This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft File: fEStUyVA0tLa66leE9YUt4Va1iI.mft (raw, json) Hash identifier: ry9cSLQZTzIVM6Isux/76dY/ezLuZb4Qa/pp8xe4jVI= Subject key identifier: E6:FB:59:6E:7C:F4:70:DF:86:E8:11:2E:EC:65:76:7E:1B:2A:60:2A Authority key identifier: 7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 Certificate issuer: /CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Certificate serial: 019B5A1AB36271B01AB358B0B8ABAF6810A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft Manifest number: 0728 Signing time: Fri 26 Dec 2025 10:00:57 +0000 Manifest this update: Fri 26 Dec 2025 10:00:57 +0000 Manifest next update: Sat 27 Dec 2025 10:00:57 +0000 Files and hashes: 1: fEStUyVA0tLa66leE9YUt4Va1iI.crl (hash: tPIq2s7cU06KApI7sC/otBZWOlbvcdfWVNlntDouj2A=) 2: wVdARfy8kyS2yygCe6VeSrxjsrI.roa (hash: hDzrF6MC+t3cfKHXPCsVlZtlykkOSNtAuETj7zQp0RA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:b3:62:71:b0:1a:b3:58:b0:b8:ab:af:68:10:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c44ad532540d2d2daeba95e13d614b7855ad622 Validity Not Before: Dec 26 10:00:57 2025 GMT Not After : Dec 27 10:00:57 2025 GMT Subject: CN=e6fb596e7cf470df86e8112eec65767e1b2a602a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:cb:35:ff:ec:7d:48:f3:86:35:e2:a2:03: 2a:8b:bd:e4:28:33:07:e0:5c:8d:bd:fa:e5:4b:19: 4c:dc:c4:5e:6f:d3:05:eb:de:44:9b:a6:64:a6:75: 4b:08:3c:de:dc:e0:17:63:9a:03:d2:1f:6d:a4:6b: ec:69:66:de:3e:7d:49:5e:51:6d:9c:8d:68:e9:5d: 34:e1:a7:4a:af:0a:44:62:12:fc:b5:f9:9d:f8:67: 1a:21:fe:1d:ad:81:cf:0d:7b:e1:81:21:9d:bd:d7: 85:c7:f0:4c:78:28:85:1a:70:48:0a:f2:27:34:90: 8b:10:82:98:73:1f:11:ec:c0:de:f3:e2:f8:0c:f1: 96:17:4f:0a:a5:1b:92:8d:ed:8e:61:58:23:d9:ea: b7:b0:80:c8:a6:58:0e:6d:7a:81:00:c5:09:1d:20: 2b:bb:42:36:72:8c:cd:d1:b9:ea:10:f2:e4:0e:16: 5f:60:45:89:75:6e:1f:ed:4c:19:3d:5f:8b:fe:5a: de:3e:a9:03:eb:81:ee:9f:7e:66:81:2e:76:a7:76: 5e:cb:c0:0b:e6:45:62:a1:6a:70:82:da:1b:47:db: fb:3a:ec:3d:74:d0:44:04:e0:c5:d9:fe:8d:37:ae: 07:ae:f5:a4:6f:a2:86:c0:80:53:9b:b2:15:be:75: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:FB:59:6E:7C:F4:70:DF:86:E8:11:2E:EC:65:76:7E:1B:2A:60:2A X509v3 Authority Key Identifier: keyid:7C:44:AD:53:25:40:D2:D2:DA:EB:A9:5E:13:D6:14:B7:85:5A:D6:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEStUyVA0tLa66leE9YUt4Va1iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9646d7-5b04-4544-8edc-659cb427dcf7/1/fEStUyVA0tLa66leE9YUt4Va1iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4f:a6:4e:fb:17:04:78:6a:10:54:8c:1b:63:86:d4:9a:f0: