This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft File: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft (raw, json) Hash identifier: /A6YtSk1kpbf82rn/w9LSpR8sj/YAlh+l8XnE9AFZ5U= Subject key identifier: 05:C0:1A:4F:54:B1:0B:77:CA:DD:D5:3E:95:8E:CF:64:29:60:8E:1E Authority key identifier: 7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F Certificate issuer: /CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Certificate serial: 019AF50B257325306156F2B94CC4ED55F2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft Manifest number: 0C70 Signing time: Sat 06 Dec 2025 19:02:19 +0000 Manifest this update: Sat 06 Dec 2025 19:02:19 +0000 Manifest next update: Sun 07 Dec 2025 19:02:19 +0000 Files and hashes: 1: RdszoR0XDemrxWZ7ZuzRpfNYzZk.roa (hash: YWnaBwFSvymmXHCPjERkvxYdDqJ7Cm5zkK0Huya48uA=) 2: fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl (hash: e1wunYjMCWtdza3055zv9K7+vkv+Ie+09QG665deTBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:25:73:25:30:61:56:f2:b9:4c:c4:ed:55:f2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c45672fc42bdd33e545338a7417e8171a04ee3f Validity Not Before: Dec 6 19:02:19 2025 GMT Not After : Dec 7 19:02:19 2025 GMT Subject: CN=05c01a4f54b10b77caddd53e958ecf6429608e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:71:f2:ab:29:92:8e:a2:58:87:73:13:a2: b0:2e:69:72:f8:fa:39:0c:ae:c5:dc:27:5f:26:98: 0e:e9:79:ea:aa:ac:f1:18:34:6a:b6:e1:7c:8e:ca: 47:39:5c:df:6f:b2:3b:b9:7b:5d:1f:8a:77:33:24: 4c:ce:2a:82:06:48:36:57:5a:bb:87:fc:dd:fe:df: b8:e0:3a:7d:4c:83:e9:31:96:0a:a9:39:ff:21:65: 85:b2:9f:f1:4b:3a:ac:48:c6:4c:34:60:42:9d:96: 1d:2c:c0:d2:21:7c:cd:77:57:e0:1d:5a:0e:b7:be: d3:bc:49:e3:d7:65:47:b2:4c:11:24:cf:bf:ee:d5: 03:7d:a8:63:1d:9c:c3:40:c9:36:ea:2f:fe:12:cf: e9:d9:44:78:de:36:9e:f0:85:c9:a4:2a:88:b7:9d: ba:e1:36:f5:9b:80:08:4e:2f:c2:28:bb:c0:1e:27: 14:07:b3:fe:06:a9:45:1e:c4:a4:6d:4f:87:47:cd: 8e:94:71:9c:1a:5e:df:fb:cf:ee:24:aa:66:86:42: a2:fc:05:b5:1d:b0:e8:5d:da:98:de:96:33:cc:c2: 31:80:2b:ab:04:66:cc:d9:de:9d:03:af:82:a8:dd: 86:b4:24:46:c8:3b:1b:f2:4e:e6:74:ee:23:2c:e4: 7a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C0:1A:4F:54:B1:0B:77:CA:DD:D5:3E:95:8E:CF:64:29:60:8E:1E X509v3 Authority Key Identifier: