This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json) Hash identifier: O9ZpHknxATkNR0/OwkhPKvU6ioXg4uX++Q9edx8yodU= Subject key identifier: 80:0B:18:1F:24:60:D2:7F:01:F8:FA:13:31:93:B9:2F:0E:C0:49:55 Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f Certificate serial: 019B101414ADF9F472681E6D0989AFF25328 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 01:01:50 +0000 Manifest this update: Fri 12 Dec 2025 01:01:50 +0000 Manifest next update: Sat 13 Dec 2025 01:01:50 +0000 Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: A715Ch1tXw1Zjp3ta/AvHy1M3QrJaiyxtfi+aQ3bq1M=) 2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:14:ad:f9:f4:72:68:1e:6d:09:89:af:f2:53:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f Validity Not Before: Dec 12 01:01:50 2025 GMT Not After : Dec 13 01:01:50 2025 GMT Subject: CN=800b181f2460d27f01f8fa133193b92f0ec04955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b0:c8:27:43:15:28:36:27:aa:87:a5:1a:09: 65:f9:bb:c1:f0:b4:38:1b:7f:ba:60:f4:21:cf:a7: df:b2:8a:b2:b0:4e:be:1a:23:bc:e6:58:af:15:35: ec:9f:fb:e1:96:ae:00:07:28:42:2b:55:c0:a0:0a: 4e:ca:e9:fb:84:8f:44:75:31:f6:0b:b8:92:1b:6f: 60:28:a3:2b:d9:86:72:a5:0b:8f:a3:52:8e:0a:56: 48:93:3d:75:65:a9:9c:83:9a:6c:7a:72:4b:38:69: 8a:3e:c1:07:98:68:28:6b:00:ce:d3:f8:31:66:27: d1:ba:2a:81:cd:21:65:14:80:b1:0d:5b:bf:b8:39: 36:9c:ed:9c:78:79:ec:a9:31:6e:b9:38:f8:3c:33: df:26:ad:aa:1f:47:dd:74:a3:ca:f2:59:df:78:55: c8:5c:c9:13:bf:69:67:31:1a:43:1c:cf:e4:07:65: 4f:77:75:f9:89:90:88:27:13:47:52:a6:c6:89:12: 83:eb:30:1e:8c:e9:1e:7c:f6:c8:47:41:88:32:d2: a1:97:05:89:e0:44:65:cd:58:2f:c6:7c:f0:41:a5: 3b:44:d7:e7:17:41:7b:65:fc:cb:55:4a:36:e4:15: f7:6b:15:4c:39:03:f3:44:08:94:86:f6:c5:29:ee: 64:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0B:18:1F:24:60:D2:7F:01:F8:FA:13:31:93:B9:2F:0E:C0:49:55 X509v3 Authority Key Identifier: keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d0:49:a6:9c:ef:7b:e4:c6:c3:7f:4e:61:e0:e7:ed:2f:58: 97:6f:76:46:9b:39:72:7f:55:9b:ca:69:86:24:1c:4a:bd:bb: 52:79:ef:ce:3c:50:89:e2:c4:b4:fe:22:fd:ea:74:dd:8d:45: 80:74:0b:18:38:09:f5:52:f6:76:58:08:78:71:1d:60:b1:68: 62:bd:eb:36:6b:64:3b:36:ca:07:06:21:35:d8:ef:eb:c5:36: 0b:5a:09:f0:01:38:b1:4d:c7:c6:b1:ec:13:9f:22:d9:f2:cc: 07:ac:b3:69:1a:ec:2c:ec:be:89:8c:c5:b2:1b:85:fc:1c:6a: 26:bd:b2:60:ea:cc:24:26:55:bd:13:ef:1d:fc:92:4f:f1:c6: 49:01:30:2d:d6:99:23:cd:1a:c0:4b:01:73:b2:c4:1c:0f:87: 79:00:b0:11:15:c0:e3:b7:85:bd:b7:27:58:3b:21:fb:d5:30: b5:77:7f:9f:35:6c:69:5a:8d:32:1f:a3:f5:bc:49:df:44:d4: a0:5e:5f:ac:2a:b0:5c:fc:4b:58:58:72:b6:1d:89:d9:7f:56: 04:2c:73:2b:65:ba:8c:d8:29:30:e3:83:56:a0:40:10:bd:b3: f6:1b:e8:2e:b0:a3:51:9e:fd:43:73:74:f9:d9:5d:25:32:0e: 49:d7:04:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFBSt+fRyaB5tCYmv8lMoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmVkYzE3MDU1NzZkOTdmZTRhZDIwMjkxZGUxOTg0NzNk ODE1NmYwHhcNMjUxMjEyMDEwMTUwWhcNMjUxMjEzMDEwMTUwWjAzMTEwLwYDVQQD Eyg4MDBiMTgxZjI0NjBkMjdmMDFmOGZhMTMzMTkzYjkyZjBlYzA0OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bDIJ0MVKDYnqoelGgll+bvB8LQ4 G3+6YPQhz6ffsoqysE6+GiO85livFTXsn/vhlq4AByhCK1XAoApOyun7hI9EdTH2 C7iSG29gKKMr2YZypQuPo1KOClZIkz11Zamcg5psenJLOGmKPsEHmGgoawDO0/gx ZifRuiqBzSFlFICxDVu/uDk2nO2ceHnsqTFuuTj4PDPfJq2qH0fddKPK8lnfeFXI XMkTv2lnMRpDHM/kB2VPd3X5iZCIJxNHUqbGiRKD6zAejOkefPbIR0GIMtKhlwWJ 4ERlzVgvxnzwQaU7RNfnF0F7ZfzLVUo25BX3axVMOQPzRAiUhvbFKe5k9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIALGB8kYNJ/Afj6EzGTuS8OwElVMB8GA1UdIwQY MBaAFBX+3BcFV22X/krSApHeGYRz2BVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMt ZDQ3MmU0OWY1OTFlLzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9lMjdlYjgtYWY2NC00NDZlLTg4ZWMtZDQ3MmU0OWY1OTFl LzEvRmY3Y0Z3VlhiWmYtU3RJQ2tkNFpoSFBZRlc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9BJppzv e+TGw39OYeDn7S9Yl292Rps5cn9Vm8pphiQcSr27UnnvzjxQieLEtP4i/ep03Y1F gHQLGDgJ9VL2dlgIeHEdYLFoYr3rNmtkOzbKBwYhNdjv68U2C1oJ8AE4sU3HxrHs E58i2fLMB6yzaRrsLOy+iYzFshuF/BxqJr2yYOrMJCZVvRPvHfyST/HGSQEwLdaZ I80awEsBc7LEHA+HeQCwERXA47eFvbcnWDsh+9UwtXd/nzVsaVqNMh+j9bxJ30TU oF5frCqwXPxLWFhyth2J2X9WBCxzK2W6jNgpMOODVqBAEL2z9hvoLrCjUZ79Q3N0 +dldJTIOSdcEfw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:31:23 2025 by rpki-client