This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json) Hash identifier: Qt/8lI3r0qBh2uTxL9FWUNmOD9uvN9Cx7lAjzWvgff0= Subject key identifier: 42:80:B8:AE:73:E9:E8:EF:1C:EF:6E:65:6D:92:5E:D5:4A:2A:79:28 Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9 Certificate serial: 019B3FB5D974337DC01571BA3AAF3DBEEE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 07:00:40 +0000 Manifest this update: Sun 21 Dec 2025 07:00:40 +0000 Manifest next update: Mon 22 Dec 2025 07:00:40 +0000 Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: 6u35UX8zSvqZjKrMfKsOB3AQKKZpjsfbLGeHuUAkC6g=) 2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=) 3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:d9:74:33:7d:c0:15:71:ba:3a:af:3d:be:ee:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c835498f35199a1571964d855c3877751681ab9 Validity Not Before: Dec 21 07:00:40 2025 GMT Not After : Dec 22 07:00:40 2025 GMT Subject: CN=4280b8ae73e9e8ef1cef6e656d925ed54a2a7928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:56:02:be:72:fe:cd:d7:9b:f7:44:06:fe:72: cd:32:29:ec:7b:fb:3f:36:54:c4:1a:9c:b2:81:87: 0e:17:08:1b:ee:5f:f8:08:0b:e3:56:fc:eb:76:91: b1:44:c2:58:8f:2e:c0:1c:24:e8:1c:b0:7d:7f:34: 10:19:95:4a:bf:f0:c3:f6:5b:b0:0a:05:c6:2c:49: 45:0b:05:94:5e:71:96:4a:29:97:b5:56:63:30:5b: 3a:83:39:9e:19:a0:17:a1:16:e7:64:72:65:81:89: 7a:e3:b8:44:8a:ed:ef:57:3c:06:d6:81:3b:2a:18: cc:b6:fb:11:6c:cc:ce:ac:e0:a5:fe:91:e8:d5:1c: c5:86:e3:03:37:e2:00:59:54:92:e8:8d:17:a6:73: 5d:d6:f8:8e:0d:b2:dd:03:6e:33:d6:a5:d6:37:e6: 1d:7d:39:4f:36:6e:22:df:26:0b:3d:71:56:40:00: 8e:9b:ee:dd:2d:5b:64:ee:1f:77:e0:e1:02:b7:51: 95:7c:3c:e8:9a:6b:79:c8:6d:95:2e:b2:e5:59:e0: 1c:7b:1f:83:46:5e:a1:4a:16:5b:5d:d9:27:b9:c1: 5d:58:94:c5:af:3f:e7:da:02:08:d1:c6:1e:7a:a2: 34:08:1b:0f:5a:ed:ea:ca:fc:4c:64:1f:17:76:f4: 67:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:80:B8:AE:73:E9:E8:EF:1C:EF:6E:65:6D:92:5E:D5:4A:2A:79:28 X509v3 Authority Key Identifier: keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:ca:2a:82:56:f6:77:d9:dc:16:07:e7:f9:50:2d:42:2d: 29:53:94:95:9f:96:a5:f4:32:92:aa:32:3c:16:a5:89:f2:06: 0f:8b:5b:df:ef:b7:4d:5b:b7:53:8f:06:07:08:80:ef:9f:0f: 8a:74:c9:0e:90:c1:6a:f5:ca:02:2d:56:3d:35:61:53:d9:11: d9:59:41:8f:c3:e6:c0:0a:60:fc:b1:84:03:e0:9a:4b:98:79: aa:57:ac:ac:77:85:0f:73:86:db:34:fe:90:b8:2e:52:d5:91: 0d:11:85:b1:7d:b8:e7:7b:91:96:63:87:33:11:bb:f9:4d:7a: b0:77:2f:cf:82:18:8b:c4:ad:b8:4f:e0:cd:96:6e:b1:6d:2b: 1e:5b:7a:64:4d:fe:a6:2f:20:77:00:55:e4:c9:a7:a5:5b:e7: e7:6a:33:ae:56:a8:39:6a:ca:3e:94:9a:20:62:fa:52:be:71: 47:b9:d1:f2:64:84:36:02:d0:6f:e3:4b:fd:45:d2:e5:f2:ce: 72:88:69:2a:36:97:2b:ea:ad:ef:00:69:1b:04:4c:b0:6e:fb: 0d:b6:49:6d:02:2e:2a:41:b2:6a:f1:d4:61:14:a9:d8:94:40: 6d:41:98:9f:ae:0b:a8:85:99:cb:64:51:e9:e2:b4:61:dd:24: 36:5e:2d:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tdl0M33AFXG6Oq89vu42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2 ODFhYjkwHhcNMjUxMjIxMDcwMDQwWhcNMjUxMjIyMDcwMDQwWjAzMTEwLwYDVQQD Eyg0MjgwYjhhZTczZTllOGVmMWNlZjZlNjU2ZDkyNWVkNTRhMmE3OTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FYCvnL+zdeb90QG/nLNMinse/s/ NlTEGpyygYcOFwgb7l/4CAvjVvzrdpGxRMJYjy7AHCToHLB9fzQQGZVKv/DD9luw CgXGLElFCwWUXnGWSimXtVZjMFs6gzmeGaAXoRbnZHJlgYl647hEiu3vVzwG1oE7 KhjMtvsRbMzOrOCl/pHo1RzFhuMDN+IAWVSS6I0XpnNd1viODbLdA24z1qXWN+Yd fTlPNm4i3yYLPXFWQACOm+7dLVtk7h934OECt1GVfDzommt5yG2VLrLlWeAcex+D Rl6hShZbXdknucFdWJTFrz/n2gII0cYeeqI0CBsPWu3qyvxMZB8XdvRnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKAuK5z6ejvHO9uZW2SXtVKKnkoMB8GA1UdIwQY MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3 LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC07KKoJW 9nfZ3BYH5/lQLUItKVOUlZ+WpfQykqoyPBalifIGD4tb3++3TVu3U48GBwiA758P inTJDpDBavXKAi1WPTVhU9kR2VlBj8PmwApg/LGEA+CaS5h5qlesrHeFD3OG2zT+ kLguUtWRDRGFsX2453uRlmOHMxG7+U16sHcvz4IYi8StuE/gzZZusW0rHlt6ZE3+ pi8gdwBV5MmnpVvn52ozrlaoOWrKPpSaIGL6Ur5xR7nR8mSENgLQb+NL/UXS5fLO cohpKjaXK+qt7wBpGwRMsG77DbZJbQIuKkGyavHUYRSp2JRAbUGYn64LqIWZy2RR 6eK0Yd0kNl4t7A== -----END CERTIFICATE-----Generated at Sun Dec 21 12:04:10 2025 by rpki-client