This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft File: fG9Mjzo3f0bFUiAJZ4841hVxxso.mft (raw, json) Hash identifier: LTFdcDiqB121w/zGkz/4S6nGwTZ6TfFSE5YXKGsECpY= Subject key identifier: 04:2F:D0:0E:3A:37:04:87:99:C6:64:EC:56:EC:58:EE:C1:C3:18:A1 Authority key identifier: 7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA Certificate issuer: /CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Certificate serial: 019AF465174FB8744552A4FC7E613FC4FF59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft Manifest number: 0BD9 Signing time: Sat 06 Dec 2025 16:00:57 +0000 Manifest this update: Sat 06 Dec 2025 16:00:57 +0000 Manifest next update: Sun 07 Dec 2025 16:00:57 +0000 Files and hashes: 1: B7oKCLtj5wVT7Rx672od7NSTVbM.roa (hash: zBd0U1lEA6sR+ArBNpdCg/lk4ok0wNXK1hGjWgT7oxA=) 2: fG9Mjzo3f0bFUiAJZ4841hVxxso.crl (hash: GXE93SkaV70pQxiguEZa8mLaAUCg1GQ7XwgRqFKiuH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:17:4f:b8:74:45:52:a4:fc:7e:61:3f:c4:ff:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c6f4c8f3a377f46c5522009678f38d61571c6ca Validity Not Before: Dec 6 16:00:57 2025 GMT Not After : Dec 7 16:00:57 2025 GMT Subject: CN=042fd00e3a37048799c664ec56ec58eec1c318a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:71:56:94:69:0d:08:ae:32:01:f5:52:5b:87: 51:51:53:47:cb:cc:6b:37:c6:da:32:a4:6e:b5:28: ac:16:95:b4:0f:ef:05:00:5c:7e:43:93:86:55:d2: 5a:db:7c:a9:4b:96:8c:0c:69:d2:7f:08:51:9c:6b: 15:e8:45:f5:77:7e:93:8f:b6:59:f3:ea:55:82:36: b8:75:6e:38:ea:49:4b:5f:60:87:eb:b9:a4:7d:f8: 19:86:97:21:9a:f0:c1:e5:c6:2e:79:57:f1:2d:75: 2c:89:30:72:7a:b7:54:aa:e3:77:ee:66:06:c9:69: c3:8a:5e:ce:2c:5f:56:78:3d:05:72:02:6f:78:c5: f6:6e:c2:a9:20:15:96:31:44:74:a9:3e:0f:48:1f: 1e:44:e8:7a:11:2b:a0:b9:12:e7:1f:f5:3e:2c:55: cc:a5:da:50:64:81:cc:a5:cf:e4:b4:c8:c2:ab:03: fb:b2:55:b4:9e:6b:bc:9b:29:d2:1a:1c:94:09:22: ff:1e:86:08:ea:df:f0:0d:e0:41:22:ff:3b:ad:c7: ff:83:ab:ef:da:01:d6:30:f1:b2:3b:4f:f5:99:f2: 6f:55:f1:c2:1a:f0:79:97:30:c0:55:27:cf:6d:fb: 80:02:bb:1b:d6:e9:88:d8:d8:38:e6:98:9b:c9:1e: d1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:D0:0E:3A:37:04:87:99:C6:64:EC:56:EC:58:EE:C1:C3:18:A1 X509v3 Authority Key Identifier: keyid:7C:6F:4C:8F:3A:37:7F:46:C5:52:20:09:67:8F:38:D6:15:71:C6:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fG9Mjzo3f0bFUiAJZ4841hVxxso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/5c6c9f-691f-4284-b84d-1d367a5f86d4/1/fG9Mjzo3f0bFUiAJZ4841hVxxso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:73:09:90:5a:9a:7a:22:95:d7:e4:71:71:18:08:ad:90: 