This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft File: FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json) Hash identifier: DuEzH/mrTWYDgYb8aJSWuJOnoreXhJ0kjyzgXdlvo8s= Subject key identifier: 7D:E6:5B:54:43:69:04:C3:70:D5:C6:68:97:1A:1A:EA:61:CC:3E:27 Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb Certificate serial: 019AF2ADE950DC0801A92C39A37A809F4F2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft Manifest number: 07BE Signing time: Sat 06 Dec 2025 08:01:14 +0000 Manifest this update: Sat 06 Dec 2025 08:01:14 +0000 Manifest next update: Sun 07 Dec 2025 08:01:14 +0000 Files and hashes: 1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: cVx+EIspXS9MtD6v9aicaxg3v7BkKQdA2Y/YCbw+PPY=) 2: GCjWN1dfacWVs6-dNAwUIB0pPtc.roa (hash: +OOo5n41q6UluB+BR+drcDaI3qsRIhz7e++vaPZKGtk=) 3: Tm3GJ75rZqfRGHxNwb2Su13LAA8.roa (hash: i8+DlzWcfqFIQ4s7ZZw3JGXSazICVrNG8AVatLfRrI0=) 4: W-3K5fzCzMBvM9WtH7NvbBMRwIA.roa (hash: RRZIltRS/dq6CUsYykb/8Cw+Mt7NFvaTFyBHpZDyvgA=) 5: lG1BuTFjXhh1jhBZGFRoMZ1VGUk.roa (hash: MY1BZJhxcWBrL8EPmHWLLNAliv/8MF/BrwKcRtPCEYA=) 6: rH6FFMbXiIxGI6RIrz3PGqzimRA.roa (hash: P3WGzj2DVrd7z07vxbTBkqmzIrwx78SPfvLo4lHc6gc=) 7: uMrc6Goc6EcB4BYik3tS4FAFhEU.roa (hash: XOKT7o47MThPABfgFTBszgq+QbxIg28i2iizclcbpXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e9:50:dc:08:01:a9:2c:39:a3:7a:80:9f:4f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb Validity Not Before: Dec 6 08:01:14 2025 GMT Not After : Dec 7 08:01:14 2025 GMT Subject: CN=7de65b54436904c370d5c668971a1aea61cc3e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:93:47:15:2e:32:e8:7b:68:99:64:7d:41: c7:6d:70:ff:06:ea:e6:8b:ca:e4:10:ff:3b:ae:bd: 6a:b2:41:d1:a1:33:c8:56:60:1f:20:4a:5a:53:98: 69:fe:35:e6:6e:e7:0c:5c:d8:98:fa:6f:72:2c:10: 9d:bc:97:3c:ed:4c:f4:79:d9:13:52:7b:08:70:73: fb:ef:f0:07:a5:36:3f:ba:24:83:16:38:a9:75:01: 82:69:89:c3:df:f4:e7:2b:9c:80:cf:ef:72:2b:f2: 71:a1:63:d3:50:3e:fd:c8:2c:3b:b3:8b:e2:1b:10: 50:b4:4f:95:86:26:cc:97:e1:aa:ee:ee:ac:7b:a1: 27:f1:92:26:69:62:25:10:0e:2a:a6:6b:f0:2d:1f: ee:6c:8a:b7:37:a7:1d:03:94:b8:2b:73:1c:76:14: a6:43:df:46:4d:42:b9:d3:24:81:67:8e:8a:2a:6f: 05:37:ca:1f:96:a6:13:57:23:d3:ca:72:81:d1:92: d7:69:01:72:30:f0:80:86:b2:44:d9:ad:ef:f3:29: ea:a1:f9:9f:de:c8:7c:d0:4e:5a:35:22:68:a1:ce: 9e:02:80:af:aa:3b:3c:58:d9:f4:b2:3d:cd:93:10: a8:c9:a0:63:4b:c6:3f:e9:ff:de:cd:b8:c5:97:fe: 10:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:5B:54:43:69:04:C3:70:D5:C6:68:97:1A:1A:EA:61:CC:3E:27 X509v3 Authority Key Identifier: keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3e:b3:95:3a:2b:ff:6d:47:56:5f:9c:eb:79:1b:b6:10:d4: d8:95:f0:6c:e4:6f:f4:13:fa:86:3a:df:09:2f:c7:34:4d:ab: 9b:20:27:5b:c6:fb:66:ec:bf:9b:24:7e:b7:2a:eb:22:b6:d4: bf:b4:0a:42:e3:2f:f8:28:bb:96:8b:87:db:69:14:54:fb:4f: dc:a5:5d:48:ea:49:95:fb:7a:27:5d:88:75:6b:0b:cf:fc:2b: b6:b2:b4:c2:62:39:88:fc:3c:89:2f:ed:6f:12:f7:d0:98:0e: 79:88:20:21:0f:a4:47:cd:1c:5d:6d:ad:f2:73:1c:e3:53:75: 76:3b:cf:ca:2c:32:3b:73:69:69:78:de:50:04:38:41:f6:52: dc:22:06:3d:0c:56:23:25:08:de:2d:19:4d:a0:4e:45:56:36: a0:de:91:87:be:c9:c8:53:f2:ac:bd:46:dc:d2:d0:44:81:b4: c6:6d:b7:55:85:e3:1b:e8:73:17:50:13:c3:5c:41:d5:fc:2f: bf:f7:80:92:c4:85:2b:02:c1:1d:63:b5:65:48:9a:6b:4e:55: bf:f9:9b:4b:08:1f:99:cc:9f:db:18:14:dc:36:4e:4a:ad:20: 5e:7e:4a:3a:83:e4:12:65:f4:fd:e9:97:e9:52:43:47:60:d6: d2:0a:82:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrelQ3AgBqSw5o3qAn08sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0 MDI1Y2IwHhcNMjUxMjA2MDgwMTE0WhcNMjUxMjA3MDgwMTE0WjAzMTEwLwYDVQQD Eyg3ZGU2NWI1NDQzNjkwNGMzNzBkNWM2Njg5NzFhMWFlYTYxY2MzZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMqTRxUuMuh7aJlkfUHHbXD/Burm i8rkEP87rr1qskHRoTPIVmAfIEpaU5hp/jXmbucMXNiY+m9yLBCdvJc87Uz0edkT UnsIcHP77/AHpTY/uiSDFjipdQGCaYnD3/TnK5yAz+9yK/JxoWPTUD79yCw7s4vi GxBQtE+VhibMl+Gq7u6se6En8ZImaWIlEA4qpmvwLR/ubIq3N6cdA5S4K3McdhSm Q99GTUK50ySBZ46KKm8FN8oflqYTVyPTynKB0ZLXaQFyMPCAhrJE2a3v8ynqofmf 3sh80E5aNSJooc6eAoCvqjs8WNn0sj3NkxCoyaBjS8Y/6f/ezbjFl/4QxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3mW1RDaQTDcNXGaJcaGuphzD4nMB8GA1UdIwQY MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt NmVlYzc3ZDliOTg1LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1 LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqT6zlTor /21HVl+c63kbthDU2JXwbORv9BP6hjrfCS/HNE2rmyAnW8b7Zuy/myR+tyrrIrbU v7QKQuMv+Ci7louH22kUVPtP3KVdSOpJlft6J12IdWsLz/wrtrK0wmI5iPw8iS/t bxL30JgOeYggIQ+kR80cXW2t8nMc41N1djvPyiwyO3NpaXjeUAQ4QfZS3CIGPQxW IyUI3i0ZTaBORVY2oN6Rh77JyFPyrL1G3NLQRIG0xm23VYXjG+hzF1ATw1xB1fwv v/eAksSFKwLBHWO1ZUiaa05Vv/mbSwgfmcyf2xgU3DZOSq0gXn5KOoPkEmX0/emX 6VJDR2DW0gqC1g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:55 2025 by rpki-client