This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft File: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft (raw, json) Hash identifier: EtyrZv59A4FcoRntpcijyGRXvuOUKSRgkgxy2kpeRnI= Subject key identifier: 4F:00:D8:13:FD:67:93:AC:2B:CE:FE:62:E9:14:85:82:94:89:B9:6E Authority key identifier: FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 Certificate issuer: /CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Certificate serial: 019B5CAE390A71544B6D21DEA02897A0DFE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 22:01:20 +0000 Manifest this update: Fri 26 Dec 2025 22:01:20 +0000 Manifest next update: Sat 27 Dec 2025 22:01:20 +0000 Files and hashes: 1: 5o12bWwrOgNj5T2QC_xsDzw2auo.roa (hash: z+dRGRfQAE/aaRQhADQq91xi62QWjaX7M/KM35XckmU=) 2: _CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl (hash: y2HMdJ+A5dEBOfktkEk6Os+olr/ow9807XUEWAVzVYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ae:39:0a:71:54:4b:6d:21:de:a0:28:97:a0:df:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a6347b531e30f55551d0b6edf60dc8b808b91 Validity Not Before: Dec 26 22:01:20 2025 GMT Not After : Dec 27 22:01:20 2025 GMT Subject: CN=4f00d813fd6793ac2bcefe62e91485829489b96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ae:b1:aa:3c:59:28:1a:83:96:9e:26:1a:d7: 10:e0:5a:0f:b9:be:43:e3:4a:3e:bf:97:fe:8b:f9: 35:6f:7f:b1:f5:21:42:c0:e1:f0:6a:57:79:d1:6e: d7:ac:8d:02:a1:45:42:4b:74:b1:7f:71:3b:db:b5: c8:30:e5:57:02:d0:2c:0b:bb:55:19:3e:0e:fc:25: e6:02:2e:48:72:95:fd:9e:0f:db:6c:aa:6c:56:7c: ee:71:c7:84:fd:40:ef:92:92:1b:3c:0c:be:68:85: 4f:12:43:b8:df:84:03:34:47:58:6f:ce:fc:1a:3a: e6:4d:ab:71:9e:b7:87:17:8a:84:f5:70:5b:b7:a7: d1:84:0c:b3:22:fe:17:a5:72:03:55:1d:70:2b:ef: 52:b1:a5:25:18:c9:b3:65:19:18:01:55:a9:fc:21: d1:a7:4e:cf:38:ed:a4:69:52:f8:4d:5c:c4:11:18: a1:89:f3:cf:d2:c6:60:4f:ac:1b:e9:44:20:18:a3: ed:10:f8:e8:15:e2:e4:72:c1:8a:1b:89:88:20:18: 2d:98:9a:22:3c:24:21:fc:be:b9:fa:09:94:f7:11: f0:71:e2:84:9f:02:09:a6:47:7b:e8:61:da:b9:ee: 32:ac:4a:17:1e:d3:1d:9b:9a:f3:37:77:13:89:be: 04:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:00:D8:13:FD:67:93:AC:2B:CE:FE:62:E9:14:85:82:94:89:B9:6E X509v3 Authority Key Identifier: keyid:FC:2A:63:47:B5:31:E3:0F:55:55:1D:0B:6E:DF:60:DC:8B:80:8B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3545e6-8cde-4533-9605-faf2b9f04def/1/_CpjR7Ux4w9VVR0Lbt9g3IuAi5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4b:24:c1:5c:e5:98:32:9d:0d:02:de:2e:7d:13:b3:5f:03: d4:f0:e1:66:f0:b2:95:db:19:df:a4:30:56:bf:5c:ec:64:02: dc:a7:d9:ec:98:4c:eb:e2:8a:96:11:2c:71:b5:fb:7f:80:a2: 32:25:4e:ba:7f:8a:be:1b:17:fe:4c:76:10:a4:e5:4d:d6:1c: 40:16:0b:2c:db:54:10:cc:e4:2a:aa:a2:7a:ab:c2:f4:50:c7: af:7f:38:5c:14:cd:2d:b8:de:e4:4a:ce:68:f4:1b:ef:fe:6c: a1:71:f0:a4:85:05:b0:0c:68:d6:21:dc:71:c5:db:33:6f:88: 06:fa:02:f3:81:d8:92:81:a9:37:13:75:59:5a:b5:8a:77:40: 7b:15:bb:7f:10:90:95:df:7b:26:6e:5b:47:f9:49:11:83:80: 22:50:e1:54:1c:44:12:7e:1a:90:b6:12:31:7d:f9:1a:8b:d3: bf:0b:7d:03:07:e4:38:07:58:55:a8:cd:ff:53:12:04:2a:16: 9c:e5:cf:50:4a:79:51:30:e7:31:71:1a:92:36:84:88:cc:ac: e0:57:87:7f:51:e5:98:0e:4b:d9:7f:73:30:c4:c9:b8:00:25: 1c:72:e8:9b:3d:de:96:b4:ac:c9:e3:7b:c2:82:35:1d:57:35: b0:3a:be:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrjkKcVRLbSHeoCiXoN/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmE2MzQ3YjUzMWUzMGY1NTU1MWQwYjZlZGY2MGRjOGI4 MDhiOTEwHhcNMjUxMjI2MjIwMTIwWhcNMjUxMjI3MjIwMTIwWjAzMTEwLwYDVQQD Eyg0ZjAwZDgxM2ZkNjc5M2FjMmJjZWZlNjJlOTE0ODU4Mjk0ODliOTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q6xqjxZKBqDlp4mGtcQ4FoPub5D 40o+v5f+i/k1b3+x9SFCwOHwald50W7XrI0CoUVCS3Sxf3E727XIMOVXAtAsC7tV GT4O/CXmAi5IcpX9ng/bbKpsVnzucceE/UDvkpIbPAy+aIVPEkO434QDNEdYb878 GjrmTatxnreHF4qE9XBbt6fRhAyzIv4XpXIDVR1wK+9SsaUlGMmzZRkYAVWp/CHR p07POO2kaVL4TVzEERihifPP0sZgT6wb6UQgGKPtEPjoFeLkcsGKG4mIIBgtmJoi PCQh/L65+gmU9xHwceKEnwIJpkd76GHaue4yrEoXHtMdm5rzN3cTib4EPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8A2BP9Z5OsK87+YukUhYKUibluMB8GA1UdIwQY MBaAFPwqY0e1MeMPVVUdC27fYNyLgIuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUt ZmFmMmI5ZjA0ZGVmLzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zNTQ1ZTYtOGNkZS00NTMzLTk2MDUtZmFmMmI5ZjA0ZGVm LzEvX0NwalI3VXg0dzlWVlIwTGJ0OWczSXVBaTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0skwVzl mDKdDQLeLn0Ts18D1PDhZvCyldsZ36QwVr9c7GQC3KfZ7JhM6+KKlhEscbX7f4Ci MiVOun+KvhsX/kx2EKTlTdYcQBYLLNtUEMzkKqqieqvC9FDHr384XBTNLbje5ErO aPQb7/5soXHwpIUFsAxo1iHcccXbM2+IBvoC84HYkoGpNxN1WVq1indAexW7fxCQ ld97Jm5bR/lJEYOAIlDhVBxEEn4akLYSMX35GovTvwt9AwfkOAdYVajN/1MSBCoW nOXPUEp5UTDnMXEakjaEiMys4FeHf1HlmA5L2X9zMMTJuAAlHHLomz3elrSsyeN7 woI1HVc1sDq+pA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:49:53 2025 by rpki-client