This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft File: FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json) Hash identifier: Av5FjLdMB45prLZC31TGH14jRdTzq9FuhyYnrYP0McU= Subject key identifier: 31:D8:64:2F:54:61:57:F1:98:5A:95:D7:75:24:5D:5B:66:8C:9A:8A Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED Certificate issuer: /CN=14435c7fdc48289ec559f01ea51dac1723f091ed Certificate serial: 019AF31B3D03E30C3633DEC348045FAC039E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:00:39 +0000 Manifest this update: Sat 06 Dec 2025 10:00:39 +0000 Manifest next update: Sun 07 Dec 2025 10:00:39 +0000 Files and hashes: 1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: HDrFHGCROFT7/wOzCQ/Eq7Bn4Z/T/GZ2ZXOndYG+zCk=) 2: pfS8npjb1uQ7NSmAY-LxZLlq2ps.roa (hash: eiiWFlrGCt5q99WuEtVs0GomqjrXO+w6ZrM3SP/1WdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3d:03:e3:0c:36:33:de:c3:48:04:5f:ac:03:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed Validity Not Before: Dec 6 10:00:39 2025 GMT Not After : Dec 7 10:00:39 2025 GMT Subject: CN=31d8642f546157f1985a95d775245d5b668c9a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a5:16:7f:72:30:cf:7d:a0:e3:30:91:52:19: 78:de:f1:59:b9:05:ce:c7:6a:81:22:5c:dc:bb:9d: a9:f5:33:5e:fe:99:36:1f:3d:f2:4d:74:06:43:00: ff:c4:6e:72:1b:f2:c1:d3:4c:a5:88:9c:50:87:c9: 4e:ae:4f:3a:3a:ad:d0:48:db:e7:c4:13:fa:ac:2d: 86:f5:dd:7e:96:ed:df:2a:cc:a9:8a:be:2b:11:b7: 4a:1b:70:66:c5:18:28:11:d9:75:31:f0:d4:28:28: bb:fe:cf:af:69:40:2a:60:9a:52:36:fa:8b:f8:31: 77:05:41:68:f4:03:87:d6:12:d7:70:01:1d:37:31: f7:94:64:f4:ae:ba:6c:bd:6a:65:f5:da:8b:49:ce: 80:74:66:cd:07:f3:25:e0:d3:25:b3:ff:1f:3a:5a: 85:bb:c7:6f:c3:90:21:71:09:15:2a:74:30:ed:d6: 1e:6c:7d:89:ee:39:8b:25:14:c4:6f:e3:8a:1d:a6: 11:28:f8:dd:1d:ca:81:eb:2d:fd:a2:c3:ec:fe:94: e5:d5:83:4c:3f:90:be:04:b0:1b:65:ee:6b:2d:d9: e8:de:1d:e1:9b:34:bc:de:ae:34:37:77:2b:2f:bd: e7:12:59:83:e7:5e:2d:c9:e9:28:92:59:23:a6:6b: cf:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D8:64:2F:54:61:57:F1:98:5A:95:D7:75:24:5D:5B:66:8C:9A:8A X509v3 Authority Key Identifier: keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:23:7f:59:5b:87:e5:09:70:e9:a0:28:c0:f8:db:f4:0a:cb: 47:df:09:af:3d:68:f4:3d:e3:9c:fe:34:65:c1:87:90:03:80: aa:a0:0b:c0:36:26:59:88:c4:6e:b1:1f:05:96:bf:40:cb:62: e6:38:1a:dd:b0:03:97:a8:36:95:7b:bf:f2:d0:ab:e1:d0:e7: ea:2d:86:2e:bd:f1:75:41:cd:66:8c:ad:f3:37:64:cc:7b:70: 3f:19:52:e9:cf:c0:c5:8e:36:ad:8e:ed:36:58:ac:00:ff:34: 15:f5:a0:ad:2f:46:4f:ee:ed:ff:05:66:9e:06:84:12:60:13: 68:98:f2:f9:d9:f5:9e:48:8f:7e:67:c5:8e:6a:41:68:0e:7c: 95:17:3b:a9:3c:58:fd:52:cb:41:00:79:99:e9:b5:43:40:f4: cb:c6:91:3f:4f:37:1e:16:d4:a5:95:ee:ef:87:fd:47:28:d7: 2c:12:9c:df:53:71:3e:a6:26:24:6f:a1:5e:6b:dc:8e:8c:24: fb:df:2a:70:7e:c1:07:a1:f5:25:73:94:92:be:30:df:3b:1d: 26:cf:ee:d0:6e:78:b0:55:cf:80:3b:63:14:f2:11:02:9e:13: 76:bc:24:79:19:82:f6:71:bc:71:39:04:41:55:08:08:67:11: 2e:9c:95:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz0D4ww2M97DSARfrAOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDM1YzdmZGM0ODI4OWVjNTU5ZjAxZWE1MWRhYzE3MjNm MDkxZWQwHhcNMjUxMjA2MTAwMDM5WhcNMjUxMjA3MTAwMDM5WjAzMTEwLwYDVQQD EygzMWQ4NjQyZjU0NjE1N2YxOTg1YTk1ZDc3NTI0NWQ1YjY2OGM5YThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKUWf3Iwz32g4zCRUhl43vFZuQXO x2qBIlzcu52p9TNe/pk2Hz3yTXQGQwD/xG5yG/LB00yliJxQh8lOrk86Oq3QSNvn xBP6rC2G9d1+lu3fKsypir4rEbdKG3BmxRgoEdl1MfDUKCi7/s+vaUAqYJpSNvqL +DF3BUFo9AOH1hLXcAEdNzH3lGT0rrpsvWpl9dqLSc6AdGbNB/Ml4NMls/8fOlqF u8dvw5AhcQkVKnQw7dYebH2J7jmLJRTEb+OKHaYRKPjdHcqB6y39osPs/pTl1YNM P5C+BLAbZe5rLdno3h3hmzS83q40N3crL73nElmD514tyekoklkjpmvP1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHYZC9UYVfxmFqV13UkXVtmjJqKMB8GA1UdIwQY MBaAFBRDXH/cSCiexVnwHqUdrBcj8JHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAt NzNjMjc0MGVhOGJmLzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hN2ZlYzQtZGYyZC00NWViLTg1MjAtNzNjMjc0MGVhOGJm LzEvRkVOY2Y5eElLSjdGV2ZBZXBSMnNGeVB3a2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSN/WVuH 5Qlw6aAowPjb9ArLR98Jrz1o9D3jnP40ZcGHkAOAqqALwDYmWYjEbrEfBZa/QMti 5jga3bADl6g2lXu/8tCr4dDn6i2GLr3xdUHNZoyt8zdkzHtwPxlS6c/AxY42rY7t NlisAP80FfWgrS9GT+7t/wVmngaEEmATaJjy+dn1nkiPfmfFjmpBaA58lRc7qTxY /VLLQQB5mem1Q0D0y8aRP083HhbUpZXu74f9RyjXLBKc31NxPqYmJG+hXmvcjowk +98qcH7BB6H1JXOUkr4w3zsdJs/u0G54sFXPgDtjFPIRAp4TdrwkeRmC9nG8cTkE QVUICGcRLpyVuw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:19:24 2025 by rpki-client