This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft File: _kFOohqRFtLN-PXALQhnOvpXaJM.mft (raw, json) Hash identifier: VE0Wb+em6tturwzxrodXw1wPObEZNd1ma75zfmfjU3k= Subject key identifier: 45:20:CC:6C:88:2A:5A:FB:96:DE:F4:DA:CF:0D:78:66:56:BF:19:1B Authority key identifier: FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93 Certificate issuer: /CN=fe414ea21a9116d2cdf8f5c02d08673afa576893 Certificate serial: 019B44A5F0E676599CFC2B8BA3C42C012901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft Manifest number: 0527 Signing time: Mon 22 Dec 2025 06:01:24 +0000 Manifest this update: Mon 22 Dec 2025 06:01:24 +0000 Manifest next update: Tue 23 Dec 2025 06:01:24 +0000 Files and hashes: 1: 0MAgU7sTLhp2qbqkuMgBEoG1GaM.roa (hash: qBfT5pIrk1/WlfhHIXDzrsxZlkpu9JZ5SsEtvG7MW+c=) 2: _kFOohqRFtLN-PXALQhnOvpXaJM.crl (hash: Wko3Lgx4vYKS4Y2xapZZHpBlZJLse8QGDKqu6o/KFqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:f0:e6:76:59:9c:fc:2b:8b:a3:c4:2c:01:29:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe414ea21a9116d2cdf8f5c02d08673afa576893 Validity Not Before: Dec 22 06:01:24 2025 GMT Not After : Dec 23 06:01:24 2025 GMT Subject: CN=4520cc6c882a5afb96def4dacf0d786656bf191b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:df:c8:00:c8:0b:34:19:d4:e0:3c:03:85: f0:6a:01:dc:4c:df:e8:97:00:f9:a8:b2:6d:c3:66: f5:9a:a4:df:bf:bc:5c:8e:5e:c6:09:5d:f4:11:a7: 7f:ec:25:9b:66:a7:95:d8:93:d0:b3:8f:6a:c1:a4: fc:44:24:3b:94:65:6d:08:bf:0f:81:87:3a:0a:ed: c9:b1:bf:bb:27:50:60:49:63:18:6a:d6:7c:d9:c1: 23:f2:b6:f7:e3:1f:36:56:cd:5a:ac:02:53:77:5c: ab:15:7a:eb:90:bf:9a:c0:37:c6:82:45:7a:70:ef: 7d:bc:cc:c0:08:d4:94:b5:86:f7:46:95:47:25:93: b7:b9:a2:07:85:23:2d:54:24:4e:0e:94:b7:a9:7f: 05:a0:b4:2b:d8:a2:16:22:15:b8:ff:56:97:e3:71: 62:cc:81:f7:56:78:d3:1f:2c:4f:4c:2d:30:cf:93: 3e:5e:ca:23:0d:64:9f:f6:6d:0d:ee:c1:8b:da:73: 67:fa:2c:d1:25:4c:95:49:1f:b1:0e:b3:62:be:bd: 23:c1:c2:77:b3:50:a0:c6:d3:48:d2:a2:ca:aa:cd: d8:59:a4:33:0d:03:31:d3:7a:c9:1d:b9:5c:b6:74: 65:1a:5d:96:62:33:d2:4b:07:44:a1:67:4a:cf:46: 87:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:20:CC:6C:88:2A:5A:FB:96:DE:F4:DA:CF:0D:78:66:56:BF:19:1B X509v3 Authority Key Identifier: keyid:FE:41:4E:A2:1A:91:16:D2:CD:F8:F5:C0:2D:08:67:3A:FA:57:68:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kFOohqRFtLN-PXALQhnOvpXaJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e71d21-a360-4579-81a0-bcca26fc8945/1/_kFOohqRFtLN-PXALQhnOvpXaJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0f:3a:41:85:f1:3d:ca:a5:a1:0b:1f:ae:9f:bb:f8:be:2d: 