This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json) Hash identifier: mEmV1G3XH+1H5iwVYLEGRBb9EABNcBjRq0YTw7mlBoA= Subject key identifier: 66:16:11:B1:F5:C0:4E:69:F1:72:56:CF:CC:03:76:FA:69:6D:66:56 Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e Certificate serial: 019AF0F5F3DCEBC722E72E44B80E9C9A8A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft Manifest number: 05CC Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: Wafu5_6TB8FPy-qQRyuoAEGDAX0.roa (hash: NgD/yDHNjwI5dLXtEOgTxi5zpKMG9LLhqvORpEaB0Qs=) 2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: C6gkpGj5XsRH0mNEgv0YWVS4Z6xMBhyXiWMnbr7dOys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f3:dc:eb:c7:22:e7:2e:44:b8:0e:9c:9a:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=661611b1f5c04e69f17256cfcc0376fa696d6656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:5f:20:50:2a:65:01:b1:a8:2b:1d:dd:37: cf:d0:80:e8:02:5e:f2:20:65:1c:d0:87:66:b3:06: 20:7d:7a:d3:e6:0f:0f:3f:ab:c7:72:ac:89:1f:16: 35:1a:e1:f9:07:7d:55:95:ea:84:31:6a:4f:dc:d5: 77:f9:c9:35:fc:6e:cc:c9:ff:e4:93:cd:14:72:74: 59:e0:21:5d:26:02:0c:77:d9:ca:3b:85:a1:55:a5: 05:85:80:bb:da:ab:4d:a6:88:ab:35:eb:54:4e:06: 14:fa:99:e5:78:93:c6:0b:62:ef:fd:ca:88:a9:cc: e4:e2:62:36:b2:8d:07:26:60:ff:0e:4d:84:37:0d: e8:8e:96:af:34:48:e2:96:07:22:32:7f:dd:6a:e9: 9f:2b:0f:da:f3:9a:a0:26:c8:4d:98:c3:63:68:dd: 68:0e:7d:39:c4:59:cd:de:fa:3a:c8:6f:07:c8:b1: e7:0f:94:7a:e4:a3:a7:3c:df:fb:af:57:ee:6e:8c: 0f:71:19:85:b1:96:42:7f:a6:b6:8f:c8:8a:36:e6: 2c:1f:6e:a4:f5:fe:7d:69:7a:c7:db:b1:f2:f3:f3: 7d:7c:d9:9c:b1:b2:8c:48:c5:72:3d:d1:6c:30:0d: f4:8d:78:c4:ff:e3:20:a3:00:2e:cf:11:b6:d0:a6: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:16:11:B1:F5:C0:4E:69:F1:72:56:CF:CC:03:76:FA:69:6D:66:56 X509v3 Authority Key Identifier: keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:35:e1:42:10:07:27:a7:8f:a8:a3:ca:c9:d7:47:34:07:23: 30:b6:38:d9:76:03:60:e2:3a:44:04:8d:ed:26:19:ba:58:0b: 94:9e:c9:13:0a:fb:9b:7c:bd:b7:b7:2c:19:21:0f:54:00:a1: c1:15:61:87:fb:7c:a1:c8:ec:d9:e0:94:58:53:4e:f2:58:38: 4c:c7:db:4a:23:79:2c:ed:19:9c:c0:ce:55:fc:89:d5:00:c8: 6d:04:b2:4f:79:42:b9:5c:87:c2:dc:6f:e4:35:eb:48:5c:3e: c3:8a:6b:24:6e:28:b4:39:13:23:c8:79:91:32:ea:87:0d:bc: 36:26:17:cd:db:25:86:03:a8:d2:64:1a:f3:e7:13:c1:74:79: 68:34:11:78:15:65:6f:cd:77:7b:0e:d6:eb:92:99:0d:50:1c: 7b:d6:b3:92:4c:42:77:18:4e:8e:5f:9f:a5:ab:47:7a:8c:4e: 18:cd:67:c1:ce:40:58:0e:6b:4e:b4:57:d6:5d:b4:f1:ae:c5: 0e:ff:e2:66:3a:30:37:ed:9b:2f:da:fc:21:08:88:37:73:96: 08:ef:b9:f6:2c:7d:3e:23:6e:18:c7:91:70:00:a3:c3:98:c4: 98:f3:04:03:a5:35:f5:a8:04:4a:88:e4:1d:e6:f1:d7:aa:68: 18:bf:e4:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fPc68ci5y5EuA6cmopUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTY4YjEyMjM0YmQ3MDM0MzAxYmM5NmIxMzhhYWUyNzc4 NjBhM2UwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD Eyg2NjE2MTFiMWY1YzA0ZTY5ZjE3MjU2Y2ZjYzAzNzZmYTY5NmQ2NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFhfIFAqZQGxqCsd3TfP0IDoAl7y IGUc0IdmswYgfXrT5g8PP6vHcqyJHxY1GuH5B31VleqEMWpP3NV3+ck1/G7Myf/k k80UcnRZ4CFdJgIMd9nKO4WhVaUFhYC72qtNpoirNetUTgYU+pnleJPGC2Lv/cqI qczk4mI2so0HJmD/Dk2ENw3ojpavNEjilgciMn/daumfKw/a85qgJshNmMNjaN1o Dn05xFnN3vo6yG8HyLHnD5R65KOnPN/7r1fubowPcRmFsZZCf6a2j8iKNuYsH26k 9f59aXrH27Hy8/N9fNmcsbKMSMVyPdFsMA30jXjE/+MgowAuzxG20KaNGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYWEbH1wE5p8XJWz8wDdvppbWZWMB8GA1UdIwQY MBaAFH/mixIjS9cDQwG8lrE4quJ3hgo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2Mt MmZhMjYzMWJjMzFjLzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2MtMmZhMjYzMWJjMzFj LzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzXhQhAH J6ePqKPKyddHNAcjMLY42XYDYOI6RASN7SYZulgLlJ7JEwr7m3y9t7csGSEPVACh wRVhh/t8ocjs2eCUWFNO8lg4TMfbSiN5LO0ZnMDOVfyJ1QDIbQSyT3lCuVyHwtxv 5DXrSFw+w4prJG4otDkTI8h5kTLqhw28NiYXzdslhgOo0mQa8+cTwXR5aDQReBVl b813ew7W65KZDVAce9azkkxCdxhOjl+fpatHeoxOGM1nwc5AWA5rTrRX1l208a7F Dv/iZjowN+2bL9r8IQiIN3OWCO+59ix9PiNuGMeRcACjw5jEmPMEA6U19agESojk Hebx16poGL/kcA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:30 2025 by rpki-client