This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft File: _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json) Hash identifier: +CgrMub/mUsmgKZ4ZqYQPoPZ4SvTq9GpR2jNX01TDMg= Subject key identifier: 75:01:A9:AD:21:34:7A:4E:95:37:A1:C2:20:45:91:F0:B2:CC:09:CB Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F Certificate issuer: /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Certificate serial: 019B243EC482F3694E38984BF6FFBFEAC5D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft Manifest number: 08EE Signing time: Mon 15 Dec 2025 23:00:51 +0000 Manifest this update: Mon 15 Dec 2025 23:00:51 +0000 Manifest next update: Tue 16 Dec 2025 23:00:51 +0000 Files and hashes: 1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: QR4JlKkpvb46pgILNvt35YInb7MV4fcgqkZcDNSpy/Q=) 2: wbsu-F9aDLpOh1E-iGGerHKMETE.roa (hash: 4WuiCYXkI7bOEQ/qzC3UfWfQ5q7CLtdWh5T4lSpp9Nw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:c4:82:f3:69:4e:38:98:4b:f6:ff:bf:ea:c5:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f Validity Not Before: Dec 15 23:00:51 2025 GMT Not After : Dec 16 23:00:51 2025 GMT Subject: CN=7501a9ad21347a4e9537a1c2204591f0b2cc09cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:63:4f:0a:cd:c1:43:61:e5:8d:9c:8e:57:21: ff:18:4b:d7:d0:09:f7:6b:1b:75:11:95:34:d9:a1: 16:32:75:5f:26:06:85:4c:08:54:5b:ec:f2:ef:78: 2a:4c:16:59:5e:9e:02:de:c5:8f:ac:4a:39:4f:49: 1d:53:5b:8b:1e:da:37:42:83:ca:f5:71:82:59:da: a7:d9:9d:c9:fe:58:3a:4b:a8:33:23:1e:1b:6f:db: 53:94:4d:4d:8d:c4:6b:ac:b7:fc:96:91:f7:ff:42: 79:b9:d2:d7:a9:31:92:2f:62:82:e3:a2:3d:c0:45: 6f:5f:4f:49:d2:0a:26:35:34:cd:7a:58:6e:cf:d8: 79:ce:10:b1:9d:61:40:33:7a:c4:05:0f:80:7c:4e: 6e:9b:d8:83:0e:7e:53:ab:a7:a1:9b:cc:37:1a:c6: bd:0f:b3:e7:7a:6a:5f:78:17:f7:b1:c1:90:02:16: 77:21:d0:25:9f:73:96:80:d7:2b:97:48:9a:15:53: 42:7c:67:a1:ec:a7:90:01:c5:f1:01:79:a2:67:7d: e4:12:6d:1e:6c:f3:76:82:86:8d:cf:7b:01:db:87: 9a:c3:87:29:d9:a1:ce:0c:f1:de:17:64:00:1b:66: d9:1d:4c:cb:85:22:38:f0:9a:0b:98:22:f1:5a:71: 88:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:01:A9:AD:21:34:7A:4E:95:37:A1:C2:20:45:91:F0:B2:CC:09:CB X509v3 Authority Key Identifier: keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:cc:61:b4:92:c0:3d:b8:b7:4e:b5:ff:b9:a2:68:b8:5e:df: 05:65:c3:78:a3:0a:fa:f5:0b:b8:48:e5:5f:29:92:c0:41:fc: 5e:61:1d:46:ae:a7:69:2d:d5:f2:04:d6:1e:66:37:6d:a4:51: 7c:6e:fa:ba:de:09:fa:2d:36:13:ab:77:20:f4:04:e2:2c:e9: aa:f9:9c:73:0b:49:e6:79:11:71:b9:3d:a8:60:bf:c0:b0:11: e2:a8:f3:47:45:cb:33:85:dc:cf:96:a5:0c:87:03:45:0c:85: 7d:d6:e2:bb:66:e3:bd:1e:33:72:1b:73:66:85:06:48:d0:bd: 75:38:4f:82:00:ec:d8:f0:04:60:df:5a:fc:42:75:73:d3:10: 38:8b:8a:87:53:bb:f0:9e:cb:13:35:0b:b0:e9:4a:fd:e4:ee: 90:3f:b7:c6:00:da:c3:90:14:69:47:31:01:b1:3b:a7:4a:f5: e6:d2:02:b3:26:bd:91:e7:31:41:4c:98:27:ea:2b:c3:d4:50: 78:ae:bc:10:4a:2e:b3:55:9e:79:bf:fc:9c:6f:2e:af:1b:30: c2:72:52:a5:20:7a:4d:da:c3:a6:bc:53:d1:c9:a7:f3:37:ec: 7c:2f:56:ec:33:4a:8f:04:8e:2e:c9:bd:e1:39:cc:1f:0c:f5: 64:f4:ee:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPsSC82lOOJhL9v+/6sXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2 YzQyOGYwHhcNMjUxMjE1MjMwMDUxWhcNMjUxMjE2MjMwMDUxWjAzMTEwLwYDVQQD Eyg3NTAxYTlhZDIxMzQ3YTRlOTUzN2ExYzIyMDQ1OTFmMGIyY2MwOWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2NPCs3BQ2HljZyOVyH/GEvX0An3 axt1EZU02aEWMnVfJgaFTAhUW+zy73gqTBZZXp4C3sWPrEo5T0kdU1uLHto3QoPK 9XGCWdqn2Z3J/lg6S6gzIx4bb9tTlE1NjcRrrLf8lpH3/0J5udLXqTGSL2KC46I9 wEVvX09J0gomNTTNelhuz9h5zhCxnWFAM3rEBQ+AfE5um9iDDn5Tq6ehm8w3Gsa9 D7PnempfeBf3scGQAhZ3IdAln3OWgNcrl0iaFVNCfGeh7KeQAcXxAXmiZ33kEm0e bPN2goaNz3sB24eaw4cp2aHODPHeF2QAG2bZHUzLhSI48JoLmCLxWnGIXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUBqa0hNHpOlTehwiBFkfCyzAnLMB8GA1UdIwQY MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt OGY0YjA2NDVkNjA0LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0 LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8xhtJLA Pbi3TrX/uaJouF7fBWXDeKMK+vULuEjlXymSwEH8XmEdRq6naS3V8gTWHmY3baRR fG76ut4J+i02E6t3IPQE4izpqvmccwtJ5nkRcbk9qGC/wLAR4qjzR0XLM4Xcz5al DIcDRQyFfdbiu2bjvR4zchtzZoUGSNC9dThPggDs2PAEYN9a/EJ1c9MQOIuKh1O7 8J7LEzULsOlK/eTukD+3xgDaw5AUaUcxAbE7p0r15tICsya9kecxQUyYJ+orw9RQ eK68EEous1Weeb/8nG8urxswwnJSpSB6TdrDprxT0cmn8zfsfC9W7DNKjwSOLsm9 4TnMHwz1ZPTuKA== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:11 2025 by rpki-client