This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json) Hash identifier: 2RRpif9kazaKGV81Ja7uurNhOjNDplY2Hfi6SqjOUfw= Subject key identifier: DA:67:F5:9C:55:5C:D8:0E:DE:BD:67:42:4A:41:21:67:A8:F9:D9:35 Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f Certificate serial: 019B337B90EA9121D12F0A3FB8A42DF56C64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft Manifest number: 1009 Signing time: Thu 18 Dec 2025 22:01:34 +0000 Manifest this update: Thu 18 Dec 2025 22:01:34 +0000 Manifest next update: Fri 19 Dec 2025 22:01:34 +0000 Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: LXL0UQ7+E7c/UJHYC9nB657XyRkqhFQic0Rme3znKg4=) 2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:90:ea:91:21:d1:2f:0a:3f:b8:a4:2d:f5:6c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f Validity Not Before: Dec 18 22:01:34 2025 GMT Not After : Dec 19 22:01:34 2025 GMT Subject: CN=da67f59c555cd80edebd67424a412167a8f9d935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:14:3a:fc:66:dc:ac:f8:c7:94:a6:a9:50: 66:0f:ec:d5:f7:58:be:bf:28:7a:b0:d4:6a:68:79: ac:64:39:a3:5f:f5:01:00:77:66:cd:c4:e5:1c:4d: 1e:4a:77:0c:e3:b3:a6:47:ff:b0:fe:67:82:b3:34: ef:73:b1:a7:51:bb:d3:5c:25:2d:10:05:66:e4:74: a1:7e:7d:23:00:9d:d6:be:f9:fa:4a:3d:c0:33:c3: 59:9e:c7:3b:fa:ea:b6:f2:ce:7f:38:3c:ab:d9:57: 12:97:ee:9b:d0:37:76:b9:42:86:3c:6c:8f:96:2a: 56:37:69:01:f1:82:be:6c:81:ae:71:61:35:5f:23: f8:72:f7:37:3e:b0:56:22:6e:27:2f:2a:61:6f:5c: 2b:17:90:f3:ff:e2:8c:9d:9d:7d:d9:0a:80:17:9b: 20:e3:37:5a:74:23:ec:f1:6c:95:ac:86:5a:e6:07: 8a:eb:86:de:24:b5:c7:44:c8:ba:6c:9e:c9:32:d1: e0:9f:04:24:c6:cd:85:a0:f8:56:3c:a7:2a:2a:87: a9:d4:75:74:a3:31:92:9f:c8:c0:9c:c6:63:d8:25: 56:86:36:da:5b:58:f0:57:7c:cd:84:83:2b:9f:8f: 3b:5b:f7:fa:12:d7:df:7a:03:45:bb:a1:85:b3:3c: 56:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:67:F5:9C:55:5C:D8:0E:DE:BD:67:42:4A:41:21:67:A8:F9:D9:35 X509v3 Authority Key Identifier: keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:93:21:87:5b:f5:96:62:8d:4e:3a:f9:44:74:63:e6:af:bb: 2c:63:c1:f2:8f:20:ec:bb:bc:f4:a3:8f:1c:34:74:d0:e7:e8: 50:33:e0:cd:f4:fd:9c:56:6d:e2:dd:6a:d5:0a:84:83:10:ee: 1d:6f:01:bf:fa:c2:50:f4:1b:8b:42:32:4c:c7:37:54:3f:ff: 4a:d0:a3:f3:0f:13:86:db:2f:9b:57:3a:7f:06:df:9a:6b:7d: 4f:0d:79:94:be:60:69:36:d4:85:a5:5e:e9:a8:aa:9d:6f:9c: af:b4:bd:b3:57:ca:9c:8a:73:6a:0c:2b:0b:cb:99:19:08:67: 6d:53:e1:2c:0b:4f:e2:4f:0d:ce:5d:fc:56:12:af:7e:38:d4: d9:97:56:af:a5:68:2c:a1:c3:e0:dd:72:71:e5:a9:b8:3d:58: 55:48:f4:34:7f:3d:48:af:a6:68:cc:c1:6c:55:fb:6a:7a:53: b6:cf:b3:fc:4c:ea:d4:7f:0a:d1:e2:83:cd:58:39:51:32:1b: 16:c7:af:89:3c:44:71:84:e6:96:98:d9:ab:fd:b0:4f:93:74: d2:c3:d0:0a:79:47:f7:19:bf:b3:d1:4b:4a:75:35:da:aa:f5: fa:b5:e7:da:e1:d3:4b:e9:52:43:ba:fd:c4:af:48:c0:d2:19: 83:a2:00:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze5DqkSHRLwo/uKQt9WxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjIxNWFkMjc0ZjM1YjI0YWM2YTA2MGIyZjA5Mzk5NzEx YmMxN2YwHhcNMjUxMjE4MjIwMTM0WhcNMjUxMjE5MjIwMTM0WjAzMTEwLwYDVQQD EyhkYTY3ZjU5YzU1NWNkODBlZGViZDY3NDI0YTQxMjE2N2E4ZjlkOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha4UOvxm3Kz4x5SmqVBmD+zV91i+ vyh6sNRqaHmsZDmjX/UBAHdmzcTlHE0eSncM47OmR/+w/meCszTvc7GnUbvTXCUt EAVm5HShfn0jAJ3Wvvn6Sj3AM8NZnsc7+uq28s5/ODyr2VcSl+6b0Dd2uUKGPGyP lipWN2kB8YK+bIGucWE1XyP4cvc3PrBWIm4nLyphb1wrF5Dz/+KMnZ192QqAF5sg 4zdadCPs8WyVrIZa5geK64beJLXHRMi6bJ7JMtHgnwQkxs2FoPhWPKcqKoep1HV0 ozGSn8jAnMZj2CVWhjbaW1jwV3zNhIMrn487W/f6EtffegNFu6GFszxWBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpn9ZxVXNgO3r1nQkpBIWeo+dk1MB8GA1UdIwQY MBaAFBXyFa0nTzWySsagYLLwk5lxG8F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEt YWQwMWUzMGE2MWIyLzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS85M2UyMGYtODg3OC00MDU4LThlMDEtYWQwMWUzMGE2MWIy LzEvRmZJVnJTZFBOYkpLeHFCZ3N2Q1RtWEVid1g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipMhh1v1 lmKNTjr5RHRj5q+7LGPB8o8g7Lu89KOPHDR00OfoUDPgzfT9nFZt4t1q1QqEgxDu HW8Bv/rCUPQbi0IyTMc3VD//StCj8w8Thtsvm1c6fwbfmmt9Tw15lL5gaTbUhaVe 6aiqnW+cr7S9s1fKnIpzagwrC8uZGQhnbVPhLAtP4k8Nzl38VhKvfjjU2ZdWr6Vo LKHD4N1yceWpuD1YVUj0NH89SK+maMzBbFX7anpTts+z/Ezq1H8K0eKDzVg5UTIb FseviTxEcYTmlpjZq/2wT5N00sPQCnlH9xm/s9FLSnU12qr1+rXn2uHTS+lSQ7r9 xK9IwNIZg6IABw== -----END CERTIFICATE-----Generated at Fri Dec 19 06:18:41 2025 by rpki-client