This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft File: fa57XJowGYvXF4tIuF8LIhpeHrc.mft (raw, json) Hash identifier: rSG1OdXSUhHA6K6NuziUSxcJc1FRzUsq+oiCTx7JEAc= Subject key identifier: 2A:E4:28:D6:61:0F:19:F6:78:C3:B2:19:5F:D3:A7:7B:8A:7A:D5:68 Authority key identifier: 7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7 Certificate issuer: /CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7 Certificate serial: 019AF19B2BD2975CEA675E04F8022EC432EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft Manifest number: 0C28 Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: c0Cf6YCbscr3sGW2nWgoXFY8xps.roa (hash: 5gRboI0NrXJxmfngbqENdfvUiQ0ds61NdsYGIZfYOOU=) 2: fa57XJowGYvXF4tIuF8LIhpeHrc.crl (hash: rc3cXuAMASTCyjOS35iaT4ulWCV+ekuVzj4c/mFXocc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2b:d2:97:5c:ea:67:5e:04:f8:02:2e:c4:32:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dae7b5c9a30198bd7178b48b85f0b221a5e1eb7 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=2ae428d6610f19f678c3b2195fd3a77b8a7ad568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:91:80:72:d0:5e:df:82:f9:38:c6:e5:ee:c6: df:2a:41:49:d3:5d:5a:00:63:4d:7a:f5:7e:77:f0: c2:05:04:33:4d:2a:3a:b9:85:39:ae:f9:59:bb:00: a5:e9:2a:20:3f:e6:df:a1:94:a0:f6:c5:7a:1a:c8: 63:3a:36:f9:00:3f:4d:98:67:0e:9c:e2:d8:3a:56: 7b:e1:65:bb:7c:ef:13:55:2d:86:0b:3b:0d:6e:86: e8:9c:96:be:2c:b2:a6:43:0f:52:ac:1b:15:d9:52: 98:21:d5:f5:6c:b4:94:b2:20:8f:e1:1b:9b:72:7c: e9:40:7c:e5:4b:6b:be:e7:61:db:c0:70:b0:55:13: 84:d2:05:ea:b1:df:8f:b4:8c:c2:73:9a:7d:84:4b: 20:91:9d:e3:d2:1f:93:b1:a7:be:13:8d:14:4b:c5: 19:c1:62:5f:22:d1:18:df:b9:95:45:a0:e5:81:75: 14:e8:5e:16:04:8c:8d:e6:aa:3d:ac:a2:6b:85:0a: 7f:cb:a1:02:70:e3:03:5c:00:9b:7f:aa:3e:f8:2e: d6:df:57:91:88:03:7e:b4:77:e6:48:0c:78:c9:69: da:52:f1:95:1f:c2:c8:2b:7b:9d:af:e9:5c:b8:50: ba:3c:28:9e:d9:12:bc:1e:9f:81:7f:a2:f9:67:f5: 1b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:28:D6:61:0F:19:F6:78:C3:B2:19:5F:D3:A7:7B:8A:7A:D5:68 X509v3 Authority Key Identifier: keyid:7D:AE:7B:5C:9A:30:19:8B:D7:17:8B:48:B8:5F:0B:22:1A:5E:1E:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa57XJowGYvXF4tIuF8LIhpeHrc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/dec50d-ee3a-4584-a591-429d668d9228/1/fa57XJowGYvXF4tIuF8LIhpeHrc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8b:e5:83:98:d2:18:13:41:e3:4b:00:ce:eb:d5:ca:92:77: db:3b:d5:5d:c1:e2:7a:0d:20:6b:76:92:b0:4a:cc:d8:91:fb: 9b:dc:4b:c2:71:f7:f8:4e:0f:aa:a7:bc:8a:df:96:f2:be:65: 9c:b5:44:20:c4:ee:e6:3b:a2:aa:64:5e:6b:d3:e7:af:26:a6: fe:43:6f:f4:a4:ec:64:0e:f9:93:fc:98:cb:4a:78:4c:69:fd: 0b:8f:39:66:89:dc:35:fc:46:02:43:e0:dd:15:af:d9:80:43: c2:b1:7a:52:f7:44:76:e4:1b:f5:09:e3:cb:12:84:28:34:d7: 14:42:a7:c3:25:a9:a4:59:fc:16:ce:10:27:93:96:70:f5:68: be:9c:62:13:e4:7f:74:fb:37:35:a5:dc:1d:d6:39:50:0e:39: 29:e8:4b:99:08:ab:db:ce:b6:8d:e2:cd:4b:98:6c:5d:99:3c: 88:2b:d5:dc:45:95:e9:93:a8:2e:84:a3:14:d5:41:5d:4c:c4: a6:05:8c:68:f2:18:29:d9:a4:af:7d:60:ca:19:22:8f:0a:32: ff:74:8a:c9:7d:85:9e:9d:b7:6e:92:4f:a5:51:b8:5c:c7:6e: 1b:c9:c0:79:48:15:2b:ca:9e:a6:99:9b:c3:67:a6:1c:80:b2: bd:c3:86:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyvSl1zqZ14E+AIuxDLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYWU3YjVjOWEzMDE5OGJkNzE3OGI0OGI4NWYwYjIyMWE1 ZTFlYjcwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD EygyYWU0MjhkNjYxMGYxOWY2NzhjM2IyMTk1ZmQzYTc3YjhhN2FkNTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJGActBe34L5OMbl7sbfKkFJ011a AGNNevV+d/DCBQQzTSo6uYU5rvlZuwCl6SogP+bfoZSg9sV6GshjOjb5AD9NmGcO nOLYOlZ74WW7fO8TVS2GCzsNbobonJa+LLKmQw9SrBsV2VKYIdX1bLSUsiCP4Rub cnzpQHzlS2u+52HbwHCwVROE0gXqsd+PtIzCc5p9hEsgkZ3j0h+Tsae+E40US8UZ wWJfItEY37mVRaDlgXUU6F4WBIyN5qo9rKJrhQp/y6ECcOMDXACbf6o++C7W31eR iAN+tHfmSAx4yWnaUvGVH8LIK3udr+lcuFC6PCie2RK8Hp+Bf6L5Z/UbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrkKNZhDxn2eMOyGV/Tp3uKetVoMB8GA1UdIwQY MBaAFH2ue1yaMBmL1xeLSLhfCyIaXh63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEt NDI5ZDY2OGQ5MjI4LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kZWM1MGQtZWUzYS00NTg0LWE1OTEtNDI5ZDY2OGQ5MjI4 LzEvZmE1N1hKb3dHWXZYRjR0SXVGOExJaHBlSHJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIvlg5jS GBNB40sAzuvVypJ32zvVXcHieg0ga3aSsErM2JH7m9xLwnH3+E4Pqqe8it+W8r5l nLVEIMTu5juiqmRea9Pnryam/kNv9KTsZA75k/yYy0p4TGn9C485ZoncNfxGAkPg 3RWv2YBDwrF6UvdEduQb9QnjyxKEKDTXFEKnwyWppFn8Fs4QJ5OWcPVovpxiE+R/ dPs3NaXcHdY5UA45KehLmQir2862jeLNS5hsXZk8iCvV3EWV6ZOoLoSjFNVBXUzE pgWMaPIYKdmkr31gyhkijwoy/3SKyX2Fnp23bpJPpVG4XMduG8nAeUgVK8qeppmb w2emHICyvcOGxg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:21 2025 by rpki-client