This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json) Hash identifier: YPiE/YTKGpeCDBbC7aU+Pba/7iqy2rw3L2rsug9izZE= Subject key identifier: EC:0F:6D:94:B9:56:AB:86:76:EA:A0:8E:31:3E:2C:67:66:90:15:1F Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019B3AC6CD83C0EAD97A0AA59F0ECBAC559F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft Manifest number: 0733 Signing time: Sat 20 Dec 2025 08:01:05 +0000 Manifest this update: Sat 20 Dec 2025 08:01:05 +0000 Manifest next update: Sun 21 Dec 2025 08:01:05 +0000 Files and hashes: 1: 6tgQgTfm85LpNc3uFwCPSeOHgn0.roa (hash: wCzEcSC/toNrpIYexSQkBXqRoE/bPAxt1JhjpW1voZY=) 2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=) 3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=) 4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: Og6rwSdPokkiZ6F68gAzbFWH9Cb1ktAr33eNOgT0xNs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:cd:83:c0:ea:d9:7a:0a:a5:9f:0e:cb:ac:55:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Dec 20 08:01:05 2025 GMT Not After : Dec 21 08:01:05 2025 GMT Subject: CN=ec0f6d94b956ab8676eaa08e313e2c676690151f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e6:90:84:77:1f:61:7d:d3:40:d8:a9:08:08: f9:33:1e:a2:68:b9:2b:8b:00:73:eb:06:5d:38:c1: 72:86:df:bb:df:ad:c8:a0:c1:fb:79:b4:cc:9f:59: 9b:df:c5:4c:99:9b:91:15:0d:f1:bf:f6:27:c7:76: 5f:47:a2:cc:f9:fe:78:e7:49:e7:aa:97:37:eb:f1: 57:fa:53:41:52:1d:ec:7f:5e:31:a0:df:8c:a3:30: d0:5d:52:b0:e0:95:09:fd:1c:19:68:cb:d9:45:d4: b1:44:07:1a:0e:45:cb:c9:a1:2b:ed:b2:00:ca:78: c9:df:34:b3:d9:8f:78:d7:9f:64:f4:07:0e:d2:eb: d4:79:98:cb:29:44:f9:7a:33:2f:8e:4d:ce:d6:e3: 0e:f6:ca:3b:6f:48:ad:f1:53:34:ad:b0:eb:3c:1a: fe:4b:0c:57:29:3a:2e:42:e9:77:8d:a2:ce:59:f4: 23:b8:8e:a8:a5:5c:f6:71:23:ff:bb:76:34:37:36: 66:b6:d2:4a:de:51:d6:e9:95:d0:af:e0:34:14:e8: 76:32:70:47:2b:14:c9:26:92:78:be:6a:8c:f6:9f: 1d:74:89:0c:f0:9e:a6:54:99:56:96:75:0c:a0:74: 7f:a2:c1:b1:6b:fe:79:b6:a5:55:bc:28:43:2d:2f: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0F:6D:94:B9:56:AB:86:76:EA:A0:8E:31:3E:2C:67:66:90:15:1F X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:44:93:4a:38:bc:24:d1:b2:22:03:86:54:53:88:ca:6e:45: 8f:4c:79:26:48:83:e6:7c:43:d4:5a:b8:da:31:0e:2c:05:bb: f8:e7:79:32:9d:b6:ff:1e:7e:9d:c5:a7:9a:b3:88:44:dc:6e: 3e:e3:7f:bb:72:7d:cd:b5:b7:1f:a3:ac:c7:b1:64:5e:c9:0d: bd:d7:d1:a1:34:8d:f8:a7:33:46:27:b6:3d:bd:f5:f3:4a:f3: a8:b3:ca:93:9d:83:ef:5b:ad:4c:8f:e3:c5:de:92:ec:63:67: 87:f7:e1:e5:01:53:85:64:18:75:0d:9a:b0:32:22:60:27:40: 70:ca:26:f5:b9:5d:cb:34:c3:51:e0:db:83:7e:cc:fd:8a:ea: af:ea:ff:e2:98:13:ee:2f:35:3f:82:5f:76:2f:db:c7:ba:f8: 7c:e2:d4:4d:0a:45:9d:37:de:92:44:b3:1e:1a:11:ca:98:10: 6b:d3:c0:d1:75:d4:77:50:6d:15:f0:ae:b9:80:e8:44:b8:c2: 0e:e2:87:3a:ba:e9:c8:06:fc:e9:c9:b2:de:0f:9a:35:ae:12: 7b:39:4b:68:5a:77:7a:c8:05:ee:c1:35:17:30:f0:36:f9:a4: dd:b0:e2:2a:99:12:17:47:00:f7:b5:63:a5:9d:01:b3:9d:74: 72:00:80:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xs2DwOrZegqlnw7LrFWfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjUxMjIwMDgwMTA1WhcNMjUxMjIxMDgwMTA1WjAzMTEwLwYDVQQD EyhlYzBmNmQ5NGI5NTZhYjg2NzZlYWEwOGUzMTNlMmM2NzY2OTAxNTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+aQhHcfYX3TQNipCAj5Mx6iaLkr iwBz6wZdOMFyht+7363IoMH7ebTMn1mb38VMmZuRFQ3xv/Ynx3ZfR6LM+f5450nn qpc36/FX+lNBUh3sf14xoN+MozDQXVKw4JUJ/RwZaMvZRdSxRAcaDkXLyaEr7bIA ynjJ3zSz2Y94159k9AcO0uvUeZjLKUT5ejMvjk3O1uMO9so7b0it8VM0rbDrPBr+ SwxXKTouQul3jaLOWfQjuI6opVz2cSP/u3Y0NzZmttJK3lHW6ZXQr+A0FOh2MnBH KxTJJpJ4vmqM9p8ddIkM8J6mVJlWlnUMoHR/osGxa/55tqVVvChDLS9juQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwPbZS5VquGduqgjjE+LGdmkBUfMB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkSTSji8 JNGyIgOGVFOIym5Fj0x5JkiD5nxD1Fq42jEOLAW7+Od5Mp22/x5+ncWnmrOIRNxu PuN/u3J9zbW3H6Osx7FkXskNvdfRoTSN+KczRie2Pb3180rzqLPKk52D71utTI/j xd6S7GNnh/fh5QFThWQYdQ2asDIiYCdAcMom9bldyzTDUeDbg37M/Yrqr+r/4pgT 7i81P4Jfdi/bx7r4fOLUTQpFnTfekkSzHhoRypgQa9PA0XXUd1BtFfCuuYDoRLjC DuKHOrrpyAb86cmy3g+aNa4SezlLaFp3esgF7sE1FzDwNvmk3bDiKpkSF0cA97Vj pZ0Bs510cgCAbg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:20 2025 by rpki-client