8b:0f:71:23:00:4f:70:72:37:36:a0:4e:e9:d2:8e:7e:15:dc: ac:fe:ef:d2:22:29:16:47:3b:cb:9d:07:60:a0:07:6a:54:50: d7:11:11:4a:c9:94:00:96:00:85:c1:5d:bc:40:95:46:21:64: 53:c5:c7:c0:41:ea:45:c8:61:e9:90:d9:59:4d:87:af:68:53: b3:d8:c1:6b:db:e1:9f:a3:d0:0a:2b:8c:a3:b6:5b:70:76:4a: cb:19:1c:7b:6f:d7:f7:64:93:87:1f:03:d9:ea:65:23:96:e0: ae:92:be:56:24:21:55:57:1e:d5:37:47:d8:d2:56:b7:69:05: 37:12:01:74:00:e7:8c:c5:2d:d9:2e:46:e7:4e:4a:b0:07:d8: 2c:11:71:bc:6a:10:12:8d:a8:95:b9:51:a1:87:ed:22:51:9f: 6b:d9:00:35:f1:d0:e3:41:7c:ec:43:90:9f:21:53:8e:7c:f4: 31:9a:f6:fe:f1:cd:48:46:66:a5:2d:88:fc:d6:6f:f0:0b:92: 95:a0:33:57:40:5a:31:55:cf:21:73:4d:ef:d4:e5:77:c3:15: 52:0e:c6:26:ad:23:bd:95:8f:a3:46:c3:67:47:57:d6:10:2a: ce:f1:67:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRdPuHRFUqT8fmE/xP9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNmY0YzhmM2EzNzdmNDZjNTUyMjAwOTY3OGYzOGQ2MTU3 MWM2Y2EwHhcNMjUxMjA2MTYwMDU3WhcNMjUxMjA3MTYwMDU3WjAzMTEwLwYDVQQD EygwNDJmZDAwZTNhMzcwNDg3OTljNjY0ZWM1NmVjNThlZWMxYzMxOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHFWlGkNCK4yAfVSW4dRUVNHy8xr N8baMqRutSisFpW0D+8FAFx+Q5OGVdJa23ypS5aMDGnSfwhRnGsV6EX1d36Tj7ZZ 8+pVgja4dW446klLX2CH67mkffgZhpchmvDB5cYueVfxLXUsiTByerdUquN37mYG yWnDil7OLF9WeD0FcgJveMX2bsKpIBWWMUR0qT4PSB8eROh6ESuguRLnH/U+LFXM pdpQZIHMpc/ktMjCqwP7slW0nmu8mynSGhyUCSL/HoYI6t/wDeBBIv87rcf/g6vv 2gHWMPGyO0/1mfJvVfHCGvB5lzDAVSfPbfuAArsb1umI2Ng45pibyR7RBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQv0A46NwSHmcZk7FbsWO7BwxihMB8GA1UdIwQY MBaAFHxvTI86N39GxVIgCWePONYVccbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQt MWQzNjdhNWY4NmQ0LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81YzZjOWYtNjkxZi00Mjg0LWI4NGQtMWQzNjdhNWY4NmQ0 LzEvZkc5TWp6bzNmMGJGVWlBSlo0ODQxaFZ4eHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkxzCZBa mnoildfkcXEYCK2Qiw9xIwBPcHI3NqBO6dKOfhXcrP7v0iIpFkc7y50HYKAHalRQ 1xERSsmUAJYAhcFdvECVRiFkU8XHwEHqRchh6ZDZWU2Hr2hTs9jBa9vhn6PQCiuM o7ZbcHZKyxkce2/X92SThx8D2eplI5bgrpK+ViQhVVce1TdH2NJWt2kFNxIBdADn jMUt2S5G505KsAfYLBFxvGoQEo2olblRoYftIlGfa9kANfHQ40F87EOQnyFTjnz0 MZr2/vHNSEZmpS2I/NZv8AuSlaAzV0BaMVXPIXNN79Tld8MVUg7GJq0jvZWPo0bD Z0dX1hAqzvFnSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:37 2025 by rpki-client