This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft File: _cNlqvvg5FoE3RXpwjESHp6uqPI.mft (raw, json) Hash identifier: B1r7QfwFf/+KEtWXuFduxit33WVT1QVrvlbAdaOjP9c= Subject key identifier: 55:18:28:5E:27:5A:C8:CC:E4:90:BF:B9:D0:5F:E9:68:3F:57:45:9C Authority key identifier: FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 Certificate issuer: /CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Certificate serial: 019AF577F86EE71302599E4E668C452911A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft Manifest number: 0AAB Signing time: Sat 06 Dec 2025 21:01:11 +0000 Manifest this update: Sat 06 Dec 2025 21:01:11 +0000 Manifest next update: Sun 07 Dec 2025 21:01:11 +0000 Files and hashes: 1: WkM1k4qAimxGoAXfYc3XtjG5aS4.roa (hash: JEjZGh4dEBWAy5uvNyzYoFAxp8bWgzv1444j2h2JEVg=) 2: _cNlqvvg5FoE3RXpwjESHp6uqPI.crl (hash: U1QOr7yuP8Bf2MNHOSolpFXGqjsWn+ezspIYUJ9rUno=) 3: jqc-CSQwW-qQ7TAEXOV-0DlhyHo.roa (hash: 2Wow4x7KtU4iQlp8s7jxmW893ftKcMCmze/PFHE6hj8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:f8:6e:e7:13:02:59:9e:4e:66:8c:45:29:11:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc365aafbe0e45a04dd15e9c231121e9eaea8f2 Validity Not Before: Dec 6 21:01:11 2025 GMT Not After : Dec 7 21:01:11 2025 GMT Subject: CN=5518285e275ac8cce490bfb9d05fe9683f57459c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:19:48:be:ee:64:9e:b1:ba:32:f9:ed:85: d3:25:42:15:f8:f8:a8:9d:03:54:38:a7:a1:09:8d: 92:68:6c:af:d3:81:62:1c:bd:7e:9a:a1:f0:54:e5: 34:bc:6a:62:f2:52:cc:74:30:83:00:ca:46:87:25: c1:69:5c:e9:80:6a:e7:0e:55:a3:bb:d3:60:e1:17: d9:fe:b7:b8:d9:db:3e:be:36:1a:23:63:5c:ee:62: 98:76:b4:96:5c:10:ed:78:2b:41:3f:64:0b:93:c9: ff:b6:1f:17:3a:cc:a6:db:59:9a:30:08:95:e1:cb: 6d:8c:e6:1a:e2:c0:16:6f:f2:6b:38:ca:14:72:36: de:a4:66:8c:a6:9f:97:e8:41:67:5e:2e:20:29:76: 26:ca:79:aa:5c:4f:df:01:e9:0c:0e:70:38:e6:5e: 16:a5:65:ac:34:80:3e:d8:dc:95:6a:b7:3e:0f:dc: 6c:e1:6e:02:8f:0e:ac:87:60:8f:ed:bf:7f:da:47: a7:75:ce:f1:b3:70:cf:f3:15:a3:fd:da:2e:c9:d4: 8d:a6:fc:dd:4b:dd:89:f1:6c:fd:bf:97:61:35:82: 4e:ba:38:e2:b0:0d:b9:a4:0d:37:23:88:3d:f3:59: e7:a6:94:48:9f:e6:5e:12:b7:0a:a0:89:48:1c:31: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:18:28:5E:27:5A:C8:CC:E4:90:BF:B9:D0:5F:E9:68:3F:57:45:9C X509v3 Authority Key Identifier: