This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json) Hash identifier: MECfgSi1W4P50o6AZ0QB7ye+epd2t91WPVrEMkfZTfc= Subject key identifier: 6B:40:22:D9:C7:F6:A4:EE:33:C8:32:CF:C8:CE:B9:AA:43:34:98:EE Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019B34C55789C874755ED9252EBC0CFB6BBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft Manifest number: 0F9E Signing time: Fri 19 Dec 2025 04:01:46 +0000 Manifest this update: Fri 19 Dec 2025 04:01:46 +0000 Manifest next update: Sat 20 Dec 2025 04:01:46 +0000 Files and hashes: 1: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: 65k+Q9SBTOhiTAA8twAQVRDAgVBqjrJTd9eMCiyFt5M=) 2: oC-GTHXGtoWIH_akxEXPO1Ui9dA.roa (hash: lh9QUHwP4a4QOFQ3TSIIf/mF/GalRL/fqqfPZQYfIfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:57:89:c8:74:75:5e:d9:25:2e:bc:0c:fb:6b:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Dec 19 04:01:46 2025 GMT Not After : Dec 20 04:01:46 2025 GMT Subject: CN=6b4022d9c7f6a4ee33c832cfc8ceb9aa433498ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3f:6c:2c:94:1c:ea:25:cb:60:1e:46:77:e5: e6:c0:54:d7:e5:d2:a1:7d:da:cb:8b:ee:e9:6f:1f: 11:93:a8:e6:8c:09:9c:64:11:63:0c:b1:03:36:64: 1c:aa:66:b5:81:bc:2d:1e:e4:dd:2d:bd:ad:12:6b: b7:b5:11:fe:ef:81:48:7a:9e:98:ee:ca:ab:e6:53: 49:11:42:9d:5f:0d:7f:6c:1e:b4:6a:ce:11:9c:96: e6:f2:12:a2:0b:a4:03:82:46:0d:14:65:94:ea:9e: a1:41:73:64:0a:82:ce:8c:08:ae:b7:34:53:50:0a: ca:6d:63:e3:b4:7e:71:a9:f8:e6:2e:82:9f:6c:dd: 9d:d4:a8:45:21:e4:f9:b7:0c:0f:b1:bd:6e:f8:48: c8:00:92:6d:26:b2:3b:f2:76:ee:21:95:d8:af:90: d5:16:c8:34:13:21:9f:52:32:26:e6:23:c8:9d:df: fd:30:20:cd:e5:2f:2e:e1:8a:51:5f:3a:f0:42:a1: a4:03:f1:70:8e:e6:bd:be:7b:4a:93:89:2b:ce:29: 96:0b:0c:18:7f:b2:a2:c2:0a:1f:d0:b0:27:f6:57: 16:8d:a7:49:d6:d0:de:d3:7b:cb:e9:62:d2:39:89: 60:22:da:f9:49:fb:8a:d1:f0:5b:59:ee:8a:89:5b: 8d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:40:22:D9:C7:F6:A4:EE:33:C8:32:CF:C8:CE:B9:AA:43:34:98:EE X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0c:56:b2:7d:d2:be:17:6b:ba:d5:b9:1b:8e:73:57:61:8e: b5:08:51:83:2f:dc:52:67:ca:35:1c:80:4b:b8:87:04:f3:cf: 02:34:dc:5c:c7:e0:d5:2b:77:66:39:b3:b7:7d:74:8e:29:29: 76:ba:71:a7:25:84:a9:80:ae:8d:d3:f8:b2:e0:d6:70:22:0a: 85:c5:4d:c5:36:cf:28:16:62:fd:97:e2:31:ad:44:50:91:ff: 46:2d:9c:d2:fe:ca:36:07:a3:c7:cc:82:30:c7:57:5c:72:ca: d4:2f:c6:fa:0d:8a:7b:ce:b5:8d:97:2d:63:65:24:b4:e4:61: 57:3e:47:14:f2:27:08:71:f2:80:f5:0f:dd:3f:2b:bd:c6:89: d6:7e:9c:2a:bd:40:50:bb:c4:c9:80:85:54:fa:4b:62:67:98: 90:7c:6f:66:05:3c:71:7e:94:cd:5d:8e:15:b6:b4:2b:c9:7e: f1:f8:e4:33:28:1f:99:5a:33:2a:35:48:31:0f:0b:41:bf:30: 0e:26:84:83:94:06:16:8e:96:83:25:27:f9:bc:4b:20:cc:a3: 28:cb:5b:25:fc:c6:fd:d8:ec:38:ed:a0:05:4c:6f:c5:54:3e: a2:e3:c5:fe:03:fd:c2:d4:95:97:c6:2f:a1:d4:33:53:79:8f: ef:9d:bf:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xVeJyHR1XtklLrwM+2u8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjUxMjE5MDQwMTQ2WhcNMjUxMjIwMDQwMTQ2WjAzMTEwLwYDVQQD Eyg2YjQwMjJkOWM3ZjZhNGVlMzNjODMyY2ZjOGNlYjlhYTQzMzQ5OGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz9sLJQc6iXLYB5Gd+XmwFTX5dKh fdrLi+7pbx8Rk6jmjAmcZBFjDLEDNmQcqma1gbwtHuTdLb2tEmu3tRH+74FIep6Y 7sqr5lNJEUKdXw1/bB60as4RnJbm8hKiC6QDgkYNFGWU6p6hQXNkCoLOjAiutzRT UArKbWPjtH5xqfjmLoKfbN2d1KhFIeT5twwPsb1u+EjIAJJtJrI78nbuIZXYr5DV Fsg0EyGfUjIm5iPInd/9MCDN5S8u4YpRXzrwQqGkA/Fwjua9vntKk4krzimWCwwY f7Kiwgof0LAn9lcWjadJ1tDe03vL6WLSOYlgItr5SfuK0fBbWe6KiVuNvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGtAItnH9qTuM8gyz8jOuapDNJjuMB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAxWsn3S vhdrutW5G45zV2GOtQhRgy/cUmfKNRyAS7iHBPPPAjTcXMfg1St3Zjmzt310jikp drpxpyWEqYCujdP4suDWcCIKhcVNxTbPKBZi/ZfiMa1EUJH/Ri2c0v7KNgejx8yC MMdXXHLK1C/G+g2Ke861jZctY2UktORhVz5HFPInCHHygPUP3T8rvcaJ1n6cKr1A ULvEyYCFVPpLYmeYkHxvZgU8cX6UzV2OFba0K8l+8fjkMygfmVozKjVIMQ8LQb8w DiaEg5QGFo6WgyUn+bxLIMyjKMtbJfzG/djsOO2gBUxvxVQ+ouPF/gP9wtSVl8Yv odQzU3mP752/iw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:27 2025 by rpki-client