This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft File: ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json) Hash identifier: U64qAvgk2etyT8ls9ZZLtlzEyYgFLZ97nYwFdKiKnWU= Subject key identifier: 1A:AA:B9:FB:19:F1:96:49:09:B1:B6:B4:90:EA:72:EE:48:ED:9E:2B Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA Certificate issuer: /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Certificate serial: 019B383374F8AF913D862A69ABCD3C57D115 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft Manifest number: 083E Signing time: Fri 19 Dec 2025 20:00:54 +0000 Manifest this update: Fri 19 Dec 2025 20:00:54 +0000 Manifest next update: Sat 20 Dec 2025 20:00:54 +0000 Files and hashes: 1: chSUy_WX_Mse1L_Zh-GnPPV45Wk.roa (hash: BdzlPc3HpSD69LQhKLGFCf7tQNLnvI967xxASmmhAH4=) 2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: mpGe3FPz21gW5AuC8cvcu33O0zhK3ez8pHB4cXuARXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:74:f8:af:91:3d:86:2a:69:ab:cd:3c:57:d1:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca Validity Not Before: Dec 19 20:00:54 2025 GMT Not After : Dec 20 20:00:54 2025 GMT Subject: CN=1aaab9fb19f1964909b1b6b490ea72ee48ed9e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6e:ee:c5:45:a0:ed:f4:5f:ee:c9:1f:6c:a5: 3f:9a:c3:f4:bc:fb:b2:b7:66:94:2d:d3:29:12:fb: 4f:3b:1c:78:ba:70:ab:1a:d6:c1:fe:b0:2f:54:9c: 93:b6:1e:7d:bb:7d:7a:99:ab:be:2b:be:13:75:99: a1:b7:98:ef:d9:53:86:35:61:81:4a:53:38:59:b8: a9:44:d8:c7:6f:94:7e:1a:05:b1:4d:05:88:1f:ca: 41:7c:6b:0a:80:d3:cb:bc:a7:c1:41:32:5c:99:0c: 66:96:fa:a0:61:73:3f:86:fd:83:52:4f:f9:ac:36: 8e:4f:ee:db:b0:78:a8:26:6d:78:e2:32:3f:1c:53: 0a:c8:74:bd:ea:15:4d:31:f1:d9:9b:88:39:26:84: 65:f8:7f:39:5e:76:f8:02:97:f0:93:4f:29:15:b0: 18:98:2b:e9:44:ab:e3:7e:7c:78:ac:fc:23:59:8c: af:29:b3:39:2e:86:d3:1b:25:ed:e3:ae:91:ea:0c: 8c:97:82:2a:76:92:f4:cf:7e:9e:e5:19:da:2c:54: 7a:10:b6:b3:70:ac:74:c6:db:d7:5f:20:44:d6:01: 4d:3a:14:a2:3d:bd:7e:74:4a:ab:8b:33:11:e6:d7: 62:f4:23:17:db:c5:cd:9f:96:57:56:1c:66:f3:27: 58:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:B9:FB:19:F1:96:49:09:B1:B6:B4:90:EA:72:EE:48:ED:9E:2B X509v3 Authority Key Identifier: keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f3:ce:b5:6a:0b:55:d3:4b:52:84:fc:f2:52:84:1a:38:30: bb:9c:52:dc:3e:87:48:c1:7d:5c:a7:d1:f5:c8:c3:14:0e:c1: a3:06:9a:b9:75:c5:c4:ba:7f:b2:85:cc:e9:a8:36:12:96:29: 77:00:65:86:5d:c5:cb:5b:91:92:b0:7b:57:54:7b:9a:24:f2: 69:08:69:de:90:7c:35:ee:12:33:29:a4:05:16:b4:78:ef:64: 15:05:92:74:23:b8:21:c8:b3:24:a2:68:d1:b0:b9:4a:b1:10: 57:74:b8:9b:59:93:cc:3e:ba:8b:71:74:82:76:9e:7d:c6:f7: 82:d0:db:41:92:c9:56:70:6f:08:86:69:1c:ec:33:38:ba:59: c0:73:05:d7:41:75:c8:56:ce:08:ee:dc:76:6f:65:8a:43:d4: 69:6c:00:be:eb:89:25:94:42:b0:cd:44:b4:fa:64:16:50:7e: 3e:9d:65:dc:c5:4f:ab:d7:69:02:54:c3:78:05:d5:9f:d4:13: 55:15:c5:2b:c8:fa:c3:c2:1c:28:ba:46:3d:77:0c:e0:0a:26: 90:16:02:14:e8:96:24:d0:d9:bf:81:fe:4b:20:8d:d4:d6:f6: 9b:e2:83:fe:75:90:a8:d9:2a:d7:c1:36:c3:77:b2:fe:40:a2: ca:05:f5:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M3T4r5E9hippq808V9EVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy OTY1Y2EwHhcNMjUxMjE5MjAwMDU0WhcNMjUxMjIwMjAwMDU0WjAzMTEwLwYDVQQD EygxYWFhYjlmYjE5ZjE5NjQ5MDliMWI2YjQ5MGVhNzJlZTQ4ZWQ5ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W7uxUWg7fRf7skfbKU/msP0vPuy t2aULdMpEvtPOxx4unCrGtbB/rAvVJyTth59u316mau+K74TdZmht5jv2VOGNWGB SlM4WbipRNjHb5R+GgWxTQWIH8pBfGsKgNPLvKfBQTJcmQxmlvqgYXM/hv2DUk/5 rDaOT+7bsHioJm144jI/HFMKyHS96hVNMfHZm4g5JoRl+H85Xnb4Apfwk08pFbAY mCvpRKvjfnx4rPwjWYyvKbM5LobTGyXt466R6gyMl4IqdpL0z36e5RnaLFR6ELaz cKx0xtvXXyBE1gFNOhSiPb1+dEqrizMR5tdi9CMX28XNn5ZXVhxm8ydYRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqqufsZ8ZZJCbG2tJDqcu5I7Z4rMB8GA1UdIwQY MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3 LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/POtWoL VdNLUoT88lKEGjgwu5xS3D6HSMF9XKfR9cjDFA7BowaauXXFxLp/soXM6ag2EpYp dwBlhl3Fy1uRkrB7V1R7miTyaQhp3pB8Ne4SMymkBRa0eO9kFQWSdCO4IcizJKJo 0bC5SrEQV3S4m1mTzD66i3F0gnaefcb3gtDbQZLJVnBvCIZpHOwzOLpZwHMF10F1 yFbOCO7cdm9likPUaWwAvuuJJZRCsM1EtPpkFlB+Pp1l3MVPq9dpAlTDeAXVn9QT VRXFK8j6w8IcKLpGPXcM4AomkBYCFOiWJNDZv4H+SyCN1Nb2m+KD/nWQqNkq18E2 w3ey/kCiygX16A== -----END CERTIFICATE-----Generated at Sat Dec 20 01:32:23 2025 by rpki-client