This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft File: FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json) Hash identifier: ofQpklomqiZw9q0UbZAlldOcqaU4xY7UL1bOeLHJ4XM= Subject key identifier: 1E:5F:27:99:DA:1F:65:03:E4:CD:3E:1E:44:B6:39:AA:A7:E5:F4:DC Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE Certificate issuer: /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae Certificate serial: 019AF31B7735EB296416DC2880834C547952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 10:00:54 +0000 Manifest this update: Sat 06 Dec 2025 10:00:54 +0000 Manifest next update: Sun 07 Dec 2025 10:00:54 +0000 Files and hashes: 1: BxCrfrb8MepjOUn66ABB5pXZXGY.roa (hash: /bAJpFbE7wB5BoE8ivAocFlXAPpfXoiDSMMP5BxwgYU=) 2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: pOPSCZq0xO2BJy87I4FYdOX5FFW0qUkPtgZ7jP3yH24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:77:35:eb:29:64:16:dc:28:80:83:4c:54:79:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae Validity Not Before: Dec 6 10:00:54 2025 GMT Not After : Dec 7 10:00:54 2025 GMT Subject: CN=1e5f2799da1f6503e4cd3e1e44b639aaa7e5f4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:92:55:58:1e:85:df:f5:5d:fd:b8:9a:de: c7:07:65:18:0e:ef:d0:4e:4c:57:c2:56:c2:5c:5a: 75:d0:56:6a:8b:1b:fb:38:da:51:57:7d:64:7c:fd: b2:51:66:40:86:63:ae:4c:5c:8c:54:2c:fd:37:99: 37:b6:0f:35:41:b1:f8:ae:a9:6c:eb:01:8a:31:fb: 95:79:12:07:b6:3c:07:89:e4:a4:35:b7:b3:8e:98: 42:e1:d2:61:e7:03:8d:2c:09:11:4b:3e:26:03:ce: 0d:96:5d:06:97:36:f9:9b:46:a5:07:10:1b:f0:5f: 56:ba:82:70:9a:62:4f:c7:07:9f:d0:6f:ae:dd:1c: 76:2f:19:fc:ea:68:91:fa:29:bb:5c:07:70:80:4b: f9:3a:ca:6f:76:ac:07:f9:dd:96:9a:84:4f:7d:e5: f4:6a:d6:ec:03:c0:d8:30:61:31:a3:ff:04:c2:8f: a6:70:7e:dc:24:b6:ff:8a:7f:cb:e4:4a:b1:5a:65: a2:c9:ac:66:37:b7:6b:e6:20:6b:ce:a6:f9:e1:30: 1d:61:9f:39:a6:fe:f6:1e:c1:f2:67:bc:d4:4b:0f: 8f:46:2e:82:f7:65:8c:97:eb:36:24:6e:d9:44:ee: aa:b9:18:d9:60:3e:c5:d2:d2:56:3c:58:3e:8a:7d: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5F:27:99:DA:1F:65:03:E4:CD:3E:1E:44:B6:39:AA:A7:E5:F4:DC X509v3 Authority Key Identifier: keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1a:29:ba:7e:73:db:67:08:8a:17:8f:a3:15:53:47:75:ab: 52:62:32:fa:a4:36:8e:fa:38:56:56:19:fb:3b:29:f2:f8:58: 8b:3f:e5:4b:2c:e9:15:d8:a2:dc:cc:c2:a4:ad:77:af:47:59: 6a:62:09:fa:9d:c4:3e:d1:95:f8:03:ec:69:4e:d4:c4:d0:bd: b7:01:c1:ac:5c:18:78:e9:60:e4:ae:2f:fd:df:4f:aa:05:24: 8a:4c:ea:e1:45:fa:b9:df:11:91:53:27:02:6c:63:65:35:d9: b0:99:b1:59:46:13:34:42:5a:61:70:52:e8:56:3c:e9:1b:43: 03:1d:f6:26:47:a7:e8:e8:a8:87:d0:9e:ef:6e:30:66:2b:b8: 3d:8e:4a:e4:25:ee:64:d3:6a:f8:bc:ae:07:d1:37:86:f5:f9: ba:ab:bc:f2:0a:cf:2d:89:5f:b1:ae:5d:ae:9d:fd:74:f5:35: 55:f7:2e:16:20:52:bf:c4:a0:e3:dc:23:a7:81:68:2e:b2:be: 8b:d7:26:42:fc:39:9c:d6:94:5d:49:60:cb:07:cf:2e:46:6f: 62:18:c6:78:d0:da:df:21:6d:c2:72:19:e7:af:88:ed:dd:63: 2b:85:39:56:cd:01:06:bd:ad:76:ad:11:97:be:1f:4b:12:1e: 08:97:52:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG3c16ylkFtwogINMVHlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjUxZTkwMzZjYTZlNzU2YTAxNjNjMzg3NzgyMGNkNWZj ZTExYWUwHhcNMjUxMjA2MTAwMDU0WhcNMjUxMjA3MTAwMDU0WjAzMTEwLwYDVQQD EygxZTVmMjc5OWRhMWY2NTAzZTRjZDNlMWU0NGI2MzlhYWE3ZTVmNGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhGSVVgehd/1Xf24mt7HB2UYDu/Q TkxXwlbCXFp10FZqixv7ONpRV31kfP2yUWZAhmOuTFyMVCz9N5k3tg81QbH4rqls 6wGKMfuVeRIHtjwHieSkNbezjphC4dJh5wONLAkRSz4mA84Nll0Glzb5m0alBxAb 8F9WuoJwmmJPxwef0G+u3Rx2Lxn86miR+im7XAdwgEv5OspvdqwH+d2WmoRPfeX0 atbsA8DYMGExo/8Ewo+mcH7cJLb/in/L5EqxWmWiyaxmN7dr5iBrzqb54TAdYZ85 pv72HsHyZ7zUSw+PRi6C92WMl+s2JG7ZRO6quRjZYD7F0tJWPFg+in1FZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5fJ5naH2UD5M0+HkS2Oaqn5fTcMB8GA1UdIwQY MBaAFBa1HpA2ym51agFjw4d4IM1fzhGuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4Yzgt MmVjNDEyNGRkNDA5LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS85NDE5MTctYTY4OC00MmNkLWE4YzgtMmVjNDEyNGRkNDA5 LzEvRnJVZWtEYktiblZxQVdQRGgzZ2d6Vl9PRWE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBopun5z 22cIihePoxVTR3WrUmIy+qQ2jvo4VlYZ+zsp8vhYiz/lSyzpFdii3MzCpK13r0dZ amIJ+p3EPtGV+APsaU7UxNC9twHBrFwYeOlg5K4v/d9PqgUkikzq4UX6ud8RkVMn AmxjZTXZsJmxWUYTNEJaYXBS6FY86RtDAx32Jken6Oioh9Ce724wZiu4PY5K5CXu ZNNq+LyuB9E3hvX5uqu88grPLYlfsa5drp39dPU1VfcuFiBSv8Sg49wjp4FoLrK+ i9cmQvw5nNaUXUlgywfPLkZvYhjGeNDa3yFtwnIZ56+I7d1jK4U5Vs0BBr2tdq0R l74fSxIeCJdSNQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:52:54 2025 by rpki-client