keyid:FD:C3:65:AA:FB:E0:E4:5A:04:DD:15:E9:C2:31:12:1E:9E:AE:A8:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cNlqvvg5FoE3RXpwjESHp6uqPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/50b082-43c9-4b50-904c-abde7a65e04a/1/_cNlqvvg5FoE3RXpwjESHp6uqPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ed:1a:bf:ef:da:4d:e1:c7:26:70:c7:a3:51:16:6f:9a:dc: f4:c8:8f:4f:93:42:8b:51:5b:af:13:22:13:e2:74:67:95:70: b2:a9:4c:1f:a8:49:30:5c:08:fa:e8:e7:6d:99:20:94:6b:a4: 06:38:d7:3d:33:92:3a:24:03:6f:2d:48:cc:38:98:16:50:13: f1:94:31:28:69:b1:25:39:9e:cc:ca:d3:30:ed:82:62:ad:ec: 55:45:26:03:76:6a:09:c6:bd:e7:56:69:cc:8b:50:19:39:c3: 77:02:a8:f9:7a:93:bf:40:c9:c2:1c:ee:14:a6:7c:61:83:f9: c9:0b:50:40:c9:59:e9:c5:b2:bf:2b:f5:0a:91:79:ca:20:87: 66:35:8b:df:96:a8:17:a6:62:00:20:9e:b4:80:b3:1f:cf:49: 7f:bb:ff:d0:c7:b1:5c:9f:ef:dc:ef:fd:6c:ae:22:d0:c5:e1: 88:62:6d:fc:e7:e5:6b:e0:01:49:a5:d6:ee:0d:40:6e:83:99: 70:62:bf:8d:97:a9:14:d5:b8:c3:1a:9b:0a:c6:10:32:45:2b: 27:6c:4f:a7:0e:a3:ab:0a:b8:bb:55:a7:0d:bf:28:88:3e:e6: 29:62:e6:b4:9b:5a:53:c3:9f:da:f7:88:03:0b:e6:83:37:b4: b3:c6:e7:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d/hu5xMCWZ5OZoxFKRGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzM2NWFhZmJlMGU0NWEwNGRkMTVlOWMyMzExMjFlOWVh ZWE4ZjIwHhcNMjUxMjA2MjEwMTExWhcNMjUxMjA3MjEwMTExWjAzMTEwLwYDVQQD Eyg1NTE4Mjg1ZTI3NWFjOGNjZTQ5MGJmYjlkMDVmZTk2ODNmNTc0NTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp8ZSL7uZJ6xujL57YXTJUIV+Pio nQNUOKehCY2SaGyv04FiHL1+mqHwVOU0vGpi8lLMdDCDAMpGhyXBaVzpgGrnDlWj u9Ng4RfZ/re42ds+vjYaI2Nc7mKYdrSWXBDteCtBP2QLk8n/th8XOsym21maMAiV 4cttjOYa4sAWb/JrOMoUcjbepGaMpp+X6EFnXi4gKXYmynmqXE/fAekMDnA45l4W pWWsNIA+2NyVarc+D9xs4W4Cjw6sh2CP7b9/2kendc7xs3DP8xWj/douydSNpvzd S92J8Wz9v5dhNYJOujjisA25pA03I4g981nnppRIn+ZeErcKoIlIHDGlSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUYKF4nWsjM5JC/udBf6Wg/V0WcMB8GA1UdIwQY MBaAFP3DZar74ORaBN0V6cIxEh6erqjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMt YWJkZTdhNjVlMDRhLzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MGIwODItNDNjOS00YjUwLTkwNGMtYWJkZTdhNjVlMDRh LzEvX2NObHF2dmc1Rm9FM1JYcHdqRVNIcDZ1cVBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAO0av+/a TeHHJnDHo1EWb5rc9MiPT5NCi1FbrxMiE+J0Z5VwsqlMH6hJMFwI+ujnbZkglGuk BjjXPTOSOiQDby1IzDiYFlAT8ZQxKGmxJTmezMrTMO2CYq3sVUUmA3ZqCca951Zp zItQGTnDdwKo+XqTv0DJwhzuFKZ8YYP5yQtQQMlZ6cWyvyv1CpF5yiCHZjWL35ao F6ZiACCetICzH89Jf7v/0MexXJ/v3O/9bK4i0MXhiGJt/Ofla+ABSaXW7g1AboOZ cGK/jZepFNW4wxqbCsYQMkUrJ2xPpw6jqwq4u1WnDb8oiD7mKWLmtJtaU8Of2veI Awvmgze0s8bnOg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:57:11 2025 by rpki-client