This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft File: fINUmPNRmaFXGWTYVcOHd1FoGrk.mft (raw, json) Hash identifier: FszA2gc204Co8dm/lqGylRBv4AEqr2/3NfWGvSb9GRI= Subject key identifier: BE:6D:C3:64:3B:2F:9F:F5:05:9D:C8:35:0E:BF:B0:2F:0F:16:9C:CF Authority key identifier: 7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 Certificate issuer: /CN=7c835498f35199a1571964d855c3877751681ab9 Certificate serial: 019AF08841BB74C308485E7E67F644E181AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 22:00:52 +0000 Manifest this update: Fri 05 Dec 2025 22:00:52 +0000 Manifest next update: Sat 06 Dec 2025 22:00:52 +0000 Files and hashes: 1: fINUmPNRmaFXGWTYVcOHd1FoGrk.crl (hash: WCdCPQRmcIItJsysuQxW4Leq6DEemSGG5TzSJVEhAR0=) 2: lEn451-XXHlherUNQr8Rc0JmU5c.roa (hash: kIpdRfZGgcVE/RkoYxVB/7zTwiZiv41Cisi6L8BZjv8=) 3: z-VHazRi4J3dfaKu9uPEdEUaUxE.roa (hash: d/YBGA/H3W0HjGNcA5bYsjIVUAEfDekBGnTdNyMczFg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:41:bb:74:c3:08:48:5e:7e:67:f6:44:e1:81:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c835498f35199a1571964d855c3877751681ab9 Validity Not Before: Dec 5 22:00:52 2025 GMT Not After : Dec 6 22:00:52 2025 GMT Subject: CN=be6dc3643b2f9ff5059dc8350ebfb02f0f169ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:6e:fa:36:59:4e:6f:7e:8a:4e:b7:6d:78: 3b:39:7f:7d:25:75:61:d2:51:d2:a8:22:44:0b:84: 8c:4e:bc:05:65:77:2c:31:bb:54:ab:92:89:09:24: c1:8e:53:6c:32:04:23:d4:75:bd:bf:76:15:6e:e2: 02:fb:dc:e9:92:f8:a5:ea:8c:f6:c6:43:58:31:b8: ae:a8:8d:4d:8a:38:5d:7a:d3:7f:40:7d:af:b3:f5: 5b:46:e9:db:d5:cf:23:9b:ac:bc:a8:3e:35:e2:c2: 76:8c:be:17:7c:13:92:cd:c8:3b:25:56:28:31:74: 4f:48:c1:a4:c9:d6:cb:77:11:9c:f0:92:d8:de:6b: 31:19:b8:ac:f0:4e:0d:44:4f:ce:58:18:b2:54:41: 16:d7:02:8d:41:a8:1c:ec:74:46:8c:87:e0:27:75: af:53:e8:1c:3b:e4:06:7f:b8:ca:4b:ae:89:10:a1: 72:f9:6c:0d:7a:ed:b5:d4:92:95:44:a7:ee:08:b2: 0a:2e:75:91:2e:aa:ce:d2:39:8d:9c:4c:8b:f1:32: a3:07:4b:47:9b:dc:4c:d8:71:69:3f:36:dc:9b:fa: d2:d4:4d:24:2e:2d:b2:42:39:0c:df:30:c5:e4:77: 2e:fe:b0:4c:ce:f3:1a:88:56:7f:4d:2f:a1:be:56: 0f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:C3:64:3B:2F:9F:F5:05:9D:C8:35:0E:BF:B0:2F:0F:16:9C:CF X509v3 Authority Key Identifier: keyid:7C:83:54:98:F3:51:99:A1:57:19:64:D8:55:C3:87:77:51:68:1A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fINUmPNRmaFXGWTYVcOHd1FoGrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9f8ae2-0fb5-4c04-ad93-4ce477dbb407/1/fINUmPNRmaFXGWTYVcOHd1FoGrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c2:fe:62:95:e2:31:2b:47:f0:c0:35:39:b3:c9:3e:2e:05: