This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft File: FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json) Hash identifier: WS1MLi2IOS6DoupzZZzwSf/RbB3KNltKWln/1ZKgmrY= Subject key identifier: 68:32:37:3B:3E:41:FC:3C:66:4C:88:CF:42:AB:06:5F:73:69:7E:FE Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35 Certificate issuer: /CN=1527455ea7fce17cfd0431985258d13e06bfa735 Certificate serial: 019AABDDACC397AFCD8A2A659BBBAB3A3662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft Manifest number: 1002 Signing time: Sat 22 Nov 2025 14:00:22 +0000 Manifest this update: Sat 22 Nov 2025 14:00:22 +0000 Manifest next update: Sun 23 Nov 2025 14:00:22 +0000 Files and hashes: 1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 1BfzAEx+g5J07aBxQmon356DdNQJtMxPJ5TuZzEcsA4=) 2: Iga5jVF2XbjPh1O_q93OfaOrlUw.roa (hash: fBv3VaWtz/fH5Sfra8JN+CYR+FXB74KZZK6MnISjtgU=) 3: RkTNkNwXGcwxNDKoWngjGCoOsDo.roa (hash: viD+EdaDQpdhn8ySGbMtrRw2kQFtzdWhY2WYnHuwvTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:ac:c3:97:af:cd:8a:2a:65:9b:bb:ab:3a:36:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735 Validity Not Before: Nov 22 14:00:22 2025 GMT Not After : Nov 23 14:00:22 2025 GMT Subject: CN=6832373b3e41fc3c664c88cf42ab065f73697efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:3b:55:d6:04:92:8c:65:16:c5:ca:fa:99: 2f:9a:de:fc:cf:49:32:d2:48:b8:d3:6a:49:81:99: aa:fe:4e:23:a0:88:51:20:e4:9b:c6:f0:52:d1:80: 47:05:25:b6:b8:5a:cd:f0:ec:c5:e7:c5:88:34:59: b0:65:0a:4c:c5:bf:dd:fe:b8:23:f6:7e:77:c8:36: a9:b6:71:4d:f8:d7:96:21:a7:ee:b2:f6:d5:eb:93: 27:12:60:77:e9:de:fb:54:bd:17:d2:cf:f8:a7:4d: 12:ee:3d:6d:60:e2:79:dc:23:24:48:b6:3c:30:21: 8b:92:f4:18:e4:2b:c0:39:08:d7:9e:e8:15:24:76: d6:df:0d:95:47:9a:14:b5:70:24:60:6d:3f:aa:ad: ba:16:8e:c9:cb:38:57:23:ec:c3:05:9b:a2:34:25: ac:5c:56:b7:5d:82:28:91:0d:6c:11:d4:e8:5f:ef: 19:18:11:8b:08:36:a7:49:06:b1:f4:31:2c:31:1b: 2b:3d:7c:f4:73:39:55:14:16:ef:30:5c:3c:6a:09: 01:01:4d:94:db:58:59:b2:21:25:b0:31:81:8a:2c: 8b:59:e6:0d:04:ad:77:48:3d:d7:fa:9c:68:ee:36: d3:2f:d7:35:22:25:26:25:2d:85:f9:69:de:b4:00: 11:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:32:37:3B:3E:41:FC:3C:66:4C:88:CF:42:AB:06:5F:73:69:7E:FE X509v3 Authority Key Identifier: keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:be:93:7e:ce:ee:23:46:e0:86:0a:63:fb:6e:39:2e:de:7b: be:4f:e0:d7:cf:3c:ce:a0:15:76:a2:2f:f9:f6:c4:58:4b:b8: 6e:98:76:d8:da:9a:14:27:57:78:6f:34:38:8c:da:01:1f:d3: 96:5f:10:09:bb:75:95:da:e6:50:3a:0d:ef:d0:55:c3:40:ab: a9:f6:06:58:ea:ed:67:87:f5:3d:ea:a4:a3:b4:d6:84:9e:67: b0:d2:20:ff:82:43:31:65:5f:d6:95:cb:02:2f:90:3e:5d:c5: 58:97:eb:5c:f0:e2:5e:7b:2a:65:91:a6:b1:7c:3b:0c:45:a9: 75:fb:b2:58:1f:d5:5e:c1:83:ed:d2:20:ae:c2:71:fb:eb:ab: 09:22:60:31:0e:2b:02:80:81:fc:5a:cf:a5:c1:08:38:91:b5: 36:0f:1f:fe:3c:a8:db:08:bb:f1:da:2f:a1:05:af:28:a8:61: 5f:10:4a:77:88:97:fb:c2:bb:cb:e1:7d:ad:ea:28:84:d6:23: 81:ee:26:38:4d:6e:e2:60:ce:3c:0f:02:d1:4c:28:a1:25:e0: 55:80:7e:70:72:17:45:46:20:64:5d:61:98:1a:e8:38:f1:17: cd:e5:26:e9:cf:1d:3f:d5:cc:79:c4:8a:04:b3:a3:d9:a2:cc: e3:1a:a6:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3azDl6/Niiplm7urOjZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Mjc0NTVlYTdmY2UxN2NmZDA0MzE5ODUyNThkMTNlMDZi ZmE3MzUwHhcNMjUxMTIyMTQwMDIyWhcNMjUxMTIzMTQwMDIyWjAzMTEwLwYDVQQD Eyg2ODMyMzczYjNlNDFmYzNjNjY0Yzg4Y2Y0MmFiMDY1ZjczNjk3ZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuA7VdYEkoxlFsXK+pkvmt78z0ky 0ki402pJgZmq/k4joIhRIOSbxvBS0YBHBSW2uFrN8OzF58WINFmwZQpMxb/d/rgj 9n53yDaptnFN+NeWIafusvbV65MnEmB36d77VL0X0s/4p00S7j1tYOJ53CMkSLY8 MCGLkvQY5CvAOQjXnugVJHbW3w2VR5oUtXAkYG0/qq26Fo7JyzhXI+zDBZuiNCWs XFa3XYIokQ1sEdToX+8ZGBGLCDanSQax9DEsMRsrPXz0czlVFBbvMFw8agkBAU2U 21hZsiElsDGBiiyLWeYNBK13SD3X+pxo7jbTL9c1IiUmJS2F+WnetAARRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgyNzs+Qfw8ZkyIz0KrBl9zaX7+MB8GA1UdIwQY MBaAFBUnRV6n/OF8/QQxmFJY0T4Gv6c1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUt OThmOGNjZDVkYjhkLzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8yNGM0ZjYtMjFlZS00YjZiLWE5NDUtOThmOGNjZDVkYjhk LzEvRlNkRlhxZjg0WHo5QkRHWVVsalJQZ2FfcHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb6Tfs7u I0bghgpj+245Lt57vk/g1888zqAVdqIv+fbEWEu4bph22NqaFCdXeG80OIzaAR/T ll8QCbt1ldrmUDoN79BVw0CrqfYGWOrtZ4f1Peqko7TWhJ5nsNIg/4JDMWVf1pXL Ai+QPl3FWJfrXPDiXnsqZZGmsXw7DEWpdfuyWB/VXsGD7dIgrsJx++urCSJgMQ4r AoCB/FrPpcEIOJG1Ng8f/jyo2wi78dovoQWvKKhhXxBKd4iX+8K7y+F9reoohNYj ge4mOE1u4mDOPA8C0UwooSXgVYB+cHIXRUYgZF1hmBroOPEXzeUm6c8dP9XMecSK BLOj2aLM4xqmTg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:59 2025 by rpki-client