This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json) Hash identifier: pkzrHs7oyoSX+LrDBMr2Cr9BVQU7G0hc8d2fozFEz3M= Subject key identifier: 39:A7:25:83:A3:98:78:A9:97:A4:1C:29:3B:B8:D2:39:EF:DC:20:07 Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Certificate serial: 019B691FEC67B910A9BA5775AC4A9A98958A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft Manifest number: 0B87 Signing time: Mon 29 Dec 2025 08:00:58 +0000 Manifest this update: Mon 29 Dec 2025 08:00:58 +0000 Manifest next update: Tue 30 Dec 2025 08:00:58 +0000 Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: kFFr5e4jA6P4rpXDlSY96MaPjVkPv0n/ebatUu+9j7Q=) 2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:1f:ec:67:b9:10:a9:ba:57:75:ac:4a:9a:98:95:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Validity Not Before: Dec 29 08:00:58 2025 GMT Not After : Dec 30 08:00:58 2025 GMT Subject: CN=39a72583a39878a997a41c293bb8d239efdc2007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2f:f2:09:86:31:cd:1f:c9:1d:54:1a:ca:6a: 76:22:76:e1:ef:f9:2c:b0:0c:cc:ed:4c:cc:35:5d: 69:0a:5e:6e:00:5c:96:8d:d2:a4:f4:df:0e:18:60: cd:04:e6:ac:f4:9d:97:ac:38:7e:3d:86:00:d8:d5: c7:50:ad:7e:b0:22:b3:7a:a3:f2:ef:90:df:4c:10: 3f:9c:b3:41:ad:38:79:8e:9e:19:60:bb:6f:ae:cc: c0:e7:f5:30:09:eb:92:b3:46:3d:8f:0d:8b:bf:02: 83:a6:65:2e:43:62:fa:45:84:1e:4a:db:2e:11:5b: 98:56:74:ab:ce:b5:24:5a:7e:8a:18:60:f6:57:a4: 3c:b0:09:74:75:3d:c6:53:52:f9:8e:f5:c4:dd:a5: 3d:ea:f9:c2:84:fe:24:1d:91:90:36:bd:45:85:cf: c9:05:63:4a:ed:ab:06:28:53:06:13:59:87:fc:aa: b4:09:1a:b4:9e:de:d7:0f:d1:4f:77:dc:fc:4c:75: 98:bb:82:af:47:a8:0f:c7:2c:eb:11:b4:c5:1c:ee: d0:82:26:04:fa:d2:c2:49:27:bc:c6:ed:cd:c4:40: eb:d3:19:a4:10:b3:47:2b:8e:7a:5a:91:74:82:9e: 4b:ba:d8:06:30:f0:b0:12:c5:77:23:f4:cd:2c:78: a7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A7:25:83:A3:98:78:A9:97:A4:1C:29:3B:B8:D2:39:EF:DC:20:07 X509v3 Authority Key Identifier: keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5c:50:6e:e7:5a:01:35:e3:52:ad:5f:a0:3b:be:3b:4e:66: fc:44:06:e7:7c:b9:aa:2c:3e:ad:ef:b8:52:c7:10:dd:55:de: 2b:08:97:1d:d3:5b:de:b2:e9:61:21:ef:aa:f2:09:df:ee:f1: bb:01:00:e7:e0:fe:e8:65:62:b2:61:28:e3:1b:00:ba:59:20: b3:7d:95:93:3f:32:31:b3:a7:90:ca:01:d3:9a:75:23:1b:84: d0:50:6b:21:58:ce:b7:67:77:a2:d4:fc:f4:b6:63:60:3b:71: 7f:b8:f9:15:8e:11:f3:44:88:6d:b5:c3:92:5e:69:eb:d0:a9: 08:73:78:78:23:25:42:e9:65:25:56:4c:31:9a:a7:a9:6e:87: 91:ed:57:e1:38:b3:19:f0:6c:30:ea:a1:30:a4:3e:1c:cb:c6: ca:97:24:42:54:dd:30:4c:26:86:2b:47:df:17:b8:55:4b:70: f0:7b:1c:01:2e:6a:be:01:39:a1:3c:10:4f:7d:92:e8:79:eb: 54:02:f1:6a:71:8c:cb:19:9d:7c:5c:36:96:20:5f:1b:6b:48: ee:6d:52:7f:2e:55:c3:70:65:45:bc:c3:10:0b:62:4d:68:bc: 38:cb:74:24:ae:a1:3a:40:2a:f0:96:38:61:5f:b4:1f:45:2d: 67:1e:0f:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpH+xnuRCpuld1rEqamJWKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzFmMjVjYTU3ZjMzZmQ4NGQyNjY2MGU4MjMwNTg1NmQ0 ZmY1NGUwHhcNMjUxMjI5MDgwMDU4WhcNMjUxMjMwMDgwMDU4WjAzMTEwLwYDVQQD EygzOWE3MjU4M2EzOTg3OGE5OTdhNDFjMjkzYmI4ZDIzOWVmZGMyMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2S/yCYYxzR/JHVQaymp2Inbh7/ks sAzM7UzMNV1pCl5uAFyWjdKk9N8OGGDNBOas9J2XrDh+PYYA2NXHUK1+sCKzeqPy 75DfTBA/nLNBrTh5jp4ZYLtvrszA5/UwCeuSs0Y9jw2LvwKDpmUuQ2L6RYQeStsu EVuYVnSrzrUkWn6KGGD2V6Q8sAl0dT3GU1L5jvXE3aU96vnChP4kHZGQNr1Fhc/J BWNK7asGKFMGE1mH/Kq0CRq0nt7XD9FPd9z8THWYu4KvR6gPxyzrEbTFHO7QgiYE +tLCSSe8xu3NxEDr0xmkELNHK456WpF0gp5LutgGMPCwEsV3I/TNLHinAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmnJYOjmHipl6QcKTu40jnv3CAHMB8GA1UdIwQY MBaAFP3B8lylfzP9hNJmYOgjBYVtT/VOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQt MDBhMGEzMjhiYjczLzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQtMDBhMGEzMjhiYjcz LzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVxQbuda ATXjUq1foDu+O05m/EQG53y5qiw+re+4UscQ3VXeKwiXHdNb3rLpYSHvqvIJ3+7x uwEA5+D+6GVismEo4xsAulkgs32Vkz8yMbOnkMoB05p1IxuE0FBrIVjOt2d3otT8 9LZjYDtxf7j5FY4R80SIbbXDkl5p69CpCHN4eCMlQullJVZMMZqnqW6Hke1X4Tiz GfBsMOqhMKQ+HMvGypckQlTdMEwmhitH3xe4VUtw8HscAS5qvgE5oTwQT32S6Hnr VALxanGMyxmdfFw2liBfG2tI7m1Sfy5Vw3BlRbzDEAtiTWi8OMt0JK6hOkAq8JY4 YV+0H0UtZx4P/g== -----END CERTIFICATE-----Generated at Mon Dec 29 16:43:58 2025 by rpki-client