b9:6b:05:c1:e3:34:86:70:a7:9a:33:4e:bf:d3:aa:c7:22:fc: c8:8e:77:e2:42:2d:74:4e:59:a3:99:30:77:f3:ae:83:2c:3f: 4b:11:42:68:65:4b:2e:10:ce:f4:0f:de:58:4c:49:39:74:ca: f5:ce:06:93:7f:72:55:2e:a2:d6:a4:07:93:cf:f1:b4:9b:43: b9:a5:9a:38:36:47:89:9c:46:d1:67:f6:bf:cf:d8:0d:f8:59: e2:e7:d9:a0:22:bb:00:ec:cc:ab:a3:d4:b6:e3:f7:b7:e3:3a: d7:ba:41:1a:17:30:4d:85:c3:7a:75:b4:37:a8:18:f5:db:ab: 2b:f3:4d:d6:c4:da:85:24:00:26:5d:ee:a4:59:26:6e:75:e4: f2:76:42:d3:d2:fe:13:4d:56:99:25:02:74:d2:cb:2d:5e:97: 95:43:84:31:10:e4:ca:94:aa:43:57:2e:cd:5f:3f:13:b1:20: 1b:bd:4d:58:8d:52:fd:c1:8d:dd:33:85:01:f9:74:da:50:15: 44:43:66:95:7c:56:5a:a0:ec:6f:f0:3e:7c:16:78:ab:ba:7d: 4a:5f:18:62:bd:a8:30:18:ae:6f:6a:43:fd:78:45:6b:e4:e0: 4a:e0:fd:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGrNicbAas1iwuKuvaBCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNDRhZDUzMjU0MGQyZDJkYWViYTk1ZTEzZDYxNGI3ODU1 YWQ2MjIwHhcNMjUxMjI2MTAwMDU3WhcNMjUxMjI3MTAwMDU3WjAzMTEwLwYDVQQD EyhlNmZiNTk2ZTdjZjQ3MGRmODZlODExMmVlYzY1NzY3ZTFiMmE2MDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4jLNf/sfUjzhjXiogMqi73kKDMH 4FyNvfrlSxlM3MReb9MF695Em6ZkpnVLCDze3OAXY5oD0h9tpGvsaWbePn1JXlFt nI1o6V004adKrwpEYhL8tfmd+GcaIf4drYHPDXvhgSGdvdeFx/BMeCiFGnBICvIn NJCLEIKYcx8R7MDe8+L4DPGWF08KpRuSje2OYVgj2eq3sIDIplgObXqBAMUJHSAr u0I2cozN0bnqEPLkDhZfYEWJdW4f7UwZPV+L/lrePqkD64Hun35mgS52p3Zey8AL 5kVioWpwgtobR9v7Ouw9dNBEBODF2f6NN64HrvWkb6KGwIBTm7IVvnVv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOb7WW589HDfhugRLuxldn4bKmAqMB8GA1UdIwQY MBaAFHxErVMlQNLS2uupXhPWFLeFWtYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMt NjU5Y2I0MjdkY2Y3LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS85NjQ2ZDctNWIwNC00NTQ0LThlZGMtNjU5Y2I0MjdkY2Y3 LzEvZkVTdFV5VkEwdExhNjZsZUU5WVV0NFZhMWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk0+mTvsX BHhqEFSMG2OG1JrwuWsFweM0hnCnmjNOv9OqxyL8yI534kItdE5Zo5kwd/Ougyw/ SxFCaGVLLhDO9A/eWExJOXTK9c4Gk39yVS6i1qQHk8/xtJtDuaWaODZHiZxG0Wf2 v8/YDfhZ4ufZoCK7AOzMq6PUtuP3t+M617pBGhcwTYXDenW0N6gY9durK/NN1sTa hSQAJl3upFkmbnXk8nZC09L+E01WmSUCdNLLLV6XlUOEMRDkypSqQ1cuzV8/E7Eg G71NWI1S/cGN3TOFAfl02lAVRENmlXxWWqDsb/A+fBZ4q7p9Sl8YYr2oMBiub2pD /XhFa+TgSuD9IQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:00 2025 by rpki-client