This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json) Hash identifier: nm+duIr5EQlhmyzxA48qcpcCwHIC/8rbDJ2lGsa9TiQ= Subject key identifier: FA:2B:AD:CE:25:24:51:DA:09:F6:95:91:76:95:E3:9E:0C:F9:48:BD Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f Certificate serial: 019AF1D25608282BA9D4C2AD51800CF35633 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft Manifest number: 05BC Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 1-irVsmvhgC9shKeonnyDEPMDuh0.roa (hash: 1FiwJeXR31pl2bxgdy1T8oVV/E4LsfaNte1AvGr9OZg=) 2: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: d20fBfpWAqK8gehM1VCAhnaYRDSELVxcqJpxIwzzQj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:56:08:28:2b:a9:d4:c2:ad:51:80:0c:f3:56:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=fa2badce252451da09f695917695e39e0cf948bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:0f:a4:07:9b:fb:1c:8a:38:ef:89:a4:55: 9c:12:2f:99:44:b8:57:17:92:fa:67:9d:4f:e9:a9: 63:dd:ea:4c:6d:66:48:4f:af:52:4e:01:1c:5b:92: 05:78:ba:02:71:58:6c:41:ad:6d:f5:1e:e3:07:90: 2a:43:39:d8:fb:d7:cf:d2:06:eb:85:fb:e3:ec:69: 1d:7e:6a:a8:51:df:00:32:43:1b:93:53:6b:27:24: 41:52:a8:7a:c2:e0:a9:37:ff:e3:1e:77:52:ac:6c: 1a:61:38:be:58:a2:5c:47:62:bb:c7:b1:ee:38:26: 39:67:b2:b4:7f:3c:5b:0f:c5:33:de:96:49:73:78: 0c:c5:19:d4:91:fa:97:1d:d3:67:bc:46:5b:ed:2d: 67:48:f8:16:54:22:af:8c:52:14:4d:02:54:33:7b: ad:62:e8:47:db:d9:1f:99:24:f1:31:32:fd:ca:6c: ea:64:6c:99:97:e6:f3:08:19:e8:21:8c:34:f7:cf: 9d:3c:f2:56:52:6c:9f:15:f8:5a:66:06:d5:86:77: 2f:d4:1c:3d:6f:9e:f8:a7:5f:c6:81:04:0b:ad:67: a9:ae:67:4c:96:60:56:8f:ae:f8:8e:e4:19:fe:ef: 18:25:f5:16:45:83:ba:03:4c:75:65:38:76:86:0e: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2B:AD:CE:25:24:51:DA:09:F6:95:91:76:95:E3:9E:0C:F9:48:BD X509v3 Authority Key Identifier: keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e2:29:f7:eb:be:65:cc:fc:ca:ee:8a:74:50:1d:71:da:04: bf:30:2d:cd:2b:67:45:01:0c:89:9f:a8:39:61:54:5a:fa:9f: b9:5d:46:78:d1:ea:13:a9:80:f5:e5:15:f8:4b:9e:9e:95:e8: 60:05:90:5f:17:66:e0:f6:9e:2f:44:49:1a:f8:30:9e:08:45: db:3f:5f:15:92:be:b3:d4:2a:4c:10:c5:cf:9b:0e:44:3d:1c: 83:d0:e4:83:f4:7e:b1:84:cf:49:51:ef:01:7b:0e:ac:2d:d0: 5d:9c:ac:c5:1c:f3:9b:62:47:7e:b9:1d:f0:80:bc:51:c7:e7: e4:cb:51:3c:a4:e3:1a:4b:ce:26:ef:ff:11:ea:45:01:d5:d1: 74:b6:25:ab:d1:35:15:35:84:2e:ff:ef:b6:df:5b:2e:c6:1b: 4b:8a:81:2d:5b:38:21:22:43:9c:7a:6d:0c:f3:c6:f9:51:5f: ed:a9:0a:1d:87:68:94:5b:4b:b3:bc:ea:a6:ed:64:cd:c9:87: ae:33:67:71:0c:f0:69:7a:4c:70:97:e9:70:df:1c:48:b5:71: a8:07:de:a8:62:9b:1e:c6:b3:aa:2d:e1:90:a6:74:ba:0a:1e: 3a:2a:99:eb:60:23:fc:05:5c:b5:3a:b6:ea:36:dd:36:1b:ee: 49:aa:53:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lYIKCup1MKtUYAM81YzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWQ2ZjI0YmNlY2RjOGRhZWMzZTc0NTRiYzEyODNkYzBj ZDkzMWYwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhmYTJiYWRjZTI1MjQ1MWRhMDlmNjk1OTE3Njk1ZTM5ZTBjZjk0OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE4PpAeb+xyKOO+JpFWcEi+ZRLhX F5L6Z51P6alj3epMbWZIT69STgEcW5IFeLoCcVhsQa1t9R7jB5AqQznY+9fP0gbr hfvj7GkdfmqoUd8AMkMbk1NrJyRBUqh6wuCpN//jHndSrGwaYTi+WKJcR2K7x7Hu OCY5Z7K0fzxbD8Uz3pZJc3gMxRnUkfqXHdNnvEZb7S1nSPgWVCKvjFIUTQJUM3ut YuhH29kfmSTxMTL9ymzqZGyZl+bzCBnoIYw098+dPPJWUmyfFfhaZgbVhncv1Bw9 b574p1/GgQQLrWeprmdMlmBWj674juQZ/u8YJfUWRYO6A0x1ZTh2hg7p9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPorrc4lJFHaCfaVkXaV454M+Ui9MB8GA1UdIwQY MBaAFBWtbyS87NyNrsPnRUvBKD3AzZMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMzhhM2UtNTNiZS00MWQ1LTljODUt MjAxZDUwNzM0NWQ5LzEvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMzhhM2UtNTNiZS00MWQ1LTljODUtMjAxZDUwNzM0NWQ5 LzEvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk+Ip9+u+ Zcz8yu6KdFAdcdoEvzAtzStnRQEMiZ+oOWFUWvqfuV1GeNHqE6mA9eUV+EuenpXo YAWQXxdm4PaeL0RJGvgwnghF2z9fFZK+s9QqTBDFz5sORD0cg9Dkg/R+sYTPSVHv AXsOrC3QXZysxRzzm2JHfrkd8IC8Ucfn5MtRPKTjGkvOJu//EepFAdXRdLYlq9E1 FTWELv/vtt9bLsYbS4qBLVs4ISJDnHptDPPG+VFf7akKHYdolFtLs7zqpu1kzcmH rjNncQzwaXpMcJfpcN8cSLVxqAfeqGKbHsazqi3hkKZ0ugoeOiqZ62Aj/AVctTq2 6jbdNhvuSapTxw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:44:36 2025 by rpki-client