This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json) Hash identifier: CY/2s+MUPF8UMgiag3VF6DnttBycZF6fManMErn9ISo= Subject key identifier: 5C:C4:CF:9E:F5:8D:9E:12:C1:24:3A:31:BD:19:43:77:82:C2:CB:38 Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Certificate serial: 019B3FED118C249818786135E37D39617597 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft Manifest number: 073F Signing time: Sun 21 Dec 2025 08:00:59 +0000 Manifest this update: Sun 21 Dec 2025 08:00:59 +0000 Manifest next update: Mon 22 Dec 2025 08:00:59 +0000 Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: +gCz3qevHaOEvUN0Z6ARumc9cpAB08w5xthqAVucaeE=) 2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:11:8c:24:98:18:78:61:35:e3:7d:39:61:75:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Validity Not Before: Dec 21 08:00:59 2025 GMT Not After : Dec 22 08:00:59 2025 GMT Subject: CN=5cc4cf9ef58d9e12c1243a31bd19437782c2cb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:c3:20:da:35:14:f2:25:7b:08:e2:e5:ba: 32:ed:8c:02:54:d2:a7:da:c0:33:08:fe:47:ab:e3: ad:03:11:c3:55:89:a4:54:c4:21:fb:6e:b3:0d:4c: 86:cd:02:1f:4b:26:2e:13:70:10:b5:83:b9:d5:ef: 6b:3a:0d:29:f3:ad:ad:cb:30:11:c2:99:66:15:45: 7f:e4:a3:4f:77:f3:54:01:44:d7:8c:a0:66:b8:d2: e0:83:92:b7:83:62:2d:07:00:0e:ee:42:67:40:ee: ce:c4:80:40:f1:a1:c4:67:a3:8d:83:96:80:59:1a: a8:39:25:e4:e5:37:3f:23:d4:8f:7e:ae:f9:75:ab: 39:c5:e1:a1:44:54:e1:7d:13:c0:99:81:21:e0:7b: 14:c7:25:f1:6d:eb:52:c2:d3:29:6e:76:ee:34:ab: be:e1:24:30:07:95:a4:57:cd:cd:1c:aa:85:a4:a8: 3e:12:e0:74:0b:2c:9a:b1:73:cc:46:dd:45:db:4a: a2:09:35:d4:fa:5a:eb:c5:cb:4e:c9:5a:47:e7:29: 85:36:39:e7:c9:ca:11:83:17:76:ec:ea:2b:41:b4: 9b:94:a1:0d:8d:4c:cb:f9:a8:2c:77:3e:fa:1e:e7: a8:cb:77:89:89:dc:38:61:77:85:bb:2d:08:27:57: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C4:CF:9E:F5:8D:9E:12:C1:24:3A:31:BD:19:43:77:82:C2:CB:38 X509v3 Authority Key Identifier: keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:61:08:e5:53:ec:88:46:00:c3:17:11:2a:79:b8:bd:9e:4b: 8f:ae:07:51:b1:14:02:44:87:eb:63:07:54:8e:cd:5c:45:79: 01:34:18:8e:c8:21:5e:9e:4d:7b:a3:1d:e9:f8:11:50:26:a9: 4f:e8:bb:7b:9e:cf:63:b4:ea:ac:e3:32:5d:37:2a:90:93:9b: db:53:c7:b2:2a:c2:db:f4:58:5d:92:85:6c:e5:51:7d:30:db: ad:d1:89:e1:31:a0:45:e6:73:5c:7d:02:27:e2:fe:da:9f:70: 09:af:be:15:d2:5d:03:6a:ca:9c:af:07:a9:1c:1e:42:00:ef: 9b:82:bb:1f:7f:5f:14:b9:80:8b:17:d6:d8:26:14:ff:f7:b6: 1f:76:76:98:32:78:52:35:63:88:87:d3:d5:54:11:68:be:4c: f0:c0:36:58:e4:c4:17:a0:7b:24:dd:64:08:cf:bd:a2:81:3d: 96:c2:c7:1b:10:f9:9e:56:fb:0e:01:40:3c:d2:c5:63:07:56: e3:e4:df:37:b9:45:d6:9e:c8:d9:ed:cd:08:f1:34:cb:f9:50: ce:b9:fa:27:1d:5d:0f:bf:a3:84:96:0d:23:1c:e9:dd:65:bc: ad:13:b0:dd:82:e2:a5:29:26:91:6a:ee:e1:73:92:70:eb:b4: 63:05:d9:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7RGMJJgYeGE14305YXWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3 OWM2ZGEwHhcNMjUxMjIxMDgwMDU5WhcNMjUxMjIyMDgwMDU5WjAzMTEwLwYDVQQD Eyg1Y2M0Y2Y5ZWY1OGQ5ZTEyYzEyNDNhMzFiZDE5NDM3NzgyYzJjYjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfDINo1FPIlewji5boy7YwCVNKn 2sAzCP5Hq+OtAxHDVYmkVMQh+26zDUyGzQIfSyYuE3AQtYO51e9rOg0p862tyzAR wplmFUV/5KNPd/NUAUTXjKBmuNLgg5K3g2ItBwAO7kJnQO7OxIBA8aHEZ6ONg5aA WRqoOSXk5Tc/I9SPfq75das5xeGhRFThfRPAmYEh4HsUxyXxbetSwtMpbnbuNKu+ 4SQwB5WkV83NHKqFpKg+EuB0CyyasXPMRt1F20qiCTXU+lrrxctOyVpH5ymFNjnn ycoRgxd27OorQbSblKENjUzL+agsdz76Hueoy3eJidw4YXeFuy0IJ1cfCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzEz571jZ4SwSQ6Mb0ZQ3eCwss4MB8GA1UdIwQY MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt ZDYwYWE3MzNjZDEwLzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWEI5VPs iEYAwxcRKnm4vZ5Lj64HUbEUAkSH62MHVI7NXEV5ATQYjsghXp5Ne6Md6fgRUCap T+i7e57PY7TqrOMyXTcqkJOb21PHsirC2/RYXZKFbOVRfTDbrdGJ4TGgReZzXH0C J+L+2p9wCa++FdJdA2rKnK8HqRweQgDvm4K7H39fFLmAixfW2CYU//e2H3Z2mDJ4 UjVjiIfT1VQRaL5M8MA2WOTEF6B7JN1kCM+9ooE9lsLHGxD5nlb7DgFAPNLFYwdW 4+TfN7lF1p7I2e3NCPE0y/lQzrn6Jx1dD7+jhJYNIxzp3WW8rROw3YLipSkmkWru 4XOScOu0YwXZXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:26:50 2025 by rpki-client