This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft File: rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft (raw, json) Hash identifier: dl1Hmb0tXTDk27Viyux/vNKzJRj9k0BRG6RcY3FEuTA= Subject key identifier: 5A:54:03:90:83:60:AF:6B:4B:4C:E2:31:D9:29:05:0E:DD:BE:5A:66 Authority key identifier: AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 Certificate issuer: /CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Certificate serial: 019B2106E90B5AAD8D5AA94E1BDD333D6994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft Manifest number: 1779 Signing time: Mon 15 Dec 2025 08:00:59 +0000 Manifest this update: Mon 15 Dec 2025 08:00:59 +0000 Manifest next update: Tue 16 Dec 2025 08:00:59 +0000 Files and hashes: 1: _RPvfjikj0iax2XrX7kBOpxgmjQ.roa (hash: VpB33gFRy5WKsX1Z1hgRswTD+xePv0JXdiIfDbuLSIU=) 2: rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl (hash: cUwR/UzLmrkg3wD25wcS3G/uJAaWBf1u+COj3TbXkpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:e9:0b:5a:ad:8d:5a:a9:4e:1b:dd:33:3d:69:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac56aadc424112c4fc8989c0aee2549bbaf56568 Validity Not Before: Dec 15 08:00:59 2025 GMT Not After : Dec 16 08:00:59 2025 GMT Subject: CN=5a5403908360af6b4b4ce231d929050eddbe5a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7e:fa:d0:14:9c:07:79:c1:b3:75:48:62:c9: 88:65:76:ce:f2:98:f1:a1:6f:37:9d:02:6e:e8:1e: 3a:f7:99:f8:d6:33:15:1a:e3:10:26:7a:a5:ca:a7: bc:24:e5:bb:1f:05:6b:3d:be:36:08:8f:65:85:7c: a6:5f:c9:19:44:94:9a:03:ef:f2:34:8d:73:5c:11: bd:4a:23:79:d0:ca:40:a2:de:3b:b2:5d:7a:3a:42: 3e:1e:29:43:bf:7a:9e:55:45:c5:e8:d6:47:5d:6e: 09:b5:f5:70:13:fc:25:78:2d:d8:7a:24:d8:d8:2e: b8:ec:fb:77:40:ca:41:e1:81:a4:d5:ee:e9:18:09: 11:fa:c3:9d:93:3e:e8:84:c2:0b:fe:24:e2:6b:04: 3e:dd:8e:02:37:7e:32:62:44:3f:0c:df:25:8d:0a: 50:07:9b:0e:bc:bf:35:33:30:90:e4:3b:b8:32:fe: 3e:d6:2a:a9:ce:3d:c5:54:0b:27:aa:d8:d5:cf:bf: 6e:91:41:61:32:40:82:27:20:e3:26:0c:31:cc:62: 90:33:ba:f0:db:3d:0c:ee:b4:eb:08:f1:d1:74:5f: 73:aa:71:20:f9:11:72:75:22:50:da:d2:86:69:ea: 1d:af:37:94:b7:26:ab:90:7d:f7:9c:00:b2:a6:9d: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:54:03:90:83:60:AF:6B:4B:4C:E2:31:D9:29:05:0E:DD:BE:5A:66 X509v3 Authority Key Identifier: keyid:AC:56:AA:DC:42:41:12:C4:FC:89:89:C0:AE:E2:54:9B:BA:F5:65:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFaq3EJBEsT8iYnAruJUm7r1ZWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b033d3-ee96-4c0d-a70e-0274f446d331/1/rFaq3EJBEsT8iYnAruJUm7r1ZWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:87:23:00:ba:c8:76:25:17:52:a4:29:f0:4d:c4:b4:2c:4d: 33:a8:8a:96:6c:44:0d:dc:47:ca:c9:ba:c1:11:50:ab:f0:c5: 28:77:db:dc:2e:91:95:76:e1:63:d1:34:04:36:2d:d2:4d:e6: 6d:40:fd:24:e7:8b:5a:a8:69:6e:23:4f:32:a9:04:a7:a2:98: e7:dd:20:4e:6e:ff:2e:86:10:63:01:26:b1:1f:66:1c:9a:83: 40:c4:62:6b:8e:44:6f:24:98:88:95:76:b4:58:1e:77:3a:90: ee:b1:d1:08:ab:13:07:9a:c6:ef:a4:94:48:f4:60:df:6e:ca: c5:f1:e2:60:4d:54:ff:78:b5:b1:b2:51:7e:99:c5:a8:d9:33: 38:95:c2:75:6d:2d:0f:c9:b0:69:cf:09:9c:40:ea:a3:0a:1b: 28:b1:74:48:07:fe:47:f4:86:3e:00:34:66:e1:08:03:c1:30: 45:3b:3f:41:c8:b0:5a:cf:71:43:33:25:26:96:0e:2e:1d:d2: f3:5d:af:8f:21:b4:98:64:62:5c:18:d9:74:02:43:c0:2c:04: c9:6c:d7:98:3d:71:aa:c7:1a:e1:28:09:14:41:5c:de:1c:1c: 90:4e:08:e0:72:2b:a1:36:60:01:0a:f8:f9:c6:bc:9e:6a:7c: 54:a9:81:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBukLWq2NWqlOG90zPWmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNTZhYWRjNDI0MTEyYzRmYzg5ODljMGFlZTI1NDliYmFm NTY1NjgwHhcNMjUxMjE1MDgwMDU5WhcNMjUxMjE2MDgwMDU5WjAzMTEwLwYDVQQD Eyg1YTU0MDM5MDgzNjBhZjZiNGI0Y2UyMzFkOTI5MDUwZWRkYmU1YTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX760BScB3nBs3VIYsmIZXbO8pjx oW83nQJu6B4695n41jMVGuMQJnqlyqe8JOW7HwVrPb42CI9lhXymX8kZRJSaA+/y NI1zXBG9SiN50MpAot47sl16OkI+HilDv3qeVUXF6NZHXW4JtfVwE/wleC3YeiTY 2C647Pt3QMpB4YGk1e7pGAkR+sOdkz7ohMIL/iTiawQ+3Y4CN34yYkQ/DN8ljQpQ B5sOvL81MzCQ5Du4Mv4+1iqpzj3FVAsnqtjVz79ukUFhMkCCJyDjJgwxzGKQM7rw 2z0M7rTrCPHRdF9zqnEg+RFydSJQ2tKGaeodrzeUtyarkH33nACypp1mqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpUA5CDYK9rS0ziMdkpBQ7dvlpmMB8GA1UdIwQY MBaAFKxWqtxCQRLE/ImJwK7iVJu69WVoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUt MDI3NGY0NDZkMzMxLzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iMDMzZDMtZWU5Ni00YzBkLWE3MGUtMDI3NGY0NDZkMzMx LzEvckZhcTNFSkJFc1Q4aVluQXJ1SlVtN3IxWldnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4cjALrI diUXUqQp8E3EtCxNM6iKlmxEDdxHysm6wRFQq/DFKHfb3C6RlXbhY9E0BDYt0k3m bUD9JOeLWqhpbiNPMqkEp6KY590gTm7/LoYQYwEmsR9mHJqDQMRia45EbySYiJV2 tFgedzqQ7rHRCKsTB5rG76SUSPRg327KxfHiYE1U/3i1sbJRfpnFqNkzOJXCdW0t D8mwac8JnEDqowobKLF0SAf+R/SGPgA0ZuEIA8EwRTs/QciwWs9xQzMlJpYOLh3S 812vjyG0mGRiXBjZdAJDwCwEyWzXmD1xqsca4SgJFEFc3hwckE4I4HIroTZgAQr4 +ca8nmp8VKmBdA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:03:01 2025 by rpki-client