This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft File: fNFi3seCCbwDrdCBUn1Usn6E0m4.mft (raw, json) Hash identifier: AVYcZ5iqaWrbfMcJWTZF6NQVo48NX4JRezJkqfyKidM= Subject key identifier: 48:3D:61:57:CF:7F:55:5A:45:0F:47:68:A9:F9:85:27:C2:13:9A:0C Authority key identifier: 7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E Certificate issuer: /CN=7cd162dec78209bc03add081527d54b27e84d26e Certificate serial: 019AF3F79C7A73B9C82E6D59AF91ABF69FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 14:01:22 +0000 Manifest this update: Sat 06 Dec 2025 14:01:22 +0000 Manifest next update: Sun 07 Dec 2025 14:01:22 +0000 Files and hashes: 1: fNFi3seCCbwDrdCBUn1Usn6E0m4.crl (hash: mzgTMIPLJQvgWMV8P0otOyWpoG41g5HFJQ5rtN37GI4=) 2: p62St_0MRIeBUvHxqOmIuKO2S0g.roa (hash: V3Cr5hnF6tOsq5Vm2VEjfSqOP5RKmdhFpUZAhs7o/b4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:9c:7a:73:b9:c8:2e:6d:59:af:91:ab:f6:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd162dec78209bc03add081527d54b27e84d26e Validity Not Before: Dec 6 14:01:22 2025 GMT Not After : Dec 7 14:01:22 2025 GMT Subject: CN=483d6157cf7f555a450f4768a9f98527c2139a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:bd:89:1c:e2:01:53:c6:18:2e:38:d4:6f: 9e:a1:b2:29:37:34:74:e6:39:7e:d2:ac:f8:15:2e: 5c:3d:2d:7f:e8:0f:77:cb:2b:a8:6d:b3:ec:6b:b2: 1e:f7:f8:a1:32:ac:b0:38:52:4d:1e:e2:45:25:85: 56:d1:3a:f5:60:7b:6c:1e:16:0a:02:40:36:46:fb: f4:04:48:41:4f:e5:cf:c1:df:a3:6d:32:a6:26:a0: e3:e3:25:d6:1a:2e:da:48:de:e6:4c:5d:0d:8c:68: 17:8a:4d:8a:fd:33:e8:35:eb:08:28:3d:1a:c9:38: 31:86:02:c0:7f:82:b3:ab:8c:49:ea:9b:50:38:99: 01:e6:08:7c:10:96:7e:18:63:df:79:07:14:a7:2e: 2f:3e:08:ff:79:ec:8b:1b:51:ea:c2:9a:bf:6b:d6: 53:17:76:4f:bd:33:e7:85:87:ba:02:52:c3:38:9d: a3:88:3d:98:45:ad:97:ca:b3:c3:ff:55:3e:31:cc: b3:d6:e9:f8:2c:b2:de:9a:13:ac:4f:6b:0c:9e:bf: 9a:5f:8e:82:bc:0d:b5:9f:62:7a:b7:7e:36:64:19: ac:4b:8a:4c:ca:c3:56:9a:2f:25:d4:54:37:d5:f9: 90:c7:bf:0d:58:93:53:39:13:17:8a:56:34:e5:01: c7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3D:61:57:CF:7F:55:5A:45:0F:47:68:A9:F9:85:27:C2:13:9A:0C X509v3 Authority Key Identifier: keyid:7C:D1:62:DE:C7:82:09:BC:03:AD:D0:81:52:7D:54:B2:7E:84:D2:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNFi3seCCbwDrdCBUn1Usn6E0m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/031100-458a-474e-927c-df027916ce50/1/fNFi3seCCbwDrdCBUn1Usn6E0m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:af:c3:f8:4f:a9:31:15:95:f5:7e:83:32:40:58:f9:92:0a: 