This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json) Hash identifier: Dt31HgfTqEEhAiryQtRpCAL9hv2E4UctFQes37UXOj8= Subject key identifier: 18:6F:3B:F6:FA:36:A4:90:64:3A:86:AC:23:26:E1:B4:3C:70:9A:61 Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019B33443F68647EBB421F60C301FB9A9FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:09 +0000 Manifest this update: Thu 18 Dec 2025 21:01:09 +0000 Manifest next update: Fri 19 Dec 2025 21:01:09 +0000 Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: RVwqPM8qPkmlzgkr5JXSDOzSp6fZJHuxQ5p30OVE1yI=) 2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:3f:68:64:7e:bb:42:1f:60:c3:01:fb:9a:9f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Dec 18 21:01:09 2025 GMT Not After : Dec 19 21:01:09 2025 GMT Subject: CN=186f3bf6fa36a490643a86ac2326e1b43c709a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:24:75:7c:63:14:1a:a6:23:a0:04:0e:63:d6: 4f:0b:4c:34:ac:72:64:de:b7:97:f8:a5:e9:98:0e: 0b:c6:1e:b4:7f:91:98:b5:05:c7:f5:30:19:df:bc: 10:a8:30:9c:15:a9:c8:f1:f5:cf:2c:47:e8:e9:b3: e6:3a:d8:ec:3b:5c:05:54:1c:ff:0c:54:18:7a:bb: df:4c:1f:f5:a4:38:bf:7d:b8:cb:54:41:e4:b7:06: 59:33:4a:95:3c:4d:57:3c:f5:df:48:0c:dd:05:c1: 36:87:f6:3b:34:5a:12:33:1a:c5:c6:23:c1:3e:fd: 14:29:24:1c:b4:7f:c6:09:49:4c:87:61:2b:b5:5d: 3f:df:c9:57:e7:9c:a7:92:10:cd:cc:c3:e8:54:00: f1:a1:25:a3:78:6a:b3:ef:13:4b:ca:5d:71:6a:d7: f6:41:fa:d3:d2:3d:bc:85:85:85:73:32:9d:40:d2: c1:86:9a:46:13:74:63:32:9f:3f:7c:8e:77:c8:6e: 73:b7:75:39:0c:78:70:f3:56:0a:01:bd:b4:66:47: 87:e6:0b:63:ef:31:68:d8:54:53:8f:7c:e8:06:4e: cb:b0:33:c8:5d:d3:ac:e6:fe:ce:9b:3f:a7:06:18: 84:d7:f9:21:c1:a1:ab:91:9c:20:8c:a0:6e:85:5e: 18:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:3B:F6:FA:36:A4:90:64:3A:86:AC:23:26:E1:B4:3C:70:9A:61 X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:42:70:cc:14:bf:71:ce:ee:75:67:3e:bd:59:4b:b8:54:44: 4b:f5:9b:a3:6b:54:d5:73:44:c1:69:09:47:ca:44:62:22:ad: 13:44:e6:c5:95:0d:72:c6:90:85:62:d6:63:fe:93:33:f0:b3: 66:f3:5a:25:b4:71:f5:ef:3b:e4:69:e0:15:b6:71:61:2b:97: 6c:45:91:6f:5b:d6:cc:81:4e:f2:91:bc:5c:9e:d6:40:33:47: ee:52:68:17:d0:5f:77:ac:16:3d:b0:89:ea:df:45:65:ad:78: 89:4a:8a:12:41:7b:0b:d9:51:32:2e:56:b8:72:6d:28:e2:10: d0:be:75:34:2b:47:31:48:0f:8b:c7:36:1b:f9:03:46:9d:38: a8:3a:71:96:c8:f6:74:93:3d:55:39:5f:72:1d:37:4f:29:9e: 40:dd:53:95:bc:57:f0:b8:cf:7d:37:7f:d1:45:03:19:4d:c2: e2:93:92:80:31:fa:22:aa:89:ed:de:74:4d:46:a8:10:95:02: bd:20:85:8a:e7:24:ca:4d:7b:ff:13:b4:da:c6:6c:fd:56:0a: 54:a7:c4:26:1f:6d:4b:e0:9a:d3:24:f5:7a:e5:ad:ea:8f:76: 69:4a:d0:0f:7d:87:c7:62:61:31:48:ef:8d:df:42:93:4c:cc: 0f:46:c1:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRD9oZH67Qh9gwwH7mp+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjUxMjE4MjEwMTA5WhcNMjUxMjE5MjEwMTA5WjAzMTEwLwYDVQQD EygxODZmM2JmNmZhMzZhNDkwNjQzYTg2YWMyMzI2ZTFiNDNjNzA5YTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SR1fGMUGqYjoAQOY9ZPC0w0rHJk 3reX+KXpmA4Lxh60f5GYtQXH9TAZ37wQqDCcFanI8fXPLEfo6bPmOtjsO1wFVBz/ DFQYervfTB/1pDi/fbjLVEHktwZZM0qVPE1XPPXfSAzdBcE2h/Y7NFoSMxrFxiPB Pv0UKSQctH/GCUlMh2ErtV0/38lX55ynkhDNzMPoVADxoSWjeGqz7xNLyl1xatf2 QfrT0j28hYWFczKdQNLBhppGE3RjMp8/fI53yG5zt3U5DHhw81YKAb20ZkeH5gtj 7zFo2FRTj3zoBk7LsDPIXdOs5v7Omz+nBhiE1/khwaGrkZwgjKBuhV4YzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhvO/b6NqSQZDqGrCMm4bQ8cJphMB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEJwzBS/ cc7udWc+vVlLuFRES/Wbo2tU1XNEwWkJR8pEYiKtE0TmxZUNcsaQhWLWY/6TM/Cz ZvNaJbRx9e875GngFbZxYSuXbEWRb1vWzIFO8pG8XJ7WQDNH7lJoF9Bfd6wWPbCJ 6t9FZa14iUqKEkF7C9lRMi5WuHJtKOIQ0L51NCtHMUgPi8c2G/kDRp04qDpxlsj2 dJM9VTlfch03TymeQN1TlbxX8LjPfTd/0UUDGU3C4pOSgDH6IqqJ7d50TUaoEJUC vSCFiuckyk17/xO02sZs/VYKVKfEJh9tS+Ca0yT1euWt6o92aUrQD32Hx2JhMUjv jd9Ck0zMD0bBAg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:40:59 2025 by rpki-client