This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft File: frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft (raw, json) Hash identifier: JqWFQAbuHQfoUnjCux2fV2OiGs1r5ygqqDYhDg2EhBo= Subject key identifier: CC:27:03:51:AE:28:94:9F:B4:6F:8E:C4:BC:5E:2F:DB:88:92:F1:5F Authority key identifier: 7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 Certificate issuer: /CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Certificate serial: 019AF5E573725F38C3DDFFAB7B4E8549DE50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft Manifest number: 0B0A Signing time: Sat 06 Dec 2025 23:00:46 +0000 Manifest this update: Sat 06 Dec 2025 23:00:46 +0000 Manifest next update: Sun 07 Dec 2025 23:00:46 +0000 Files and hashes: 1: D2PvKy2Fh2cO6iDJdJDdwrPKV3Y.roa (hash: iOwjeX+ly9me24ya3PbZf2MmDFD7bpYOFi09vEBVm6M=) 2: frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl (hash: 2KOU6bXaZ68jWDMCXmmhJC4U5BFrD7vy6j281o5AU/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:73:72:5f:38:c3:dd:ff:ab:7b:4e:85:49:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92b38df197ca2cbae302693226b23f32a3f76 Validity Not Before: Dec 6 23:00:46 2025 GMT Not After : Dec 7 23:00:46 2025 GMT Subject: CN=cc270351ae28949fb46f8ec4bc5e2fdb8892f15f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c2:05:1e:cf:7a:13:f9:d0:37:cd:ee:67:d9: 64:0d:e4:6f:14:28:5e:73:47:5f:7d:14:56:e7:c5: 35:cd:ee:d4:d8:f3:7b:2e:74:ee:ac:f9:8a:6e:b1: b7:4d:a7:d8:d4:f4:48:07:17:88:c6:13:29:8d:5f: 69:03:2a:70:35:2c:c5:c1:06:64:b4:c6:af:00:7b: 43:99:53:fe:34:cf:4a:b7:4f:71:22:f2:04:09:f0: 00:a4:d3:66:94:18:5a:1e:bd:a3:6e:86:64:d6:7b: 0f:e5:1d:ea:80:e2:49:94:61:a5:c5:98:a4:fd:82: bf:9b:89:43:bd:7a:85:05:88:ce:8b:e3:f1:cb:f3: 48:12:a5:c5:48:14:9a:e6:f2:00:44:59:9c:c9:61: 37:36:53:53:78:d2:28:f2:a1:a5:c1:30:fc:97:6e: 73:96:cc:e4:38:22:93:f4:63:0c:44:55:9b:5c:4f: a9:bf:15:0e:bf:50:a9:45:53:ed:63:e8:42:eb:f5: 3a:24:06:24:f4:73:bf:7e:c0:e3:26:6f:2a:f7:3b: cb:81:6f:6c:55:eb:43:a5:92:5f:88:13:cb:b6:d6: f1:24:ef:0d:57:24:16:9b:26:f8:19:68:f0:12:31: 69:97:e1:b8:77:4a:32:05:d0:28:c6:d3:d5:30:02: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:27:03:51:AE:28:94:9F:B4:6F:8E:C4:BC:5E:2F:DB:88:92:F1:5F X509v3 Authority Key Identifier: keyid:7E:B9:2B:38:DF:19:7C:A2:CB:AE:30:26:93:22:6B:23:F3:2A:3F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frkrON8ZfKLLrjAmkyJrI_MqP3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/af4d63-9f58-4bbd-8d25-91d1a06863ae/1/frkrON8ZfKLLrjAmkyJrI_MqP3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6b:99:5c:4e:44:48:c3:e7:54:01:80:ac:da:2e:db:d7:e4: