This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft File: ffCJfqs-7W4k7d1nbov5N3-0SAw.mft (raw, json) Hash identifier: vo3vybF2ktdnIIoBC7QbzWfnkYKqUeFf8KrZyIOptPE= Subject key identifier: 32:0F:86:B0:7C:00:F4:05:62:9A:E1:F3:9C:DF:4D:E6:FC:6E:F5:02 Authority key identifier: 7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C Certificate issuer: /CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c Certificate serial: 019AF16476A4E88CA6B5B65204DB1DCFAE21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft Manifest number: 0850 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: ffCJfqs-7W4k7d1nbov5N3-0SAw.crl (hash: wpRXmK4RrubLZcdNU4UlBIZaP2Ja+1gVYyCS3GqbbHI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:76:a4:e8:8c:a6:b5:b6:52:04:db:1d:cf:ae:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df0897eab3eed6e24eddd676e8bf9377fb4480c Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=320f86b07c00f405629ae1f39cdf4de6fc6ef502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:6f:0e:98:43:2f:ab:84:21:8e:00:af:b1: 10:3b:ba:3b:9a:e6:00:30:f4:d0:c7:b0:08:80:1c: 55:a5:94:ec:e3:d8:ff:5a:eb:99:39:c2:c1:b4:51: ae:78:ca:cd:3b:2e:ea:44:61:6e:c3:be:6d:cc:d7: 51:36:52:fe:a1:96:5d:af:ed:94:ce:70:d6:62:e3: d1:f7:bc:3d:0c:b3:a4:e9:f8:26:37:11:46:ed:c7: e3:a0:11:d1:c6:69:8a:06:62:e2:0e:d9:06:04:ec: 4e:7e:0d:3b:bd:5a:24:09:4a:cf:6e:84:df:3e:81: 4a:9f:e3:ca:95:bb:ca:a1:93:0d:6c:48:b6:6e:79: b0:33:1b:8f:5f:73:21:86:4c:f2:0b:fb:36:a9:05: 45:4d:da:28:2d:78:8d:02:e3:46:af:af:4b:ff:6a: 7c:a5:1a:d6:77:a4:dc:02:77:01:da:04:90:89:a0: 63:76:9a:4c:68:9d:cc:b7:fc:e5:79:1d:c5:c0:e5: 7c:5b:70:d1:ba:df:21:7b:59:14:6f:d7:86:6f:bf: 80:90:1b:21:a7:05:34:1e:e1:d8:fa:c3:df:20:7f: 18:2f:70:a0:d7:d9:56:74:4e:c0:34:df:ec:45:26: a2:ca:91:78:0d:18:37:98:ae:08:69:10:f2:3f:64: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:86:B0:7C:00:F4:05:62:9A:E1:F3:9C:DF:4D:E6:FC:6E:F5:02 X509v3 Authority Key Identifier: keyid:7D:F0:89:7E:AB:3E:ED:6E:24:ED:DD:67:6E:8B:F9:37:7F:B4:48:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffCJfqs-7W4k7d1nbov5N3-0SAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3925e9-65ea-462e-ae28-d2c29dc042e7/1/ffCJfqs-7W4k7d1nbov5N3-0SAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:a1:54:1e:41:db:1b:37:55:ac:fa:8c:3a:d5:32:7c:4b: 4c:d7:40:21:e1:d2:a1:6e:6b:76:d3:54:72:b5:21:81:d1:91: 16:be:4c:82:82:55:59:f9:bb:68:da:67:02:f1:4f:91:ec:9c: 67:eb:5a:f9:50:c9:af:c2:1e:d8:1e:d2:d3:2a:d8:de:7a:f2: 75:8e:06:18:29:d6:6c:34:e4:60:f2:de:6d:57:82:06:58:aa: c0:3c:84:d1:6c:79:29:a1:1c:05:56:c2:10:34:4a:27:df:ac: 3f:8b:7e:f7:7c:a4:09:06:8e:0b:a5:d4:a6:01:28:34:e0:c6: f8:be:8e:70:01:b8:17:62:21:b8:d8:7d:f9:43:fc:b7:55:bf: 0a:ba:fb:83:27:c8:7e:fa:74:1a:4b:08:c2:c2:4e:ed:c6:56: f2:d3:ef:59:de:a0:b9:10:d6:89:0d:65:7b:42:0c:32:e5:b3: 8d:80:60:30:f8:31:1b:c0:ee:f5:f3:5b:24:f3:6a:94:cc:c6: 7f:4c:24:83:31:76:c2:2f:a3:67:bb:ff:e2:f9:fd:c6:00:2f: 6f:ef:c6:c3:3b:7b:73:2a:3e:34:4b:31:9f:c8:d2:f0:fd:7f: f6:59:be:51:b0:39:53:f1:85:27:57:41:a3:33:23:1e:e6:66: 7d:9c:e1:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHak6IymtbZSBNsdz64hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjA4OTdlYWIzZWVkNmUyNGVkZGQ2NzZlOGJmOTM3N2Zi NDQ4MGMwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygzMjBmODZiMDdjMDBmNDA1NjI5YWUxZjM5Y2RmNGRlNmZjNmVmNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8tvDphDL6uEIY4Ar7EQO7o7muYA MPTQx7AIgBxVpZTs49j/WuuZOcLBtFGueMrNOy7qRGFuw75tzNdRNlL+oZZdr+2U znDWYuPR97w9DLOk6fgmNxFG7cfjoBHRxmmKBmLiDtkGBOxOfg07vVokCUrPboTf PoFKn+PKlbvKoZMNbEi2bnmwMxuPX3MhhkzyC/s2qQVFTdooLXiNAuNGr69L/2p8 pRrWd6TcAncB2gSQiaBjdppMaJ3Mt/zleR3FwOV8W3DRut8he1kUb9eGb7+AkBsh pwU0HuHY+sPfIH8YL3Cg19lWdE7ANN/sRSaiypF4DRg3mK4IaRDyP2QhJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIPhrB8APQFYprh85zfTeb8bvUCMB8GA1UdIwQY MBaAFH3wiX6rPu1uJO3dZ26L+Td/tEgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zOTI1ZTktNjVlYS00NjJlLWFlMjgt ZDJjMjlkYzA0MmU3LzEvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zOTI1ZTktNjVlYS00NjJlLWFlMjgtZDJjMjlkYzA0MmU3 LzEvZmZDSmZxcy03VzRrN2QxbmJvdjVOMy0wU0F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt6hVB5B 2xs3Vaz6jDrVMnxLTNdAIeHSoW5rdtNUcrUhgdGRFr5MgoJVWfm7aNpnAvFPkeyc Z+ta+VDJr8Ie2B7S0yrY3nrydY4GGCnWbDTkYPLebVeCBliqwDyE0Wx5KaEcBVbC EDRKJ9+sP4t+93ykCQaOC6XUpgEoNODG+L6OcAG4F2IhuNh9+UP8t1W/Crr7gyfI fvp0GksIwsJO7cZW8tPvWd6guRDWiQ1le0IMMuWzjYBgMPgxG8Du9fNbJPNqlMzG f0wkgzF2wi+jZ7v/4vn9xgAvb+/Gwzt7cyo+NEsxn8jS8P1/9lm+UbA5U/GFJ1dB ozMjHuZmfZzhDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:16 2025 by rpki-client