This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json) Hash identifier: yji7jIyBGxzQVWtc/MbYIOKDZbGfReNjMEkp4vi0YBA= Subject key identifier: 50:B3:2F:6E:74:BB:8D:52:1F:B0:3D:13:A1:FB:15:74:AC:AA:C5:CE Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Certificate serial: 019B4BF1A0D8402E10F0816A3E8CDF939CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft Manifest number: 10FB Signing time: Tue 23 Dec 2025 16:01:25 +0000 Manifest this update: Tue 23 Dec 2025 16:01:25 +0000 Manifest next update: Wed 24 Dec 2025 16:01:25 +0000 Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=) 2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: nafe7IDX1j5UDfLE3TXvJvo4g0IxO255SqKmIpECVFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:a0:d8:40:2e:10:f0:81:6a:3e:8c:df:93:9c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Validity Not Before: Dec 23 16:01:25 2025 GMT Not After : Dec 24 16:01:25 2025 GMT Subject: CN=50b32f6e74bb8d521fb03d13a1fb1574acaac5ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:44:4f:15:77:5c:e0:15:1b:fe:ff:be:80: 7e:3f:9a:80:5f:08:dd:1d:9a:14:b3:bb:f0:c8:ac: b3:f8:22:eb:3f:27:a6:87:6e:a5:7a:99:7f:b4:db: e6:66:e8:37:30:06:ae:0d:3c:53:ac:8c:5c:51:5b: 94:1f:7c:6e:29:85:90:f7:12:9b:fa:88:4c:29:b3: 59:dc:0f:d3:5a:c7:16:d3:71:5f:dc:90:96:87:20: 6f:20:47:86:9c:c7:9d:75:e2:7d:af:16:6c:46:e3: 9e:62:f1:93:2a:10:6a:46:e6:53:08:a4:66:e0:13: f4:45:85:5d:39:ef:12:10:78:73:3f:8c:e4:64:a5: 98:96:8c:54:70:f6:e3:b3:7c:ba:15:68:e1:30:38: 8f:2c:52:8c:bd:07:33:63:d3:fe:ce:5f:b4:6c:15: b5:45:bc:ae:49:f1:62:24:e4:46:fa:08:d0:f7:78: bf:9b:cd:c5:92:45:be:2f:9b:ab:b1:cf:49:52:e4: ed:54:a3:5e:38:10:1f:70:4d:a1:89:2f:4d:8f:e0: ba:0e:b8:79:60:55:38:c7:ca:c4:9e:5e:0c:fe:ae: 0e:a7:44:25:74:6e:cb:37:a2:5b:15:9c:7d:7d:be: de:6f:82:a3:dd:31:9b:78:08:31:04:af:12:14:b9: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B3:2F:6E:74:BB:8D:52:1F:B0:3D:13:A1:FB:15:74:AC:AA:C5:CE X509v3 Authority Key Identifier: keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4c:0f:f8:6b:bb:49:75:a0:7a:73:39:49:ac:db:37:22:72: 9d:74:1d:92:8f:ac:6c:ca:e5:02:d4:f9:3b:f9:df:f4:5a:08: 49:f3:da:43:35:31:7a:17:9c:1c:43:df:ba:70:bb:6b:15:2b: 02:53:0b:09:23:a2:c0:a6:10:e3:8b:d7:c2:a1:76:27:dd:b1: e8:9c:6d:42:49:ac:15:de:e8:0c:e1:c3:f8:d6:08:f7:52:aa: 00:96:b3:bd:8b:87:eb:e6:13:16:c9:59:05:5f:1a:84:ae:b5: 4e:21:c2:8e:d0:7a:88:03:05:f5:48:04:f8:15:54:1b:d5:6c: 9d:ab:18:51:b5:f1:50:de:fe:20:85:4f:2c:14:2b:91:e3:9d: b6:52:2c:e1:73:c0:fd:9b:39:af:71:c1:f7:87:de:8c:a5:7b: 0c:61:6b:bc:7a:46:03:53:6c:a8:df:20:b6:10:42:cd:4d:1c: 9e:3b:65:fb:cc:00:07:d4:bb:f2:50:99:21:0e:ed:e9:f4:82: d8:c3:6a:6d:4c:cb:d9:63:9a:51:76:9b:23:c8:da:65:08:e5: c4:5e:01:e3:68:b2:57:d5:7e:1a:af:ac:24:99:f5:aa:e6:cc: 5e:4e:47:db:10:cd:92:b7:1c:69:01:fe:7a:70:16:90:4f:0b: c2:57:12:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8aDYQC4Q8IFqPozfk5zyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOTJlZjM1MzIxYmY4ZjcyMjczNGJmZjlkZmE2M2ZiZDBm MDY5MGEwHhcNMjUxMjIzMTYwMTI1WhcNMjUxMjI0MTYwMTI1WjAzMTEwLwYDVQQD Eyg1MGIzMmY2ZTc0YmI4ZDUyMWZiMDNkMTNhMWZiMTU3NGFjYWFjNWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPxETxV3XOAVG/7/voB+P5qAXwjd HZoUs7vwyKyz+CLrPyemh26lepl/tNvmZug3MAauDTxTrIxcUVuUH3xuKYWQ9xKb +ohMKbNZ3A/TWscW03Ff3JCWhyBvIEeGnMeddeJ9rxZsRuOeYvGTKhBqRuZTCKRm 4BP0RYVdOe8SEHhzP4zkZKWYloxUcPbjs3y6FWjhMDiPLFKMvQczY9P+zl+0bBW1 RbyuSfFiJORG+gjQ93i/m83FkkW+L5ursc9JUuTtVKNeOBAfcE2hiS9Nj+C6Drh5 YFU4x8rEnl4M/q4Op0QldG7LN6JbFZx9fb7eb4Kj3TGbeAgxBK8SFLnvKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCzL250u41SH7A9E6H7FXSsqsXOMB8GA1UdIwQY MBaAFP6S7zUyG/j3InNL/536Y/vQ8GkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUt YTllZWYyOTRhYzM0LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUtYTllZWYyOTRhYzM0 LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkwP+Gu7 SXWgenM5SazbNyJynXQdko+sbMrlAtT5O/nf9FoISfPaQzUxehecHEPfunC7axUr AlMLCSOiwKYQ44vXwqF2J92x6JxtQkmsFd7oDOHD+NYI91KqAJazvYuH6+YTFslZ BV8ahK61TiHCjtB6iAMF9UgE+BVUG9VsnasYUbXxUN7+IIVPLBQrkeOdtlIs4XPA /Zs5r3HB94fejKV7DGFrvHpGA1NsqN8gthBCzU0cnjtl+8wAB9S78lCZIQ7t6fSC 2MNqbUzL2WOaUXabI8jaZQjlxF4B42iyV9V+Gq+sJJn1qubMXk5H2xDNkrccaQH+ enAWkE8LwlcSrQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:03:28 2025 by rpki-client