This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json) Hash identifier: t6XLQVl4kdotrYAq2S7Uf0aLHmiQsGUK17u15YKITj4= Subject key identifier: B8:F5:23:24:FD:C8:39:C1:DA:3B:6F:1E:79:87:C7:33:74:D2:12:05 Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Certificate serial: 019B2BC227AA4281D40135B1E09B1E4E0E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 10:01:43 +0000 Manifest this update: Wed 17 Dec 2025 10:01:43 +0000 Manifest next update: Thu 18 Dec 2025 10:01:43 +0000 Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: nkA98i1FEDXGxV7LvlsmAWVClfdwKRSiJ+wbd51gF54=) 2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:27:aa:42:81:d4:01:35:b1:e0:9b:1e:4e:0e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Validity Not Before: Dec 17 10:01:43 2025 GMT Not After : Dec 18 10:01:43 2025 GMT Subject: CN=b8f52324fdc839c1da3b6f1e7987c73374d21205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:2d:ff:fc:dd:b9:23:2c:bf:4a:39:23:ef:23: 48:95:22:d1:3f:7e:8a:f1:a4:f6:47:84:2d:84:30: da:6f:a1:21:b5:2b:b1:f2:ab:96:31:c8:ea:fc:9b: 48:ec:0e:23:3b:6e:4f:8b:65:21:84:17:17:42:88: a2:b7:53:ea:99:d7:67:15:38:e8:80:85:79:f9:28: 93:80:35:d2:0e:f2:9d:b3:96:05:9e:5c:46:3d:8e: 55:bb:b1:f9:d0:66:37:23:1d:32:1c:11:b3:da:d7: 7e:85:ba:d1:27:d1:13:14:27:60:72:02:a7:34:ec: 2b:6a:10:3d:28:1d:1f:9b:2f:68:45:7c:73:f9:78: c0:05:48:b9:45:ca:e2:e5:02:ef:d6:91:68:df:71: e1:12:f5:46:5f:a8:99:90:75:42:f1:bf:a8:20:dc: 20:e0:6a:1e:d5:4c:24:5d:ac:49:ce:63:f8:ed:42: 66:66:f0:9b:be:8f:4f:c5:79:2e:83:22:19:99:65: 40:6b:fa:40:50:f8:91:e0:e7:14:1c:b1:fb:72:0d: bd:a3:e2:c3:80:bd:6f:c8:7a:76:33:c7:98:4f:82: b9:f4:6f:ec:c1:af:1d:2e:c3:e0:0b:e5:63:e0:ae: 39:94:f4:46:da:fc:31:0e:44:1c:b5:13:3f:37:57: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:23:24:FD:C8:39:C1:DA:3B:6F:1E:79:87:C7:33:74:D2:12:05 X509v3 Authority Key Identifier: keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a9:32:1a:66:37:ef:7e:9d:24:93:69:4d:fe:10:7a:fb:1d: 44:ad:cf:d6:eb:25:b5:e7:1f:38:e0:38:8f:58:c0:f4:f9:40: a1:f9:69:cb:f1:ad:59:da:be:6d:cb:f0:29:0c:22:0a:da:3d: 9d:47:a3:ae:9c:7a:f3:2a:e5:03:8c:10:98:2e:f0:4e:1f:d5: ad:ef:78:c6:ef:15:3c:82:54:9d:e5:74:75:48:99:b7:43:ae: a8:a1:df:8f:fc:e3:69:f0:6f:df:89:aa:6d:c7:15:9e:41:47: ed:bc:6d:77:30:1f:0e:ca:ca:8f:9e:f2:86:ab:f3:0b:ff:a0: 75:71:16:e6:3b:fc:6c:cf:9b:6c:de:da:ec:c0:4e:4a:8e:3e: 85:b3:18:e5:aa:fb:f0:58:68:e2:81:d6:33:69:cc:8d:9e:31: 62:c1:69:e3:77:86:76:3a:b2:e6:34:ae:24:f3:d4:8a:30:78: 20:a3:bc:4e:14:e5:ea:af:f1:9b:18:e7:be:90:d4:7e:a6:cb: 9a:33:79:2e:f7:ef:96:e6:75:fc:fb:8a:22:a6:68:8d:0e:ff: f1:08:7f:ee:e1:8c:b7:7d:66:0d:9e:c3:be:a3:bc:c8:7c:0b: f9:30:76:c5:56:dc:f7:73:13:19:5a:03:0e:eb:51:24:73:39: c5:fe:66:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwieqQoHUATWx4JseTg6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw YzA3YmEwHhcNMjUxMjE3MTAwMTQzWhcNMjUxMjE4MTAwMTQzWjAzMTEwLwYDVQQD EyhiOGY1MjMyNGZkYzgzOWMxZGEzYjZmMWU3OTg3YzczMzc0ZDIxMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi3//N25Iyy/Sjkj7yNIlSLRP36K 8aT2R4QthDDab6EhtSux8quWMcjq/JtI7A4jO25Pi2UhhBcXQoiit1PqmddnFTjo gIV5+SiTgDXSDvKds5YFnlxGPY5Vu7H50GY3Ix0yHBGz2td+hbrRJ9ETFCdgcgKn NOwrahA9KB0fmy9oRXxz+XjABUi5Rcri5QLv1pFo33HhEvVGX6iZkHVC8b+oINwg 4Goe1UwkXaxJzmP47UJmZvCbvo9PxXkugyIZmWVAa/pAUPiR4OcUHLH7cg29o+LD gL1vyHp2M8eYT4K59G/swa8dLsPgC+Vj4K45lPRG2vwxDkQctRM/N1fLQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj1IyT9yDnB2jtvHnmHxzN00hIFMB8GA1UdIwQY MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqkyGmY3 736dJJNpTf4QevsdRK3P1usltecfOOA4j1jA9PlAoflpy/GtWdq+bcvwKQwiCto9 nUejrpx68yrlA4wQmC7wTh/Vre94xu8VPIJUneV0dUiZt0OuqKHfj/zjafBv34mq bccVnkFH7bxtdzAfDsrKj57yhqvzC/+gdXEW5jv8bM+bbN7a7MBOSo4+hbMY5ar7 8Fho4oHWM2nMjZ4xYsFp43eGdjqy5jSuJPPUijB4IKO8ThTl6q/xmxjnvpDUfqbL mjN5LvfvluZ1/PuKIqZojQ7/8Qh/7uGMt31mDZ7DvqO8yHwL+TB2xVbc93MTGVoD DutRJHM5xf5m7g== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:10 2025 by rpki-client