This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json) Hash identifier: b4j7ohbPf8cLyWMyvV3cxnPx0EWvH0QCSH5AU5RP0AY= Subject key identifier: 57:43:85:C4:BB:8D:43:20:FA:B0:29:9C:25:B9:14:E8:76:1E:25:AD Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Certificate serial: 019B59E388ABFDEE04FA413E77AB0BF2B900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft Manifest number: 0ADF Signing time: Fri 26 Dec 2025 09:00:42 +0000 Manifest this update: Fri 26 Dec 2025 09:00:42 +0000 Manifest next update: Sat 27 Dec 2025 09:00:42 +0000 Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=) 2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: fBitVoFz4xH/Z3X+PhzUCCRdexxO05l5BDTmvx+vdGg=) 3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:88:ab:fd:ee:04:fa:41:3e:77:ab:0b:f2:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Validity Not Before: Dec 26 09:00:42 2025 GMT Not After : Dec 27 09:00:42 2025 GMT Subject: CN=574385c4bb8d4320fab0299c25b914e8761e25ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e2:50:83:88:28:80:e7:82:9d:ef:79:25:f7: 8a:6b:72:64:0f:da:9a:62:bd:7d:6f:71:37:11:90: 76:47:d1:ba:22:ea:5f:1e:9b:e8:32:15:36:db:cc: 57:63:ca:33:71:dd:a7:80:1a:2c:fe:49:eb:45:b4: fd:fa:75:2a:17:66:88:5d:6f:dd:aa:44:b2:18:e8: a6:ab:20:83:65:14:73:8e:f0:22:b7:39:d9:c8:08: 45:10:83:dd:be:ca:3f:a8:d3:23:c2:d3:b0:c5:e9: 1b:2a:cd:b1:1f:c1:a9:f4:ae:7c:e7:95:ad:cd:f1: a9:bb:b8:40:2a:22:18:2e:07:c8:95:58:3e:f9:4f: e8:c8:4a:7a:a6:97:03:fb:80:19:aa:35:5b:7e:a8: 87:ea:da:92:6d:51:72:36:03:32:c6:7d:fb:49:92: ec:97:58:08:f6:76:21:e6:77:89:6a:bc:28:6a:5f: 4e:0f:45:cd:57:7d:2b:7d:bb:63:20:8f:a1:0d:4a: 97:6c:6f:ed:05:68:bb:c4:8d:97:cb:47:fa:1c:b3: 64:13:f9:13:16:98:64:4b:31:5f:d2:0b:46:55:db: 31:18:47:26:75:c8:4a:05:2e:b3:8c:75:b0:6f:83: f9:af:1b:82:3d:25:42:c0:95:ce:b1:b1:0f:9a:94: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:43:85:C4:BB:8D:43:20:FA:B0:29:9C:25:B9:14:E8:76:1E:25:AD X509v3 Authority Key Identifier: keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ac:9d:9d:29:44:54:82:e6:8c:e5:4d:10:76:19:32:18:33: 47:11:ef:11:5f:fc:3a:b4:10:d3:8f:a3:6a:0b:d4:a3:4c:ca: ec:9f:09:48:ad:fd:53:5e:f8:12:4a:cd:02:a6:9b:56:17:83: fc:9e:3b:a3:b5:1f:49:0a:27:8d:8e:8a:7d:5b:15:55:c4:69: f7:50:ab:45:37:89:a0:07:69:92:93:7e:51:8e:01:34:c4:06: a8:7b:20:1b:5f:07:63:26:1b:65:72:9e:30:f1:74:93:c8:47: 29:dd:ad:3c:9a:29:1f:cb:8e:49:1a:8a:1f:c8:39:88:c0:fc: 88:bb:8e:eb:97:9a:ab:f5:56:67:54:d6:84:cc:5d:5e:be:2e: cd:86:75:3d:85:49:67:98:fe:0c:9d:9b:13:aa:ea:b5:89:1b: 44:39:24:0f:2d:a2:58:ce:07:62:61:d7:68:48:0f:3f:b0:a9: 08:1d:bf:42:fb:d2:81:c6:2d:79:ce:c4:3e:60:64:bf:7a:99: ec:01:6d:e9:28:2b:1b:bd:40:7a:cf:f2:80:e2:a9:5e:16:2d: ab:e5:35:46:ee:f7:b4:ef:c2:d6:62:13:40:95:bd:a8:84:a9: 37:45:aa:94:44:10:ac:3c:17:92:7e:38:bd:6e:9c:d6:0e:2c: 90:84:ea:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ44ir/e4E+kE+d6sL8rkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzM2NWFhZmJlMGU0NWEwNGRkMTVlOWMyMzExMjFlOWVh ZWE4ZjIwHhcNMjUxMjI2MDkwMDQyWhcNMjUxMjI3MDkwMDQyWjAzMTEwLwYDVQQD Eyg1NzQzODVjNGJiOGQ0MzIwZmFiMDI5OWMyNWI5MTRlODc2MWUyNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uJQg4gogOeCne95JfeKa3JkD9qa Yr19b3E3EZB2R9G6IupfHpvoMhU228xXY8ozcd2ngBos/knrRbT9+nUqF2aIXW/d qkSyGOimqyCDZRRzjvAitznZyAhFEIPdvso/qNMjwtOwxekbKs2xH8Gp9K5855Wt zfGpu7hAKiIYLgfIlVg++U/oyEp6ppcD+4AZqjVbfqiH6tqSbVFyNgMyxn37SZLs l1gI9nYh5neJarwoal9OD0XNV30rfbtjII+hDUqXbG/tBWi7xI2Xy0f6HLNkE/kT FphkSzFf0gtGVdsxGEcmdchKBS6zjHWwb4P5rxuCPSVCwJXOsbEPmpQjJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdDhcS7jUMg+rApnCW5FOh2HiWtMB8GA1UdIwQY MBaAFP3DZar74ORaBN0V6cIxEh6erqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMt YWJkZTdhNjVlMDRhLzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMtYWJkZTdhNjVlMDRh LzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKydnSlE VILmjOVNEHYZMhgzRxHvEV/8OrQQ04+jagvUo0zK7J8JSK39U174EkrNAqabVheD /J47o7UfSQonjY6KfVsVVcRp91CrRTeJoAdpkpN+UY4BNMQGqHsgG18HYyYbZXKe MPF0k8hHKd2tPJopH8uOSRqKH8g5iMD8iLuO65eaq/VWZ1TWhMxdXr4uzYZ1PYVJ Z5j+DJ2bE6rqtYkbRDkkDy2iWM4HYmHXaEgPP7CpCB2/QvvSgcYtec7EPmBkv3qZ 7AFt6SgrG71Aes/ygOKpXhYtq+U1Ru73tO/C1mITQJW9qISpN0WqlEQQrDwXkn44 vW6c1g4skITqag== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:21 2025 by rpki-client