keyid:7C:45:67:2F:C4:2B:DD:33:E5:45:33:8A:74:17:E8:17:1A:04:EE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/08af22-ffc9-4c1b-a9d7-94bedb5d0334/1/fEVnL8Qr3TPlRTOKdBfoFxoE7j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:63:47:2b:ea:7c:11:f2:5d:14:4e:c1:1b:71:e3:e4:56:1b: 9c:e7:59:6d:fe:ef:f2:36:b4:3e:ba:9e:5e:6d:26:ad:ee:f2: a6:35:25:48:c9:c7:1a:77:28:c9:79:99:f3:c8:5b:b1:70:38: d7:1a:9d:46:73:59:44:62:d3:32:29:a6:4c:9b:08:39:3c:05: 2c:1d:19:7c:61:7b:53:f9:b3:0a:3b:36:ee:88:41:55:13:1d: ab:0c:45:dc:ce:10:6d:f3:fb:c6:35:c9:36:03:58:50:ec:2e: 97:ce:96:3b:69:59:3f:46:4a:62:a6:5e:f1:ff:a1:ee:fa:b3: 4c:f1:18:c0:50:b9:0c:ef:3d:ed:1b:14:3c:1e:cd:ae:f4:ac: 0b:a7:6f:76:42:36:5b:74:9a:5d:c8:a1:d0:8e:98:cd:b3:eb: a4:35:1f:6d:d0:60:26:3c:b4:66:b0:86:59:62:da:af:f5:1f: 6b:5e:96:8c:2a:94:a5:b7:e4:49:53:3e:cf:6c:81:f9:d5:44: e7:48:93:32:93:30:24:32:9a:01:f8:d0:24:f6:79:59:78:26: 13:7c:55:cc:fc:88:f6:6c:58:a8:97:06:03:47:fc:f7:a5:d2: e1:2b:7b:02:ab:21:65:f3:93:90:1e:4b:29:9a:06:51:fe:b6: 49:53:75:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CyVzJTBhVvK5TMTtVfLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDU2NzJmYzQyYmRkMzNlNTQ1MzM4YTc0MTdlODE3MWEw NGVlM2YwHhcNMjUxMjA2MTkwMjE5WhcNMjUxMjA3MTkwMjE5WjAzMTEwLwYDVQQD EygwNWMwMWE0ZjU0YjEwYjc3Y2FkZGQ1M2U5NThlY2Y2NDI5NjA4ZTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrZx8qspko6iWIdzE6KwLmly+Po5 DK7F3CdfJpgO6XnqqqzxGDRqtuF8jspHOVzfb7I7uXtdH4p3MyRMziqCBkg2V1q7 h/zd/t+44Dp9TIPpMZYKqTn/IWWFsp/xSzqsSMZMNGBCnZYdLMDSIXzNd1fgHVoO t77TvEnj12VHskwRJM+/7tUDfahjHZzDQMk26i/+Es/p2UR43jae8IXJpCqIt526 4Tb1m4AITi/CKLvAHicUB7P+BqlFHsSkbU+HR82OlHGcGl7f+8/uJKpmhkKi/AW1 HbDoXdqY3pYzzMIxgCurBGbM2d6dA6+CqN2GtCRGyDsb8k7mdO4jLOR6FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXAGk9UsQt3yt3VPpWOz2QpYI4eMB8GA1UdIwQY MBaAFHxFZy/EK90z5UUzinQX6BcaBO4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDct OTRiZWRiNWQwMzM0LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wOGFmMjItZmZjOS00YzFiLWE5ZDctOTRiZWRiNWQwMzM0 LzEvZkVWbkw4UXIzVFBsUlRPS2RCZm9GeG9FN2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWNHK+p8 EfJdFE7BG3Hj5FYbnOdZbf7v8ja0PrqeXm0mre7ypjUlSMnHGncoyXmZ88hbsXA4 1xqdRnNZRGLTMimmTJsIOTwFLB0ZfGF7U/mzCjs27ohBVRMdqwxF3M4QbfP7xjXJ NgNYUOwul86WO2lZP0ZKYqZe8f+h7vqzTPEYwFC5DO897RsUPB7NrvSsC6dvdkI2 W3SaXcih0I6YzbPrpDUfbdBgJjy0ZrCGWWLar/Ufa16WjCqUpbfkSVM+z2yB+dVE 50iTMpMwJDKaAfjQJPZ5WXgmE3xVzPyI9mxYqJcGA0f896XS4St7AqshZfOTkB5L KZoGUf62SVN1Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:12:27 2025 by rpki-client