This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json) Hash identifier: +IoFzBchAX49QJLk5qMP4QoMNMyJxWJWyTW4bSH+yJ8= Subject key identifier: FE:71:E7:B0:F5:A4:A8:0A:57:00:B6:6D:AB:23:FE:93:76:37:15:3D Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Certificate serial: 019AF0BEECB715FBA46C366F207561BD654B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:35 +0000 Manifest this update: Fri 05 Dec 2025 23:00:35 +0000 Manifest next update: Sat 06 Dec 2025 23:00:35 +0000 Files and hashes: 1: _RPvfjikj0iax2XrX7kBOpxgmjQ.roa (hash: VpB33gFRy5WKsX1Z1hgRswTD+xePv0JXdiIfDbuLSIU=) 2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: N9fSX80BBAlwK0ONiis3XLU4vv4CCXzYkl9VnDTd6dM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ec:b7:15:fb:a4:6c:36:6f:20:75:61:bd:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Validity Not Before: Dec 5 23:00:35 2025 GMT Not After : Dec 6 23:00:35 2025 GMT Subject: CN=fe71e7b0f5a4a80a5700b66dab23fe937637153d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:18:b8:55:ac:cb:2e:19:7e:4e:31:9b:71:89: 17:32:ae:76:23:c0:78:bb:b8:f1:db:1a:90:ec:4b: 97:d1:0a:a9:7d:99:6f:d7:0d:1b:ac:29:42:c9:a3: 88:d9:c5:ec:82:71:6e:af:8a:62:71:e3:5c:63:54: 41:c4:e3:61:96:12:14:0e:7c:de:86:77:43:e1:ef: 74:63:05:e9:41:83:20:04:ad:3b:da:d5:fc:b8:5a: 28:4e:ff:b3:2a:1d:63:90:5a:f0:0d:4a:99:a3:b8: 69:04:46:06:a8:ca:8f:12:45:cf:ae:5f:05:aa:e4: bd:01:a5:fe:5b:24:a5:50:4a:50:3c:fe:4a:54:a3: ab:f7:88:fe:8f:89:a5:5c:5e:ab:3d:ee:a6:62:f8: ab:de:24:1d:d3:c6:ec:ed:d5:59:33:0f:a2:be:cf: b8:9a:45:ee:a8:b1:1e:f6:ce:1f:a8:b5:2d:7a:3f: b6:cc:bd:79:61:c8:b4:f9:fc:7b:3b:29:eb:2d:8d: 73:88:01:f1:fc:23:7c:d8:b0:d6:c2:ab:11:e3:9c: 5c:d1:74:4e:67:36:80:75:a0:71:94:d8:a0:3c:d9: 00:e0:d0:cf:2a:75:29:0d:c6:94:1d:60:0c:fe:af: d8:2d:23:57:7b:09:69:a6:56:68:be:c2:3f:3e:30: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:71:E7:B0:F5:A4:A8:0A:57:00:B6:6D:AB:23:FE:93:76:37:15:3D X509v3 Authority Key Identifier: keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:de:54:ff:c3:5a:e4:5b:b1:24:5f:fa:7e:5d:5f:f0:f1:7d: b2:cb:a7:a2:95:72:01:ad:e5:a8:aa:ef:58:9c:47:3e:d4:b9: 2f:ee:d2:45:38:d9:81:0e:3d:91:76:dc:8f:80:df:67:ac:0a: 50:af:6a:74:2e:f7:2a:87:dc:c4:e8:09:64:3f:57:72:50:2d: f3:ac:bd:4e:42:5f:dc:08:4f:49:c4:63:34:5c:27:4b:5f:09: fe:71:8c:5a:bd:2d:99:23:84:c1:89:4a:cd:27:65:bf:56:58: 12:4f:a4:09:c8:1a:3f:ea:fe:b5:0d:40:85:ac:e0:31:ff:6f: cd:a5:1d:76:3e:06:f1:72:63:e5:31:21:29:8a:1a:12:91:4b: 93:31:64:e9:7e:e0:4a:0a:ef:60:ca:8f:14:7d:f7:47:8e:ca: 16:14:70:3e:34:29:7a:3f:b2:aa:9d:5c:43:e4:9b:55:7a:8b: 6b:a7:25:46:04:31:c9:7e:b9:1c:1a:1c:94:55:43:8e:ad:f1: ba:16:43:ac:6b:dd:d1:34:76:1c:5c:78:d9:f0:d4:88:21:39: 85:16:65:ad:58:e2:2b:57:41:6c:ba:46:7b:41:e4:bc:a1:83: 24:18:84:74:ff:c9:27:67:36:ff:ab:f0:24:58:7f:fc:a1:26: 9b:02:77:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuy3FfukbDZvIHVhvWVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm NTY1NjgwHhcNMjUxMjA1MjMwMDM1WhcNMjUxMjA2MjMwMDM1WjAzMTEwLwYDVQQD EyhmZTcxZTdiMGY1YTRhODBhNTcwMGI2NmRhYjIzZmU5Mzc2MzcxNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xi4VazLLhl+TjGbcYkXMq52I8B4 u7jx2xqQ7EuX0QqpfZlv1w0brClCyaOI2cXsgnFur4piceNcY1RBxONhlhIUDnze hndD4e90YwXpQYMgBK072tX8uFooTv+zKh1jkFrwDUqZo7hpBEYGqMqPEkXPrl8F quS9AaX+WySlUEpQPP5KVKOr94j+j4mlXF6rPe6mYvir3iQd08bs7dVZMw+ivs+4 mkXuqLEe9s4fqLUtej+2zL15Yci0+fx7OynrLY1ziAHx/CN82LDWwqsR45xc0XRO ZzaAdaBxlNigPNkA4NDPKnUpDcaUHWAM/q/YLSNXewlpplZovsI/PjAv7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5x57D1pKgKVwC2basj/pN2NxU9MB8GA1UdIwQY MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt MDI3NGY0NDZkMzMxLzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt5U/8Na 5FuxJF/6fl1f8PF9ssunopVyAa3lqKrvWJxHPtS5L+7SRTjZgQ49kXbcj4DfZ6wK UK9qdC73KofcxOgJZD9XclAt86y9TkJf3AhPScRjNFwnS18J/nGMWr0tmSOEwYlK zSdlv1ZYEk+kCcgaP+r+tQ1AhazgMf9vzaUddj4G8XJj5TEhKYoaEpFLkzFk6X7g SgrvYMqPFH33R47KFhRwPjQpej+yqp1cQ+SbVXqLa6clRgQxyX65HBoclFVDjq3x uhZDrGvd0TR2HFx42fDUiCE5hRZlrVjiK1dBbLpGe0HkvKGDJBiEdP/JJ2c2/6vw JFh//KEmmwJ33w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:49 2025 by rpki-client