17:d5:bf:de:0c:9c:96:41:68:48:f3:48:d2:19:9d:17:31:cc: da:95:67:4f:87:b8:7a:d4:9f:bc:ba:0f:74:8f:2c:16:19:20: f2:37:97:3f:d1:6f:15:75:e6:be:da:07:4e:60:16:78:bf:a4: 35:e6:81:6e:89:46:59:a2:06:1a:5b:31:40:fb:3e:82:68:d1: fc:a0:6c:96:63:a1:14:e5:1d:e6:4b:65:a2:e7:34:3a:01:a8: 2d:79:d9:4c:56:a6:4f:99:1f:02:78:9e:c7:86:57:56:3b:df: 58:76:f8:67:ce:c3:85:26:be:df:98:ab:0a:a1:df:30:09:50: 59:bd:a8:e5:fd:c6:a0:61:07:7d:2d:65:2b:ff:b2:29:7b:75: a1:43:ed:a2:fa:c8:5e:5c:88:ea:d2:34:75:71:65:a2:4e:0e: bd:04:c9:02:75:87:1e:85:e8:69:ef:a4:89:a1:e2:bb:81:79: 21:4a:24:d5:31:33:9f:12:32:42:6b:5b:bf:78:06:f2:22:0e: bf:55:78:be:11:0f:b9:2d:14:fb:02:0d:2b:18:97:aa:f1:7e: ab:68:e4:b2:a7:41:1c:c2:69:f5:3c:d2:7a:e1:e4:1c:fa:81: 80:5b:62:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfDmdlmc/CuLo8QsASkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNDE0ZWEyMWE5MTE2ZDJjZGY4ZjVjMDJkMDg2NzNhZmE1 NzY4OTMwHhcNMjUxMjIyMDYwMTI0WhcNMjUxMjIzMDYwMTI0WjAzMTEwLwYDVQQD Eyg0NTIwY2M2Yzg4MmE1YWZiOTZkZWY0ZGFjZjBkNzg2NjU2YmYxOTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfDfyADICzQZ1OA8A4XwagHcTN/o lwD5qLJtw2b1mqTfv7xcjl7GCV30Ead/7CWbZqeV2JPQs49qwaT8RCQ7lGVtCL8P gYc6Cu3Jsb+7J1BgSWMYatZ82cEj8rb34x82Vs1arAJTd1yrFXrrkL+awDfGgkV6 cO99vMzACNSUtYb3RpVHJZO3uaIHhSMtVCRODpS3qX8FoLQr2KIWIhW4/1aX43Fi zIH3VnjTHyxPTC0wz5M+XsojDWSf9m0N7sGL2nNn+izRJUyVSR+xDrNivr0jwcJ3 s1CgxtNI0qLKqs3YWaQzDQMx03rJHblctnRlGl2WYjPSSwdEoWdKz0aHUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUgzGyIKlr7lt702s8NeGZWvxkbMB8GA1UdIwQY MBaAFP5BTqIakRbSzfj1wC0IZzr6V2iTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAt YmNjYTI2ZmM4OTQ1LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lNzFkMjEtYTM2MC00NTc5LTgxYTAtYmNjYTI2ZmM4OTQ1 LzEvX2tGT29ocVJGdExOLVBYQUxRaG5PdnBYYUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw86QYXx PcqloQsfrp+7+L4tF9W/3gyclkFoSPNI0hmdFzHM2pVnT4e4etSfvLoPdI8sFhkg 8jeXP9FvFXXmvtoHTmAWeL+kNeaBbolGWaIGGlsxQPs+gmjR/KBslmOhFOUd5ktl ouc0OgGoLXnZTFamT5kfAniex4ZXVjvfWHb4Z87DhSa+35irCqHfMAlQWb2o5f3G oGEHfS1lK/+yKXt1oUPtovrIXlyI6tI0dXFlok4OvQTJAnWHHoXoae+kiaHiu4F5 IUok1TEznxIyQmtbv3gG8iIOv1V4vhEPuS0U+wINKxiXqvF+q2jksqdBHMJp9TzS euHkHPqBgFtirQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:07:33 2025 by rpki-client