This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft File: fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft (raw, json) Hash identifier: 0FO9gli7g2zhGVFAiDRV2eEpriAwb544KJDd8ytACt0= Subject key identifier: 01:46:A2:0D:78:92:69:42:7A:EF:24:96:04:0D:80:A7:3C:2E:39:46 Authority key identifier: 7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E Certificate issuer: /CN=7cab39c6e0412235efc7877a9f737899313ed15e Certificate serial: 019B2287F131DB7398D8FFDEC02E6A011CA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft Manifest number: 0294 Signing time: Mon 15 Dec 2025 15:01:32 +0000 Manifest this update: Mon 15 Dec 2025 15:01:32 +0000 Manifest next update: Tue 16 Dec 2025 15:01:32 +0000 Files and hashes: 1: S-8iAviLA5Jol3aOuoC8YtshVjI.roa (hash: nPTWtD2pyVs+rkGfz9T+B81uYYTcqsLuoc9G5yhStYs=) 2: TceaNjn9IF5oTmJkTl9-AAXNV44.roa (hash: qomOIj4ZRrJ4B8QNZahwO894PoNKgI7449eoXim1hno=) 3: fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl (hash: IkmpYTwVSijQokOqzOVYObLYgUJ9hX7OUAXbzk8kQ8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:f1:31:db:73:98:d8:ff:de:c0:2e:6a:01:1c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cab39c6e0412235efc7877a9f737899313ed15e Validity Not Before: Dec 15 15:01:32 2025 GMT Not After : Dec 16 15:01:32 2025 GMT Subject: CN=0146a20d789269427aef2496040d80a73c2e3946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:af:fc:82:f0:54:ea:9a:0d:3b:5b:ce:82: a6:6b:d4:9b:46:83:9e:21:d9:5a:fa:e7:3b:70:98: e9:0b:7e:19:03:24:25:27:43:96:fe:e1:ac:17:08: e3:e5:87:55:2d:c3:54:86:c1:4c:0f:1c:ca:75:b6: c9:3e:16:87:79:0e:8c:a2:c3:a6:6f:90:2e:cc:fd: 06:21:f0:6f:c9:19:f0:10:37:4e:f3:4d:77:1b:54: ee:55:16:7b:bb:32:53:3a:3c:2a:2e:03:1d:41:c7: 5d:90:26:08:c1:8e:e3:e4:21:76:92:c5:27:f1:a5: 18:bf:48:f0:46:a1:aa:69:9b:cb:2e:2b:b3:76:26: 6b:f1:52:43:a1:8c:93:6b:11:59:69:16:e7:7a:8a: 7d:19:4c:f0:79:c3:b6:21:c4:aa:ce:b1:72:f6:8b: 7e:b5:6f:8c:8d:29:46:5c:ed:dd:25:ff:bc:2e:cd: 68:9d:46:7e:3b:34:af:07:1f:23:b3:1b:ac:cb:13: b8:4e:be:bc:ce:55:c8:11:d8:b0:72:af:ba:60:7b: 80:3c:85:d7:19:97:5f:5e:ab:95:f3:48:a9:8f:44: 09:a5:49:2a:5c:55:43:37:63:7d:9c:05:94:c3:5a: 99:15:d1:51:f1:c4:d3:1c:56:af:31:5c:1f:fe:88: 3d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:46:A2:0D:78:92:69:42:7A:EF:24:96:04:0D:80:A7:3C:2E:39:46 X509v3 Authority Key Identifier: