This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft File: fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft (raw, json) Hash identifier: gPyXk1K0g+5Nnkl9mLg1rTqff9+33Vl1OKGziZ6MP6o= Subject key identifier: BC:93:7A:73:40:00:34:09:E6:96:1D:FB:38:72:E2:66:94:48:65:AD Authority key identifier: 7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC Certificate issuer: /CN=7d378d5e9f6e22832f9436de42a00003a35e5adc Certificate serial: 019AF31C895BBFBD1DB46493EE1A3D0C48AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft Manifest number: 083B Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: Jd1eIDGJl1QDh5fslVgvr-P3ab4.roa (hash: 9NueyDXROvnNhsWjg24Z8AlYJzokwM8j1MgR7VDXl1s=) 2: fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl (hash: cV5kNoBngeBcl7uIxfduF+6bQM/Jylndmg1Jy8JtsM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:89:5b:bf:bd:1d:b4:64:93:ee:1a:3d:0c:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d378d5e9f6e22832f9436de42a00003a35e5adc Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=bc937a7340003409e6961dfb3872e266944865ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2c:5d:c4:40:1f:a9:76:c1:3f:17:8a:9d:4f: 64:2b:4a:5f:ef:dc:9f:5d:a5:80:71:06:87:a8:09: 6e:54:38:ff:b6:39:25:8b:78:12:68:95:27:bd:13: 03:17:d0:c6:9b:84:b9:89:7c:ea:5a:04:4a:b9:10: 2a:2d:36:4e:a4:c7:34:3d:b6:68:30:ca:60:b2:f8: 5d:10:ef:26:14:f5:62:f5:97:29:64:0d:40:0c:2d: 44:4c:e3:e3:6f:69:a4:02:e9:d5:68:41:2d:e1:61: bd:4d:6f:86:d1:c3:1f:84:2c:04:1d:07:b7:b8:e1: 3c:b1:f4:44:09:fd:ed:0b:51:0e:7b:b5:0d:b3:8c: 27:a1:82:9c:29:f7:40:5d:dd:d8:aa:c3:68:c0:b6: f3:1d:84:13:60:5e:20:eb:20:cb:49:df:43:72:2e: b1:4d:2e:41:de:01:28:58:45:e3:46:3e:f7:97:5f: f7:82:83:c6:ad:f7:de:e2:3a:2f:98:ce:6f:62:44: 5a:ed:50:a4:3c:a9:e8:02:d8:5d:1a:93:5f:af:92: fa:6f:79:36:72:ba:aa:ff:a2:71:33:3b:cc:85:e7: 5c:6d:66:91:e8:35:7a:c7:f8:95:b8:f9:83:43:6b: 45:6a:3e:96:0f:85:29:ff:77:0b:25:9c:03:3a:b6: 9b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:7A:73:40:00:34:09:E6:96:1D:FB:38:72:E2:66:94:48:65:AD X509v3 Authority Key Identifier: keyid:7D:37:8D:5E:9F:6E:22:83:2F:94:36:DE:42:A0:00:03:A3:5E:5A:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTeNXp9uIoMvlDbeQqAAA6NeWtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4b5c58-5e8e-4c97-b7c0-64089f22826b/1/fTeNXp9uIoMvlDbeQqAAA6NeWtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:09:e2:65:05:a1:dd:63:a1:1f:fd:f2:9d:e5:6b:3a:08:62: 63:3c:ef:03:1f:f2:f4:04:8d:76:5d:ee:40:39:a7:ae:0d:5d: 53:7d:4e:95:67:3d:c8:ab:cd:bc:99:30:ea:23:4f:0b:06:86: 3a:dd:59:f3:6e:c4:73:dc:68:d7:01:50:47:57:06:87:58:1b: 85:fb:62:fd:a1:66:cb:6f:3a:2f:81:46:54:00:67:ec:09:08: 02:75:5f:ac:a5:8b:ca:b0:4a:9f:7c:24:27:16:d8:b4:3d:8d: 68:a0:ab:af:62:01:cb:c7:f9:fa:da:ea:94:85:f6:0f:81:e8: 15:ef:f6:d9:00:6b:c3:5d:af:f9:f8:93:c0:ab:e5:38:11:6c: ad:7b:d2:3e:41:dc:4b:9a:07:11:79:6c:bb:f7:83:15:83:5b: a3:85:db:d5:10:99:32:da:a2:98:86:d3:30:5b:7f:22:6d:0b: e7:f8:73:03:49:19:2c:55:b3:f1:ae:5e:45:f7:46:af:e8:18: 67:4b:d4:03:19:ab:c7:52:61:76:08:c7:6b:84:87:61:cf:c2: 0d:96:b2:e8:19:56:e4:27:f2:2b:df:83:cb:13:ce:31:0f:99: 11:00:5d:51:6b:37:f1:56:cd:f7:73:59:b1:35:d3:d4:af:73: 12:26:5f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIlbv70dtGST7ho9DEirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzc4ZDVlOWY2ZTIyODMyZjk0MzZkZTQyYTAwMDAzYTM1 ZTVhZGMwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD EyhiYzkzN2E3MzQwMDAzNDA5ZTY5NjFkZmIzODcyZTI2Njk0NDg2NWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyxdxEAfqXbBPxeKnU9kK0pf79yf XaWAcQaHqAluVDj/tjkli3gSaJUnvRMDF9DGm4S5iXzqWgRKuRAqLTZOpMc0PbZo MMpgsvhdEO8mFPVi9ZcpZA1ADC1ETOPjb2mkAunVaEEt4WG9TW+G0cMfhCwEHQe3 uOE8sfRECf3tC1EOe7UNs4wnoYKcKfdAXd3YqsNowLbzHYQTYF4g6yDLSd9Dci6x TS5B3gEoWEXjRj73l1/3goPGrffe4jovmM5vYkRa7VCkPKnoAthdGpNfr5L6b3k2 crqq/6JxMzvMhedcbWaR6DV6x/iVuPmDQ2tFaj6WD4Up/3cLJZwDOrabxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyTenNAADQJ5pYd+zhy4maUSGWtMB8GA1UdIwQY MBaAFH03jV6fbiKDL5Q23kKgAAOjXlrcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAt NjQwODlmMjI4MjZiLzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80YjVjNTgtNWU4ZS00Yzk3LWI3YzAtNjQwODlmMjI4MjZi LzEvZlRlTlhwOXVJb012bERiZVFxQUFBNk5lV3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgniZQWh 3WOhH/3yneVrOghiYzzvAx/y9ASNdl3uQDmnrg1dU31OlWc9yKvNvJkw6iNPCwaG Ot1Z827Ec9xo1wFQR1cGh1gbhfti/aFmy286L4FGVABn7AkIAnVfrKWLyrBKn3wk JxbYtD2NaKCrr2IBy8f5+trqlIX2D4HoFe/22QBrw12v+fiTwKvlOBFsrXvSPkHc S5oHEXlsu/eDFYNbo4Xb1RCZMtqimIbTMFt/Im0L5/hzA0kZLFWz8a5eRfdGr+gY Z0vUAxmrx1JhdgjHa4SHYc/CDZay6BlW5CfyK9+DyxPOMQ+ZEQBdUWs38VbN93NZ sTXT1K9zEiZfIA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:23 2025 by rpki-client