c2:48:f5:bd:fe:4b:89:c0:50: a6:d0:97:45:3a:07:a6:61:c9:a0:ed:ff:e6:8b:70:b3:b9:fd: 41:65:d2:ef:f6:33:f9:ad:55:61:3a:5f:49:6e:03:ca:6a:35: 32:36:d4:f1:cc:7f:7f:a3:84:15:04:62:38:ff:0b:bc:37:5c: 8f:f0:1b:94:0e:81:2f:48:7f:24:b3:53:c0:76:8b:03:37:36: 52:a5:05:ed:96:64:0c:d2:a1:63:b8:4a:ca:ef:63:f4:aa:71: 61:4a:ad:2e:6f:31:08:65:7e:cf:5f:c3:31:46:21:1a:f1:bd: b5:13:91:a1:b3:9d:c5:68:dc:41:73:2d:7d:78:fb:08:b9:a0: d1:56:98:73:a4:a2:c7:8b:7e:b4:8f:9a:22:f8:1e:0f:9d:ea: 49:35:14:59:26:5b:f2:a7:98:d1:42:31:d9:cf:cd:bd:81:aa: 3a:cc:82:e7:9c:f5:c6:94:a9:96:63:0b:d4:09:26:f4:27:d6: 97:11:ab:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLsyHNsfTqSw3SgWmgN9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOWY2NTI5ZTNjMjZlZDA4Yzk1Zjc0ZmU2M2Q3YjJlZWIy MWY1NzEwHhcNMjUxMjA2MDEwMjQ3WhcNMjUxMjA3MDEwMjQ3WjAzMTEwLwYDVQQD EyhmZWRhZmEwNTVkMzg0OGFkYzEyYjExZTI2ZGVjNjVmMmU4MGM4MDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B2NKHNRxBpCtiM5UMYNQWgo1lX4 oHNxHEEx7N+JcrGxJTFnoy8d6wgCcqQydYmBbiFJnTaVy8c4SAs4zxJrxDBlXSEJ yajEBXUP3+UyMk3Kl1E0SRrU4l/kx+ZVdJ12FoTBFwfc75b8eVmC3PlBD+69txSF mU2XFabu0AoA8hmnF/WCMhtsF8k9sAzabGreKv7w8PXmHTfteYo0ZLXkGUChqxaK OwNmHd9Hp53pDaJB8y7PMsLurz5jveRBIkhZOTDlYgExsndsLaCrbv5outyw/o/w puwPkgUj4q3snKyqkd3QZn7xQo1G2cu56rlOlv/6tatU1OsExMLwR/GAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7a+gVdOEitwSsR4m3sZfLoDICKMB8GA1UdIwQY MBaAFH2fZSnjwm7QjJX3T+Y9ey7rIfVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8yNjdiNTEtOWFkYi00MDM4LWIyNGMt OTI2MjQwYWE1ZjA1LzEvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8yNjdiNTEtOWFkYi00MDM4LWIyNGMtOTI2MjQwYWE1ZjA1 LzEvZlo5bEtlUENidENNbGZkUDVqMTdMdXNoOVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu/geTgP Onat7/evk1jlGL4Ss3Pu6ARg2YX95EW7/4MxB6ON+S490rhO/Yb8g56r9eqA1BAb f8/EdL51nxk2wkj1vf5LicBQptCXRToHpmHJoO3/5otws7n9QWXS7/Yz+a1VYTpf SW4Dymo1MjbU8cx/f6OEFQRiOP8LvDdcj/AblA6BL0h/JLNTwHaLAzc2UqUF7ZZk DNKhY7hKyu9j9KpxYUqtLm8xCGV+z1/DMUYhGvG9tRORobOdxWjcQXMtfXj7CLmg 0VaYc6Six4t+tI+aIvgeD53qSTUUWSZb8qeY0UIx2c/NvYGqOsyC55z1xpSplmML 1Akm9CfWlxGrbg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:51:56 2025 by rpki-client