This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft File: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft (raw, json) Hash identifier: 4DIwBKoSmk7eILLkctwBf0cp+c7dLeVU+Xm9OiNVnwg= Subject key identifier: DD:54:2C:51:99:35:60:63:17:DD:77:0A:7C:B7:1A:68:28:E2:28:AE Authority key identifier: 7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7 Certificate issuer: /CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7 Certificate serial: 019AF19A9E67C6CA6E11258D0A4805C926F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft Manifest number: 0E5E Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl (hash: QVLdXXS7aQn+ePGgwLdUgc/uLEwSp0q3qFQd4+W2l14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9e:67:c6:ca:6e:11:25:8d:0a:48:05:c9:26:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4ee286ac24c5f259f0a72b3b48c2436dd34cf7 Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=dd542c519935606317dd770a7cb71a6828e228ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:da:05:61:51:c8:17:4d:bc:10:96:ee:87:97: de:5d:5d:47:01:f9:42:e2:ee:24:f8:6a:9a:14:cc: 84:5a:7a:be:ef:99:97:a8:93:13:ff:a9:63:79:d5: 36:ac:ab:df:9b:41:ca:88:16:3c:d4:e1:28:39:43: 60:32:97:71:9c:0b:fd:94:07:91:c0:43:31:57:7e: ef:f9:5e:6b:69:5b:0e:a0:9a:2a:6a:9d:ef:73:b9: 3b:ea:0c:55:1f:77:a7:46:4e:41:7f:aa:b1:06:d1: 3e:63:6c:c2:41:0b:da:64:15:04:e9:b9:d9:0f:df: d9:90:d7:0f:e4:c4:1a:10:47:22:7c:08:cd:1e:cf: ef:d9:8b:9f:6e:54:bc:b8:eb:72:f7:ca:ed:38:95: 74:6c:ca:3e:5a:5d:a0:06:a5:30:f5:27:88:36:4d: 66:6a:2f:19:8f:5a:df:6d:84:5c:05:1d:20:2c:e2: f3:7f:a8:a9:fd:86:5b:11:0a:65:5d:b7:9c:ef:4c: 7e:b7:43:4c:d1:ac:77:e8:45:46:44:68:20:b2:d8: 38:8d:31:42:b1:7c:a1:d8:73:3c:5d:96:93:0f:3f: b7:7c:d3:99:96:05:45:37:9a:33:bf:6f:89:9a:2c: b9:fb:9d:ba:84:29:c8:77:58:ed:cb:d9:87:22:ef: 18:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:2C:51:99:35:60:63:17:DD:77:0A:7C:B7:1A:68:28:E2:28:AE X509v3 Authority Key Identifier: keyid:7C:4E:E2:86:AC:24:C5:F2:59:F0:A7:2B:3B:48:C2:43:6D:D3:4C:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8c5cc8-4def-41a7-ae6e-0b141c8f5a3b/1/fE7ihqwkxfJZ8KcrO0jCQ23TTPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:14:b2:79:be:4f:8e:f5:49:b1:cf:d1:de:2d:1e:b7:4f:c9: 4c:ae:e0:51:3b:26:ec:05:a8:a0:9f:97:4a:4a:f0:27:05:2a: d9:b3:7a:74:cf:2e:e3:bc:59:bd:ee:33:f2:76:49:7a:e4:96: 92:d1:51:d8:9d:99:fb:fd:e7:d7:0d:4b:10:f5:3e:78:39:de: 25:03:88:c6:43:f6:54:9e:90:e8:5c:ed:16:01:ea:92:77:a7: 61:1f:7d:60:e6:e9:d0:68:0e:d6:73:a0:91:34:15:59:d1:57: 33:93:7f:ca:41:7c:a0:b4:42:23:49:59:7d:f8:2f:9c:09:ba: ac:b3:0a:9e:9a:73:c7:f7:2e:d8:20:83:ce:e5:4d:76:55:9b: 65:48:51:38:51:3c:7d:31:45:19:71:ae:1e:ac:e4:55:b3:67: 53:ad:8d:0a:62:31:ee:a7:25:d8:e6:38:f9:0a:08:ba:c5:cf: 50:77:31:0c:53:00:05:06:82:9f:18:28:1d:84:c1:6b:fc:d9: 2f:f4:ea:1b:a3:d1:38:b2:43:7b:30:bb:3f:16:e0:30:3d:37: 5f:05:56:fd:a9:ed:62:9a:c9:5c:0f:9f:b7:0a:66:17:44:5f: b8:39:11:30:42:08:2c:cd:1b:c4:43:1c:d7:1f:d4:13:5d:66: 9b:ef:38:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp5nxspuESWNCkgFySb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVlMjg2YWMyNGM1ZjI1OWYwYTcyYjNiNDhjMjQzNmRk MzRjZjcwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhkZDU0MmM1MTk5MzU2MDYzMTdkZDc3MGE3Y2I3MWE2ODI4ZTIyOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9oFYVHIF028EJbuh5feXV1HAflC 4u4k+GqaFMyEWnq+75mXqJMT/6ljedU2rKvfm0HKiBY81OEoOUNgMpdxnAv9lAeR wEMxV37v+V5raVsOoJoqap3vc7k76gxVH3enRk5Bf6qxBtE+Y2zCQQvaZBUE6bnZ D9/ZkNcP5MQaEEcifAjNHs/v2YufblS8uOty98rtOJV0bMo+Wl2gBqUw9SeINk1m ai8Zj1rfbYRcBR0gLOLzf6ip/YZbEQplXbec70x+t0NM0ax36EVGRGggstg4jTFC sXyh2HM8XZaTDz+3fNOZlgVFN5ozv2+Jmiy5+526hCnId1jty9mHIu8YlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1ULFGZNWBjF913Cny3Gmgo4iiuMB8GA1UdIwQY MBaAFHxO4oasJMXyWfCnKztIwkNt00z3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUt MGIxNDFjOGY1YTNiLzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84YzVjYzgtNGRlZi00MWE3LWFlNmUtMGIxNDFjOGY1YTNi LzEvZkU3aWhxd2t4ZkpaOEtjck8wakNRMjNUVFBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhSyeb5P jvVJsc/R3i0et0/JTK7gUTsm7AWooJ+XSkrwJwUq2bN6dM8u47xZve4z8nZJeuSW ktFR2J2Z+/3n1w1LEPU+eDneJQOIxkP2VJ6Q6FztFgHqknenYR99YObp0GgO1nOg kTQVWdFXM5N/ykF8oLRCI0lZffgvnAm6rLMKnppzx/cu2CCDzuVNdlWbZUhROFE8 fTFFGXGuHqzkVbNnU62NCmIx7qcl2OY4+QoIusXPUHcxDFMABQaCnxgoHYTBa/zZ L/TqG6PROLJDezC7PxbgMD03XwVW/antYprJXA+ftwpmF0RfuDkRMEIILM0bxEMc 1x/UE11mm+84rg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:13 2025 by rpki-client