This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json) Hash identifier: ORNE6IFB1PlzhALeZD4HINexW6s4HBm0si4L0EekkKU= Subject key identifier: 1A:78:5F:CE:92:EE:31:93:D0:4A:4F:8A:90:F9:E5:9D:53:18:26:64 Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019B0E93041117E4EBDA6E78D8D4F5102666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 18:01:14 +0000 Manifest this update: Thu 11 Dec 2025 18:01:14 +0000 Manifest next update: Fri 12 Dec 2025 18:01:14 +0000 Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: oxgjAIb2SADgjtyBf0Cionu+bG/kc0zk6aikqTCjxkw=) 2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:04:11:17:e4:eb:da:6e:78:d8:d4:f5:10:26:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Dec 11 18:01:14 2025 GMT Not After : Dec 12 18:01:14 2025 GMT Subject: CN=1a785fce92ee3193d04a4f8a90f9e59d53182664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7a:75:52:68:9e:ae:b0:4f:84:f1:4b:62:22: 9b:cb:b0:37:b3:47:e7:1e:58:1e:c9:2c:27:93:25: 63:04:db:bc:ae:6f:55:6d:a6:b9:89:af:ad:6e:42: ba:86:18:e7:79:dd:79:fa:e7:f1:92:be:a0:0b:46: 81:43:5d:4f:1b:fe:a0:1e:67:b3:da:e3:c5:ef:31: 08:85:07:48:ff:2f:65:21:1b:75:99:76:82:71:5a: 2f:0f:f0:eb:86:08:a5:72:1a:f0:bc:6c:df:a5:79: f8:61:87:e5:34:0f:83:c9:01:77:12:e9:3b:07:8e: 94:70:1f:43:98:a2:43:9f:56:89:dd:71:17:73:d1: 39:8d:3f:5c:0c:74:f1:7d:15:16:3a:c8:4a:b2:16: 55:90:0b:a3:7f:0c:b6:c8:ae:0a:c8:27:9e:67:c0: de:32:82:c2:e5:7e:0c:13:ad:2f:e3:78:1c:dd:52: 85:b6:a8:33:2a:ac:7f:8f:d4:03:bb:4b:4f:37:39: 98:83:49:44:d0:54:92:23:29:8f:cd:fd:e0:56:21: 9c:41:da:2e:0d:b4:82:5a:4f:a1:d9:49:81:2d:0b: 32:76:19:2e:46:99:2a:11:fc:5f:77:6f:13:a9:91: ef:eb:d8:87:ec:88:7d:b8:23:3b:85:0d:7b:8f:53: d2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:78:5F:CE:92:EE:31:93:D0:4A:4F:8A:90:F9:E5:9D:53:18:26:64 X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:12:06:a1:9d:45:b9:ff:ea:69:de:21:16:da:70:cd:09:d1: de:58:ac:0e:23:30:3f:62:dc:9f:86:c6:8f:0a:92:ce:c1:61: c2:ad:1a:ad:20:14:d0:86:2f:42:0d:c9:ff:f1:30:94:f8:1f: 90:a0:2f:16:38:86:28:5b:e9:18:e0:d9:90:78:34:6e:16:8f: 93:f1:5b:00:20:af:53:ee:c0:ce:77:d1:a5:31:84:78:9e:e8: 9f:31:26:5e:1e:43:a4:1d:94:cd:8b:09:d2:51:a8:76:8b:db: 40:f5:7c:48:44:60:76:4e:8b:27:11:fb:dd:72:0a:80:b1:1f: 26:02:f5:c9:77:7e:3e:e6:cd:5b:44:7b:5d:b4:40:4c:d2:be: d4:61:a4:2c:01:3d:6b:1a:33:81:f4:ea:99:b1:01:4a:4c:1d: 8d:d4:1a:42:c4:d7:28:9e:20:4d:19:d8:8d:1b:55:88:49:0d: 91:de:af:71:bf:94:f9:d1:aa:3f:7a:5b:56:e3:3c:fd:5a:66: d9:c6:4f:3e:e0:86:96:3c:45:91:e3:ea:da:d0:eb:9a:a3:14: 67:3a:28:2c:45:20:ae:39:41:33:ed:fb:cc:2c:42:7c:05:ce: e6:cb:f8:7a:3e:5b:33:75:3e:c3:9d:0d:fa:c9:11:e2:a8:2c: 59:aa:90:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkwQRF+Tr2m542NT1ECZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjUxMjExMTgwMTE0WhcNMjUxMjEyMTgwMTE0WjAzMTEwLwYDVQQD EygxYTc4NWZjZTkyZWUzMTkzZDA0YTRmOGE5MGY5ZTU5ZDUzMTgyNjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHp1UmierrBPhPFLYiKby7A3s0fn HlgeySwnkyVjBNu8rm9Vbaa5ia+tbkK6hhjned15+ufxkr6gC0aBQ11PG/6gHmez 2uPF7zEIhQdI/y9lIRt1mXaCcVovD/DrhgilchrwvGzfpXn4YYflNA+DyQF3Euk7 B46UcB9DmKJDn1aJ3XEXc9E5jT9cDHTxfRUWOshKshZVkAujfwy2yK4KyCeeZ8De MoLC5X4ME60v43gc3VKFtqgzKqx/j9QDu0tPNzmYg0lE0FSSIymPzf3gViGcQdou DbSCWk+h2UmBLQsydhkuRpkqEfxfd28TqZHv69iH7Ih9uCM7hQ17j1PSgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp4X86S7jGT0EpPipD55Z1TGCZkMB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRIGoZ1F uf/qad4hFtpwzQnR3lisDiMwP2Lcn4bGjwqSzsFhwq0arSAU0IYvQg3J//EwlPgf kKAvFjiGKFvpGODZkHg0bhaPk/FbACCvU+7AznfRpTGEeJ7onzEmXh5DpB2UzYsJ 0lGodovbQPV8SERgdk6LJxH73XIKgLEfJgL1yXd+PubNW0R7XbRATNK+1GGkLAE9 axozgfTqmbEBSkwdjdQaQsTXKJ4gTRnYjRtViEkNkd6vcb+U+dGqP3pbVuM8/Vpm 2cZPPuCGljxFkePq2tDrmqMUZzooLEUgrjlBM+37zCxCfAXO5sv4ej5bM3U+w50N +skR4qgsWaqQsQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:56 2025 by rpki-client