This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json) Hash identifier: Q9qDoV4c4leqb/nlDb4pFlWBvXYp2kcSv9BvPTaT1oM= Subject key identifier: B5:28:4D:ED:4F:AD:EB:2D:51:A7:8A:F4:B0:22:A6:B8:3D:34:55:BB Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Certificate serial: 019B0EC971DC71610F6B76313E8E3DECDB2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft Manifest number: 1774 Signing time: Thu 11 Dec 2025 19:00:41 +0000 Manifest this update: Thu 11 Dec 2025 19:00:41 +0000 Manifest next update: Fri 12 Dec 2025 19:00:41 +0000 Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: ENZQLULUxAfzdorSLTDlfVRZyDPm9UPb2+09kllZcic=) 2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:71:dc:71:61:0f:6b:76:31:3e:8e:3d:ec:db:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Validity Not Before: Dec 11 19:00:41 2025 GMT Not After : Dec 12 19:00:41 2025 GMT Subject: CN=b5284ded4fadeb2d51a78af4b022a6b83d3455bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:be:ba:3a:0a:ba:d1:0f:bf:97:ae:3e:1f: 4a:f6:e6:ee:10:98:16:c4:9f:8e:f8:25:06:d8:d2: 64:5f:b1:fe:6e:74:4a:9c:74:e5:a5:e7:36:78:c9: be:51:62:4e:c1:1a:92:27:a1:9e:33:d9:61:64:51: a1:75:be:21:07:4f:56:51:7e:67:a9:61:b4:8d:fd: 4d:f9:9d:3f:42:72:d3:c1:41:bc:6f:d2:a4:27:ec: 02:c0:55:29:44:ae:d4:32:53:6f:fc:21:4d:56:63: 21:94:e9:1c:0b:b2:c9:5f:7b:93:4c:d8:a1:79:ae: d1:0c:f0:dc:83:4f:e5:48:d0:4f:4c:2d:29:22:a5: 8e:d5:6a:53:dd:72:19:7f:a3:c2:b6:d2:09:eb:3f: 79:7a:e3:21:c5:e2:40:4f:99:d0:67:d8:8b:d7:ff: 3a:fa:b8:83:a3:4d:3f:0d:9a:50:11:18:c0:1a:e6: b1:a9:6f:79:3a:38:0d:67:b9:9d:63:0a:45:91:ab: 2a:5c:02:86:3c:2d:e5:e7:8b:75:0e:f2:a8:e9:c0: ef:38:c6:2d:cb:53:3b:74:71:c8:e3:78:79:21:7b: fe:3b:37:77:45:5a:bc:13:1b:59:7e:e5:bb:5e:ba: fb:13:2d:80:3b:19:b5:fb:94:09:38:bd:a8:d0:a7: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:28:4D:ED:4F:AD:EB:2D:51:A7:8A:F4:B0:22:A6:B8:3D:34:55:BB X509v3 Authority Key Identifier: keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:43:9b:6d:cb:06:14:bf:69:f4:43:75:dc:8e:28:64:e4:c5: cd:53:77:ea:b0:58:c3:44:f5:18:be:38:05:d3:35:ff:89:ee: c3:e3:82:17:66:ab:6e:36:f6:24:ce:3c:49:9f:9a:76:95:45: d7:9c:0e:02:a0:85:99:6d:b1:c1:23:18:66:40:40:90:96:51: 97:c0:c3:18:ef:76:94:9b:be:32:0e:e9:e4:9c:7f:79:09:91: b0:a3:e0:ac:79:fe:5b:4a:a2:e2:8c:ed:c1:d7:c5:9b:9e:d5: e9:ba:cd:22:8f:00:68:15:16:31:ca:0a:22:2e:4c:01:4e:6b: 77:70:70:6c:51:b8:76:94:2b:d2:62:ac:fb:67:f2:cf:ec:9c: 96:17:cf:27:83:62:45:b1:25:21:05:bb:d0:bb:b1:89:1d:b8: da:49:70:4a:27:f3:7c:7e:f7:b7:84:4a:bf:f3:11:a7:84:57: 1c:3d:87:8d:74:66:35:bd:ca:93:57:79:7a:35:bb:6d:9e:f7: 1f:18:2e:c3:8d:67:bc:54:b8:03:06:8d:8c:58:e3:b0:e3:c5: ad:47:ed:f4:a2:19:c6:99:f8:32:77:4d:f9:33:e5:1c:f6:4e: 67:fc:08:b6:03:56:e4:01:02:94:31:60:37:3a:90:48:ef:46: 7a:f4:32:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyXHccWEPa3YxPo497NssMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw ZDllNzMwHhcNMjUxMjExMTkwMDQxWhcNMjUxMjEyMTkwMDQxWjAzMTEwLwYDVQQD EyhiNTI4NGRlZDRmYWRlYjJkNTFhNzhhZjRiMDIyYTZiODNkMzQ1NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYa+ujoKutEPv5euPh9K9ubuEJgW xJ+O+CUG2NJkX7H+bnRKnHTlpec2eMm+UWJOwRqSJ6GeM9lhZFGhdb4hB09WUX5n qWG0jf1N+Z0/QnLTwUG8b9KkJ+wCwFUpRK7UMlNv/CFNVmMhlOkcC7LJX3uTTNih ea7RDPDcg0/lSNBPTC0pIqWO1WpT3XIZf6PCttIJ6z95euMhxeJAT5nQZ9iL1/86 +riDo00/DZpQERjAGuaxqW95OjgNZ7mdYwpFkasqXAKGPC3l54t1DvKo6cDvOMYt y1M7dHHI43h5IXv+Ozd3RVq8ExtZfuW7Xrr7Ey2AOxm1+5QJOL2o0Ke36QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUoTe1PrestUaeK9LAiprg9NFW7MB8GA1UdIwQY MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt NzQ1NGExOWQzMmQxLzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0ObbcsG FL9p9EN13I4oZOTFzVN36rBYw0T1GL44BdM1/4nuw+OCF2arbjb2JM48SZ+adpVF 15wOAqCFmW2xwSMYZkBAkJZRl8DDGO92lJu+Mg7p5Jx/eQmRsKPgrHn+W0qi4ozt wdfFm57V6brNIo8AaBUWMcoKIi5MAU5rd3BwbFG4dpQr0mKs+2fyz+yclhfPJ4Ni RbElIQW70LuxiR242klwSifzfH73t4RKv/MRp4RXHD2HjXRmNb3Kk1d5ejW7bZ73 Hxguw41nvFS4AwaNjFjjsOPFrUft9KIZxpn4MndN+TPlHPZOZ/wItgNW5AEClDFg NzqQSO9GevQyMQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:36:40 2025 by rpki-client