This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json) Hash identifier: 1KDmGeOVS8Vp4iZtaozgg0q93FMRJC8JXmcZ9nYVYtE= Subject key identifier: E5:47:63:BC:2D:69:0D:19:DF:6C:39:7C:00:B9:71:67:92:61:32:8F Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Certificate serial: 019B10B833580AD3ABF07B802056D7AB2F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft Manifest number: 1773 Signing time: Fri 12 Dec 2025 04:01:05 +0000 Manifest this update: Fri 12 Dec 2025 04:01:05 +0000 Manifest next update: Sat 13 Dec 2025 04:01:05 +0000 Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: ED1zDLdJEcTiCw7JY2qAraiaSGDQj3zvPvEGMKDjLgE=) 2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:b8:33:58:0a:d3:ab:f0:7b:80:20:56:d7:ab:2f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Validity Not Before: Dec 12 04:01:05 2025 GMT Not After : Dec 13 04:01:05 2025 GMT Subject: CN=e54763bc2d690d19df6c397c00b971679261328f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:3e:cc:41:c7:e9:0c:0c:1d:c7:17:0c:9a: f1:d2:9d:19:bf:9f:fb:4d:c9:f1:65:3b:f4:f1:dc: 40:59:72:15:0d:d9:5c:bf:2d:73:16:c6:31:6c:6c: 0d:ad:62:b0:84:9a:36:7f:d2:e3:b3:10:c9:47:b6: 06:ef:8a:f8:d4:c9:cd:74:79:7d:08:86:68:b7:23: c9:b3:03:a9:9a:19:66:09:14:85:3f:18:6a:2a:32: 73:02:c7:1f:97:94:e5:55:6b:57:19:be:be:13:88: 40:de:7d:1f:f4:42:b6:52:fa:ab:fa:c1:f8:5a:85: fa:03:ec:bb:c6:a1:0e:e4:d1:6e:60:fe:65:3f:25: 65:f9:1d:39:a0:4e:95:82:f3:6a:48:40:a8:7c:71: 07:cd:0c:57:81:4b:6a:a4:85:c0:35:fe:61:b3:2a: bf:be:ea:22:a0:d4:40:5d:e3:77:8c:b3:ad:95:b6: 8d:71:34:7f:bf:e4:5b:8e:d1:d9:0a:23:99:0f:1d: d7:da:a0:7c:30:fe:d5:97:9e:52:3f:1c:43:c4:b0: 54:c8:4c:24:a8:b6:8a:2f:c1:b6:36:87:2a:0c:ba: bb:f0:18:2e:a8:f5:77:8a:87:fe:55:36:b5:75:77: 67:53:6f:f8:0e:98:06:bb:83:ba:06:e2:5e:43:d3: 87:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:47:63:BC:2D:69:0D:19:DF:6C:39:7C:00:B9:71:67:92:61:32:8F X509v3 Authority Key Identifier: keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:34:e2:b3:f4:83:bc:92:57:ca:f4:b4:56:e9:59:88:4d:d4: c4:28:27:e7:6d:a1:86:f7:25:f4:09:b3:bc:ed:80:64:26:e8: 3a:43:78:f7:48:c1:34:68:d7:c7:12:a3:e0:69:07:42:be:14: 1c:62:1a:bd:a0:4b:fa:10:9c:2c:8f:a3:b3:5c:05:49:2c:b5: 6a:e4:bb:ef:8b:7c:37:e9:40:24:93:f1:b2:de:e7:5b:86:86: ba:80:cc:88:74:5c:3e:f1:45:29:d8:5d:85:fc:9d:8d:2f:77: d8:70:b2:de:3c:62:e1:3e:36:2c:3c:dc:9a:28:55:a2:af:d0: b5:ae:d2:f8:28:0a:a8:00:b6:ae:2e:38:d2:64:e5:4e:54:27: e8:24:94:9b:f1:f6:fa:37:54:b6:51:9f:6b:c9:d6:13:63:23: b6:0f:90:08:ea:46:ea:a4:90:c2:f6:43:93:bf:4d:4f:02:a0: 39:21:21:ca:9c:46:ad:4c:db:f1:a7:b1:38:05:da:51:b2:ae: 2d:53:55:11:95:80:ed:4f:04:96:c9:e4:77:79:7f:08:50:43: 5e:09:28:27:01:7b:29:e5:1b:cb:49:f0:c2:f2:1a:8a:ed:20: 5a:33:36:61:77:e4:67:9f:dc:ed:66:b4:a7:7f:ce:78:27:a0: 6c:91:e0:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQuDNYCtOr8HuAIFbXqy8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw YzA3YmEwHhcNMjUxMjEyMDQwMTA1WhcNMjUxMjEzMDQwMTA1WjAzMTEwLwYDVQQD EyhlNTQ3NjNiYzJkNjkwZDE5ZGY2YzM5N2MwMGI5NzE2NzkyNjEzMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXY+zEHH6QwMHccXDJrx0p0Zv5/7 TcnxZTv08dxAWXIVDdlcvy1zFsYxbGwNrWKwhJo2f9LjsxDJR7YG74r41MnNdHl9 CIZotyPJswOpmhlmCRSFPxhqKjJzAscfl5TlVWtXGb6+E4hA3n0f9EK2Uvqr+sH4 WoX6A+y7xqEO5NFuYP5lPyVl+R05oE6VgvNqSECofHEHzQxXgUtqpIXANf5hsyq/ vuoioNRAXeN3jLOtlbaNcTR/v+RbjtHZCiOZDx3X2qB8MP7Vl55SPxxDxLBUyEwk qLaKL8G2NocqDLq78BguqPV3iof+VTa1dXdnU2/4DpgGu4O6BuJeQ9OHzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVHY7wtaQ0Z32w5fAC5cWeSYTKPMB8GA1UdIwQY MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARjTis/SD vJJXyvS0VulZiE3UxCgn522hhvcl9AmzvO2AZCboOkN490jBNGjXxxKj4GkHQr4U HGIavaBL+hCcLI+js1wFSSy1auS774t8N+lAJJPxst7nW4aGuoDMiHRcPvFFKdhd hfydjS932HCy3jxi4T42LDzcmihVoq/Qta7S+CgKqAC2ri440mTlTlQn6CSUm/H2 +jdUtlGfa8nWE2Mjtg+QCOpG6qSQwvZDk79NTwKgOSEhypxGrUzb8aexOAXaUbKu LVNVEZWA7U8Elsnkd3l/CFBDXgkoJwF7KeUby0nwwvIaiu0gWjM2YXfkZ5/c7Wa0 p3/OeCegbJHgdg== -----END CERTIFICATE-----Generated at Fri Dec 12 10:30:54 2025 by rpki-client