This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json) Hash identifier: MLHaYNDtLhY1lnkBC+0c+FYNKa/J7T6lDzhIcTP9mVc= Subject key identifier: 3C:94:16:E4:76:EF:B6:22:A9:68:30:7C:2E:F1:59:89:51:6C:1F:AE Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019B0E5BBF602B175AFA33CD61AA58EA17D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft Manifest number: 071C Signing time: Thu 11 Dec 2025 17:00:52 +0000 Manifest this update: Thu 11 Dec 2025 17:00:52 +0000 Manifest next update: Fri 12 Dec 2025 17:00:52 +0000 Files and hashes: 1: 6tgQgTfm85LpNc3uFwCPSeOHgn0.roa (hash: wCzEcSC/toNrpIYexSQkBXqRoE/bPAxt1JhjpW1voZY=) 2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=) 3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=) 4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: L7CQt9hFTScgX74N7Huj2SMagGp8L8R/WllpsycuLQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:bf:60:2b:17:5a:fa:33:cd:61:aa:58:ea:17:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Dec 11 17:00:52 2025 GMT Not After : Dec 12 17:00:52 2025 GMT Subject: CN=3c9416e476efb622a968307c2ef15989516c1fae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e6:9a:f0:a8:c5:77:4b:23:6c:aa:ca:2c:d7: 43:1a:a8:cb:eb:d1:8b:b4:94:86:78:ed:3b:ec:06: 73:4f:78:e7:12:81:7c:ad:7a:21:59:63:30:1f:a6: ac:b8:dc:ef:6b:b8:47:4e:e7:b3:eb:02:72:3f:e6: bf:c6:93:86:f7:5a:5e:b0:6b:e9:47:36:5c:af:fc: da:79:4c:4b:b0:76:fc:e4:de:68:06:1a:a1:a2:9d: ee:81:c5:f3:01:35:23:79:6f:3c:fc:3a:54:e1:f2: 4e:3a:42:4d:5d:b2:2e:a5:23:d6:cc:d3:a5:26:2e: ed:28:d0:d9:c4:77:b1:87:81:af:a5:be:06:67:52: fd:2f:b8:32:31:57:68:25:75:0b:7a:20:95:aa:fc: 45:8e:54:fe:07:de:4b:8e:10:37:1a:5e:26:3f:20: b0:ff:f4:ae:83:4e:0d:45:83:7d:c2:be:25:a7:2c: 7c:d1:c4:d3:be:7f:9b:8a:cf:a4:a5:be:b3:29:24: 25:b7:75:cd:71:d6:d3:ec:88:e9:45:f5:60:eb:47: c7:10:22:db:f9:8b:18:b4:d2:c0:d0:e4:8c:09:fa: a3:f9:81:68:2d:e6:13:92:53:e5:12:d4:ed:ba:27: b0:56:f9:87:fc:95:ef:d7:52:19:64:dc:7d:e5:8a: b3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:94:16:E4:76:EF:B6:22:A9:68:30:7C:2E:F1:59:89:51:6C:1F:AE X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:cc:94:3b:48:00:6e:fb:b5:44:07:36:cd:10:b3:9d:b7:b7: ed:21:e6:58:5e:ef:f6:c4:d4:74:fe:a2:59:f6:81:8e:00:b7: 0d:94:76:1b:dd:96:e0:b2:c8:03:8d:42:23:6f:0c:8c:9c:27: 8c:54:0e:99:6c:21:2a:de:c0:51:b2:3a:46:b2:32:8a:ea:ef: 06:60:a7:eb:50:c3:2a:c4:dd:f2:ef:43:51:92:72:b3:c1:a6: b9:d6:08:58:8b:8f:85:05:66:47:0e:f7:95:3c:ff:0c:e5:2a: 54:6d:73:98:dc:c8:1e:87:a7:93:46:25:b6:1c:c0:f2:a2:0a: 44:b1:98:ae:bb:b3:d7:ee:62:b5:ad:95:eb:9c:21:0b:4f:23: 46:fb:66:8d:07:15:8c:dc:d9:22:4e:c0:22:ee:c2:c3:b6:bb: e2:ef:e2:06:59:c7:36:cc:b0:8a:f9:12:d4:3e:b8:30:8f:f7: a2:f9:3e:e2:c0:ad:d2:dc:49:36:ce:95:58:ee:8d:46:a8:4a: 8a:8a:a6:8c:00:d2:fd:d9:a5:00:ea:48:13:e9:20:9e:df:a6: c1:4a:c5:cd:bc:22:0b:a6:ec:68:0f:1b:89:be:66:4e:bd:b7: c0:c2:0c:34:92:6a:94:00:de:16:86:86:93:78:3d:f6:03:58: 2a:28:3d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW79gKxda+jPNYapY6hfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjUxMjExMTcwMDUyWhcNMjUxMjEyMTcwMDUyWjAzMTEwLwYDVQQD EygzYzk0MTZlNDc2ZWZiNjIyYTk2ODMwN2MyZWYxNTk4OTUxNmMxZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuaa8KjFd0sjbKrKLNdDGqjL69GL tJSGeO077AZzT3jnEoF8rXohWWMwH6asuNzva7hHTuez6wJyP+a/xpOG91pesGvp RzZcr/zaeUxLsHb85N5oBhqhop3ugcXzATUjeW88/DpU4fJOOkJNXbIupSPWzNOl Ji7tKNDZxHexh4Gvpb4GZ1L9L7gyMVdoJXULeiCVqvxFjlT+B95LjhA3Gl4mPyCw //Sug04NRYN9wr4lpyx80cTTvn+bis+kpb6zKSQlt3XNcdbT7IjpRfVg60fHECLb +YsYtNLA0OSMCfqj+YFoLeYTklPlEtTtuiewVvmH/JXv11IZZNx95YqzRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyUFuR277YiqWgwfC7xWYlRbB+uMB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp8yUO0gA bvu1RAc2zRCznbe37SHmWF7v9sTUdP6iWfaBjgC3DZR2G92W4LLIA41CI28MjJwn jFQOmWwhKt7AUbI6RrIyiurvBmCn61DDKsTd8u9DUZJys8GmudYIWIuPhQVmRw73 lTz/DOUqVG1zmNzIHoenk0YlthzA8qIKRLGYrruz1+5ita2V65whC08jRvtmjQcV jNzZIk7AIu7Cw7a74u/iBlnHNsywivkS1D64MI/3ovk+4sCt0txJNs6VWO6NRqhK ioqmjADS/dmlAOpIE+kgnt+mwUrFzbwiC6bsaA8bib5mTr23wMIMNJJqlADeFoaG k3g99gNYKig9qg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:30 2025 by rpki-client