This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json) Hash identifier: 3RwUTTAJSqyvhc0Rg5s1MqnYUYUUzAOnVCdl86HsBnQ= Subject key identifier: A6:F4:8E:F9:11:07:06:D4:D8:4A:71:F2:AA:86:A3:EE:9F:8C:C7:86 Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Certificate serial: 019B5229FE1B443751D69C09DC8EAA857FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft Manifest number: 0ADB Signing time: Wed 24 Dec 2025 21:00:42 +0000 Manifest this update: Wed 24 Dec 2025 21:00:42 +0000 Manifest next update: Thu 25 Dec 2025 21:00:42 +0000 Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=) 2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: 4sgtQd2uWIdVM4lOinvT73SHo3Q2aU2EEDey99dFBRM=) 3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:fe:1b:44:37:51:d6:9c:09:dc:8e:aa:85:7f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Validity Not Before: Dec 24 21:00:42 2025 GMT Not After : Dec 25 21:00:42 2025 GMT Subject: CN=a6f48ef9110706d4d84a71f2aa86a3ee9f8cc786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:f9:98:dd:26:a0:bc:66:72:62:e8:4a:cc: aa:6e:ad:a5:f4:ab:48:e5:43:5a:3b:52:7a:9f:4f: b8:58:0e:2c:5e:31:a6:a2:88:2c:58:d6:e1:ef:c0: e6:3a:72:0d:41:4d:dd:26:26:84:8a:61:70:c1:6f: 74:9d:4a:64:d1:9c:06:a1:8f:4a:da:41:a3:ff:3e: 11:1d:74:2b:e2:12:13:11:42:4b:d6:ed:c5:82:00: 9e:57:3b:ce:bf:51:21:14:ae:c3:bf:91:23:03:d7: d2:89:b3:9c:20:1b:54:a7:0b:76:99:12:f7:7d:3f: 2c:27:ad:13:d8:b6:94:e8:57:46:c3:f5:0b:55:5c: c9:aa:06:f6:46:ae:7e:1a:31:fd:6c:a1:af:00:42: 0b:48:54:6a:08:41:fc:ce:bc:ec:0c:3a:0e:73:ed: f2:aa:18:b0:98:2b:37:04:33:b1:43:90:e7:64:f1: 19:c0:09:3e:4a:53:b1:7c:b1:3f:ff:ff:5c:47:47: 97:3e:1c:34:b4:94:e3:80:ce:d9:a9:fd:8d:40:d6: 67:14:bb:7b:b4:69:04:90:77:88:f2:eb:97:78:57: 63:f6:25:2c:f5:be:9e:d0:31:e8:01:da:a7:26:a2: 71:d9:b3:4c:78:2f:a2:9d:11:93:f1:ee:54:7e:23: 65:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F4:8E:F9:11:07:06:D4:D8:4A:71:F2:AA:86:A3:EE:9F:8C:C7:86 X509v3 Authority Key Identifier: keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:41:a6:23:e7:a4:b5:35:05:6d:f7:d1:68:bf:19:32:96:97: 10:14:50:a7:54:d1:ef:d0:95:fe:e9:ba:c6:ec:41:42:3d:d8: ec:44:01:41:b2:58:d9:2c:e0:6b:4e:58:81:d7:e8:ff:f1:a6: fc:09:37:cc:e7:63:f3:82:c2:69:37:e7:29:55:9a:54:ac:46: 25:1c:2c:1f:9b:9a:db:03:c1:1f:c4:f3:fe:0a:39:c3:d3:9f: 15:7b:26:ba:61:b7:7c:5f:0c:e6:97:ee:c6:0b:d5:50:cf:f9: b6:b0:d4:82:ad:62:8d:41:35:0c:7e:32:ba:f2:84:ca:8e:0a: ec:1b:12:17:da:f8:28:ad:56:4a:22:45:4f:e8:af:fd:40:8c: d9:a5:f5:86:2f:ea:26:4b:61:c6:ba:c5:73:0c:e9:71:bc:44: 27:e6:8e:8c:12:fb:db:f6:ee:59:36:52:fa:19:9b:2d:77:f6: a8:a3:86:77:39:53:0b:60:ec:98:99:d2:fb:65:0b:fb:bb:23: 4b:0e:7c:c7:24:c7:2d:f1:4b:da:0c:f9:56:c8:ce:a4:2d:43: 5a:9e:99:88:ca:ef:43:e2:28:fb:35:5d:64:69:5b:6d:60:c2: 28:78:a4:4b:b1:42:96:19:86:ad:5c:24:ab:44:75:8b:02:e1: a6:5d:d5:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKf4bRDdR1pwJ3I6qhX+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzM2NWFhZmJlMGU0NWEwNGRkMTVlOWMyMzExMjFlOWVh ZWE4ZjIwHhcNMjUxMjI0MjEwMDQyWhcNMjUxMjI1MjEwMDQyWjAzMTEwLwYDVQQD EyhhNmY0OGVmOTExMDcwNmQ0ZDg0YTcxZjJhYTg2YTNlZTlmOGNjNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/5mN0moLxmcmLoSsyqbq2l9KtI 5UNaO1J6n0+4WA4sXjGmoogsWNbh78DmOnINQU3dJiaEimFwwW90nUpk0ZwGoY9K 2kGj/z4RHXQr4hITEUJL1u3FggCeVzvOv1EhFK7Dv5EjA9fSibOcIBtUpwt2mRL3 fT8sJ60T2LaU6FdGw/ULVVzJqgb2Rq5+GjH9bKGvAEILSFRqCEH8zrzsDDoOc+3y qhiwmCs3BDOxQ5DnZPEZwAk+SlOxfLE///9cR0eXPhw0tJTjgM7Zqf2NQNZnFLt7 tGkEkHeI8uuXeFdj9iUs9b6e0DHoAdqnJqJx2bNMeC+inRGT8e5UfiNl1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb0jvkRBwbU2Epx8qqGo+6fjMeGMB8GA1UdIwQY MBaAFP3DZar74ORaBN0V6cIxEh6erqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMt YWJkZTdhNjVlMDRhLzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMtYWJkZTdhNjVlMDRh LzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkGmI+ek tTUFbffRaL8ZMpaXEBRQp1TR79CV/um6xuxBQj3Y7EQBQbJY2Szga05Ygdfo//Gm /Ak3zOdj84LCaTfnKVWaVKxGJRwsH5ua2wPBH8Tz/go5w9OfFXsmumG3fF8M5pfu xgvVUM/5trDUgq1ijUE1DH4yuvKEyo4K7BsSF9r4KK1WSiJFT+iv/UCM2aX1hi/q JkthxrrFcwzpcbxEJ+aOjBL72/buWTZS+hmbLXf2qKOGdzlTC2DsmJnS+2UL+7sj Sw58xyTHLfFL2gz5VsjOpC1DWp6ZiMrvQ+Io+zVdZGlbbWDCKHikS7FClhmGrVwk q0R1iwLhpl3V0g== -----END CERTIFICATE-----Generated at Thu Dec 25 03:27:18 2025 by rpki-client