c0:90:ab:4d:da:c8:de:93:09:25:4d:03:68:08:29:f3:57:8e: 8d:75:2e:16:b5:f1:8f:55:cd:d7:7f:1e:e0:6f:8e:88:df:59: 5b:6a:7b:70:6a:fe:6e:12:6b:fb:51:8d:43:06:95:85:7f:2b: e8:61:f3:07:87:65:66:8f:c5:b5:35:7e:d5:c0:73:57:f3:89: 8f:54:a9:35:84:1c:94:54:53:25:29:6a:bc:01:54:89:82:ea: 02:b9:22:9c:63:cd:5d:7b:27:97:cb:1a:4e:d8:cb:47:5d:1b: 17:cb:a5:32:63:55:76:a2:40:a2:60:9b:af:98:5e:bc:73:a8: e1:87:59:0a:3a:21:a4:25:14:6c:d8:8e:2e:48:2f:43:20:23: 40:c8:9b:ee:ae:73:20:32:88:ff:13:23:4d:01:24:b8:cd:33: ed:5e:44:96:e4:aa:bc:57:cb:25:af:3d:83:9c:08:91:5c:be: dd:16:31:94:da:21:05:26:9b:44:ff:c7:70:66:31:45:8e:e4: e1:81:a3:01:61:15:ff:89:6a:00:18:45:aa:c6:8b:0c:e4:e5: af:f3:a6:04:42:d9:4d:d9:d0:f0:84:3c:7b:41:5d:15:bf:ae: 92:76:5f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiEG7dMMISF5+Z/ZE4YGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODM1NDk4ZjM1MTk5YTE1NzE5NjRkODU1YzM4Nzc3NTE2 ODFhYjkwHhcNMjUxMjA1MjIwMDUyWhcNMjUxMjA2MjIwMDUyWjAzMTEwLwYDVQQD EyhiZTZkYzM2NDNiMmY5ZmY1MDU5ZGM4MzUwZWJmYjAyZjBmMTY5Y2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR5u+jZZTm9+ik63bXg7OX99JXVh 0lHSqCJEC4SMTrwFZXcsMbtUq5KJCSTBjlNsMgQj1HW9v3YVbuIC+9zpkvil6oz2 xkNYMbiuqI1NijhdetN/QH2vs/VbRunb1c8jm6y8qD414sJ2jL4XfBOSzcg7JVYo MXRPSMGkydbLdxGc8JLY3msxGbis8E4NRE/OWBiyVEEW1wKNQagc7HRGjIfgJ3Wv U+gcO+QGf7jKS66JEKFy+WwNeu211JKVRKfuCLIKLnWRLqrO0jmNnEyL8TKjB0tH m9xM2HFpPzbcm/rS1E0kLi2yQjkM3zDF5Hcu/rBMzvMaiFZ/TS+hvlYPdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5tw2Q7L5/1BZ3INQ6/sC8PFpzPMB8GA1UdIwQY MBaAFHyDVJjzUZmhVxlk2FXDh3dRaBq5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMt NGNlNDc3ZGJiNDA3LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy85ZjhhZTItMGZiNS00YzA0LWFkOTMtNGNlNDc3ZGJiNDA3 LzEvZklOVW1QTlJtYUZYR1dUWVZjT0hkMUZvR3JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHsL+YpXi MStH8MA1ObPJPi4FwJCrTdrI3pMJJU0DaAgp81eOjXUuFrXxj1XN138e4G+OiN9Z W2p7cGr+bhJr+1GNQwaVhX8r6GHzB4dlZo/FtTV+1cBzV/OJj1SpNYQclFRTJSlq vAFUiYLqArkinGPNXXsnl8saTtjLR10bF8ulMmNVdqJAomCbr5hevHOo4YdZCjoh pCUUbNiOLkgvQyAjQMib7q5zIDKI/xMjTQEkuM0z7V5EluSqvFfLJa89g5wIkVy+ 3RYxlNohBSabRP/HcGYxRY7k4YGjAWEV/4lqABhFqsaLDOTlr/OmBELZTdnQ8IQ8 e0FdFb+uknZfrg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:47 2025 by rpki-client