This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json) Hash identifier: kROevpI321w/eOKlNnzmENEBwYJqnwcWWcyUhWJ1If0= Subject key identifier: 06:3D:82:9A:46:8D:D0:E9:CF:35:B9:E0:B0:AC:E4:FD:CA:F9:AF:7B Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9 Certificate serial: 019B2C66B225FBE9A506F70D744E2E948974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 13:01:26 +0000 Manifest this update: Wed 17 Dec 2025 13:01:26 +0000 Manifest next update: Thu 18 Dec 2025 13:01:26 +0000 Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: ga923M/ZEPRKKxQ8h4L/8jRAXfPFy5W+RTyvk3T2E9w=) 2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=) 3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:b2:25:fb:e9:a5:06:f7:0d:74:4e:2e:94:89:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c835498f35199a1571964d855c3877751681ab9 Validity Not Before: Dec 17 13:01:26 2025 GMT Not After : Dec 18 13:01:26 2025 GMT Subject: CN=063d829a468dd0e9cf35b9e0b0ace4fdcaf9af7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:26:df:2c:2c:de:30:ae:53:73:a2:69:be: 9d:82:b0:ef:59:a1:93:e1:1d:8d:04:b7:44:65:f0: 73:61:46:c5:54:14:1d:d5:91:07:75:e0:27:89:63: e2:3e:fb:82:97:bc:98:23:32:03:7d:08:09:7d:4a: 21:50:61:70:64:f4:1f:5d:58:6a:52:4c:ed:48:eb: 96:62:af:ee:42:6b:d6:7d:01:39:9d:64:4d:c0:a6: fd:00:7c:a9:87:85:f8:65:70:81:45:3b:72:81:8c: 1f:d8:2a:1e:de:f1:1d:ce:e1:63:be:cf:76:78:3e: 4b:15:b7:bb:7e:aa:9f:37:f3:d3:cb:68:d9:a4:04: e6:98:e6:5a:81:20:80:b8:b8:f1:68:42:79:bb:f7: af:74:5a:87:1a:cf:d8:8d:28:5c:77:4b:0e:ae:13: 20:f7:26:5e:bf:7d:56:9a:4d:c8:40:ba:c9:98:a0: 7f:10:2d:7b:c4:a8:dd:2c:3a:65:3b:f8:52:07:02: 8f:9f:b3:32:d5:2d:79:45:4c:07:bb:15:22:3e:a5: d3:3f:07:fb:8c:66:c0:27:64:1f:7d:53:15:94:8c: b0:68:4d:25:a9:db:3d:07:8e:31:83:75:56:fd:8a: 6e:74:a5:27:fa:22:34:8b:d9:c0:31:d8:7e:6a:e5: cc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3D:82:9A:46:8D:D0:E9:CF:35:B9:E0:B0:AC:E4:FD:CA:F9:AF:7B X509v3 Authority Key Identifier: keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:24:25:17:53:65:87:b9:d6:ee:e6:3a:4e:0b:9a:e9:50: 24:33:b3:c8:32:14:9a:a0:a4:c7:95:93:ca:28:0f:44:c7:cd: 0d:05:f4:a9:cd:15:92:6f:d9:08:e2:f3:a3:e8:a2:51:aa:23: dc:6f:a7:63:f9:78:a9:68:8c:d8:e1:2e:93:7b:81:39:5b:c5: 0e:d5:4d:f9:9d:92:70:38:e0:43:59:df:05:26:d0:1a:e8:2c: b9:6e:a5:ac:97:4a:51:4b:35:4c:b7:b5:c0:ee:93:cb:7c:73: 60:62:6b:0e:9e:a4:8d:02:04:18:72:87:58:af:7c:84:42:1a: 2a:92:7d:8c:03:3e:70:68:ee:e5:68:eb:b7:3d:18:89:1a:c9: a1:75:ad:a0:c6:dc:2b:77:4c:94:ed:98:92:52:c5:62:3f:57: 3c:68:41:8e:98:b3:8f:9b:77:26:d3:14:c4:36:58:56:a1:fa: 62:2a:76:4b:59:f3:fe:b5:8e:ab:8d:8b:a1:52:27:ae:09:37: d1:f0:8d:b9:7d:79:b5:ed:95:0d:05:da:d5:fb:79:b7:7c:dc: 75:5a:f0:8a:b9:11:7a:45:96:48:0d:65:cf:51:7f:4e:34:12: 49:cb:7c:da:f1:48:64:bf:93:8d:81:3c:98:01:72:4f:be:00: 36:20:29:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZrIl++mlBvcNdE4ulIl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2 ODFhYjkwHhcNMjUxMjE3MTMwMTI2WhcNMjUxMjE4MTMwMTI2WjAzMTEwLwYDVQQD EygwNjNkODI5YTQ2OGRkMGU5Y2YzNWI5ZTBiMGFjZTRmZGNhZjlhZjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYIm3yws3jCuU3Oiab6dgrDvWaGT 4R2NBLdEZfBzYUbFVBQd1ZEHdeAniWPiPvuCl7yYIzIDfQgJfUohUGFwZPQfXVhq UkztSOuWYq/uQmvWfQE5nWRNwKb9AHyph4X4ZXCBRTtygYwf2Coe3vEdzuFjvs92 eD5LFbe7fqqfN/PTy2jZpATmmOZagSCAuLjxaEJ5u/evdFqHGs/YjShcd0sOrhMg 9yZev31Wmk3IQLrJmKB/EC17xKjdLDplO/hSBwKPn7My1S15RUwHuxUiPqXTPwf7 jGbAJ2QffVMVlIywaE0lqds9B44xg3VW/YpudKUn+iI0i9nAMdh+auXMTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAY9gppGjdDpzzW54LCs5P3K+a97MB8GA1UdIwQY MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3 LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcEkJRdT ZYe51u7mOk4LmulQJDOzyDIUmqCkx5WTyigPRMfNDQX0qc0Vkm/ZCOLzo+iiUaoj 3G+nY/l4qWiM2OEuk3uBOVvFDtVN+Z2ScDjgQ1nfBSbQGugsuW6lrJdKUUs1TLe1 wO6Ty3xzYGJrDp6kjQIEGHKHWK98hEIaKpJ9jAM+cGju5Wjrtz0YiRrJoXWtoMbc K3dMlO2YklLFYj9XPGhBjpizj5t3JtMUxDZYVqH6Yip2S1nz/rWOq42LoVInrgk3 0fCNuX15te2VDQXa1ft5t3zcdVrwirkRekWWSA1lz1F/TjQSSct82vFIZL+TjYE8 mAFyT74ANiAprw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:20:22 2025 by rpki-client