This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft File: FERkZscdJGWMi29-rlMF_r0XpLo.mft (raw, json) Hash identifier: zcHLJMpUH68R5Sdvqkzuw0gBOPw+sbBecZXuSBWL/Ws= Subject key identifier: 41:42:0C:AB:88:DE:D8:DB:20:E0:9F:F0:6B:55:75:E6:C3:A4:96:56 Authority key identifier: 14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA Certificate issuer: /CN=14446466c71d24658c8b6f7eae5305febd17a4ba Certificate serial: 019B3A220B505AC24800CCA308887D475658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft Manifest number: 0A15 Signing time: Sat 20 Dec 2025 05:01:08 +0000 Manifest this update: Sat 20 Dec 2025 05:01:08 +0000 Manifest next update: Sun 21 Dec 2025 05:01:08 +0000 Files and hashes: 1: FERkZscdJGWMi29-rlMF_r0XpLo.crl (hash: weSBFcHAO1E25O5G9TU0VDevSIFefSp/rBuBbTR4j8g=) 2: ejnyKRBFEQteemyTpx_XwL9WEoE.roa (hash: L7f+NgrhnFRrMcq6mzZZsAksYKVqOvHcdasuAWPBdro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:0b:50:5a:c2:48:00:cc:a3:08:88:7d:47:56:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14446466c71d24658c8b6f7eae5305febd17a4ba Validity Not Before: Dec 20 05:01:08 2025 GMT Not After : Dec 21 05:01:08 2025 GMT Subject: CN=41420cab88ded8db20e09ff06b5575e6c3a49656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:f0:09:83:84:fc:ad:60:08:2d:58:21:8e: 24:89:e4:f9:c3:2b:fb:e1:7d:0b:15:3c:61:d0:98: c8:40:7c:11:9b:b7:67:83:3e:62:46:65:69:a4:0f: 0f:d0:ed:77:a9:be:6b:c0:d3:c9:76:7b:de:a2:9c: d3:e4:df:b4:1c:c8:f3:bd:be:36:05:e9:94:8c:b8: 65:c3:a8:27:d9:ee:f2:fa:c1:f4:2e:7a:72:07:f8: a2:d5:eb:7f:cc:29:29:06:98:a6:3e:97:04:6f:4b: d3:c2:a8:e9:5b:9f:bc:b6:3e:e3:a1:61:c8:e3:fd: 3f:6a:18:3b:3a:88:0b:ce:75:53:7e:41:99:85:ef: 28:03:2f:61:ce:8e:71:d8:6b:ea:6e:f7:ba:d1:20: 30:55:d2:f4:94:8f:43:d2:8c:d4:ab:a4:96:f9:4b: 59:55:c0:19:c7:2a:64:63:2f:0b:07:90:4f:55:25: 93:fb:5d:c0:33:c0:8d:63:75:b7:ec:36:da:43:5a: 71:1a:ed:76:c5:a6:ce:fa:a5:29:8c:05:62:73:ed: d5:11:ea:cc:3c:e0:6e:f4:e3:c8:80:a3:74:85:72: 5a:d3:fa:91:71:e1:59:be:40:4e:d9:a1:b7:48:be: 9d:04:93:d1:1d:ce:c9:f6:ac:6b:ce:06:94:57:95: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:42:0C:AB:88:DE:D8:DB:20:E0:9F:F0:6B:55:75:E6:C3:A4:96:56 X509v3 Authority Key Identifier: keyid:14:44:64:66:C7:1D:24:65:8C:8B:6F:7E:AE:53:05:FE:BD:17:A4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FERkZscdJGWMi29-rlMF_r0XpLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/FERkZscdJGWMi29-rlMF_r0XpLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:92:ba:27:43:d7:a2:58:d8:34:21:0c:10:8a:57:c8:f6:91: 