This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json) Hash identifier: avPcUkRil0B+v7qxM1Ev+pLT9gjps+W7DH6CO6nDFFI= Subject key identifier: 26:42:DC:F7:5A:79:6B:17:93:21:C7:3E:F9:D5:CC:64:59:BC:F5:C3 Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Certificate serial: 019B23D0B14E6D8155517ECDD2A0C1E0376A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft Manifest number: 05B0 Signing time: Mon 15 Dec 2025 21:00:37 +0000 Manifest this update: Mon 15 Dec 2025 21:00:37 +0000 Manifest next update: Tue 16 Dec 2025 21:00:37 +0000 Files and hashes: 1: OxZ_SQFVJ8uzPWSjGADnIMI-uGA.roa (hash: cxXlIHKPRbElTrIxapfIyNaAYnC9ppfTzQIGpRQ/AhY=) 2: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: aXRwnv5LxYr9EzaQHCAclZx9Q4vp4CWTSGkpLV5v47w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d0:b1:4e:6d:81:55:51:7e:cd:d2:a0:c1:e0:37:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Validity Not Before: Dec 15 21:00:37 2025 GMT Not After : Dec 16 21:00:37 2025 GMT Subject: CN=2642dcf75a796b179321c73ef9d5cc6459bcf5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6e:0d:74:76:ac:21:0d:ed:2c:69:46:af:52: c6:85:0e:95:c9:e6:cc:f9:d4:2a:21:49:2f:7e:cb: 56:6b:c6:d6:d0:95:80:8b:77:57:ce:19:8d:60:c0: 1b:8d:53:9e:7c:9c:da:d9:04:b5:3f:8f:8e:20:cb: 44:fe:55:23:78:22:58:76:af:22:9f:87:3d:e2:7e: e2:90:8a:e2:e7:ec:fe:30:e0:cc:b4:4b:b2:55:46: 23:c4:3b:8b:a2:6a:e4:60:15:b2:30:cb:a4:7d:4e: ed:21:ed:97:09:b1:a5:cf:42:c9:2e:32:15:c1:e5: 0e:0c:66:14:02:6e:9b:be:5b:be:cf:0f:89:66:29: bb:98:f5:29:34:12:c9:b4:6e:ed:de:b7:2f:b4:71: 49:48:ad:21:26:64:05:a9:e7:78:e0:8c:f5:6d:a3: 5d:b7:be:24:f3:96:3e:1a:63:34:c9:76:c7:c1:44: ce:56:2b:1e:6e:57:46:14:ab:54:48:b4:ab:d3:c1: 76:51:60:47:4e:37:53:21:1b:e0:55:fc:a1:f7:5a: 59:97:41:84:4b:72:88:8b:30:5f:66:91:87:3b:01: 3c:54:fa:5e:52:89:0e:c5:b1:d6:1c:2c:d7:0c:cb: ea:09:90:a5:be:72:73:9c:ad:bc:09:b5:29:67:67: 15:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:42:DC:F7:5A:79:6B:17:93:21:C7:3E:F9:D5:CC:64:59:BC:F5:C3 X509v3 Authority Key Identifier: keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:13:cf:48:df:42:b0:ff:12:97:43:a9:5b:91:ab:7f:a4:98: 91:f7:2c:39:8e:ac:8c:e7:32:3a:e4:73:c5:86:df:07:95:81: 61:b4:21:1c:64:c5:95:dc:d2:9e:68:c5:80:15:7a:9f:9d:af: ea:48:00:90:c8:7c:f2:47:5b:3f:f0:31:dc:ad:20:d7:d2:16: f6:1d:07:82:9e:49:7c:12:7d:e4:dc:ad:01:f8:0b:ca:88:2d: 1d:6e:18:65:38:61:1a:30:e7:ce:80:98:a7:eb:5e:60:70:71: 15:2c:89:91:a9:a6:c2:3c:80:43:5d:e7:fc:9c:d0:c4:0c:7f: 33:74:24:eb:14:2b:e3:53:2b:5f:71:47:dc:dd:2b:cd:e7:d5: 69:bf:58:5d:8a:9c:f2:1e:4f:4e:b5:0a:91:88:9c:20:91:9c: 8a:79:cc:cd:1f:b0:fd:37:a1:40:c0:38:b0:95:dd:88:e9:37: c9:3b:05:c8:78:29:20:c2:a8:e7:81:2f:9e:ed:35:69:7b:c2: 33:f2:4e:66:2a:75:14:c1:ad:84:40:70:f0:9c:72:7a:2c:d5: bb:60:4b:28:54:46:58:97:eb:98:af:80:1a:12:25:f4:de:8f: bc:55:ee:5c:96:91:c9:62:3f:82:15:9c:38:fd:99:31:6e:be: d6:93:fc:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0LFObYFVUX7N0qDB4DdqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWVjN2ViYjVjYzg3M2NjNzE3OTY2MGFjZmNhODA0ZDkx MWFiNjYwHhcNMjUxMjE1MjEwMDM3WhcNMjUxMjE2MjEwMDM3WjAzMTEwLwYDVQQD EygyNjQyZGNmNzVhNzk2YjE3OTMyMWM3M2VmOWQ1Y2M2NDU5YmNmNWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm4NdHasIQ3tLGlGr1LGhQ6VyebM +dQqIUkvfstWa8bW0JWAi3dXzhmNYMAbjVOefJza2QS1P4+OIMtE/lUjeCJYdq8i n4c94n7ikIri5+z+MODMtEuyVUYjxDuLomrkYBWyMMukfU7tIe2XCbGlz0LJLjIV weUODGYUAm6bvlu+zw+JZim7mPUpNBLJtG7t3rcvtHFJSK0hJmQFqed44Iz1baNd t74k85Y+GmM0yXbHwUTOVisebldGFKtUSLSr08F2UWBHTjdTIRvgVfyh91pZl0GE S3KIizBfZpGHOwE8VPpeUokOxbHWHCzXDMvqCZClvnJznK28CbUpZ2cVqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZC3PdaeWsXkyHHPvnVzGRZvPXDMB8GA1UdIwQY MBaAFH3ux+u1zIc8xxeWYKz8qATZEatmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmIt N2EyYTIxNzJlYzRmLzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmItN2EyYTIxNzJlYzRm LzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxPPSN9C sP8Sl0OpW5Grf6SYkfcsOY6sjOcyOuRzxYbfB5WBYbQhHGTFldzSnmjFgBV6n52v 6kgAkMh88kdbP/Ax3K0g19IW9h0Hgp5JfBJ95NytAfgLyogtHW4YZThhGjDnzoCY p+teYHBxFSyJkammwjyAQ13n/JzQxAx/M3Qk6xQr41MrX3FH3N0rzefVab9YXYqc 8h5PTrUKkYicIJGcinnMzR+w/TehQMA4sJXdiOk3yTsFyHgpIMKo54Evnu01aXvC M/JOZip1FMGthEBw8JxyeizVu2BLKFRGWJfrmK+AGhIl9N6PvFXuXJaRyWI/ghWc OP2ZMW6+1pP8Ww== -----END CERTIFICATE-----Generated at Tue Dec 16 00:28:41 2025 by rpki-client