This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft File: fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft (raw, json) Hash identifier: hs8O5SO5GnT+aJ0HbuIs/2KrMGw32OY/EAd8xb9WkKY= Subject key identifier: AF:1E:C3:8A:57:8B:BE:E6:99:AE:32:18:69:F5:6E:5C:5D:59:D9:91 Authority key identifier: 7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD Certificate issuer: /CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Certificate serial: 019AF19A9DB283573EEE156C553FB517FEEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl (hash: UZG3Gkted2F9m0O/58Fs/9G7PI+fPpz8quelVcvy14U=) 2: ri0q77CsDD0bTPaXxk_jRAdQRhY.roa (hash: 4DUjc0lydMIPXrmRym+WpRLgbblgRfFg3jdmltIqOW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9d:b2:83:57:3e:ee:15:6c:55:3f:b5:17:fe:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e750d6fcb8a40cd661cf73d1acabd8305e877fd Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=af1ec38a578bbee699ae321869f56e5c5d59d991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:02:0d:20:a4:02:60:f6:aa:72:53:65:4e:ef: fc:ab:39:41:80:4d:cf:bb:77:95:f3:e0:ba:4f:ce: 8b:38:d5:dc:dc:93:95:6c:c3:72:51:8d:81:19:e5: db:4c:96:c0:46:64:6e:9c:30:8c:91:27:b5:88:ec: 95:50:8f:5c:4b:89:3d:ab:67:73:ef:30:6b:a2:9a: 4e:d3:71:b0:e7:f8:8f:08:0c:a7:f6:5f:ba:7e:33: 14:da:a5:3f:09:04:fc:b9:01:cc:4d:e9:32:06:6c: 92:cb:2b:ff:b9:88:76:a6:f4:39:04:4d:a1:80:70: 6f:65:3c:9f:33:d3:2d:d7:51:36:79:8d:25:14:95: c1:7b:10:4b:91:97:15:f4:a0:f7:fe:2d:c7:a4:2d: 3a:cc:31:e0:04:38:04:e7:3e:82:45:2d:28:48:42: 40:e2:93:10:ac:22:c1:e3:9e:32:11:d1:6f:6f:7f: b0:df:24:fd:a5:0b:b3:62:11:e4:85:d0:8e:c4:3a: 1a:15:7c:0f:d2:66:7c:ff:47:a7:47:50:00:5d:f2: 9a:10:cd:7a:4f:67:84:bd:ec:7d:26:7e:51:0d:5f: 12:2d:f0:e7:95:85:76:c7:f2:5a:5f:3a:28:f4:29: d4:b2:a3:a5:f9:09:f6:44:4a:c3:5e:3f:75:a3:e7: 4c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:1E:C3:8A:57:8B:BE:E6:99:AE:32:18:69:F5:6E:5C:5D:59:D9:91 X509v3 Authority Key Identifier: keyid:7E:75:0D:6F:CB:8A:40:CD:66:1C:F7:3D:1A:CA:BD:83:05:E8:77:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnUNb8uKQM1mHPc9Gsq9gwXod_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ce012-33ea-4b6e-9065-a2c4c231ddf7/1/fnUNb8uKQM1mHPc9Gsq9gwXod_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:25:99:df:64:d4:f6:54:30:14:40:ac:89:d8:0d:7b:08:96: d1:c1:ea:1c:12:2a:3b:d8:dc:93:9d:d5:04:62:c2:a4:0c:84: ea:6d:b5:9e:38:34:f7:4b:1c:31:f9:db:49:2e:4a:26:86:fe: ea:3a:79:01:b9:96:eb:5f:5b:5f:7a:90:15:9d:a9:d2:eb:97: d7:4a:c1:32:1a:12:ae:1a:36:a8:7c:40:cf:8e:7c:70:b7:62: a8:d2:82:92:c8:3c:3b:2b:28:34:a5:93:7b:52:a3:ed:22:28: 82:93:ec:4e:30:fa:37:7b:4a:e7:ad:12:b9:0b:a4:87:89:51: eb:5b:5d:a3:ad:63:03:07:19:5d:a8:ca:aa:ea:b2:51:43:cb: d4:eb:69:83:64:68:5e:ed:1b:98:96:45:f2:fd:5d:e8:c4:97: 8c:92:d3:80:62:d3:5e:83:2a:d2:9a:12:20:fb:14:c0:2c:18: 9f:5b:48:bb:12:33:79:b9:3c:1b:11:1e:c5:ee:29:09:19:1b: 3e:db:a4:62:06:ac:54:74:5d:b0:05:28:04:ba:81:31:ad:62: 49:c2:51:b4:16:46:21:d2:b2:05:b9:51:3c:b3:cb:71:ac:60: c1:3e:95:3e:5c:70:57:86:c1:e4:1b:d7:04:d5:26:d9:6e:95: a4:64:0a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmp2yg1c+7hVsVT+1F/7rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNzUwZDZmY2I4YTQwY2Q2NjFjZjczZDFhY2FiZDgzMDVl ODc3ZmQwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhhZjFlYzM4YTU3OGJiZWU2OTlhZTMyMTg2OWY1NmU1YzVkNTlkOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAINIKQCYPaqclNlTu/8qzlBgE3P u3eV8+C6T86LONXc3JOVbMNyUY2BGeXbTJbARmRunDCMkSe1iOyVUI9cS4k9q2dz 7zBroppO03Gw5/iPCAyn9l+6fjMU2qU/CQT8uQHMTekyBmySyyv/uYh2pvQ5BE2h gHBvZTyfM9Mt11E2eY0lFJXBexBLkZcV9KD3/i3HpC06zDHgBDgE5z6CRS0oSEJA 4pMQrCLB454yEdFvb3+w3yT9pQuzYhHkhdCOxDoaFXwP0mZ8/0enR1AAXfKaEM16 T2eEvex9Jn5RDV8SLfDnlYV2x/JaXzoo9CnUsqOl+Qn2RErDXj91o+dMDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8ew4pXi77mma4yGGn1blxdWdmRMB8GA1UdIwQY MBaAFH51DW/LikDNZhz3PRrKvYMF6Hf9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUt YTJjNGMyMzFkZGY3LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS80Y2UwMTItMzNlYS00YjZlLTkwNjUtYTJjNGMyMzFkZGY3 LzEvZm5VTmI4dUtRTTFtSFBjOUdzcTlnd1hvZF8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwSWZ32TU 9lQwFECsidgNewiW0cHqHBIqO9jck53VBGLCpAyE6m21njg090scMfnbSS5KJob+ 6jp5AbmW619bX3qQFZ2p0uuX10rBMhoSrho2qHxAz458cLdiqNKCksg8OysoNKWT e1Kj7SIogpPsTjD6N3tK560SuQukh4lR61tdo61jAwcZXajKquqyUUPL1Otpg2Ro Xu0bmJZF8v1d6MSXjJLTgGLTXoMq0poSIPsUwCwYn1tIuxIzebk8GxEexe4pCRkb PtukYgasVHRdsAUoBLqBMa1iScJRtBZGIdKyBblRPLPLcaxgwT6VPlxwV4bB5BvX BNUm2W6VpGQK5A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:26 2025 by rpki-client