This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json) Hash identifier: 1biwRtCSddj59TF7HIDjGjWb3Szx7HShSNU1rji0IEw= Subject key identifier: F6:D1:5B:77:15:75:3F:1C:B6:7F:B0:43:3B:91:E2:AE:EF:E9:C1:D6 Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Certificate serial: 019B4C5F2FEFA515A573AB33BAC267DAE9CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft Manifest number: 09F4 Signing time: Tue 23 Dec 2025 18:01:04 +0000 Manifest this update: Tue 23 Dec 2025 18:01:04 +0000 Manifest next update: Wed 24 Dec 2025 18:01:04 +0000 Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: MX/Av8CCvzrU9Nqwnu+yNlmQbWoAqpEG8LAslKPrjdg=) 2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:2f:ef:a5:15:a5:73:ab:33:ba:c2:67:da:e9:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2 Validity Not Before: Dec 23 18:01:04 2025 GMT Not After : Dec 24 18:01:04 2025 GMT Subject: CN=f6d15b7715753f1cb67fb0433b91e2aeefe9c1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:76:7d:c8:0d:b5:17:4c:2a:c2:17:37:cd:0d: 64:a1:76:9b:bb:8d:da:b6:27:11:d3:8b:5f:65:fc: 15:0c:85:c5:c1:71:a3:7f:df:79:3c:b5:fa:dc:63: ad:06:bc:54:dd:fa:12:45:15:66:9c:43:75:e6:3a: 1c:28:d7:f3:ae:e7:f4:af:c2:bf:3f:1f:e2:10:17: 08:b6:b1:1b:1a:4b:7e:31:41:d7:fd:3f:c1:9d:cf: 91:5b:93:3d:ee:68:22:99:01:5d:42:9b:b5:b5:fa: c3:96:ae:e1:da:2c:77:bb:34:ad:1c:7f:41:40:f4: fc:fa:37:24:11:a5:41:3b:31:11:75:03:f4:49:fc: aa:59:1f:80:61:ee:5b:dc:6e:f6:29:62:ef:1f:28: ca:ab:28:77:99:48:67:79:f8:30:6f:fd:41:c6:1d: 46:c2:d5:5b:17:18:5f:a9:ad:62:67:37:ea:5e:79: 1b:08:90:42:81:3a:5e:95:d1:b4:7e:31:91:f9:f9: 1c:0d:28:1b:33:37:d3:aa:79:10:0b:eb:d6:24:fe: 21:96:0e:c6:56:74:40:7b:46:e8:33:5d:74:aa:a3: f0:36:e4:07:75:3a:d5:78:17:fb:1f:22:ca:09:79: 2f:ec:f0:11:67:3a:38:8e:23:21:29:82:8f:ce:4c: fc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D1:5B:77:15:75:3F:1C:B6:7F:B0:43:3B:91:E2:AE:EF:E9:C1:D6 X509v3 Authority Key Identifier: keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:2e:c4:b7:d4:ef:d6:32:3e:64:04:8a:3d:9f:99:b2:a8:a9: 8b:8e:0d:d7:f9:db:8e:58:81:fd:53:62:bb:08:e4:a1:51:2f: 17:ce:ca:49:1f:76:ff:90:02:a0:0b:b5:45:99:8e:2e:e8:5f: b3:61:16:20:b5:e5:35:19:bf:69:9e:0d:3a:10:e9:20:3d:ca: c1:9e:99:5e:57:40:13:9c:31:ac:82:f7:6d:a3:01:12:de:f8: 5c:0e:51:a2:b9:47:ba:89:d8:2b:ac:d9:d6:f2:86:1a:9c:73: 42:22:eb:6f:fc:c6:e3:d8:9b:8e:bc:f7:c6:32:89:1c:99:53: cc:18:73:9d:35:63:37:f5:c0:ff:fb:de:4d:9f:bc:5d:c4:03: 4e:b5:29:22:59:98:16:0d:8f:db:56:42:1a:ee:6a:b3:59:dc: 6c:4f:c1:39:3d:4c:d0:10:5d:c0:36:d4:dc:60:6f:22:c2:12: c7:fc:d6:89:d4:7c:ff:d1:e5:41:6b:61:83:3f:91:fc:c1:20: 8e:79:92:99:e8:7a:a4:56:f3:64:e2:e5:d8:27:e7:b3:0d:b5: e5:b1:1c:b1:5e:eb:4c:e4:72:34:48:60:ec:c1:bf:b1:85:d1: f3:73:f5:a0:b9:43:80:24:6f:97:14:b9:50:86:54:0b:f4:41: dc:fc:cd:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXy/vpRWlc6szusJn2unOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZWYzMmQ4YmYxNTNjMDRjNjM5M2JlMjRmMDYzMjQzZjdl OGE3ZTIwHhcNMjUxMjIzMTgwMTA0WhcNMjUxMjI0MTgwMTA0WjAzMTEwLwYDVQQD EyhmNmQxNWI3NzE1NzUzZjFjYjY3ZmIwNDMzYjkxZTJhZWVmZTljMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXZ9yA21F0wqwhc3zQ1koXabu43a ticR04tfZfwVDIXFwXGjf995PLX63GOtBrxU3foSRRVmnEN15jocKNfzruf0r8K/ Px/iEBcItrEbGkt+MUHX/T/Bnc+RW5M97mgimQFdQpu1tfrDlq7h2ix3uzStHH9B QPT8+jckEaVBOzERdQP0SfyqWR+AYe5b3G72KWLvHyjKqyh3mUhnefgwb/1Bxh1G wtVbFxhfqa1iZzfqXnkbCJBCgTpeldG0fjGR+fkcDSgbMzfTqnkQC+vWJP4hlg7G VnRAe0boM110qqPwNuQHdTrVeBf7HyLKCXkv7PARZzo4jiMhKYKPzkz8CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbRW3cVdT8ctn+wQzuR4q7v6cHWMB8GA1UdIwQY MBaAFBPvMti/FTwExjk74k8GMkP36KfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYt Mzg3NzA2YzJhODQ5LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xNDgyMWEtMjExOS00NzcxLThjNzYtMzg3NzA2YzJhODQ5 LzEvRS04eTJMOFZQQVRHT1R2aVR3WXlRX2ZvcC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdy7Et9Tv 1jI+ZASKPZ+Zsqipi44N1/nbjliB/VNiuwjkoVEvF87KSR92/5ACoAu1RZmOLuhf s2EWILXlNRm/aZ4NOhDpID3KwZ6ZXldAE5wxrIL3baMBEt74XA5RorlHuonYK6zZ 1vKGGpxzQiLrb/zG49ibjrz3xjKJHJlTzBhznTVjN/XA//veTZ+8XcQDTrUpIlmY Fg2P21ZCGu5qs1ncbE/BOT1M0BBdwDbU3GBvIsISx/zWidR8/9HlQWthgz+R/MEg jnmSmeh6pFbzZOLl2Cfnsw215bEcsV7rTORyNEhg7MG/sYXR83P1oLlDgCRvlxS5 UIZUC/RB3PzNKQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:40:36 2025 by rpki-client