This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json) Hash identifier: 5HqrzIPLGtJ9mUb8Hwu3aj7f/g5kRlAl33exAubf3PI= Subject key identifier: 99:DF:12:76:96:5E:00:10:30:12:AE:96:09:FF:CD:50:1F:E6:25:7B Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019B522A6845EBF7D9E6FBBA2D345B98D21E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft Manifest number: 1790 Signing time: Wed 24 Dec 2025 21:01:09 +0000 Manifest this update: Wed 24 Dec 2025 21:01:09 +0000 Manifest next update: Thu 25 Dec 2025 21:01:09 +0000 Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: 8Js0nvbaj1dPpurrRqmTpEZA+huJab0wK6hzflmvQ+A=) 2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:68:45:eb:f7:d9:e6:fb:ba:2d:34:5b:98:d2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Dec 24 21:01:09 2025 GMT Not After : Dec 25 21:01:09 2025 GMT Subject: CN=99df1276965e00103012ae9609ffcd501fe6257b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ad:f5:2c:e5:fd:22:2b:59:02:61:fa:f7:10: fa:dd:7d:39:9d:e9:f4:32:be:99:3f:82:4d:f9:4c: 17:78:b5:aa:30:f3:1f:79:ab:51:fd:2b:c8:e3:01: e0:95:d0:c2:a2:24:24:29:07:4d:ad:bb:65:3f:ac: d3:cb:98:41:54:4c:b2:80:ea:7b:7b:ca:ad:3d:16: 92:33:fe:21:ce:b2:d5:23:76:ae:4c:45:5f:7b:43: 71:dd:fa:bb:be:cf:d9:b3:f2:b6:2f:c5:cc:f0:9e: cb:3e:b4:6f:99:e6:8c:2c:c4:af:19:e5:99:df:94: d0:64:79:d9:88:53:67:3e:c7:6a:42:99:15:02:72: 28:73:b6:60:96:41:76:85:ac:24:80:35:43:16:ec: 88:69:71:2f:48:43:89:85:60:0f:55:0b:28:85:5f: e0:f2:98:79:04:78:ea:e5:32:89:90:6b:e5:ce:b2: cd:8e:70:84:fb:b5:5c:f0:13:5e:27:24:c8:ad:73: 0f:b7:5a:6a:79:38:43:0e:1c:b7:c4:36:21:25:5f: 79:de:9b:ac:fc:92:06:4b:01:fd:7e:b1:6f:27:de: 2f:71:31:f3:c9:56:28:17:34:b1:29:41:b8:c5:96: cd:83:d0:b9:0e:43:fc:29:a7:4a:fb:b0:cc:49:b1: 85:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DF:12:76:96:5E:00:10:30:12:AE:96:09:FF:CD:50:1F:E6:25:7B X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f1:94:5f:d6:e8:db:b0:90:aa:f5:47:08:5a:e7:d6:89:93: a3:0d:a9:6a:4b:69:6c:81:82:62:ab:0b:4a:91:cc:2e:55:93: 33:f7:de:57:41:13:52:fd:2b:81:67:4e:03:5d:21:57:52:1b: 4b:93:aa:1e:3e:86:11:08:df:db:92:e3:2d:be:cf:e9:8d:22: 33:a4:b0:17:71:fc:e1:b8:0a:4b:8f:1c:d7:80:30:d6:93:ed: b9:a7:d8:e5:60:11:5a:0f:2e:c4:d3:6a:eb:da:68:86:ea:27: d1:1f:ef:59:27:9d:6a:7e:65:3c:3a:12:09:16:4f:ef:17:9a: 94:9f:75:c3:3e:7a:d6:a2:e6:dc:52:cd:de:0d:29:de:ee:af: ef:0b:a8:9b:1d:f8:1d:96:7d:5f:2d:1e:b2:85:07:70:61:4f: e7:35:ce:c4:48:3a:d8:c6:7a:fe:79:1a:79:10:50:99:53:3c: f4:fe:8f:f8:eb:c3:1e:45:fc:97:49:4b:67:e5:75:29:45:2c: 07:90:3b:82:f5:21:f6:75:af:58:f1:5c:41:4b:94:ff:91:74: 0f:99:66:fd:e3:8e:18:1d:6a:7b:18:21:39:0c:5c:17:4f:bd: ea:55:6c:76:e6:99:22:58:35:54:17:70:8f:bc:07:15:27:8a: ef:89:4e:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKmhF6/fZ5vu6LTRbmNIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjUxMjI0MjEwMTA5WhcNMjUxMjI1MjEwMTA5WjAzMTEwLwYDVQQD Eyg5OWRmMTI3Njk2NWUwMDEwMzAxMmFlOTYwOWZmY2Q1MDFmZTYyNTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK31LOX9IitZAmH69xD63X05nen0 Mr6ZP4JN+UwXeLWqMPMfeatR/SvI4wHgldDCoiQkKQdNrbtlP6zTy5hBVEyygOp7 e8qtPRaSM/4hzrLVI3auTEVfe0Nx3fq7vs/Zs/K2L8XM8J7LPrRvmeaMLMSvGeWZ 35TQZHnZiFNnPsdqQpkVAnIoc7ZglkF2hawkgDVDFuyIaXEvSEOJhWAPVQsohV/g 8ph5BHjq5TKJkGvlzrLNjnCE+7Vc8BNeJyTIrXMPt1pqeThDDhy3xDYhJV953pus /JIGSwH9frFvJ94vcTHzyVYoFzSxKUG4xZbNg9C5DkP8KadK+7DMSbGFPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnfEnaWXgAQMBKulgn/zVAf5iV7MB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvGUX9bo 27CQqvVHCFrn1omTow2paktpbIGCYqsLSpHMLlWTM/feV0ETUv0rgWdOA10hV1Ib S5OqHj6GEQjf25LjLb7P6Y0iM6SwF3H84bgKS48c14Aw1pPtuafY5WARWg8uxNNq 69pohuon0R/vWSedan5lPDoSCRZP7xealJ91wz561qLm3FLN3g0p3u6v7wuomx34 HZZ9Xy0esoUHcGFP5zXOxEg62MZ6/nkaeRBQmVM89P6P+OvDHkX8l0lLZ+V1KUUs B5A7gvUh9nWvWPFcQUuU/5F0D5lm/eOOGB1qexghOQxcF0+96lVsduaZIlg1VBdw j7wHFSeK74lOhw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:02:54 2025 by rpki-client