This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft File: iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json) Hash identifier: NAZ1Qjt2gdUhDxegJ/cBC6pcZc9+LHtRUCE7k7vEDuE= Subject key identifier: 5C:14:29:DB:89:4C:B9:C0:4B:56:58:95:7B:59:FB:1F:66:57:C8:0C Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa Certificate serial: 019B1013529D5C9376CEF587567597F27BAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft Manifest number: 176F Signing time: Fri 12 Dec 2025 01:01:00 +0000 Manifest this update: Fri 12 Dec 2025 01:01:00 +0000 Manifest next update: Sat 13 Dec 2025 01:01:00 +0000 Files and hashes: 1: EFku_9VXqbesZmjqxLjBcuB7CJQ.roa (hash: NldkodBx9XHI5VbEYIs7dZXK6yR3WU54I+HEv9PZwY0=) 2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: O2U3TtPVTgDI+KyrjRDtWwSqM8WilRsa73zvoeDRxPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:52:9d:5c:93:76:ce:f5:87:56:75:97:f2:7b:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa Validity Not Before: Dec 12 01:01:00 2025 GMT Not After : Dec 13 01:01:00 2025 GMT Subject: CN=5c1429db894cb9c04b5658957b59fb1f6657c80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2c:5a:57:02:22:e8:8b:84:6b:40:34:23:75: 0a:0f:53:ad:9d:ab:ca:66:49:9d:43:03:c1:82:3b: 3b:c5:4d:8b:f2:88:37:91:44:73:df:dc:d5:48:3b: bd:7b:77:61:c1:c3:6b:c3:89:fd:b9:28:b3:15:6e: ce:96:3a:8b:77:72:e7:6b:76:0d:d1:fc:90:d3:4c: 2e:c9:d7:9d:28:58:92:ca:f8:dd:b5:1f:c6:d5:50: 29:d9:84:37:fb:25:4a:7d:83:a4:a4:ae:77:42:be: 75:62:2c:39:ba:cb:2b:21:91:29:46:43:0e:86:28: 71:92:19:4f:54:b6:d6:64:f1:36:11:d6:29:97:61: 17:76:81:e4:87:4c:f0:4d:4b:6f:19:98:a6:34:57: 0a:f8:1c:c5:fd:d9:c1:30:a4:c4:4d:2f:89:85:7e: ed:42:35:3e:35:94:09:ea:ca:30:c0:f4:6e:b0:4c: 25:f1:88:28:0a:55:39:b6:0e:00:cd:f6:83:f8:22: 78:d2:f4:ac:93:ad:84:7f:f6:6d:66:b7:56:d9:d4: 28:c8:e8:a3:b6:95:80:73:62:dd:cd:92:38:0c:0d: 53:bc:4e:17:a3:77:8c:c4:7b:60:16:43:e8:fe:18: fe:37:46:6e:c9:b2:91:5a:1d:c7:af:0f:0d:a5:5c: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:14:29:DB:89:4C:B9:C0:4B:56:58:95:7B:59:FB:1F:66:57:C8:0C X509v3 Authority Key Identifier: keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:83:67:f5:5d:2a:51:0e:9d:53:a8:3e:b2:9e:b6:6b:02:45: fe:04:85:b0:f6:4c:c7:98:af:23:fd:a8:56:3d:59:a5:b9:de: 39:a8:ec:2e:09:ac:e6:43:b7:c2:e8:ba:e7:73:81:cd:dd:44: d8:ef:e8:7d:60:39:4f:71:4d:fb:20:61:b5:4f:f0:de:dc:d6: 31:51:36:cf:4c:8e:67:0e:03:34:90:13:3d:ca:23:0d:a9:96: 81:c7:b4:0a:e0:ff:50:d0:4a:5c:09:e6:bf:d0:48:71:36:93: 9b:cc:5d:5a:cd:1c:80:1e:cd:f5:3c:a2:fd:5a:05:3c:dd:b2: cc:b5:e6:8b:75:e7:62:7a:a5:15:41:45:58:92:ab:b0:12:79: c2:57:18:c0:75:65:82:43:1c:7a:cd:b0:53:9d:8c:df:7c:ce: 84:e2:f1:02:42:17:78:7a:96:9e:4b:2c:f6:79:c4:15:73:7d: b5:c4:2c:4e:84:7d:19:33:84:be:c0:2f:c0:0c:2b:43:b2:c8: fe:f2:b6:ac:39:32:e7:7e:90:30:9f:0e:7c:9c:0b:0f:20:51: c8:5a:7f:c8:59:d7:94:7b:90:12:96:2c:e5:1c:d7:a4:68:6e: 7a:52:da:33:9a:be:82:06:a1:db:11:11:96:68:3c:a9:bf:9a: 52:b4:5d:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE1KdXJN2zvWHVnWX8nurMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx NDlhZmEwHhcNMjUxMjEyMDEwMTAwWhcNMjUxMjEzMDEwMTAwWjAzMTEwLwYDVQQD Eyg1YzE0MjlkYjg5NGNiOWMwNGI1NjU4OTU3YjU5ZmIxZjY2NTdjODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzixaVwIi6IuEa0A0I3UKD1OtnavK ZkmdQwPBgjs7xU2L8og3kURz39zVSDu9e3dhwcNrw4n9uSizFW7OljqLd3Lna3YN 0fyQ00wuydedKFiSyvjdtR/G1VAp2YQ3+yVKfYOkpK53Qr51Yiw5ussrIZEpRkMO hihxkhlPVLbWZPE2EdYpl2EXdoHkh0zwTUtvGZimNFcK+BzF/dnBMKTETS+JhX7t QjU+NZQJ6sowwPRusEwl8YgoClU5tg4AzfaD+CJ40vSsk62Ef/ZtZrdW2dQoyOij tpWAc2LdzZI4DA1TvE4Xo3eMxHtgFkPo/hj+N0ZuybKRWh3Hrw8NpVyvKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwUKduJTLnAS1ZYlXtZ+x9mV8gMMB8GA1UdIwQY MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt ZWYyZDUzYjVhMzRkLzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYNn9V0q UQ6dU6g+sp62awJF/gSFsPZMx5ivI/2oVj1ZpbneOajsLgms5kO3wui653OBzd1E 2O/ofWA5T3FN+yBhtU/w3tzWMVE2z0yOZw4DNJATPcojDamWgce0CuD/UNBKXAnm v9BIcTaTm8xdWs0cgB7N9Tyi/VoFPN2yzLXmi3XnYnqlFUFFWJKrsBJ5wlcYwHVl gkMces2wU52M33zOhOLxAkIXeHqWnkss9nnEFXN9tcQsToR9GTOEvsAvwAwrQ7LI /vK2rDky536QMJ8OfJwLDyBRyFp/yFnXlHuQEpYs5RzXpGhuelLaM5q+ggah2xER lmg8qb+aUrRdww== -----END CERTIFICATE-----Generated at Fri Dec 12 10:50:28 2025 by rpki-client