This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json) Hash identifier: 8k+djBWfCILF2a2TMW+KkgokNFxxgEYJUGQQZ5+0KbE= Subject key identifier: FC:C6:3E:5B:72:48:8D:65:55:C3:F3:35:A8:3E:64:12:B8:57:2F:62 Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de Certificate serial: 019B2F9EC9D94FFE9F86E522B2FBAC745F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft Manifest number: 0D85 Signing time: Thu 18 Dec 2025 04:01:33 +0000 Manifest this update: Thu 18 Dec 2025 04:01:33 +0000 Manifest next update: Fri 19 Dec 2025 04:01:33 +0000 Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=) 2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: GCMq0KNCA5iSY6MfiZIOioBe6cEOQbMt8fG4QKoKpMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:c9:d9:4f:fe:9f:86:e5:22:b2:fb:ac:74:5f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de Validity Not Before: Dec 18 04:01:33 2025 GMT Not After : Dec 19 04:01:33 2025 GMT Subject: CN=fcc63e5b72488d6555c3f335a83e6412b8572f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:16:c5:08:2f:d7:db:97:b2:9b:d3:19:14:33: 0e:6d:68:07:21:fc:c1:1f:4f:82:50:24:e8:a0:6e: b5:3d:8e:f8:10:7b:af:e2:82:03:8c:d3:fb:5b:e4: 5d:74:21:b5:f0:25:05:3d:00:84:77:1a:d3:d5:ef: 15:85:d6:9a:ad:46:54:41:be:df:23:e2:ee:2c:34: 92:c0:2d:aa:5c:b4:87:d4:cf:65:90:1b:d9:af:77: b9:0d:a1:6d:2c:ad:7e:42:46:6e:72:f1:15:fc:61: d7:5c:27:2c:92:dc:3e:a4:3a:96:f3:3a:ea:24:20: 4c:71:23:4f:79:c4:6c:78:22:10:bb:5c:52:93:9c: 81:c4:a0:78:ca:ec:8c:94:89:30:5d:ac:59:43:7d: e1:5d:47:5e:89:90:5c:ed:4b:8d:75:94:97:47:fc: 5d:49:02:b9:7b:b1:a1:c7:86:da:c6:e0:1b:83:39: 47:93:71:50:fd:e2:7d:43:20:a6:aa:65:2e:ad:c6: 08:33:ec:ad:a6:29:27:a9:56:0c:39:59:d9:97:06: 6c:2c:42:de:cb:17:07:72:20:b1:ed:d5:d4:5c:2e: 9c:eb:92:46:23:1d:cc:e6:56:f9:a5:e5:82:7e:f1: 33:cb:a8:10:d1:c2:c6:40:66:6d:de:03:03:d8:e7: 01:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C6:3E:5B:72:48:8D:65:55:C3:F3:35:A8:3E:64:12:B8:57:2F:62 X509v3 Authority Key Identifier: keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:58:8a:6f:27:29:c8:60:34:13:f5:17:2b:30:86:a8:49:dd: 14:d4:75:c0:d0:b6:8a:1c:f7:2c:d1:56:c2:e1:5a:71:87:b8: dc:8c:9c:4d:b0:42:fd:62:41:cb:c9:ea:20:20:53:6a:d8:d8: ff:29:ae:76:16:21:cf:f9:66:93:3a:39:c2:04:d6:e7:b3:25: 4e:6e:e5:e1:30:17:58:42:e9:d7:64:e1:09:7e:54:bb:05:05: c0:db:03:45:ec:d3:f7:db:1f:f4:91:33:b1:f6:4b:b4:c6:9b: cc:37:74:4b:82:d9:bf:0e:d1:c3:75:5e:6b:26:68:4d:ae:a0: 36:83:e7:03:17:e1:5e:6e:2c:36:e7:8c:cd:a8:a8:59:65:08: ae:2f:8e:6f:91:05:32:d9:e8:33:92:cd:0a:1f:92:ba:4e:16: d9:44:63:0e:7d:35:bc:0a:53:ff:29:a0:dd:5c:d0:7d:1d:a0: cc:d5:2f:e7:8b:73:00:82:49:2b:20:1c:6d:c4:05:9e:bd:a3: 53:df:e4:ca:30:ba:9a:04:18:01:b7:55:68:d0:e9:af:2c:a7: dc:2b:e4:7d:6f:67:8b:e1:1d:13:dd:b0:3b:0d:05:e3:d7:c6: 8e:7a:29:1f:fc:dd:d1:33:71:c8:2b:7d:dd:d5:5b:61:84:1b: 35:48:6b:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnsnZT/6fhuUisvusdF8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0 N2U1ZGUwHhcNMjUxMjE4MDQwMTMzWhcNMjUxMjE5MDQwMTMzWjAzMTEwLwYDVQQD EyhmY2M2M2U1YjcyNDg4ZDY1NTVjM2YzMzVhODNlNjQxMmI4NTcyZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBbFCC/X25eym9MZFDMObWgHIfzB H0+CUCTooG61PY74EHuv4oIDjNP7W+RddCG18CUFPQCEdxrT1e8VhdaarUZUQb7f I+LuLDSSwC2qXLSH1M9lkBvZr3e5DaFtLK1+QkZucvEV/GHXXCcsktw+pDqW8zrq JCBMcSNPecRseCIQu1xSk5yBxKB4yuyMlIkwXaxZQ33hXUdeiZBc7UuNdZSXR/xd SQK5e7Ghx4baxuAbgzlHk3FQ/eJ9QyCmqmUurcYIM+ytpiknqVYMOVnZlwZsLELe yxcHciCx7dXUXC6c65JGIx3M5lb5peWCfvEzy6gQ0cLGQGZt3gMD2OcB/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzGPltySI1lVcPzNag+ZBK4Vy9iMB8GA1UdIwQY MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt NmE4MzU2M2I2NTViLzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABliKbycp yGA0E/UXKzCGqEndFNR1wNC2ihz3LNFWwuFacYe43IycTbBC/WJBy8nqICBTatjY /ymudhYhz/lmkzo5wgTW57MlTm7l4TAXWELp12ThCX5UuwUFwNsDRezT99sf9JEz sfZLtMabzDd0S4LZvw7Rw3VeayZoTa6gNoPnAxfhXm4sNueMzaioWWUIri+Ob5EF MtnoM5LNCh+Suk4W2URjDn01vApT/ymg3VzQfR2gzNUv54tzAIJJKyAcbcQFnr2j U9/kyjC6mgQYAbdVaNDpryyn3CvkfW9ni+EdE92wOw0F49fGjnopH/zd0TNxyCt9 3dVbYYQbNUhreg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:57:49 2025 by rpki-client