06:75:4c:ab:20:eb:98:0b:cb:8a:b4:1d:f0:89:c2:9c:ae:9e: 0d:b2:14:55:d2:cc:e3:b7:5e:75:57:65:d3:25:7b:32:34:49: e0:23:3d:dd:82:7c:3d:27:49:c1:f9:12:c3:70:41:1b:b9:81: e9:1b:1b:5c:be:7a:6c:70:5b:bb:c4:26:bc:aa:4f:38:c8:56: c1:9a:8f:6f:ce:f7:da:33:50:b8:b3:fe:ea:07:cc:cd:a4:b7: 41:35:8c:e8:c9:2d:2a:f9:c3:2a:0e:e9:a9:e8:6f:b4:52:c9: 96:a3:07:88:77:3d:27:30:2c:63:ef:34:10:28:d2:69:e4:39: ff:f0:b8:f6:d4:2c:28:9c:86:34:ba:3b:ec:af:35:aa:7a:45: 81:4c:c4:5f:b5:e1:cc:ee:cf:51:a9:be:d2:dd:12:40:f5:62: f7:82:30:8d:d0:ab:fb:1a:02:40:90:e6:a8:9d:07:dc:52:f0: 83:40:24:0a:d5:21:98:f1:05:65:55:dd:1e:d2:88:a4:32:70: 45:eb:23:5e:e6:ed:ef:0f:ad:87:f1:65:f0:e7:e9:e8:e7:56: 94:29:3e:fd:6a:1c:69:06:0c:bd:d8:a2:a7:6f:be:27:ba:41: 49:18:c6:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IgtQWsJIAMyjCIh9R1ZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NDQ2NDY2YzcxZDI0NjU4YzhiNmY3ZWFlNTMwNWZlYmQx N2E0YmEwHhcNMjUxMjIwMDUwMTA4WhcNMjUxMjIxMDUwMTA4WjAzMTEwLwYDVQQD Eyg0MTQyMGNhYjg4ZGVkOGRiMjBlMDlmZjA2YjU1NzVlNmMzYTQ5NjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse7wCYOE/K1gCC1YIY4kieT5wyv7 4X0LFTxh0JjIQHwRm7dngz5iRmVppA8P0O13qb5rwNPJdnveopzT5N+0HMjzvb42 BemUjLhlw6gn2e7y+sH0LnpyB/ii1et/zCkpBpimPpcEb0vTwqjpW5+8tj7joWHI 4/0/ahg7OogLznVTfkGZhe8oAy9hzo5x2Gvqbve60SAwVdL0lI9D0ozUq6SW+UtZ VcAZxypkYy8LB5BPVSWT+13AM8CNY3W37DbaQ1pxGu12xabO+qUpjAVic+3VEerM POBu9OPIgKN0hXJa0/qRceFZvkBO2aG3SL6dBJPRHc7J9qxrzgaUV5UM9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFCDKuI3tjbIOCf8GtVdebDpJZWMB8GA1UdIwQY MBaAFBREZGbHHSRljItvfq5TBf69F6S6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUt NjQwZTA3NWJmODdmLzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC81NjZmYjMtYTY0MS00ZDE5LWE1OGUtNjQwZTA3NWJmODdm LzEvRkVSa1pzY2RKR1dNaTI5LXJsTUZfcjBYcExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpK6J0PX oljYNCEMEIpXyPaRBnVMqyDrmAvLirQd8InCnK6eDbIUVdLM47dedVdl0yV7MjRJ 4CM93YJ8PSdJwfkSw3BBG7mB6RsbXL56bHBbu8QmvKpPOMhWwZqPb8732jNQuLP+ 6gfMzaS3QTWM6MktKvnDKg7pqehvtFLJlqMHiHc9JzAsY+80ECjSaeQ5//C49tQs KJyGNLo77K81qnpFgUzEX7XhzO7PUam+0t0SQPVi94IwjdCr+xoCQJDmqJ0H3FLw g0AkCtUhmPEFZVXdHtKIpDJwResjXubt7w+th/Fl8Ofp6OdWlCk+/WocaQYMvdii p2++J7pBSRjGpw== -----END CERTIFICATE-----Generated at Sat Dec 20 11:15:51 2025 by rpki-client