This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json) Hash identifier: yr0XCC7kjBP25wgk3DXehH7L04zt9+XJlee2i0m5IcQ= Subject key identifier: 13:EE:E4:6E:1F:F4:C3:7C:F3:7D:6D:5A:3D:67:27:FD:A4:6D:DE:30 Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Certificate serial: 019AF352BE2D90B6B65ACBE73A68E7D9F1B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft Manifest number: 0B4A Signing time: Sat 06 Dec 2025 11:01:17 +0000 Manifest this update: Sat 06 Dec 2025 11:01:17 +0000 Manifest next update: Sun 07 Dec 2025 11:01:17 +0000 Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: IFykYuLxmutpMyNFlBMpTpnLueLUGZiUbkPtplL0M+0=) 2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:be:2d:90:b6:b6:5a:cb:e7:3a:68:e7:d9:f1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e Validity Not Before: Dec 6 11:01:17 2025 GMT Not After : Dec 7 11:01:17 2025 GMT Subject: CN=13eee46e1ff4c37cf37d6d5a3d6727fda46dde30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:15:e3:40:6d:ca:a5:10:43:51:6d:57:12: ab:18:ee:01:cf:cb:32:f0:09:21:d1:a0:63:3d:79: cd:2a:f7:06:20:dd:ab:c1:d9:70:0c:42:cd:64:2c: 22:10:28:a6:cd:9c:02:b7:d5:88:06:14:8a:65:13: 31:10:80:4e:f6:4b:26:0d:27:53:72:31:9d:e4:64: de:3f:66:75:f3:02:9a:96:24:92:13:a2:19:3c:81: 6f:ee:be:1a:c5:94:6b:19:73:f6:b7:43:57:0a:f1: a9:91:09:b3:a5:0f:25:cb:8d:28:6b:03:60:41:cf: fe:2c:4a:c5:26:10:98:f0:c2:ae:ae:c4:49:7d:ed: 77:30:44:2a:88:db:4d:64:b1:94:9c:80:0d:5e:24: 15:7e:6c:c3:94:0e:f4:2a:fc:a0:47:37:84:a6:98: d3:77:5e:65:fc:95:69:13:4e:68:86:57:a4:69:f1: 17:3b:ae:fa:82:09:cf:da:b4:84:c4:bb:92:2c:bb: 3f:82:3d:9e:ec:72:4f:46:7f:4d:a7:57:6e:73:33: 34:53:f3:6f:96:19:52:37:e8:c9:56:a9:48:ae:3c: 0e:e2:58:83:60:5c:67:0a:37:e0:6f:4b:b0:d5:d5: f3:23:6f:44:44:fe:4a:cc:ca:75:ae:17:b1:f6:18: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:E4:6E:1F:F4:C3:7C:F3:7D:6D:5A:3D:67:27:FD:A4:6D:DE:30 X509v3 Authority Key Identifier: keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8c:e3:20:15:53:ab:03:9e:67:a5:d6:e2:eb:75:cf:50:dc: eb:d8:41:65:35:2d:16:e4:31:bb:1f:a1:7c:6d:b9:a3:a3:3a: 80:fc:16:b1:d1:58:9d:2c:b5:a1:12:a1:3b:25:b5:22:ac:c8: e6:fb:a0:ca:60:16:47:34:fd:79:ae:37:6e:7e:d7:98:36:f8: 90:a3:c7:be:3b:a2:5d:a6:e7:12:af:53:f2:f8:c7:9f:05:c5: 2b:76:e6:46:c6:71:1e:27:a8:c8:4e:50:48:a8:0e:97:cb:65: 3d:d3:66:89:b7:db:ee:80:86:7d:a2:df:60:d5:85:ac:79:bf: 97:fa:e4:18:f4:de:9f:2d:1d:f0:8e:71:65:2f:f6:18:55:50: 0a:b8:ef:c4:80:c8:a4:cd:5b:2b:74:e5:d9:35:8f:02:ed:9a: 51:de:df:eb:ca:48:ad:fc:cc:c2:d3:21:4a:b8:e1:84:43:fd: 58:04:cc:5d:3e:ad:31:16:72:32:48:85:d5:a6:00:f3:ad:7e: 98:55:1e:b8:2b:ff:10:97:2a:55:82:29:2f:ca:7a:ae:02:19: 25:7e:8b:62:f9:75:c4:7a:42:b6:03:8e:22:5d:7f:06:23:1b: 3b:1f:69:40:30:85:0c:94:e1:f7:c3:ea:3e:29:54:f3:79:a7: a6:9d:cc:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUr4tkLa2WsvnOmjn2fGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzFmMjVjYTU3ZjMzZmQ4NGQyNjY2MGU4MjMwNTg1NmQ0 ZmY1NGUwHhcNMjUxMjA2MTEwMTE3WhcNMjUxMjA3MTEwMTE3WjAzMTEwLwYDVQQD EygxM2VlZTQ2ZTFmZjRjMzdjZjM3ZDZkNWEzZDY3MjdmZGE0NmRkZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpQV40BtyqUQQ1FtVxKrGO4Bz8sy 8Akh0aBjPXnNKvcGIN2rwdlwDELNZCwiECimzZwCt9WIBhSKZRMxEIBO9ksmDSdT cjGd5GTeP2Z18wKaliSSE6IZPIFv7r4axZRrGXP2t0NXCvGpkQmzpQ8ly40oawNg Qc/+LErFJhCY8MKursRJfe13MEQqiNtNZLGUnIANXiQVfmzDlA70KvygRzeEppjT d15l/JVpE05ohlekafEXO676ggnP2rSExLuSLLs/gj2e7HJPRn9Np1duczM0U/Nv lhlSN+jJVqlIrjwO4liDYFxnCjfgb0uw1dXzI29ERP5KzMp1rhex9hjV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPu5G4f9MN8831tWj1nJ/2kbd4wMB8GA1UdIwQY MBaAFP3B8lylfzP9hNJmYOgjBYVtT/VOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQt MDBhMGEzMjhiYjczLzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQtMDBhMGEzMjhiYjcz LzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4zjIBVT qwOeZ6XW4ut1z1Dc69hBZTUtFuQxux+hfG25o6M6gPwWsdFYnSy1oRKhOyW1IqzI 5vugymAWRzT9ea43bn7XmDb4kKPHvjuiXabnEq9T8vjHnwXFK3bmRsZxHieoyE5Q SKgOl8tlPdNmibfb7oCGfaLfYNWFrHm/l/rkGPTeny0d8I5xZS/2GFVQCrjvxIDI pM1bK3Tl2TWPAu2aUd7f68pIrfzMwtMhSrjhhEP9WATMXT6tMRZyMkiF1aYA861+ mFUeuCv/EJcqVYIpL8p6rgIZJX6LYvl1xHpCtgOOIl1/BiMbOx9pQDCFDJTh98Pq PilU83mnpp3Mqw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:52 2025 by rpki-client