This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json) Hash identifier: AXttFcsGVuJfWAsJ5rW7mKFd/hOPr8zPnosaqC8oWSI= Subject key identifier: 1F:1A:8E:DD:A5:78:6B:A4:C9:2A:C5:7E:27:92:6F:FD:E0:2D:0B:93 Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c Certificate serial: 019AF31C09F096977131E81235E2142EEE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft Manifest number: 0216 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: ZkfGSA29JBMIP0ANxsvLWMn6t8n1yNNM7LPPkKQ2hlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:09:f0:96:97:71:31:e8:12:35:e2:14:2e:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=1f1a8edda5786ba4c92ac57e27926ffde02d0b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:55:a6:81:bc:d0:ba:2f:89:33:bb:d1:88:fb: d1:47:26:58:c7:0e:0d:29:3c:93:57:16:ee:65:bd: 20:08:07:bc:de:b9:68:1b:12:b4:86:58:af:8a:4e: ff:ae:0a:97:0e:a3:1b:07:b7:30:de:42:cc:b3:68: 4a:07:0a:68:58:9d:f8:84:ea:45:e0:a3:6a:72:29: 20:24:cb:2f:ce:36:15:51:41:89:ea:11:43:20:35: c5:d4:67:f1:0b:7f:26:c6:b0:1c:f6:10:d7:9d:62: 3a:cb:c7:9b:0f:19:e8:a1:4c:3e:1b:bf:7f:fd:b3: 75:57:46:c7:6b:f1:7e:01:f1:18:52:b1:95:7f:cc: 20:fc:ae:7e:f8:d6:4d:3e:ae:6f:22:20:64:b4:72: 26:33:cc:6e:46:0f:b7:36:11:3a:be:61:f6:a5:aa: 1b:96:97:e5:c0:96:1a:aa:4f:32:85:e9:4d:ce:6e: e9:da:81:09:5c:ed:ec:6d:8f:b0:ce:57:1d:f7:5c: cd:53:6e:32:de:cd:aa:2a:80:32:e6:84:45:b6:8a: be:5e:57:f0:34:62:b8:4e:ab:e5:e9:d7:c2:14:2c: cd:c9:58:e2:35:75:f3:69:78:44:35:76:23:39:bc: 51:a5:69:86:b4:e3:8f:d6:cb:71:1a:60:c4:72:22: e7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:8E:DD:A5:78:6B:A4:C9:2A:C5:7E:27:92:6F:FD:E0:2D:0B:93 X509v3 Authority Key Identifier: keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e3:e7:56:3a:62:ec:b9:3e:74:3c:c9:6b:fd:87:59:d4:32: 3a:11:6d:39:17:21:2d:da:f2:6f:a0:24:48:a0:e4:bd:f9:38: 5f:da:31:36:fc:55:81:f1:9d:f7:87:65:a5:fe:10:e0:8d:d3: db:92:dc:bf:41:a0:27:f6:de:6d:dc:60:9c:74:b6:a9:80:df: 7c:f7:de:81:1b:b4:16:78:15:8b:20:af:36:51:60:0b:9b:e6: a6:7a:ec:7a:b6:5c:98:db:da:2d:89:8c:26:9f:de:5e:38:28: d7:4f:e3:96:06:a1:96:67:c0:25:20:b1:7e:10:c7:f3:b3:16: 3a:12:f3:a1:61:f7:53:87:07:17:47:22:86:49:e8:d8:94:5e: 49:3b:c2:49:3e:e3:53:9a:6e:04:47:e6:10:6d:bc:31:53:fb: 23:7e:a7:c6:51:6c:ed:75:58:04:ea:ca:3e:f6:b7:23:da:40: 5e:4d:a5:70:40:cf:a8:b3:bb:59:f4:76:1a:be:b3:2e:e9:e3: 79:b2:9b:7b:3e:e1:5c:e3:8e:50:0f:db:21:41:ae:8d:ce:e3: 92:03:7d:a8:9e:1b:b2:61:f8:41:d5:50:2a:38:c7:13:a4:20: 57:ce:26:f4:93:df:a3:48:cc:47:a0:43:93:39:fe:20:3c:8e: a0:8e:57:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAnwlpdxMegSNeIULu48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjZDczOTlmODc0NzBjM2VhNGU0ZGZkNjk3YTk4YWUyYmQw MjZmOWMwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD EygxZjFhOGVkZGE1Nzg2YmE0YzkyYWM1N2UyNzkyNmZmZGUwMmQwYjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VWmgbzQui+JM7vRiPvRRyZYxw4N KTyTVxbuZb0gCAe83rloGxK0hlivik7/rgqXDqMbB7cw3kLMs2hKBwpoWJ34hOpF 4KNqcikgJMsvzjYVUUGJ6hFDIDXF1GfxC38mxrAc9hDXnWI6y8ebDxnooUw+G79/ /bN1V0bHa/F+AfEYUrGVf8wg/K5++NZNPq5vIiBktHImM8xuRg+3NhE6vmH2paob lpflwJYaqk8yhelNzm7p2oEJXO3sbY+wzlcd91zNU24y3s2qKoAy5oRFtoq+Xlfw NGK4Tqvl6dfCFCzNyVjiNXXzaXhENXYjObxRpWmGtOOP1stxGmDEciLn0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8ajt2leGukySrFfieSb/3gLQuTMB8GA1UdIwQY MBaAFPzXOZ+HRww+pOTf1pepiuK9Am+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQt ZGU5MGU5ZTNjYzMyLzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi82ZTg4MTYtNTUyYi00OTk2LTlmYzQtZGU5MGU5ZTNjYzMy LzEvX05jNW40ZEhERDZrNU5fV2w2bUs0cjBDYjV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuPnVjpi 7Lk+dDzJa/2HWdQyOhFtORchLdryb6AkSKDkvfk4X9oxNvxVgfGd94dlpf4Q4I3T 25Lcv0GgJ/bebdxgnHS2qYDffPfegRu0FngViyCvNlFgC5vmpnrserZcmNvaLYmM Jp/eXjgo10/jlgahlmfAJSCxfhDH87MWOhLzoWH3U4cHF0cihkno2JReSTvCST7j U5puBEfmEG28MVP7I36nxlFs7XVYBOrKPva3I9pAXk2lcEDPqLO7WfR2Gr6zLunj ebKbez7hXOOOUA/bIUGujc7jkgN9qJ4bsmH4QdVQKjjHE6QgV84m9JPfo0jMR6BD kzn+IDyOoI5XZg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:32 2025 by rpki-client