This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json) Hash identifier: R6XlJo0Rr+lCl1nB6QAZOHEET++cVpizGbyqZqcH34g= Subject key identifier: E0:16:39:D2:A4:AD:35:C4:3C:16:3F:0F:F9:0A:8D:6B:59:57:1A:98 Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9 Certificate serial: 019AF27704F3319C231A1BF913B1EF77EDDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=) 2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: EsrTaJRPt3RQXSuiNBQg8TJJfxlMVDEDhpZMiWXdjLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:04:f3:31:9c:23:1a:1b:f9:13:b1:ef:77:ed:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=e01639d2a4ad35c43c163f0ff90a8d6b59571a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:92:d4:97:c8:7a:fd:24:3a:67:ef:d8:39:3d: 3e:07:bc:af:ca:79:dd:19:bf:98:34:3d:27:06:cf: b3:5e:b0:51:e6:fc:54:1b:61:be:7a:56:5b:e1:99: 5a:61:8b:1f:e3:47:80:ef:9a:59:9f:ca:d3:90:09: 60:3e:1c:bb:32:85:c0:aa:a5:d4:04:62:be:ce:96: 4f:2b:95:77:61:89:c0:d9:f9:5d:4d:dd:64:7e:77: b7:a8:5f:a2:d9:56:27:81:6b:83:b4:9a:9b:19:ab: 72:13:1f:bf:cc:0d:32:da:13:d8:9c:43:33:64:39: 12:3f:6e:43:71:8b:00:f4:7d:14:37:50:16:52:93: 43:e7:d0:42:40:1a:e1:c9:73:4c:c0:b3:13:74:2d: d4:8a:ea:09:19:4b:08:a9:93:7e:88:ee:6d:de:02: 60:41:e6:f3:6b:13:bd:f1:aa:43:55:41:b7:8c:cf: a6:9e:8b:46:e4:fd:8c:81:f6:6e:70:52:25:74:23: ea:89:e9:cd:f2:06:63:c2:5c:18:74:81:ea:a8:e6: cc:51:20:53:19:a9:bf:26:70:88:9e:eb:aa:54:0a: a8:1f:99:e9:e1:78:12:0e:27:eb:c6:cb:45:a3:10: fb:79:ff:d7:f4:33:c6:64:e4:49:0f:35:a7:a0:ba: f8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:16:39:D2:A4:AD:35:C4:3C:16:3F:0F:F9:0A:8D:6B:59:57:1A:98 X509v3 Authority Key Identifier: keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:ca:f2:aa:c1:a7:74:43:56:e7:6d:f7:24:87:ff:ef:5c:37: 8c:ce:f7:a1:fc:09:c6:95:23:9c:5d:b3:20:21:e9:08:47:e9: 1f:24:a0:b3:8b:9e:35:e4:cd:b5:2d:30:24:81:77:0b:6b:c4: 7b:30:fe:a5:c4:a3:67:13:10:0b:87:f5:5c:01:a2:8b:97:a5: c2:2d:69:c0:86:3e:bf:45:8f:c8:b3:7d:05:58:c6:cf:88:d2: 99:22:08:bc:c5:d8:9f:41:ba:b2:57:ae:09:ba:a0:3f:ce:c5: 6b:d4:6d:97:a6:3d:7d:6c:5d:24:6e:05:fb:c5:2b:a7:76:1e: b3:32:05:1c:a3:2d:18:d6:1f:40:94:d3:a5:44:26:fc:dd:eb: 92:c1:29:51:37:6c:70:41:89:5a:39:6f:24:c7:fe:f3:f5:d2: 62:2b:b3:ea:d2:d1:a7:41:1a:d1:b0:1d:3f:1e:c2:ff:23:f4: c8:85:f2:25:c5:7e:4f:88:b6:d8:b5:1f:cf:c0:63:e0:d7:fa: be:13:1c:5a:b2:f0:2d:0a:ca:0e:ba:6e:4b:35:26:b9:91:8d: 45:83:e0:66:fa:3b:01:25:e3:c0:83:58:28:d5:11:ce:f0:ba: 48:22:ba:3c:b6:ae:19:4f:54:dc:a1:e4:e0:8c:0e:a5:de:42: 42:7f:2e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwTzMZwjGhv5E7Hvd+3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjQ1NjVhMzJkYjNjOWM4YjhiMGY3YjRjMTFiZDExNTRl MjBkZTkwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD EyhlMDE2MzlkMmE0YWQzNWM0M2MxNjNmMGZmOTBhOGQ2YjU5NTcxYTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pLUl8h6/SQ6Z+/YOT0+B7yvynnd Gb+YND0nBs+zXrBR5vxUG2G+elZb4ZlaYYsf40eA75pZn8rTkAlgPhy7MoXAqqXU BGK+zpZPK5V3YYnA2fldTd1kfne3qF+i2VYngWuDtJqbGatyEx+/zA0y2hPYnEMz ZDkSP25DcYsA9H0UN1AWUpND59BCQBrhyXNMwLMTdC3UiuoJGUsIqZN+iO5t3gJg QebzaxO98apDVUG3jM+mnotG5P2MgfZucFIldCPqienN8gZjwlwYdIHqqObMUSBT Gam/JnCInuuqVAqoH5np4XgSDifrxstFoxD7ef/X9DPGZORJDzWnoLr4OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAWOdKkrTXEPBY/D/kKjWtZVxqYMB8GA1UdIwQY MBaAFH60Vloy2zyci4sPe0wRvRFU4g3pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgt MGU3OTQ5OTM1ZDgxLzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81YjUzNWUtYjE0My00YjRhLTkwZTgtMGU3OTQ5OTM1ZDgx LzEvZnJSV1dqTGJQSnlMaXc5N1RCRzlFVlRpRGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesryqsGn dENW5233JIf/71w3jM73ofwJxpUjnF2zICHpCEfpHySgs4ueNeTNtS0wJIF3C2vE ezD+pcSjZxMQC4f1XAGii5elwi1pwIY+v0WPyLN9BVjGz4jSmSIIvMXYn0G6sleu CbqgP87Fa9Rtl6Y9fWxdJG4F+8Urp3YeszIFHKMtGNYfQJTTpUQm/N3rksEpUTds cEGJWjlvJMf+8/XSYiuz6tLRp0Ea0bAdPx7C/yP0yIXyJcV+T4i22LUfz8Bj4Nf6 vhMcWrLwLQrKDrpuSzUmuZGNRYPgZvo7ASXjwINYKNURzvC6SCK6PLauGU9U3KHk 4IwOpd5CQn8uNA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:17 2025 by rpki-client