This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft File: FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json) Hash identifier: JDqDldQZC1feD2q4KZzCSfD1FU0T29yZKM1qzfP6XN8= Subject key identifier: C4:BC:D2:52:B9:D2:DA:2A:C3:BA:77:95:28:70:D2:B1:67:17:57:DC Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 Certificate issuer: /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Certificate serial: 019B5A1B1BD41D955986609804AFFBF9AFAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft Manifest number: 84 Signing time: Fri 26 Dec 2025 10:01:24 +0000 Manifest this update: Fri 26 Dec 2025 10:01:24 +0000 Manifest next update: Sat 27 Dec 2025 10:01:24 +0000 Files and hashes: 1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: WPmizZ7OyLUTQDh8QDfoxLD4x/8TwN6u3MeyVcw8XHM=) 2: PwNeEQK8cYVwYwRg-w7R3ta0-Wc.roa (hash: 5U7iTxxmR/k00/iziXJJLBxCbjSuEb3qsWlrxIkzh5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:1b:d4:1d:95:59:86:60:98:04:af:fb:f9:af:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353 Validity Not Before: Dec 26 10:01:24 2025 GMT Not After : Dec 27 10:01:24 2025 GMT Subject: CN=c4bcd252b9d2da2ac3ba77952870d2b1671757dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:36:65:7f:c3:91:6f:d7:e8:eb:e5:b3:12: 1d:99:11:86:18:f9:72:09:dd:6a:ce:6f:90:60:31: d3:3c:57:2e:b5:1e:10:a2:a2:84:36:57:5f:e2:a5: a0:ec:56:d9:cc:8f:4d:b1:04:f5:eb:2f:e8:b7:f4: 3e:99:10:92:62:da:02:1b:b2:5e:76:52:c0:e1:14: db:08:fd:69:00:2e:7a:42:20:cc:b1:49:8c:40:99: 5a:a4:13:c7:84:cf:1c:84:6d:e5:b0:e7:54:bb:8c: d3:d4:5c:b7:ec:96:90:27:07:2b:6c:a6:4b:0f:76: 8d:d0:88:6f:9d:15:a8:53:21:c1:83:83:b5:92:ff: a6:c8:ca:58:5c:4c:41:3e:c5:65:c5:be:59:38:a3: bc:63:37:5d:82:18:7c:25:c3:a7:47:72:62:61:07: 16:ee:82:ee:09:c1:8e:5d:81:e1:39:8e:eb:b1:4d: 93:c3:11:ac:11:04:eb:95:b9:67:a5:f3:5d:7c:fd: 24:85:3f:b4:4d:d8:ed:b2:57:0b:7e:01:e9:ec:e1: f7:0d:4c:e3:f7:3b:8d:e6:b7:ac:5e:c4:19:ed:af: 5b:0f:6f:8e:58:dd:1a:f6:f5:e8:36:8e:26:23:b3: dc:bf:f9:ff:2a:d9:b7:1a:c7:77:c6:c4:e6:2a:8b: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BC:D2:52:B9:D2:DA:2A:C3:BA:77:95:28:70:D2:B1:67:17:57:DC X509v3 Authority Key Identifier: keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4a:69:00:7a:79:1a:15:be:47:00:4b:1e:a8:47:90:95:60: 06:1a:85:15:04:55:ad:23:ea:bb:43:78:cb:9a:a7:5b:78:c1: 6d:4d:14:4b:cb:6f:43:50:2c:88:92:01:f2:94:f2:9c:35:3b: 9a:cb:1a:df:bd:5b:57:1c:d9:ad:e3:12:9c:12:57:a1:17:4b: 0a:ca:17:48:5b:eb:4a:3a:53:f5:fa:69:54:64:82:d8:27:70: ee:ef:e4:69:ef:6f:83:4a:ee:52:95:83:97:b0:28:eb:18:b6: dd:0a:3a:3a:c2:2b:b4:b2:72:24:69:68:64:05:75:fd:c5:b7: 70:bb:49:e2:8b:86:bf:20:b7:94:55:01:03:d3:7a:7a:2d:51: 65:71:68:1f:40:40:5f:f8:35:11:2b:80:21:d6:85:35:7a:41: 26:06:d4:c4:31:4b:df:86:eb:5a:98:45:f9:7f:56:12:5e:f5: 2e:cd:87:20:2a:d4:8b:ed:73:0c:81:14:1a:82:ee:f6:58:78: 14:1b:d3:c1:44:7a:8d:05:93:ce:03:6c:e6:90:53:02:f7:99: 2f:91:bc:c1:ce:ca:0c:b1:02:06:5d:14:73:a7:13:dd:64:4d: a6:a8:59:b7:ef:d7:98:ff:5d:9b:c3:ce:35:19:26:da:2d:65: 1c:22:e5:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxvUHZVZhmCYBK/7+a+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjVjNDI3YjUwZWI5ZTJhYWY3YzVhY2MxYjIyODk2MzNh YjUzNTMwHhcNMjUxMjI2MTAwMTI0WhcNMjUxMjI3MTAwMTI0WjAzMTEwLwYDVQQD EyhjNGJjZDI1MmI5ZDJkYTJhYzNiYTc3OTUyODcwZDJiMTY3MTc1N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwao2ZX/DkW/X6OvlsxIdmRGGGPly Cd1qzm+QYDHTPFcutR4QoqKENldf4qWg7FbZzI9NsQT16y/ot/Q+mRCSYtoCG7Je dlLA4RTbCP1pAC56QiDMsUmMQJlapBPHhM8chG3lsOdUu4zT1Fy37JaQJwcrbKZL D3aN0IhvnRWoUyHBg4O1kv+myMpYXExBPsVlxb5ZOKO8Yzddghh8JcOnR3JiYQcW 7oLuCcGOXYHhOY7rsU2TwxGsEQTrlblnpfNdfP0khT+0TdjtslcLfgHp7OH3DUzj 9zuN5resXsQZ7a9bD2+OWN0a9vXoNo4mI7Pcv/n/Ktm3Gsd3xsTmKovHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS80lK50toqw7p3lShw0rFnF1fcMB8GA1UdIwQY MBaAFBX1xCe1DrniqvfFrMGyKJYzq1NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAt YTVkMjM0NTg2ZDkwLzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mMmQ1ZTEtYzk5Ny00NmM0LThlNjAtYTVkMjM0NTg2ZDkw LzEvRmZYRUo3VU91ZUtxOThXc3diSW9sak9yVTFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUppAHp5 GhW+RwBLHqhHkJVgBhqFFQRVrSPqu0N4y5qnW3jBbU0US8tvQ1AsiJIB8pTynDU7 mssa371bVxzZreMSnBJXoRdLCsoXSFvrSjpT9fppVGSC2Cdw7u/kae9vg0ruUpWD l7Ao6xi23Qo6OsIrtLJyJGloZAV1/cW3cLtJ4ouGvyC3lFUBA9N6ei1RZXFoH0BA X/g1ESuAIdaFNXpBJgbUxDFL34brWphF+X9WEl71Ls2HICrUi+1zDIEUGoLu9lh4 FBvTwUR6jQWTzgNs5pBTAveZL5G8wc7KDLECBl0Uc6cT3WRNpqhZt+/XmP9dm8PO NRkm2i1lHCLlag== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:22 2025 by rpki-client