This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json) Hash identifier: Hj7u36fds+XfGfA8D1vqzy8qkxEx5VMSqFqsd0L4I4Q= Subject key identifier: A5:F3:DD:A4:A9:E8:88:EE:B8:78:4A:99:64:F4:A1:57:B7:9F:60:26 Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Certificate serial: 019B0FA584A43401169662D5DD4E1CBE610A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft Manifest number: 0726 Signing time: Thu 11 Dec 2025 23:01:04 +0000 Manifest this update: Thu 11 Dec 2025 23:01:04 +0000 Manifest next update: Fri 12 Dec 2025 23:01:04 +0000 Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: D60j5ONctgzk+KbLZUOjXZ6yX8PYmHITfm/hulKA4D8=) 2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:84:a4:34:01:16:96:62:d5:dd:4e:1c:be:61:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Validity Not Before: Dec 11 23:01:04 2025 GMT Not After : Dec 12 23:01:04 2025 GMT Subject: CN=a5f3dda4a9e888eeb8784a9964f4a157b79f6026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c6:ea:c0:43:be:b4:42:82:ac:f8:16:12:55: b6:54:93:e1:43:b7:f8:5d:1c:0f:6f:24:f2:3f:69: e3:06:b4:b0:51:2f:fd:11:a6:3c:32:86:9c:46:a6: 56:88:7b:0b:23:65:6b:df:eb:bf:4e:6b:a8:5e:4d: cc:90:ab:6d:07:18:4d:92:17:07:b5:d8:98:a2:01: 6a:c9:18:0f:56:a0:28:d3:a9:7a:17:6e:9e:2e:84: ea:10:e4:8c:8e:ef:b0:9b:9a:12:76:07:71:71:71: 0d:5b:1e:c6:13:b8:2e:43:78:cd:21:df:fc:fc:a0: 64:90:6a:0d:2d:f0:c2:7f:3f:ce:06:19:5f:8b:fd: 41:4b:cb:1a:07:70:e8:cb:1b:34:bc:9e:54:bc:f6: 2f:13:db:ac:87:56:71:27:70:f3:46:c8:4b:2b:22: 99:3c:12:7f:86:b2:43:b5:64:bf:62:4d:95:f2:d3: fb:55:60:e7:ae:95:98:99:ad:0a:6e:03:e1:51:50: 65:4e:a9:71:9e:b0:18:fb:8d:e2:c4:8d:ca:04:74: 32:5e:ed:06:c8:3e:ab:ed:9d:ba:a3:ff:81:1c:5b: 16:0c:d0:b5:38:17:16:e0:fc:f1:f3:ab:cd:62:fe: 9a:70:d6:38:d7:c4:ba:3c:4b:f0:e3:34:3e:a3:b2: 77:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F3:DD:A4:A9:E8:88:EE:B8:78:4A:99:64:F4:A1:57:B7:9F:60:26 X509v3 Authority Key Identifier: keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4d:9e:a4:79:48:66:d7:b7:a9:57:f2:e9:7a:c4:ef:d3:b8: a5:ea:9d:39:db:8d:31:38:d7:25:54:c9:eb:0f:c3:ce:d1:2c: 3d:c5:15:e6:52:91:19:c5:ea:e6:9e:6d:18:2a:74:06:d8:ed: b9:ab:12:5d:8a:2f:08:97:20:90:59:53:b0:cb:73:e4:69:aa: 2c:04:bb:76:89:10:d0:09:c3:a8:04:44:85:32:11:9d:c0:64: d7:86:a2:f4:75:09:52:13:3c:78:66:53:35:63:3c:87:d7:a8: 5e:82:cd:64:b9:91:57:34:a0:9a:2c:e1:01:27:86:0e:7f:2a: e0:ac:01:2f:28:d0:be:36:73:bd:a5:fc:a2:ca:b1:a3:dc:b7: bf:86:31:e5:d0:fe:fa:75:40:30:8f:13:34:58:33:63:69:fd: b7:ed:ba:fa:f3:96:7a:4c:ff:7d:e4:51:6e:99:d9:f9:6b:6e: 91:4d:98:f3:67:1c:53:c5:ff:43:c4:f0:c9:e7:b0:4e:14:e6: ed:e3:d2:42:71:22:ab:c2:ae:88:3a:b6:c4:8d:ef:b2:49:6b: 7d:f6:d2:4e:9e:c4:58:06:f2:4f:24:8a:2b:cb:ad:f1:1e:b6: 86:32:c4:19:9a:75:78:b5:ab:69:3b:0b:45:d0:05:31:6d:f2: ea:9a:f2:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpYSkNAEWlmLV3U4cvmEKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3 OWM2ZGEwHhcNMjUxMjExMjMwMTA0WhcNMjUxMjEyMjMwMTA0WjAzMTEwLwYDVQQD EyhhNWYzZGRhNGE5ZTg4OGVlYjg3ODRhOTk2NGY0YTE1N2I3OWY2MDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcbqwEO+tEKCrPgWElW2VJPhQ7f4 XRwPbyTyP2njBrSwUS/9EaY8MoacRqZWiHsLI2Vr3+u/TmuoXk3MkKttBxhNkhcH tdiYogFqyRgPVqAo06l6F26eLoTqEOSMju+wm5oSdgdxcXENWx7GE7guQ3jNId/8 /KBkkGoNLfDCfz/OBhlfi/1BS8saB3Doyxs0vJ5UvPYvE9ush1ZxJ3DzRshLKyKZ PBJ/hrJDtWS/Yk2V8tP7VWDnrpWYma0KbgPhUVBlTqlxnrAY+43ixI3KBHQyXu0G yD6r7Z26o/+BHFsWDNC1OBcW4Pzx86vNYv6acNY418S6PEvw4zQ+o7J3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXz3aSp6IjuuHhKmWT0oVe3n2AmMB8GA1UdIwQY MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt ZDYwYWE3MzNjZDEwLzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU2epHlI Zte3qVfy6XrE79O4peqdOduNMTjXJVTJ6w/DztEsPcUV5lKRGcXq5p5tGCp0Btjt uasSXYovCJcgkFlTsMtz5GmqLAS7dokQ0AnDqAREhTIRncBk14ai9HUJUhM8eGZT NWM8h9eoXoLNZLmRVzSgmizhASeGDn8q4KwBLyjQvjZzvaX8osqxo9y3v4Yx5dD+ +nVAMI8TNFgzY2n9t+26+vOWekz/feRRbpnZ+WtukU2Y82ccU8X/Q8TwyeewThTm 7ePSQnEiq8KuiDq2xI3vsklrffbSTp7EWAbyTySKK8ut8R62hjLEGZp1eLWraTsL RdAFMW3y6pryIg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:53:58 2025 by rpki-client