keyid:7C:AB:39:C6:E0:41:22:35:EF:C7:87:7A:9F:73:78:99:31:3E:D1:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKs5xuBBIjXvx4d6n3N4mTE-0V4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f89170-138e-4999-aef7-c440298dfc5c/1/fKs5xuBBIjXvx4d6n3N4mTE-0V4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:c2:4d:5b:04:d1:48:cf:71:52:5d:72:d5:d4:4f:ad:d6:c1: a0:13:e4:06:e7:28:f1:43:8a:e4:0f:52:2d:91:a4:70:53:15: e7:35:78:3a:32:a9:f4:cc:21:8f:46:8c:54:23:7a:ec:89:35: 0f:8c:29:65:ad:09:cb:0b:d0:3d:01:15:ae:74:07:9b:66:ec: b4:d0:f3:b7:29:f7:27:16:21:db:74:b0:4c:d1:3f:56:d9:9e: 26:4e:7b:14:8b:5c:f2:9c:68:48:83:34:9a:69:1e:b5:ca:28: f7:9c:53:55:08:25:0f:c2:b3:57:7d:c3:40:ad:2c:94:8c:e1: 9c:c2:56:9d:72:66:e2:5d:f2:95:70:cf:9d:35:32:f0:cb:cc: da:e9:a2:ea:3e:2f:29:1a:c7:05:55:9f:1a:f7:e1:66:c9:76: 0b:57:21:bb:7b:b4:a6:77:09:b0:57:3f:08:af:f6:8c:d7:23: 10:60:c8:de:21:05:78:9c:4b:cb:38:d0:d1:e0:97:91:08:54: 76:3c:c2:14:8f:16:2f:9d:a8:4d:66:5c:b6:f9:51:af:30:59: e0:7e:d1:28:10:62:cd:9f:fe:cb:fc:c1:f5:83:80:9c:7c:c4: 9c:4b:df:09:45:5b:e2:dd:67:ac:12:43:5c:09:96:b0:45:e8: 62:8e:30:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih/Ex23OY2P/ewC5qARygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYWIzOWM2ZTA0MTIyMzVlZmM3ODc3YTlmNzM3ODk5MzEz ZWQxNWUwHhcNMjUxMjE1MTUwMTMyWhcNMjUxMjE2MTUwMTMyWjAzMTEwLwYDVQQD EygwMTQ2YTIwZDc4OTI2OTQyN2FlZjI0OTYwNDBkODBhNzNjMmUzOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusKv/ILwVOqaDTtbzoKma9SbRoOe Idla+uc7cJjpC34ZAyQlJ0OW/uGsFwjj5YdVLcNUhsFMDxzKdbbJPhaHeQ6MosOm b5AuzP0GIfBvyRnwEDdO8013G1TuVRZ7uzJTOjwqLgMdQcddkCYIwY7j5CF2ksUn 8aUYv0jwRqGqaZvLLiuzdiZr8VJDoYyTaxFZaRbneop9GUzwecO2IcSqzrFy9ot+ tW+MjSlGXO3dJf+8Ls1onUZ+OzSvBx8jsxusyxO4Tr68zlXIEdiwcq+6YHuAPIXX GZdfXquV80ipj0QJpUkqXFVDN2N9nAWUw1qZFdFR8cTTHFavMVwf/og97wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFGog14kmlCeu8klgQNgKc8LjlGMB8GA1UdIwQY MBaAFHyrOcbgQSI178eHep9zeJkxPtFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjct YzQ0MDI5OGRmYzVjLzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mODkxNzAtMTM4ZS00OTk5LWFlZjctYzQ0MDI5OGRmYzVj LzEvZktzNXh1QkJJalh2eDRkNm4zTjRtVEUtMFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuMJNWwTR SM9xUl1y1dRPrdbBoBPkBuco8UOK5A9SLZGkcFMV5zV4OjKp9Mwhj0aMVCN67Ik1 D4wpZa0JywvQPQEVrnQHm2bstNDztyn3JxYh23SwTNE/VtmeJk57FItc8pxoSIM0 mmketcoo95xTVQglD8KzV33DQK0slIzhnMJWnXJm4l3ylXDPnTUy8MvM2umi6j4v KRrHBVWfGvfhZsl2C1chu3u0pncJsFc/CK/2jNcjEGDI3iEFeJxLyzjQ0eCXkQhU djzCFI8WL52oTWZctvlRrzBZ4H7RKBBizZ/+y/zB9YOAnHzEnEvfCUVb4t1nrBJD XAmWsEXoYo4wsg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:13:15 2025 by rpki-client