This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json) Hash identifier: 5siVdSu/+7nOqz9azuh5vbwu9DLSlaoH1emn2iZ2yb8= Subject key identifier: 32:F4:05:92:D4:CE:AE:10:31:8D:48:88:8A:9B:3E:F2:D1:EE:61:19 Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed Certificate serial: 019B2362DC28559912308E8BF08A8CB1052B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 19:00:39 +0000 Manifest this update: Mon 15 Dec 2025 19:00:39 +0000 Manifest next update: Tue 16 Dec 2025 19:00:39 +0000 Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: zg+8kB5wfvFcFUoVYS22Ma++gxhWhGXQtga46QzAcKY=) 2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:dc:28:55:99:12:30:8e:8b:f0:8a:8c:b1:05:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed Validity Not Before: Dec 15 19:00:39 2025 GMT Not After : Dec 16 19:00:39 2025 GMT Subject: CN=32f40592d4ceae10318d48888a9b3ef2d1ee6119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:8c:3f:36:f4:34:b6:9c:4d:a4:11:a7:a2: d6:60:60:08:90:73:d0:72:9e:c3:00:d9:7f:0a:58: d5:d5:0e:03:32:93:b4:a0:43:ab:37:b3:e4:65:46: d9:38:fd:a4:67:64:ac:bc:7b:ae:8c:aa:f0:f9:45: dc:a8:c1:52:25:fd:65:8d:a9:64:b4:3d:9a:87:d9: 7d:c3:ae:34:9c:f1:34:b4:35:dd:69:99:ef:a1:63: 43:30:65:84:a1:25:75:b6:ec:d3:d7:cf:b4:0e:4e: ad:73:6f:8f:ff:77:13:18:f4:42:df:96:01:2b:d1: 93:56:3c:81:cb:11:61:34:21:07:f8:66:b8:84:5f: 03:70:69:12:0a:13:5d:48:6d:7e:bb:e1:4d:15:b3: 8f:5f:dd:28:af:2b:4f:bc:4c:e9:68:02:cf:4b:b6: 05:e9:a2:87:83:97:ca:bf:5d:2f:d4:5e:7b:f6:f7: cc:31:9b:2d:4c:ed:fb:d0:2e:bc:7e:5f:f8:bf:03: 61:46:e7:82:95:9b:1c:3a:e8:b5:6d:92:85:03:7a: 28:fd:74:fd:e4:58:6d:62:61:f1:52:42:20:80:80: c0:c5:e8:9c:64:44:74:2f:4c:3e:2f:ee:cc:38:77: d6:97:7e:fe:65:f1:f9:34:04:ab:e1:b9:4b:b2:0b: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F4:05:92:D4:CE:AE:10:31:8D:48:88:8A:9B:3E:F2:D1:EE:61:19 X509v3 Authority Key Identifier: keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5a:f0:99:60:e7:7c:0f:fc:e5:da:55:83:52:dd:bc:86:68: 6b:dc:e7:75:70:01:95:95:97:bd:8d:f7:fe:01:8a:56:06:d0: cd:bd:f8:9b:2f:19:ca:c0:c6:1e:ab:17:24:6d:94:57:65:1d: fe:84:8b:f3:79:34:0c:df:e9:f2:f0:09:c6:73:86:3f:e8:cf: b5:6e:3f:2f:b8:e2:b4:10:d6:d3:27:93:37:d9:ab:2c:b0:53: d6:ec:1e:58:cb:e3:ef:53:d4:9a:e9:92:62:7d:35:d8:65:10: 0a:a1:00:d2:40:b5:00:d5:9a:dd:b9:0f:ba:69:35:e0:c7:96: 61:51:fc:90:07:1a:26:f7:1b:4a:1d:d3:f4:eb:83:32:60:68: 01:57:24:e5:77:fa:18:27:b7:04:b7:dd:70:a3:0e:30:08:95: 57:ed:82:79:99:1a:97:2a:47:64:5b:43:73:b2:5b:10:76:10: d4:83:aa:91:58:23:31:56:95:80:33:94:2e:e4:31:e1:54:0c: df:80:e0:3a:af:43:34:f9:a5:4c:08:82:c2:d5:9c:ae:b5:29: f3:45:4e:32:36:3c:77:b4:42:a0:d1:e0:4b:a0:20:cb:c3:89: a5:e6:00:a0:b5:70:b7:5e:f1:d5:28:e0:b3:ad:7c:d3:71:3c: 02:a1:4f:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYtwoVZkSMI6L8IqMsQUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm MDkxZWQwHhcNMjUxMjE1MTkwMDM5WhcNMjUxMjE2MTkwMDM5WjAzMTEwLwYDVQQD EygzMmY0MDU5MmQ0Y2VhZTEwMzE4ZDQ4ODg4YTliM2VmMmQxZWU2MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkSMPzb0NLacTaQRp6LWYGAIkHPQ cp7DANl/CljV1Q4DMpO0oEOrN7PkZUbZOP2kZ2SsvHuujKrw+UXcqMFSJf1ljalk tD2ah9l9w640nPE0tDXdaZnvoWNDMGWEoSV1tuzT18+0Dk6tc2+P/3cTGPRC35YB K9GTVjyByxFhNCEH+Ga4hF8DcGkSChNdSG1+u+FNFbOPX90orytPvEzpaALPS7YF 6aKHg5fKv10v1F579vfMMZstTO370C68fl/4vwNhRueClZscOui1bZKFA3oo/XT9 5FhtYmHxUkIggIDAxeicZER0L0w+L+7MOHfWl37+ZfH5NASr4blLsgufNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL0BZLUzq4QMY1IiIqbPvLR7mEZMB8GA1UdIwQY MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1rwmWDn fA/85dpVg1LdvIZoa9zndXABlZWXvY33/gGKVgbQzb34my8ZysDGHqsXJG2UV2Ud /oSL83k0DN/p8vAJxnOGP+jPtW4/L7jitBDW0yeTN9mrLLBT1uweWMvj71PUmumS Yn012GUQCqEA0kC1ANWa3bkPumk14MeWYVH8kAcaJvcbSh3T9OuDMmBoAVck5Xf6 GCe3BLfdcKMOMAiVV+2CeZkalypHZFtDc7JbEHYQ1IOqkVgjMVaVgDOULuQx4VQM 34DgOq9DNPmlTAiCwtWcrrUp80VOMjY8d7RCoNHgS6Agy8OJpeYAoLVwt17x1Sjg s61803E8AqFPJg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:30:42 2025 by rpki-client