This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft File: _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json) Hash identifier: Evd6CePSIjnj0jeeWIDlVBBuA5A98Pb8eMVQA8VJ8+c= Subject key identifier: 4F:78:8A:C3:EB:C3:7B:EE:73:96:F3:98:67:03:40:E2:D1:87:56:EA Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB Certificate issuer: /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Certificate serial: 019B3FECAFE0997BD8A3940B9492FB8F7A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft Manifest number: 0E5F Signing time: Sun 21 Dec 2025 08:00:34 +0000 Manifest this update: Sun 21 Dec 2025 08:00:34 +0000 Manifest next update: Mon 22 Dec 2025 08:00:34 +0000 Files and hashes: 1: Puy-0P_jBepIb5u3SpvEh4v47j8.roa (hash: ZN41z34tLWoaRsScijTCdX/mIzcEneubj96rKehXEgw=) 2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: QJOqEp39nDbmNDoD5KXrJQWprte1lbh6kDsuKqkTw80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:af:e0:99:7b:d8:a3:94:0b:94:92:fb:8f:7a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb Validity Not Before: Dec 21 08:00:34 2025 GMT Not After : Dec 22 08:00:34 2025 GMT Subject: CN=4f788ac3ebc37bee7396f398670340e2d18756ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:b0:37:a8:88:07:86:81:71:9b:f5:1e:67: ae:3b:fe:8e:f0:c1:a4:fb:44:e6:6c:15:ed:d5:84: dd:64:e2:f9:84:2f:0e:40:d9:48:37:82:43:ee:e3: 93:88:6f:e3:b4:e1:74:a7:86:96:3b:38:ca:00:75: 37:30:a9:08:f9:8b:5a:ba:03:00:c4:d2:2f:eb:c2: 06:b1:2c:af:72:7e:d1:a3:97:56:1b:e8:75:9f:b2: ff:be:4b:59:f7:13:a0:f1:e5:b4:08:61:da:d4:c3: 8e:10:27:87:c0:ed:03:b0:21:a2:d8:79:c9:02:b2: db:82:70:61:37:0d:38:49:e9:4c:5c:77:48:4e:48: 6b:00:29:f6:54:7c:36:f0:da:b8:d0:db:aa:63:a0: 7f:13:d3:8e:d6:f1:6c:2a:e2:e4:59:d0:84:2b:91: b4:cc:99:30:c8:81:a7:5a:6a:b4:a5:86:f2:b4:c1: 34:1d:ed:3c:57:f4:9c:eb:9e:83:37:a1:10:31:6f: 83:25:25:08:64:4c:8c:98:12:eb:e1:5d:81:79:1f: e0:de:b4:e8:c4:59:59:3d:e1:47:fc:ca:52:f6:f5: 0b:94:d4:1f:43:2c:54:98:1d:b8:0e:63:53:53:a7: bd:e9:db:5f:11:9f:4e:f6:da:cc:fd:01:17:87:6c: 91:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:78:8A:C3:EB:C3:7B:EE:73:96:F3:98:67:03:40:E2:D1:87:56:EA X509v3 Authority Key Identifier: keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d5:74:84:65:de:12:d0:50:06:ed:04:5c:ac:3b:d8:54:7f: 70:ca:fe:3c:4b:a0:29:1a:63:bd:98:0b:9d:78:6d:b9:d7:83: c1:1e:bd:86:f8:8a:b6:fc:79:02:b7:f1:e4:6f:e9:3c:25:0a: 7e:78:af:57:3b:f2:4b:1f:0f:e4:60:75:5b:37:64:2f:98:59: ae:78:dd:c8:8d:6e:98:64:a3:5c:20:3f:0a:72:18:08:57:a4: 97:64:06:56:7f:cb:f5:74:62:b2:25:5e:fe:0e:46:27:cb:9b: 42:e1:99:d0:8f:70:a7:b1:9a:26:ef:63:d6:b5:18:50:9b:d1: c4:b3:22:2c:40:0f:c2:e3:7d:12:5f:e3:fc:fe:98:7c:f6:30: 38:f1:53:80:af:f2:9f:04:66:a4:35:05:0e:8e:30:a1:bd:42: 00:52:a0:f8:91:49:fe:6d:94:bc:e2:3d:8c:cf:01:63:db:e8: 03:bb:64:e6:4c:49:02:6a:87:62:5b:19:bd:1b:5c:32:85:4a: 4b:28:d3:fd:75:61:1c:a8:a2:15:d4:ec:92:b6:da:59:34:ce: 62:19:d0:79:65:34:fa:8b:00:3f:65:11:df:23:38:e0:b5:3a: 31:42:b4:0e:10:1d:7d:9e:07:bf:78:15:32:40:db:dc:f7:bb: 2a:b5:1a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7K/gmXvYo5QLlJL7j3qTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4 ZDVjZGIwHhcNMjUxMjIxMDgwMDM0WhcNMjUxMjIyMDgwMDM0WjAzMTEwLwYDVQQD Eyg0Zjc4OGFjM2ViYzM3YmVlNzM5NmYzOTg2NzAzNDBlMmQxODc1NmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJuwN6iIB4aBcZv1HmeuO/6O8MGk +0TmbBXt1YTdZOL5hC8OQNlIN4JD7uOTiG/jtOF0p4aWOzjKAHU3MKkI+YtaugMA xNIv68IGsSyvcn7Ro5dWG+h1n7L/vktZ9xOg8eW0CGHa1MOOECeHwO0DsCGi2HnJ ArLbgnBhNw04SelMXHdITkhrACn2VHw28Nq40NuqY6B/E9OO1vFsKuLkWdCEK5G0 zJkwyIGnWmq0pYbytME0He08V/Sc656DN6EQMW+DJSUIZEyMmBLr4V2BeR/g3rTo xFlZPeFH/MpS9vULlNQfQyxUmB24DmNTU6e96dtfEZ9O9trM/QEXh2yRfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE94isPrw3vuc5bzmGcDQOLRh1bqMB8GA1UdIwQY MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5 LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdV0hGXe EtBQBu0EXKw72FR/cMr+PEugKRpjvZgLnXhtudeDwR69hviKtvx5Arfx5G/pPCUK fnivVzvySx8P5GB1WzdkL5hZrnjdyI1umGSjXCA/CnIYCFekl2QGVn/L9XRisiVe /g5GJ8ubQuGZ0I9wp7GaJu9j1rUYUJvRxLMiLEAPwuN9El/j/P6YfPYwOPFTgK/y nwRmpDUFDo4wob1CAFKg+JFJ/m2UvOI9jM8BY9voA7tk5kxJAmqHYlsZvRtcMoVK SyjT/XVhHKiiFdTskrbaWTTOYhnQeWU0+osAP2UR3yM44LU6MUK0DhAdfZ4Hv3gV MkDb3Pe7KrUaAw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:21:15 2025 by rpki-client