This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json) Hash identifier: Ff8lOevydILrj2Y13lUexbo0zHU1ZjByhTha/rfp8Rk= Subject key identifier: 03:07:FF:56:26:A7:D0:F6:9B:E0:0B:73:55:B7:03:98:98:93:5C:BD Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9 Certificate serial: 019B0F6E336CB9826091B02912D5F27EC4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 22:00:38 +0000 Manifest this update: Thu 11 Dec 2025 22:00:38 +0000 Manifest next update: Fri 12 Dec 2025 22:00:38 +0000 Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 3epOY3Oka1tbeuc1MEZbolYxZq41L7wRvsOeK36JXwg=) 2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=) 3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:33:6c:b9:82:60:91:b0:29:12:d5:f2:7e:c4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c835498f35199a1571964d855c3877751681ab9 Validity Not Before: Dec 11 22:00:38 2025 GMT Not After : Dec 12 22:00:38 2025 GMT Subject: CN=0307ff5626a7d0f69be00b7355b7039898935cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:a1:46:23:59:c5:75:f8:e2:01:84:27:c9: 2f:f0:6f:ee:18:b4:85:56:71:c6:f4:20:55:af:60: 95:00:cd:00:1a:c2:07:20:61:09:85:e3:5e:1b:8a: 0d:a7:6d:82:d4:ff:35:28:94:b5:42:7e:7d:50:52: da:9b:de:25:ed:80:e0:88:05:90:58:13:3c:ed:5d: f2:02:a2:48:21:ca:be:3d:6d:62:eb:07:bd:63:3c: 5c:e5:cd:73:5c:ff:b5:c1:d6:36:b0:f4:02:a5:02: b4:dd:ac:89:97:0a:62:cc:13:62:3d:52:e1:e7:c3: 8d:4e:78:c5:e4:36:de:30:7e:84:bd:58:52:48:ef: b2:7c:08:7b:32:b0:ae:b9:62:d6:56:9e:45:97:37: 71:47:ec:86:ff:78:cd:94:39:de:70:cc:26:57:ca: 50:ad:d9:bd:21:a5:fd:b6:84:9c:ac:46:f6:71:a7: 8b:d0:d7:94:b7:77:38:d4:f6:67:99:2a:c3:80:60: 2e:5e:f8:f4:18:c3:23:82:28:a8:cb:50:ca:cb:d6: dc:f0:14:f1:89:99:35:cd:91:85:ef:70:cc:d8:8b: 63:5a:29:ed:74:8b:13:02:09:f8:d9:27:6e:f7:79: f5:b9:a7:d4:a9:38:06:ca:ec:e6:0e:0f:80:d4:4e: 9c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:07:FF:56:26:A7:D0:F6:9B:E0:0B:73:55:B7:03:98:98:93:5C:BD X509v3 Authority Key Identifier: keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:65:97:69:ff:c8:38:a8:7e:d3:e3:89:93:b9:83:b9:5f:a7: 39:dd:22:69:63:b8:c9:c5:18:6f:fd:7c:b8:8a:b6:92:fb:88: 6b:c6:2b:d8:c9:b5:88:a8:70:b4:ac:b7:32:58:6c:e9:a5:2d: 59:ad:77:05:36:00:ba:88:03:3a:f8:dd:3b:a2:d1:f6:e6:42: 46:25:9d:89:5e:e9:f4:3b:99:e5:81:48:62:76:ff:a0:ca:6d: 7a:3b:4f:37:31:44:9a:a5:06:be:0c:5f:9f:a6:97:00:de:a3: eb:08:fc:0b:bc:2b:b9:20:83:d1:56:a8:3b:30:f0:85:90:78: b6:ef:24:11:0d:6a:6a:b7:cb:d8:32:03:1e:2f:24:4f:26:fe: 04:14:82:9e:bf:3c:57:d4:56:f0:39:3e:52:54:bd:7c:bf:b8: da:4b:2f:5e:63:cb:7a:a5:18:94:d0:d6:cf:eb:13:12:97:3e: d9:a5:1f:61:55:c5:28:75:23:48:ed:de:28:38:c3:c8:dc:25: 57:a3:f0:c1:c6:07:c8:f3:76:14:15:04:31:5a:75:7e:73:79: 6b:05:42:51:db:0b:9e:c2:e9:c4:15:83:10:be:4c:90:6f:8f: 70:c8:a1:a3:9a:a2:a1:b9:b9:15:f6:7f:5e:9d:b0:4c:48:85: fa:96:c8:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbjNsuYJgkbApEtXyfsT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2 ODFhYjkwHhcNMjUxMjExMjIwMDM4WhcNMjUxMjEyMjIwMDM4WjAzMTEwLwYDVQQD EygwMzA3ZmY1NjI2YTdkMGY2OWJlMDBiNzM1NWI3MDM5ODk4OTM1Y2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvahRiNZxXX44gGEJ8kv8G/uGLSF VnHG9CBVr2CVAM0AGsIHIGEJheNeG4oNp22C1P81KJS1Qn59UFLam94l7YDgiAWQ WBM87V3yAqJIIcq+PW1i6we9Yzxc5c1zXP+1wdY2sPQCpQK03ayJlwpizBNiPVLh 58ONTnjF5DbeMH6EvVhSSO+yfAh7MrCuuWLWVp5FlzdxR+yG/3jNlDnecMwmV8pQ rdm9IaX9toScrEb2caeL0NeUt3c41PZnmSrDgGAuXvj0GMMjgiioy1DKy9bc8BTx iZk1zZGF73DM2ItjWintdIsTAgn42Sdu93n1uafUqTgGyuzmDg+A1E6cTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMH/1Ymp9D2m+ALc1W3A5iYk1y9MB8GA1UdIwQY MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3 LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimWXaf/I OKh+0+OJk7mDuV+nOd0iaWO4ycUYb/18uIq2kvuIa8Yr2Mm1iKhwtKy3Mlhs6aUt Wa13BTYAuogDOvjdO6LR9uZCRiWdiV7p9DuZ5YFIYnb/oMptejtPNzFEmqUGvgxf n6aXAN6j6wj8C7wruSCD0VaoOzDwhZB4tu8kEQ1qarfL2DIDHi8kTyb+BBSCnr88 V9RW8Dk+UlS9fL+42ksvXmPLeqUYlNDWz+sTEpc+2aUfYVXFKHUjSO3eKDjDyNwl V6PwwcYHyPN2FBUEMVp1fnN5awVCUdsLnsLpxBWDEL5MkG+PcMiho5qiobm5FfZ/ Xp2wTEiF+pbIzQ== -----END CERTIFICATE-----Generated at Fri Dec 12 06:32:52 2025 by rpki-client