This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft File: fewnmwUBcwaYowvNzqOuR3yVczE.mft (raw, json) Hash identifier: ZChjcXQJq23fTZvllFn3z2DuSKOvgVMC6i6Upi9obhE= Subject key identifier: 64:E9:49:BB:37:51:F0:CC:61:1E:E2:04:1A:C3:A0:8F:45:93:BD:85 Authority key identifier: 7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31 Certificate issuer: /CN=7dec279b0501730698a30bcdcea3ae477c957331 Certificate serial: 019AF3895FE3B9AD9B4F92AA98BAE6B60A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: 8vkkegr96IBMHB6BFhag_SmFnOI.roa (hash: h5/oEq8rbYbckXXTNVYfhI/okuKJEZpt0WvLrdLeyGw=) 2: fewnmwUBcwaYowvNzqOuR3yVczE.crl (hash: en6JjpmJIjf1WNv7c6V//Xemd6G8TfU/UU4FlYy9QLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5f:e3:b9:ad:9b:4f:92:aa:98:ba:e6:b6:0a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dec279b0501730698a30bcdcea3ae477c957331 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=64e949bb3751f0cc611ee2041ac3a08f4593bd85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:8e:2d:14:b4:3c:b3:49:66:06:fc:f2:99: fa:a1:fd:14:b3:95:01:9b:a9:3a:c1:75:66:4e:91: 43:ec:70:8b:9b:d2:8c:95:09:f6:8a:dd:90:06:d2: 3a:ec:c3:0a:ac:d4:69:b0:85:c6:af:f3:15:2a:b2: 76:1c:fd:98:dc:f8:99:28:5a:fb:2a:0d:34:1c:80: db:cc:2f:32:48:b2:ee:8d:91:6c:39:4f:26:5c:e7: fb:d6:1b:61:7b:37:9e:3e:9c:9b:db:38:4c:84:b7: d7:2e:82:d5:ad:93:f5:bb:c1:63:30:cc:5d:fb:52: e0:6c:2f:2f:d7:60:3f:37:97:77:30:14:78:52:44: 36:31:05:ea:69:62:86:8a:b8:65:9a:84:aa:0d:12: 88:c2:82:f6:01:19:a2:0c:3b:a2:b9:56:c6:0b:69: 5d:c7:cd:4e:51:b2:2b:55:4f:be:71:15:02:d1:99: 04:67:8a:88:67:e4:2f:06:8a:03:d3:d4:ec:4c:bc: a1:79:f5:67:d9:80:e6:13:f1:68:bb:0c:a8:c9:31: ef:81:02:d7:4a:0a:8f:ab:32:07:50:44:94:c0:03: 87:8c:fd:97:f9:64:f5:1e:96:64:9d:8a:3a:51:52: 89:b4:07:6b:dd:2b:f7:0a:5a:e5:20:f5:41:43:9f: 3d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E9:49:BB:37:51:F0:CC:61:1E:E2:04:1A:C3:A0:8F:45:93:BD:85 X509v3 Authority Key Identifier: keyid:7D:EC:27:9B:05:01:73:06:98:A3:0B:CD:CE:A3:AE:47:7C:95:73:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fewnmwUBcwaYowvNzqOuR3yVczE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/deb97b-def1-4646-a5ed-d89e641183f3/1/fewnmwUBcwaYowvNzqOuR3yVczE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:95:bf:c5:1c:da:3e:35:d3:23:e0:5b:e9:74:82:fa:ee: a4:05:e9:b3:17:a0:5c:df:bd:46:e8:7e:cb:43:ac:3b:b3:62: f9:df:8a:da:07:4d:1c:20:0d:fb:4c:9b:a4:7f:91:4a:ac:c0: 73:b2:a9:e1:c9:41:61:fd:b3:b5:48:28:ea:2f:66:48:77:7b: 44:82:e5:73:b8:ca:04:6a:48:97:15:ec:fa:c2:15:cd:29:99: 03:c3:ae:6d:df:06:74:64:3b:a1:e8:10:f7:3b:2d:60:24:38: af:4c:8d:dc:a9:03:11:8f:68:3d:2e:4c:1a:35:f9:ec:dd:28: 45:2c:00:0c:5d:54:a8:9f:a4:67:91:21:d8:15:9a:35:c1:95: 5f:87:7f:20:05:5e:08:50:d5:2d:f9:39:58:ba:93:ae:25:6d: dc:ba:d1:c8:38:df:27:16:3c:35:67:59:7c:99:27:b5:14:70: 84:f2:be:42:9d:bf:1f:d4:e1:f4:f9:ce:80:af:b6:10:a5:c9: 3c:c8:8d:f1:35:7c:d3:a9:9b:88:e8:82:b6:d8:0e:c8:ef:3f: 9c:1e:8c:d7:70:c5:73:5e:35:7e:16:f4:d9:e3:c9:54:30:79: 08:79:a6:a5:10:81:35:7e:fb:a0:c1:53:3b:06:68:f7:2b:21: b6:12:ec:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV/jua2bT5KqmLrmtgpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWMyNzliMDUwMTczMDY5OGEzMGJjZGNlYTNhZTQ3N2M5 NTczMzEwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD Eyg2NGU5NDliYjM3NTFmMGNjNjExZWUyMDQxYWMzYTA4ZjQ1OTNiZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk56OLRS0PLNJZgb88pn6of0Us5UB m6k6wXVmTpFD7HCLm9KMlQn2it2QBtI67MMKrNRpsIXGr/MVKrJ2HP2Y3PiZKFr7 Kg00HIDbzC8ySLLujZFsOU8mXOf71hthezeePpyb2zhMhLfXLoLVrZP1u8FjMMxd +1LgbC8v12A/N5d3MBR4UkQ2MQXqaWKGirhlmoSqDRKIwoL2ARmiDDuiuVbGC2ld x81OUbIrVU++cRUC0ZkEZ4qIZ+QvBooD09TsTLyhefVn2YDmE/FouwyoyTHvgQLX SgqPqzIHUESUwAOHjP2X+WT1HpZknYo6UVKJtAdr3Sv3ClrlIPVBQ589WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTpSbs3UfDMYR7iBBrDoI9Fk72FMB8GA1UdIwQY MBaAFH3sJ5sFAXMGmKMLzc6jrkd8lXMxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQt ZDg5ZTY0MTE4M2YzLzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kZWI5N2ItZGVmMS00NjQ2LWE1ZWQtZDg5ZTY0MTE4M2Yz LzEvZmV3bm13VUJjd2FZb3d2TnpxT3VSM3lWY3pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/SVv8Uc 2j410yPgW+l0gvrupAXpsxegXN+9Ruh+y0OsO7Ni+d+K2gdNHCAN+0ybpH+RSqzA c7Kp4clBYf2ztUgo6i9mSHd7RILlc7jKBGpIlxXs+sIVzSmZA8Oubd8GdGQ7oegQ 9zstYCQ4r0yN3KkDEY9oPS5MGjX57N0oRSwADF1UqJ+kZ5Eh2BWaNcGVX4d/IAVe CFDVLfk5WLqTriVt3LrRyDjfJxY8NWdZfJkntRRwhPK+Qp2/H9Th9PnOgK+2EKXJ PMiN8TV806mbiOiCttgOyO8/nB6M13DFc141fhb02ePJVDB5CHmmpRCBNX77oMFT OwZo9yshthLs4A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:21 2025 by rpki-client