This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft File: _pLvNTIb-Pcic0v_nfpj-9DwaQo.mft (raw, json) Hash identifier: zTwFNV2byed0d4bZ+wYwYU5lOuQd+/wp8yAbiC7xwy8= Subject key identifier: C1:15:47:3C:BF:41:22:74:1E:1D:3A:B4:D5:44:44:29:B8:00:CE:AD Authority key identifier: FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A Certificate issuer: /CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Certificate serial: 019AF12D5037A6CB4EB04A1C3CDA358B09E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft Manifest number: 10CC Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: FsJZX9GGj2A1me0tekd7HmtKIf4.roa (hash: wa9LmtrA5IFHkOGKHcF70x4E1HktC1RNDhObryrXOsE=) 2: _pLvNTIb-Pcic0v_nfpj-9DwaQo.crl (hash: Gmp3jOre8DQCCBC8Bcsz5FrXb3NEC3XMG6kXLpK/P48=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:50:37:a6:cb:4e:b0:4a:1c:3c:da:35:8b:09:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe92ef35321bf8f722734bff9dfa63fbd0f0690a Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=c115473cbf4122741e1d3ab4d5444429b800cead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:df:d5:28:47:2c:39:97:71:9e:0e:78:88:85: 46:98:7e:4a:77:0f:b0:be:91:68:74:9b:c7:0a:74: a9:dc:bd:a9:a3:27:ed:71:69:f4:bc:6a:aa:0d:43: 05:05:bc:f6:96:b3:72:87:1e:83:89:64:7f:9d:1e: bd:d1:8f:de:1e:93:76:13:ba:ea:a2:9b:a0:0b:4f: a6:7f:6f:9a:76:29:ff:fe:bd:de:65:47:7a:61:66: fb:c5:c9:83:c2:7c:0e:e6:b8:6e:67:86:67:d0:cd: 23:e0:9a:57:6b:76:5b:1a:82:8e:dd:e2:c2:1c:e3: 3e:cc:51:91:a7:d0:b1:ea:be:9f:32:6a:fd:8f:06: a3:f7:84:f4:41:27:ce:64:e2:2a:db:2e:44:4a:e0: 34:14:07:a2:b4:c0:19:19:bb:e4:da:cf:20:89:0d: 68:1b:41:c0:e6:fb:63:6c:d7:96:6e:a8:68:6a:43: 9a:d0:4c:10:e5:7e:e6:e3:c1:a9:da:a2:47:f5:7b: 4a:bc:5d:18:60:15:f4:31:b3:18:b5:09:2c:28:84: 30:c0:20:7e:01:f8:00:ca:2b:c0:71:cb:a3:d5:f9: 2c:e4:2e:77:24:d7:8c:98:e1:8d:66:7a:03:be:64: d3:bb:69:90:7f:3b:e7:40:54:11:65:19:f1:98:c7: 02:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:15:47:3C:BF:41:22:74:1E:1D:3A:B4:D5:44:44:29:B8:00:CE:AD X509v3 Authority Key Identifier: keyid:FE:92:EF:35:32:1B:F8:F7:22:73:4B:FF:9D:FA:63:FB:D0:F0:69:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_pLvNTIb-Pcic0v_nfpj-9DwaQo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/d2725d-8001-41f1-80e5-a9eef294ac34/1/_pLvNTIb-Pcic0v_nfpj-9DwaQo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ea:ac:fb:e8:d1:04:37:61:1e:de:31:99:2f:38:0f:0c:d5: 3c:09:36:07:7e:4c:40:df:c1:48:aa:d0:f6:47:c6:4a:a0:10: b7:32:a3:6e:b4:65:9c:ef:17:d8:e0:f0:e7:5e:62:d3:f0:e0: f8:d8:58:8e:c4:40:15:4b:d0:f2:33:31:99:e5:14:2a:be:6a: 7d:06:e5:f4:a9:42:be:48:e2:66:a9:2e:35:b5:e1:cf:62:29: a5:88:fd:b2:48:a1:3f:e8:8a:98:41:87:2d:07:9c:88:f5:6e: 41:c0:74:84:67:89:81:a8:90:60:2b:12:14:49:d2:22:bb:40: 5f:0b:27:db:e1:2c:4a:d0:ed:d8:61:9f:7c:86:05:6d:1c:95: b0:41:20:95:06:1c:5d:b4:0d:b5:6d:d9:61:67:9a:f5:68:4f: 2e:44:bd:63:9c:a3:e7:4b:30:73:8c:9c:4c:b4:4a:4c:77:f7: b6:33:9b:4b:9f:c7:2a:09:b5:1a:9e:01:cb:12:19:32:b0:5e: 5b:ed:9a:c6:0a:8f:89:81:46:79:b8:54:63:5b:95:6e:0c:db: c4:89:51:e2:8f:5d:d1:93:ec:35:91:ff:45:58:3c:4d:f2:a0: 1b:2f:26:25:65:ba:37:08:96:b0:95:0b:22:d6:ca:97:79:17: 7b:ff:97:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVA3pstOsEocPNo1iwnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlOTJlZjM1MzIxYmY4ZjcyMjczNGJmZjlkZmE2M2ZiZDBm MDY5MGEwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhjMTE1NDczY2JmNDEyMjc0MWUxZDNhYjRkNTQ0NDQyOWI4MDBjZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt/VKEcsOZdxng54iIVGmH5Kdw+w vpFodJvHCnSp3L2poyftcWn0vGqqDUMFBbz2lrNyhx6DiWR/nR690Y/eHpN2E7rq opugC0+mf2+adin//r3eZUd6YWb7xcmDwnwO5rhuZ4Zn0M0j4JpXa3ZbGoKO3eLC HOM+zFGRp9Cx6r6fMmr9jwaj94T0QSfOZOIq2y5ESuA0FAeitMAZGbvk2s8giQ1o G0HA5vtjbNeWbqhoakOa0EwQ5X7m48Gp2qJH9XtKvF0YYBX0MbMYtQksKIQwwCB+ AfgAyivAccuj1fks5C53JNeMmOGNZnoDvmTTu2mQfzvnQFQRZRnxmMcC7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEVRzy/QSJ0Hh06tNVERCm4AM6tMB8GA1UdIwQY MBaAFP6S7zUyG/j3InNL/536Y/vQ8GkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUt YTllZWYyOTRhYzM0LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9kMjcyNWQtODAwMS00MWYxLTgwZTUtYTllZWYyOTRhYzM0 LzEvX3BMdk5USWItUGNpYzB2X25mcGotOUR3YVFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuOqs++jR BDdhHt4xmS84DwzVPAk2B35MQN/BSKrQ9kfGSqAQtzKjbrRlnO8X2ODw515i0/Dg +NhYjsRAFUvQ8jMxmeUUKr5qfQbl9KlCvkjiZqkuNbXhz2IppYj9skihP+iKmEGH LQeciPVuQcB0hGeJgaiQYCsSFEnSIrtAXwsn2+EsStDt2GGffIYFbRyVsEEglQYc XbQNtW3ZYWea9WhPLkS9Y5yj50swc4ycTLRKTHf3tjObS5/HKgm1Gp4ByxIZMrBe W+2axgqPiYFGebhUY1uVbgzbxIlR4o9d0ZPsNZH/RVg8TfKgGy8mJWW6NwiWsJUL ItbKl3kXe/+XUg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:28 2025 by rpki-client