This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json) Hash identifier: P1SlAlrWngLpCvyTwXRCoYuC07qy4ffOK2LSxwoCSyE= Subject key identifier: D9:08:ED:85:73:81:7F:AE:94:BB:D3:5C:B0:BE:1B:12:86:AD:EE:E1 Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Certificate serial: 019B30433ED9181998A00E14755AB8D74F06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft Manifest number: 0BF8 Signing time: Thu 18 Dec 2025 07:01:11 +0000 Manifest this update: Thu 18 Dec 2025 07:01:11 +0000 Manifest next update: Fri 19 Dec 2025 07:01:11 +0000 Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=) 2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: ir7sl7WpwUB+apCGQihzSNPkLPOHmqtIUfdrPZ7TObA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:3e:d9:18:19:98:a0:0e:14:75:5a:b8:d7:4f:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Validity Not Before: Dec 18 07:01:11 2025 GMT Not After : Dec 19 07:01:11 2025 GMT Subject: CN=d908ed8573817fae94bbd35cb0be1b1286adeee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:47:e6:56:6d:07:8e:1d:45:95:70:19:c4:95: c2:b0:75:be:e3:ec:73:33:92:df:71:fb:27:93:38: a2:83:12:1c:28:b8:f6:1f:65:c8:2c:8c:62:4f:e7: 14:6b:05:25:67:72:bb:3d:2f:3e:b2:d8:2d:b4:ca: fd:fa:9a:10:18:bd:90:ba:1f:0e:c6:b4:e3:a4:d2: 1f:2f:95:9c:eb:86:3c:14:ca:b9:80:10:cf:f6:fb: 1e:4e:51:9d:a6:f2:fb:d8:5b:d8:4d:9b:3b:24:dc: 6a:fa:09:04:31:cf:7c:89:0d:e7:e6:c0:ca:d3:20: 2b:f4:5c:9f:83:47:b3:d8:76:6e:9d:d2:bb:1f:d5: fb:7f:8e:d0:00:c2:71:0a:04:73:3e:a0:64:6b:ef: 20:9f:75:3f:03:ec:4a:d2:f5:3e:2a:01:bd:e5:ea: 77:d0:4d:14:c3:3e:65:e7:c0:3f:4c:aa:52:14:67: 89:a0:a1:6b:61:7f:0c:28:37:e6:08:a9:8d:b2:81: 1a:9a:c0:4c:5e:e8:db:20:e3:15:f6:13:d1:82:b3: 38:ec:bf:66:01:82:80:b3:7c:f6:94:f4:05:03:7d: a6:28:ab:32:50:5d:ae:f8:64:75:40:a2:b7:c5:5e: 8d:b5:77:2e:4a:fb:1b:39:d7:86:a2:3b:5c:fe:89: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:08:ED:85:73:81:7F:AE:94:BB:D3:5C:B0:BE:1B:12:86:AD:EE:E1 X509v3 Authority Key Identifier: keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d2:f6:dd:6b:11:e2:f6:37:b9:07:71:7a:98:50:b1:c3:de: 86:1f:a8:cb:b8:ba:27:37:92:36:bf:8f:54:d7:0d:64:a1:60: 76:cd:fa:a4:ab:66:05:ab:e6:92:db:92:33:bc:b2:04:a3:fb: a1:64:0e:5b:2f:76:0a:7c:c0:87:ef:f3:f0:a8:6b:3c:eb:7b: 2d:7b:90:ae:f4:9f:d6:a2:09:77:ba:95:f2:55:45:bb:d8:7f: 15:7a:7a:f6:e7:8e:dd:60:65:3b:bb:c3:58:a7:37:38:83:52: a9:8c:1b:40:04:7a:d0:a4:a6:f2:8c:89:0b:46:fe:9a:bb:25: 54:20:91:ef:0c:aa:58:6d:ec:48:c7:a0:f5:49:a2:1c:46:25: eb:dd:64:21:b0:96:e1:76:66:fb:18:ad:15:31:77:b0:8d:2a: b9:34:98:21:17:68:c3:fa:58:2f:cb:71:a3:e2:ac:d1:6f:11: 15:40:ae:5d:e4:e4:9b:78:b7:2c:62:f9:56:db:4c:eb:61:4c: df:5c:37:42:23:95:4a:37:d8:49:1a:df:f6:67:8b:37:26:f3: 6d:fc:df:36:75:ba:d2:43:88:48:19:79:88:35:6a:be:e5:4c: d6:a3:d7:f0:6e:c3:0b:31:c6:ff:51:33:2d:21:c4:cb:eb:86: 62:17:01:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQz7ZGBmYoA4UdVq4108GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNmY0YzhmM2EzNzdmNDZjNTUyMjAwOTY3OGYzOGQ2MTU3 MWM2Y2EwHhcNMjUxMjE4MDcwMTExWhcNMjUxMjE5MDcwMTExWjAzMTEwLwYDVQQD EyhkOTA4ZWQ4NTczODE3ZmFlOTRiYmQzNWNiMGJlMWIxMjg2YWRlZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EfmVm0Hjh1FlXAZxJXCsHW+4+xz M5LfcfsnkziigxIcKLj2H2XILIxiT+cUawUlZ3K7PS8+stgttMr9+poQGL2Quh8O xrTjpNIfL5Wc64Y8FMq5gBDP9vseTlGdpvL72FvYTZs7JNxq+gkEMc98iQ3n5sDK 0yAr9Fyfg0ez2HZundK7H9X7f47QAMJxCgRzPqBka+8gn3U/A+xK0vU+KgG95ep3 0E0Uwz5l58A/TKpSFGeJoKFrYX8MKDfmCKmNsoEamsBMXujbIOMV9hPRgrM47L9m AYKAs3z2lPQFA32mKKsyUF2u+GR1QKK3xV6NtXcuSvsbOdeGojtc/onVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkI7YVzgX+ulLvTXLC+GxKGre7hMB8GA1UdIwQY MBaAFHxvTI86N39GxVIgCWePONYVccbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQt MWQzNjdhNWY4NmQ0LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQtMWQzNjdhNWY4NmQ0 LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9L23WsR 4vY3uQdxephQscPehh+oy7i6JzeSNr+PVNcNZKFgds36pKtmBavmktuSM7yyBKP7 oWQOWy92CnzAh+/z8KhrPOt7LXuQrvSf1qIJd7qV8lVFu9h/FXp69ueO3WBlO7vD WKc3OINSqYwbQAR60KSm8oyJC0b+mrslVCCR7wyqWG3sSMeg9UmiHEYl691kIbCW 4XZm+xitFTF3sI0quTSYIRdow/pYL8txo+Ks0W8RFUCuXeTkm3i3LGL5VttM62FM 31w3QiOVSjfYSRrf9meLNybzbfzfNnW60kOISBl5iDVqvuVM1qPX8G7DCzHG/1Ez LSHEy+uGYhcBtQ== -----END CERTIFICATE-----Generated at Thu Dec 18 12:42:52 2025 by rpki-client