c6:6a:91:57:cd:8d:5a:35:c0:5e:2a:02:70:f9:23:e6:06:91: 9f:c8:ef:b5:3c:e8:c9:38:e0:ca:84:75:06:a1:91:a6:7e:b8: ea:c1:dc:c7:cc:88:ed:20:a5:93:e9:4d:35:f3:ac:de:d7:15: 1b:1d:16:ec:b6:a3:0d:ae:0c:bc:30:c6:84:3e:34:18:4d:a5: 19:11:dd:a0:44:90:0a:f8:12:38:71:dd:b1:fc:75:82:3c:ca: 50:68:c7:c2:09:24:0a:0f:5b:ed:f0:2c:96:34:5a:c0:23:41: 3f:df:01:f0:e1:03:f7:38:64:9d:25:40:be:bb:fa:a3:15:35: 32:89:a2:05:e5:2b:15:2d:21:03:cd:d5:17:e9:f3:12:28:c0: 6e:5c:1c:40:8b:c5:06:66:6f:62:d4:8d:2c:6a:f8:f0:7d:02: 6b:9d:43:32:cd:e9:fc:99:fb:98:50:46:d2:aa:b3:53:43:9e: f0:ed:b8:00:a0:84:9c:33:47:88:bf:c4:c8:ff:bd:a5:b8:02: a8:c5:42:1f:c6:cd:5d:c8:99:9e:7d:18:c8:9e:a9:89:91:0b: 85:12:7b:a0:df:cc:85:7f:b5:e8:da:64:b8:e0:4e:98:4e:17: 59:82:cd:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XNyXzjD3f+re06FSd5QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjkyYjM4ZGYxOTdjYTJjYmFlMzAyNjkzMjI2YjIzZjMy YTNmNzYwHhcNMjUxMjA2MjMwMDQ2WhcNMjUxMjA3MjMwMDQ2WjAzMTEwLwYDVQQD EyhjYzI3MDM1MWFlMjg5NDlmYjQ2ZjhlYzRiYzVlMmZkYjg4OTJmMTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsIFHs96E/nQN83uZ9lkDeRvFChe c0dffRRW58U1ze7U2PN7LnTurPmKbrG3TafY1PRIBxeIxhMpjV9pAypwNSzFwQZk tMavAHtDmVP+NM9Kt09xIvIECfAApNNmlBhaHr2jboZk1nsP5R3qgOJJlGGlxZik /YK/m4lDvXqFBYjOi+Pxy/NIEqXFSBSa5vIARFmcyWE3NlNTeNIo8qGlwTD8l25z lszkOCKT9GMMRFWbXE+pvxUOv1CpRVPtY+hC6/U6JAYk9HO/fsDjJm8q9zvLgW9s VetDpZJfiBPLttbxJO8NVyQWmyb4GWjwEjFpl+G4d0oyBdAoxtPVMAKX4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMwnA1GuKJSftG+OxLxeL9uIkvFfMB8GA1UdIwQY MBaAFH65KzjfGXyiy64wJpMiayPzKj92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUt OTFkMWEwNjg2M2FlLzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9hZjRkNjMtOWY1OC00YmJkLThkMjUtOTFkMWEwNjg2M2Fl LzEvZnJrck9OOFpmS0xMcmpBbWt5SnJJX01xUDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmuZXE5E SMPnVAGArNou29fkxmqRV82NWjXAXioCcPkj5gaRn8jvtTzoyTjgyoR1BqGRpn64 6sHcx8yI7SClk+lNNfOs3tcVGx0W7LajDa4MvDDGhD40GE2lGRHdoESQCvgSOHHd sfx1gjzKUGjHwgkkCg9b7fAsljRawCNBP98B8OED9zhknSVAvrv6oxU1MomiBeUr FS0hA83VF+nzEijAblwcQIvFBmZvYtSNLGr48H0Ca51DMs3p/Jn7mFBG0qqzU0Oe 8O24AKCEnDNHiL/EyP+9pbgCqMVCH8bNXciZnn0YyJ6piZELhRJ7oN/MhX+16Npk uOBOmE4XWYLNvQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:08:52 2025 by rpki-client