This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json) Hash identifier: hQIPfpQDYGT1iW6Hsi/z0mMiG6OWv7+yA/bEPVhfd70= Subject key identifier: 4E:3F:EA:4D:ED:9A:2B:4E:23:3E:69:65:37:1B:89:FD:FE:36:72:6D Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Certificate serial: 019AF19B68937196C995787F511CAB09D85C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft Manifest number: 0596 Signing time: Sat 06 Dec 2025 03:01:25 +0000 Manifest this update: Sat 06 Dec 2025 03:01:25 +0000 Manifest next update: Sun 07 Dec 2025 03:01:25 +0000 Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=) 2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: i5Qm0k8qAZo2I1Ha7hrOx9dyL3s3rG6QX6EpRrCXUh4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:68:93:71:96:c9:95:78:7f:51:1c:ab:09:d8:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Validity Not Before: Dec 6 03:01:25 2025 GMT Not After : Dec 7 03:01:25 2025 GMT Subject: CN=4e3fea4ded9a2b4e233e6965371b89fdfe36726d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1a:07:66:29:3f:4d:e0:5f:66:df:f9:aa:0f: d2:34:9a:5e:75:51:cb:40:73:88:f3:b4:d2:f4:83: 4e:51:dc:40:a4:65:3e:5f:71:7d:02:5c:4a:42:62: 9c:ae:8a:47:51:0d:8b:65:5d:09:88:d5:98:fb:8b: 4d:bb:2b:a9:c3:ad:49:31:17:c1:be:77:66:da:81: 39:00:48:ae:28:4a:ca:bd:08:40:7b:d0:d8:02:6a: 1a:a3:27:f1:f3:b4:d8:eb:a7:5d:0e:32:4d:dc:04: 91:1e:46:05:4c:3e:7b:9b:08:6b:81:b8:ff:b7:d7: 23:4e:9c:86:99:62:a1:be:61:4a:12:9b:2a:b3:a3: 47:94:d0:dd:e7:af:85:ff:ab:63:3d:08:02:50:67: 03:6b:8a:82:2f:2d:0d:5c:21:f8:40:87:c7:95:fd: b7:e5:7b:01:a1:44:8d:89:3d:2e:dd:2c:ce:dd:1a: c5:17:04:02:5c:c1:47:fc:d7:ca:0c:99:32:08:31: d9:c8:9c:d3:92:d2:84:d2:d7:16:26:6f:e9:0f:d2: 02:47:d5:33:c4:1b:b2:13:46:d9:67:ab:84:d0:09: 82:82:62:d4:66:c9:8a:f9:d0:b8:dd:a4:08:53:32: cf:48:29:a5:c9:9f:e7:5d:2f:ee:f8:97:f0:e6:77: 5b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3F:EA:4D:ED:9A:2B:4E:23:3E:69:65:37:1B:89:FD:FE:36:72:6D X509v3 Authority Key Identifier: keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:e2:66:69:a1:91:17:b9:77:8d:0c:dc:4f:23:a5:7b:7e:dd: 1d:64:c4:90:a4:50:f3:76:78:5a:27:98:d5:0b:80:d3:46:04: f8:14:9f:b0:ed:4e:53:60:08:e9:7e:8d:9b:27:69:f1:19:89: 60:c5:56:51:cc:15:21:7c:d0:fc:66:20:1d:47:b1:19:d6:7b: c9:e2:b4:8e:9d:8f:17:15:01:5c:86:61:f6:dd:e6:3f:83:e1: a8:f3:0b:d5:a3:44:e9:9d:bb:58:6e:04:16:45:c2:f6:8c:e7: 94:4e:86:6d:c5:2a:1b:53:32:6f:db:29:45:57:10:d1:4f:7a: 22:ca:9f:44:18:6a:0a:0e:0c:d4:df:f4:ba:11:04:5f:b6:75: e2:a1:a7:fc:ec:db:eb:a4:6a:9b:d0:71:b7:60:84:01:53:88: 8e:a3:69:91:d2:17:ff:48:40:7e:e6:ac:b3:0e:de:68:66:f7: d2:1e:50:c1:3c:b0:b9:ab:e1:78:52:6b:d9:96:d4:14:6c:e9: 6d:1a:65:38:6c:53:4b:16:ab:8a:b3:3b:89:77:35:4f:61:d0: 92:75:35:94:a0:74:67:77:8f:42:3c:cb:84:24:27:00:8e:8a: a4:7c:90:07:53:0f:f2:39:f3:c6:1e:60:3c:4b:b7:35:08:cf: 5e:a4:4c:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2iTcZbJlXh/URyrCdhcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWVjN2ViYjVjYzg3M2NjNzE3OTY2MGFjZmNhODA0ZDkx MWFiNjYwHhcNMjUxMjA2MDMwMTI1WhcNMjUxMjA3MDMwMTI1WjAzMTEwLwYDVQQD Eyg0ZTNmZWE0ZGVkOWEyYjRlMjMzZTY5NjUzNzFiODlmZGZlMzY3MjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBoHZik/TeBfZt/5qg/SNJpedVHL QHOI87TS9INOUdxApGU+X3F9AlxKQmKcropHUQ2LZV0JiNWY+4tNuyupw61JMRfB vndm2oE5AEiuKErKvQhAe9DYAmoaoyfx87TY66ddDjJN3ASRHkYFTD57mwhrgbj/ t9cjTpyGmWKhvmFKEpsqs6NHlNDd56+F/6tjPQgCUGcDa4qCLy0NXCH4QIfHlf23 5XsBoUSNiT0u3SzO3RrFFwQCXMFH/NfKDJkyCDHZyJzTktKE0tcWJm/pD9ICR9Uz xBuyE0bZZ6uE0AmCgmLUZsmK+dC43aQIUzLPSCmlyZ/nXS/u+Jfw5ndbEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4/6k3tmitOIz5pZTcbif3+NnJtMB8GA1UdIwQY MBaAFH3ux+u1zIc8xxeWYKz8qATZEatmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmIt N2EyYTIxNzJlYzRmLzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmItN2EyYTIxNzJlYzRm LzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOJmaaGR F7l3jQzcTyOle37dHWTEkKRQ83Z4WieY1QuA00YE+BSfsO1OU2AI6X6Nmydp8RmJ YMVWUcwVIXzQ/GYgHUexGdZ7yeK0jp2PFxUBXIZh9t3mP4PhqPML1aNE6Z27WG4E FkXC9oznlE6GbcUqG1Myb9spRVcQ0U96IsqfRBhqCg4M1N/0uhEEX7Z14qGn/Ozb 66Rqm9Bxt2CEAVOIjqNpkdIX/0hAfuassw7eaGb30h5QwTywuavheFJr2ZbUFGzp bRplOGxTSxarirM7iXc1T2HQknU1lKB0Z3ePQjzLhCQnAI6KpHyQB1MP8jnzxh5g PEu3NQjPXqRMJw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:04:47 2025 by rpki-client