This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json) Hash identifier: XbOgp+tiBrN5Y25mns0G+mEpNJ7U1RH3U5y7iI/M6qc= Subject key identifier: 70:AC:1F:8D:B4:7B:56:8F:71:F2:93:29:F1:5B:DE:17:61:91:ED:E8 Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Certificate serial: 019B3B34CB6B8B1042B67BC3E40A60515A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 10:01:14 +0000 Manifest this update: Sat 20 Dec 2025 10:01:14 +0000 Manifest next update: Sun 21 Dec 2025 10:01:14 +0000 Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: IL112S+i7C9aXl/sds1fvwp2r4IJkYGRdLE5pirJI3I=) 2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:cb:6b:8b:10:42:b6:7b:c3:e4:0a:60:51:5a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Validity Not Before: Dec 20 10:01:14 2025 GMT Not After : Dec 21 10:01:14 2025 GMT Subject: CN=70ac1f8db47b568f71f29329f15bde176191ede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:95:1a:7d:dc:de:58:5e:7e:aa:ea:25:f5: 39:d1:70:7c:08:cd:92:66:ea:25:ca:dd:28:0e:26: f0:b1:3c:4b:3b:64:51:ba:c6:96:40:48:2e:ba:17: 38:02:1b:2c:dd:4e:24:aa:7f:4f:29:0c:db:07:db: 1b:af:3c:a4:95:58:fe:cf:a6:b7:c5:f4:d8:50:05: f1:9b:b1:c9:22:1e:13:52:e5:ba:8c:44:82:03:56: 21:73:44:fb:c8:4d:56:bd:49:19:50:9d:95:67:eb: d1:4e:7c:82:9a:c8:b7:70:d3:62:d4:c8:cc:c9:52: 2d:54:81:54:74:de:0c:d0:25:5c:48:b7:d7:7e:8b: c8:fb:2b:63:5c:1e:bd:76:7b:ae:33:00:25:14:0b: e7:99:46:25:58:9b:30:3e:5b:a0:d6:bd:70:4b:95: 84:92:43:5b:cb:71:bc:65:ca:af:b3:e3:89:b9:60: 80:0e:19:97:f2:78:45:75:4a:60:ff:ab:cc:2f:3f: 57:e0:8a:cf:ee:c4:b3:69:bf:97:d1:bd:6d:d3:08: 1e:37:0f:12:cd:86:6c:81:a7:09:a9:0f:e4:2c:6a: 9e:bd:15:2b:a5:79:a6:90:df:f7:e9:84:6d:44:ab: a0:86:02:18:53:81:e5:d8:a5:cf:54:6f:97:fa:96: 4c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AC:1F:8D:B4:7B:56:8F:71:F2:93:29:F1:5B:DE:17:61:91:ED:E8 X509v3 Authority Key Identifier: keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:54:82:9d:59:b1:90:56:1a:9b:ac:e7:45:24:0e:57:71:38: df:c7:93:9f:56:8f:1c:ff:49:5a:a0:9e:08:15:3d:38:e5:ac: f7:59:f0:48:1b:3b:d1:a8:5c:e3:42:48:ac:f2:f4:72:9d:25: fe:3d:f3:f3:e6:85:03:f1:c9:09:6e:78:47:6f:56:e1:77:f9: 66:1e:ae:dd:c0:76:1c:fe:19:d2:68:be:16:f5:9d:6a:87:e9: 75:0b:c9:04:48:d7:15:f6:3f:27:18:8b:c8:ec:66:4b:ae:71: be:b9:90:4f:09:0c:9a:42:4a:e3:8b:c5:64:41:ee:f5:54:36: 60:d4:2b:38:79:df:91:63:e8:31:ae:b0:f9:7c:f9:71:36:fe: 9b:cf:01:c8:8b:65:52:2d:bd:96:cd:bd:44:02:04:ae:1b:06: cd:04:9a:37:43:9a:8c:ed:fe:8b:f2:0c:35:b0:dd:4d:e2:08: a3:28:f3:3e:40:e9:31:33:2b:48:87:cb:7d:1a:e0:33:7b:0c: a6:7d:be:d5:ce:2a:ae:a9:eb:ee:42:e5:c2:7d:4b:b9:f6:18: 41:81:2d:93:c3:a9:a8:b3:ee:1e:fe:09:60:3c:3c:2d:a3:20: 44:76:c0:36:c8:c3:35:0e:a4:aa:08:3b:7f:55:b6:27:3a:51: 05:7f:b6:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NMtrixBCtnvD5ApgUVqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw YzA3YmEwHhcNMjUxMjIwMTAwMTE0WhcNMjUxMjIxMTAwMTE0WjAzMTEwLwYDVQQD Eyg3MGFjMWY4ZGI0N2I1NjhmNzFmMjkzMjlmMTViZGUxNzYxOTFlZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEKVGn3c3lhefqrqJfU50XB8CM2S Zuolyt0oDibwsTxLO2RRusaWQEguuhc4Ahss3U4kqn9PKQzbB9sbrzyklVj+z6a3 xfTYUAXxm7HJIh4TUuW6jESCA1Yhc0T7yE1WvUkZUJ2VZ+vRTnyCmsi3cNNi1MjM yVItVIFUdN4M0CVcSLfXfovI+ytjXB69dnuuMwAlFAvnmUYlWJswPlug1r1wS5WE kkNby3G8Zcqvs+OJuWCADhmX8nhFdUpg/6vMLz9X4IrP7sSzab+X0b1t0wgeNw8S zYZsgacJqQ/kLGqevRUrpXmmkN/36YRtRKughgIYU4Hl2KXPVG+X+pZMQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCsH420e1aPcfKTKfFb3hdhke3oMB8GA1UdIwQY MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFSCnVmx kFYam6znRSQOV3E438eTn1aPHP9JWqCeCBU9OOWs91nwSBs70ahc40JIrPL0cp0l /j3z8+aFA/HJCW54R29W4Xf5Zh6u3cB2HP4Z0mi+FvWdaofpdQvJBEjXFfY/JxiL yOxmS65xvrmQTwkMmkJK44vFZEHu9VQ2YNQrOHnfkWPoMa6w+Xz5cTb+m88ByItl Ui29ls29RAIErhsGzQSaN0OajO3+i/IMNbDdTeIIoyjzPkDpMTMrSIfLfRrgM3sM pn2+1c4qrqnr7kLlwn1LufYYQYEtk8OpqLPuHv4JYDw8LaMgRHbANsjDNQ6kqgg7 f1W2JzpRBX+2Ww== -----END CERTIFICATE-----Generated at Sat Dec 20 19:35:24 2025 by rpki-client