8f:bc:13:59:29:c4:fe:b3:92:f0:1e:8a:df:39:a2:85:88:4f: 52:76:ad:f7:36:da:c9:f2:53:8a:9d:a8:6a:89:48:9e:fb:5a: a4:e0:b4:f6:80:a7:ec:e4:a3:0e:db:a6:b6:58:49:7c:a1:8b: 55:ab:1d:0b:ad:79:d0:53:ea:e9:99:9e:ea:d4:83:e0:54:36: ad:a3:4b:b6:bd:66:86:48:95:6d:25:32:36:d7:62:46:a6:73: 5d:45:8d:4d:1a:a5:2b:1e:08:38:14:fe:bd:21:69:c8:eb:41: be:cb:b0:80:c8:28:53:46:c9:28:d8:e7:8b:7a:37:53:80:8c: cc:5e:9f:03:93:63:b4:56:0d:60:fb:78:f1:a3:76:ff:ba:14: c4:60:cd:58:90:5b:3a:9b:48:3e:77:f2:4b:fa:ee:4e:4a:9f: d0:e3:71:3b:a4:e8:74:c7:b7:61:5e:b5:fb:47:0b:d4:34:48: ae:65:30:af:72:e4:19:d0:75:e9:fe:db:e2:9a:80:57:55:0d: a5:43:21:d9:b8:ea:af:dd:c5:13:8e:52:2f:65:df:cd:cb:8a: 4a:e1:da:13:36:98:81:94:46:46:ec:89:9e:33:53:5b:8f:f3: 24:43:da:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95x6c7nILm1Zr5Gr9p/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDE2MmRlYzc4MjA5YmMwM2FkZDA4MTUyN2Q1NGIyN2U4 NGQyNmUwHhcNMjUxMjA2MTQwMTIyWhcNMjUxMjA3MTQwMTIyWjAzMTEwLwYDVQQD Eyg0ODNkNjE1N2NmN2Y1NTVhNDUwZjQ3NjhhOWY5ODUyN2MyMTM5YTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sq9iRziAVPGGC441G+eobIpNzR0 5jl+0qz4FS5cPS1/6A93yyuobbPsa7Ie9/ihMqywOFJNHuJFJYVW0Tr1YHtsHhYK AkA2Rvv0BEhBT+XPwd+jbTKmJqDj4yXWGi7aSN7mTF0NjGgXik2K/TPoNesIKD0a yTgxhgLAf4Kzq4xJ6ptQOJkB5gh8EJZ+GGPfeQcUpy4vPgj/eeyLG1Hqwpq/a9ZT F3ZPvTPnhYe6AlLDOJ2jiD2YRa2XyrPD/1U+Mcyz1un4LLLemhOsT2sMnr+aX46C vA21n2J6t342ZBmsS4pMysNWmi8l1FQ31fmQx78NWJNTORMXilY05QHHOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg9YVfPf1VaRQ9HaKn5hSfCE5oMMB8GA1UdIwQY MBaAFHzRYt7Hggm8A63QgVJ9VLJ+hNJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2Mt ZGYwMjc5MTZjZTUwLzEvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8wMzExMDAtNDU4YS00NzRlLTkyN2MtZGYwMjc5MTZjZTUw LzEvZk5GaTNzZUNDYndEcmRDQlVuMVVzbjZFMG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdK/D+E+p MRWV9X6DMkBY+ZIKj7wTWSnE/rOS8B6K3zmihYhPUnat9zbayfJTip2oaolInvta pOC09oCn7OSjDtumtlhJfKGLVasdC6150FPq6Zme6tSD4FQ2raNLtr1mhkiVbSUy NtdiRqZzXUWNTRqlKx4IOBT+vSFpyOtBvsuwgMgoU0bJKNjni3o3U4CMzF6fA5Nj tFYNYPt48aN2/7oUxGDNWJBbOptIPnfyS/ruTkqf0ONxO6TodMe3YV61+0cL1DRI rmUwr3LkGdB16f7b4pqAV1UNpUMh2bjqr93FE45SL2XfzcuKSuHaEzaYgZRGRuyJ njNTW4/zJEPaKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:26 2025 by rpki-client