This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft File: FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json) Hash identifier: nHxid9Zpg2StpH6L92eOiQtG3NVjAjrNJuGhMfJRVtY= Subject key identifier: 93:13:D8:E6:AC:4D:E0:C6:27:0C:70:12:92:05:08:3A:92:8E:CD:46 Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E Certificate issuer: /CN=144b315ae0f24c891fca18456c66917792af165e Certificate serial: 019B0E24E6EA818788000CE372B68D5C8931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft Manifest number: 10E5 Signing time: Thu 11 Dec 2025 16:00:57 +0000 Manifest this update: Thu 11 Dec 2025 16:00:57 +0000 Manifest next update: Fri 12 Dec 2025 16:00:57 +0000 Files and hashes: 1: EcUvIL1_Dl5amyDKnInMArIAHbc.roa (hash: nxHqW1T9MD+4BzwDEHiX10/m9t40K+dREd46a8WoUuw=) 2: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: Sq2djja10AXUNcXc+V0FRu4fmPNJ5aI9KFyK/FUWIP8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:e6:ea:81:87:88:00:0c:e3:72:b6:8d:5c:89:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=144b315ae0f24c891fca18456c66917792af165e Validity Not Before: Dec 11 16:00:57 2025 GMT Not After : Dec 12 16:00:57 2025 GMT Subject: CN=9313d8e6ac4de0c6270c70129205083a928ecd46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:10:7d:a7:de:01:89:24:dd:0c:33:65:1d:eb: 15:30:f1:04:15:40:98:d2:2a:36:58:ff:a6:6b:d9: a3:b7:1f:9b:83:65:ef:b9:26:4a:98:ab:7b:46:f3: 1d:53:b8:86:da:74:4b:a4:04:82:45:7a:a2:72:1e: c5:1b:7c:1c:45:f7:84:ce:20:2b:86:97:67:53:a5: 6f:77:91:09:27:a4:0a:4c:d2:6c:2f:ce:10:f8:c4: 2d:07:5a:46:5a:ba:72:3f:4f:b4:30:93:f0:4e:be: 29:90:8b:13:44:1e:df:9d:e2:dd:37:eb:c7:5f:b7: 29:22:06:9f:a6:75:5c:4e:d5:3b:ca:ed:eb:79:b4: 84:fd:15:11:aa:bf:f0:e1:f9:d8:13:a4:6c:4d:bc: b4:88:fc:13:e4:71:83:26:55:6d:81:8f:93:93:16: 54:51:75:59:e9:d0:51:a9:c2:7d:6f:a4:0c:2b:a2: d2:a2:4f:cc:a3:5d:ff:3b:3e:5a:18:ed:16:d0:07: d2:6e:c4:94:90:10:b1:b9:5a:a9:18:d3:9c:e8:cf: ff:89:8b:b1:9e:c0:2a:3e:80:1a:fd:3b:1e:98:45: f7:54:cc:0e:cf:bd:55:44:2a:87:70:ee:56:45:00: 04:fd:f7:1e:67:35:6d:2c:05:0a:f0:5d:03:b9:a4: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:13:D8:E6:AC:4D:E0:C6:27:0C:70:12:92:05:08:3A:92:8E:CD:46 X509v3 Authority Key Identifier: keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8b:b1:77:d5:66:db:1e:04:ba:5f:b1:46:bc:bb:3f:99:3b: 1a:71:44:e9:d2:7c:04:6a:2a:e9:1e:41:f9:f9:c7:39:91:6a: 0a:45:ac:52:89:f5:c9:27:c5:fb:ff:92:b2:5c:f4:51:99:b8: f6:68:b0:03:71:61:b7:dc:70:d2:d8:c6:cd:1f:35:4c:65:b2: b6:44:34:c5:b0:6d:a8:11:30:74:55:92:e2:83:01:46:c8:06: 9f:b0:50:fd:a1:18:65:cc:49:d9:e5:49:f8:37:b4:b8:77:44: 22:c1:49:94:7c:44:ec:6b:f2:10:5a:a3:65:be:03:9b:0c:57: 07:56:f4:18:fc:db:e8:c4:67:9f:17:65:45:dc:33:86:0b:be: 44:1f:ec:cd:86:37:07:55:b3:69:29:ba:4c:61:1d:5e:17:6b: 3c:8c:40:03:0c:37:12:62:2c:1a:2c:95:f3:4b:54:15:a4:4d: fa:4a:04:f5:23:60:78:1d:4d:16:e5:1d:61:d7:78:e2:97:d0: ce:90:77:4a:a4:c2:cd:75:90:53:96:1c:40:fc:8d:6d:c0:99: 99:5d:e0:8e:fa:fd:0b:5b:fd:45:3f:ee:45:fd:02:f1:ee:11: b0:3f:c1:be:8b:ed:b5:a9:35:74:13:2e:ab:2b:ea:c7:41:6a: b7:91:2c:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJObqgYeIAAzjcraNXIkxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh ZjE2NWUwHhcNMjUxMjExMTYwMDU3WhcNMjUxMjEyMTYwMDU3WjAzMTEwLwYDVQQD Eyg5MzEzZDhlNmFjNGRlMGM2MjcwYzcwMTI5MjA1MDgzYTkyOGVjZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhB9p94BiSTdDDNlHesVMPEEFUCY 0io2WP+ma9mjtx+bg2XvuSZKmKt7RvMdU7iG2nRLpASCRXqich7FG3wcRfeEziAr hpdnU6Vvd5EJJ6QKTNJsL84Q+MQtB1pGWrpyP0+0MJPwTr4pkIsTRB7fneLdN+vH X7cpIgafpnVcTtU7yu3rebSE/RURqr/w4fnYE6RsTby0iPwT5HGDJlVtgY+TkxZU UXVZ6dBRqcJ9b6QMK6LSok/Mo13/Oz5aGO0W0AfSbsSUkBCxuVqpGNOc6M//iYux nsAqPoAa/TsemEX3VMwOz71VRCqHcO5WRQAE/fceZzVtLAUK8F0DuaTQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMT2OasTeDGJwxwEpIFCDqSjs1GMB8GA1UdIwQY MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYuxd9Vm 2x4Eul+xRry7P5k7GnFE6dJ8BGoq6R5B+fnHOZFqCkWsUon1ySfF+/+Sslz0UZm4 9miwA3Fht9xw0tjGzR81TGWytkQ0xbBtqBEwdFWS4oMBRsgGn7BQ/aEYZcxJ2eVJ +De0uHdEIsFJlHxE7GvyEFqjZb4DmwxXB1b0GPzb6MRnnxdlRdwzhgu+RB/szYY3 B1WzaSm6TGEdXhdrPIxAAww3EmIsGiyV80tUFaRN+koE9SNgeB1NFuUdYdd44pfQ zpB3SqTCzXWQU5YcQPyNbcCZmV3gjvr9C1v9RT/uRf0C8e4RsD/Bvovttak1dBMu qyvqx0Fqt5Es7Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:01:50 2025 by rpki-client