This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json) Hash identifier: wB+FhFwWVvLYsxt14zZQXbSWclyXplzx1zl/3KbUvkw= Subject key identifier: DA:75:34:AB:09:3C:A9:C5:8D:D2:A9:42:2D:C6:6B:E6:89:C7:0C:64 Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Certificate serial: 019B19BD33B279E6901AB824474391572AB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft Manifest number: 1773 Signing time: Sat 13 Dec 2025 22:03:08 +0000 Manifest this update: Sat 13 Dec 2025 22:03:08 +0000 Manifest next update: Sun 14 Dec 2025 22:03:08 +0000 Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: 3rVf/CHL6CHpZIYUmsEex2M35xFngAQc0Mj9fx53lnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bd:33:b2:79:e6:90:1a:b8:24:47:43:91:57:2a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Validity Not Before: Dec 13 22:03:08 2025 GMT Not After : Dec 14 22:03:08 2025 GMT Subject: CN=da7534ab093ca9c58dd2a9422dc66be689c70c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:58:e2:90:42:d1:f6:e6:c9:fe:d1:22:dd: 33:61:27:d3:36:88:a9:7b:48:ca:dd:55:64:91:e6: f0:2b:5d:00:f1:c5:05:59:38:ed:85:a8:1d:9c:28: 8c:6f:bf:96:23:c5:28:45:45:90:37:33:93:ee:3b: bf:d3:b3:cb:dd:85:b3:1b:18:cb:fa:db:7b:9e:27: 70:e7:cb:20:3c:01:64:46:f1:1e:58:ce:b8:6c:ae: 9f:04:ad:d4:10:da:4b:e3:b3:7c:3f:ff:dd:52:f9: cd:f8:21:c4:92:39:8f:31:00:9a:0a:95:55:80:4a: 48:cc:2e:f1:3e:e0:5c:95:fd:95:47:1a:e3:9e:2e: 8e:fb:6f:85:e1:b8:fd:8d:74:37:ab:f7:31:93:d9: 72:d4:c2:68:d4:59:9a:5d:b4:8b:28:cc:04:4f:ad: a7:9b:00:e9:f8:93:5f:db:ea:05:e1:f6:7a:e0:6a: 6e:77:d4:46:28:25:bf:71:af:bb:8e:2d:07:27:16: 72:da:94:3d:df:9c:f7:9e:a3:96:e5:3e:fc:4a:90: 80:59:cc:7f:03:3a:50:ff:32:78:ea:e1:0f:73:27: 0a:92:74:54:e3:1d:44:ac:52:71:58:cb:ba:5e:53: 46:ef:f3:14:24:8b:b9:eb:e0:e9:6a:ff:a5:66:49: 86:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:75:34:AB:09:3C:A9:C5:8D:D2:A9:42:2D:C6:6B:E6:89:C7:0C:64 X509v3 Authority Key Identifier: keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:43:b4:4e:90:8d:11:c7:22:9c:68:58:bf:3f:71:b7:bd:f7: 11:33:34:e3:59:15:98:7f:83:4a:08:54:16:a3:3d:e3:f2:e2: 4a:7d:3f:d7:32:6c:60:f2:27:8d:bd:85:e3:20:c7:c0:75:cd: c7:5f:e5:a4:4a:1c:e3:d1:5e:14:fd:ee:ea:7f:93:58:ac:0d: a8:a7:71:ac:71:7d:48:fd:31:09:6e:39:67:b2:4f:9a:fb:78: 80:93:28:1b:79:8f:bb:aa:a7:70:75:86:50:54:99:41:c4:49: ff:95:3d:76:e4:3e:9f:9d:5d:12:e4:4d:3d:56:9a:d3:e4:d7: 55:34:91:10:6c:76:17:d9:2e:00:44:84:c3:14:3b:e2:d6:ee: f1:22:56:90:41:34:7b:db:b1:5d:4a:25:f9:7b:57:8c:b5:77: f0:fd:a2:96:cc:b0:3c:bf:57:f6:94:44:d1:0f:3b:ff:3b:6d: 59:64:e2:01:d6:08:40:81:42:99:a8:de:03:60:63:10:c1:6e: 8a:6d:0c:83:fb:b5:65:e7:ff:ef:65:45:b3:7a:ef:f1:65:1f: 1c:a9:f5:56:ba:16:7f:53:72:b0:12:d2:65:ea:45:e4:e7:59: 04:ac:08:86:f9:59:6b:9c:68:9c:2c:cd:57:a2:4a:c2:30:16: d6:b6:21:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvTOyeeaQGrgkR0ORVyqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZmY3MTY1NWZkZTU4ZGIwNDZiODM1ZjM5ZWMxMGUyZDRm N2FiZmEwHhcNMjUxMjEzMjIwMzA4WhcNMjUxMjE0MjIwMzA4WjAzMTEwLwYDVQQD EyhkYTc1MzRhYjA5M2NhOWM1OGRkMmE5NDIyZGM2NmJlNjg5YzcwYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra9Y4pBC0fbmyf7RIt0zYSfTNoip e0jK3VVkkebwK10A8cUFWTjthagdnCiMb7+WI8UoRUWQNzOT7ju/07PL3YWzGxjL +tt7nidw58sgPAFkRvEeWM64bK6fBK3UENpL47N8P//dUvnN+CHEkjmPMQCaCpVV gEpIzC7xPuBclf2VRxrjni6O+2+F4bj9jXQ3q/cxk9ly1MJo1FmaXbSLKMwET62n mwDp+JNf2+oF4fZ64Gpud9RGKCW/ca+7ji0HJxZy2pQ935z3nqOW5T78SpCAWcx/ AzpQ/zJ46uEPcycKknRU4x1ErFJxWMu6XlNG7/MUJIu56+Dpav+lZkmGgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNp1NKsJPKnFjdKpQi3Ga+aJxwxkMB8GA1UdIwQY MBaAFH3/cWVf3ljbBGuDXznsEOLU96v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjct YjZmZDg0Y2FiY2RmLzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjctYjZmZDg0Y2FiY2Rm LzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUO0TpCN EccinGhYvz9xt733ETM041kVmH+DSghUFqM94/LiSn0/1zJsYPInjb2F4yDHwHXN x1/lpEoc49FeFP3u6n+TWKwNqKdxrHF9SP0xCW45Z7JPmvt4gJMoG3mPu6qncHWG UFSZQcRJ/5U9duQ+n51dEuRNPVaa0+TXVTSREGx2F9kuAESEwxQ74tbu8SJWkEE0 e9uxXUol+XtXjLV38P2ilsywPL9X9pRE0Q87/zttWWTiAdYIQIFCmajeA2BjEMFu im0Mg/u1Zef/72VFs3rv8WUfHKn1VroWf1NysBLSZepF5OdZBKwIhvlZa5xonCzN V6JKwjAW1rYhHw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:38:25 2025 by rpki-client