This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json) Hash identifier: r4A2sWlVNJ2pHDWFfXHjJtzrsuUYq1Y8eS5jWjnC6FE= Subject key identifier: 1A:8E:D5:F4:CB:E0:D7:0A:1F:7C:E5:4E:83:1C:AC:F4:FE:A5:17:53 Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e Certificate serial: 019AF42DC74C7B1E0D30C35A6A1A05D0168C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft Manifest number: 12EA Signing time: Sat 06 Dec 2025 15:00:31 +0000 Manifest this update: Sat 06 Dec 2025 15:00:31 +0000 Manifest next update: Sun 07 Dec 2025 15:00:31 +0000 Files and hashes: 1: CrYUOPAFPEtuHkKyJhzQE8UrUoM.roa (hash: 9NqhKYyaxDuqPrOUEVd5P1RqZQxAPP5YeCq0DGdnu/4=) 2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: D+9dOhsCWmPQwRwH4sa00mNpwBl4uQo8Oow7jGT/TJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:c7:4c:7b:1e:0d:30:c3:5a:6a:1a:05:d0:16:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e Validity Not Before: Dec 6 15:00:31 2025 GMT Not After : Dec 7 15:00:31 2025 GMT Subject: CN=1a8ed5f4cbe0d70a1f7ce54e831cacf4fea51753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:af:27:8a:9c:ab:13:bd:19:57:82:be:0f:ca: ac:50:1c:a5:5a:fb:3f:6c:43:34:45:50:f4:98:9c: a2:8f:8e:ee:8d:60:0b:85:cc:58:85:c4:cb:53:f1: 88:ed:2a:00:c6:ed:90:f0:53:a0:eb:6d:6d:1c:76: 9d:cd:c6:8d:07:ed:6b:c7:48:2e:16:3e:e0:68:ae: 14:97:a2:7d:51:5d:a6:c3:93:ad:4c:92:7a:3e:a4: ab:a4:7d:74:b6:0c:4f:14:c7:af:52:8f:d8:33:df: af:a7:b6:ce:ed:0a:11:52:2f:0c:31:b8:bc:2e:5f: ad:05:ec:ba:98:c1:79:7d:f5:b8:9d:0a:4a:33:bb: 4b:ac:6f:08:5f:27:86:36:87:bc:42:6e:5f:6e:64: 6e:e0:68:1f:7d:28:03:0b:2e:88:77:7c:4c:9a:a0: 51:be:b5:52:ee:99:8d:bc:57:b3:c9:c0:f8:69:84: cd:47:7f:bc:9b:33:03:da:8b:e5:f1:12:dd:de:35: 78:1a:91:da:c5:b9:34:5c:01:e4:34:4d:96:9e:37: 2b:eb:51:6b:40:80:7b:da:ee:f3:14:73:17:b3:d6: 04:17:f6:17:b1:99:08:a2:84:b7:67:0d:f5:85:c7: ce:4e:3a:f5:f7:93:e9:c3:8b:ce:17:a1:53:02:e5: 19:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8E:D5:F4:CB:E0:D7:0A:1F:7C:E5:4E:83:1C:AC:F4:FE:A5:17:53 X509v3 Authority Key Identifier: keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:91:f1:a9:99:72:ec:4b:3f:56:56:be:fb:96:1a:dd:3d:f5: 8f:70:4d:ec:44:58:21:7f:37:ac:72:94:10:30:51:10:52:bc: ca:4c:76:ac:9b:93:32:dc:9a:38:6e:b0:2b:14:bc:bc:b5:b0: 83:0b:d7:98:36:76:66:0e:ba:a3:12:89:e9:26:5b:b6:4b:c9: a1:ec:5a:46:4c:45:7c:ad:6e:29:cd:dc:1b:9c:0f:bd:a5:fe: aa:bc:25:d2:b9:c4:27:37:de:bc:84:34:83:1d:83:45:cb:59: d1:6d:69:aa:e3:50:f6:2e:4c:e0:68:9e:1c:7a:a6:50:14:ab: bf:11:eb:0c:38:40:a1:a4:a2:24:97:20:75:43:76:6f:c6:fb: 48:35:9f:56:c0:53:76:e4:4e:f3:e4:80:0d:d8:82:fd:47:fa: 96:b2:4c:a6:dd:64:38:20:56:88:09:be:cb:22:65:1c:66:a2: c6:81:62:ed:c4:b5:14:e6:45:f7:b1:9e:d9:14:ed:a8:c2:73: 34:cc:fe:1a:38:18:c2:3a:0e:da:2b:1b:3d:1c:58:5c:02:ab: 5f:4a:cb:39:04:ec:cb:99:b7:66:3e:5e:97:01:ba:4a:ba:9a: 45:33:0a:69:c8:58:b1:4d:cb:a6:41:73:a7:4d:00:00:a5:35: 55:0d:c5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LcdMex4NMMNaahoF0BaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5 ZGVhNWUwHhcNMjUxMjA2MTUwMDMxWhcNMjUxMjA3MTUwMDMxWjAzMTEwLwYDVQQD EygxYThlZDVmNGNiZTBkNzBhMWY3Y2U1NGU4MzFjYWNmNGZlYTUxNzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q8nipyrE70ZV4K+D8qsUBylWvs/ bEM0RVD0mJyij47ujWALhcxYhcTLU/GI7SoAxu2Q8FOg621tHHadzcaNB+1rx0gu Fj7gaK4Ul6J9UV2mw5OtTJJ6PqSrpH10tgxPFMevUo/YM9+vp7bO7QoRUi8MMbi8 Ll+tBey6mMF5ffW4nQpKM7tLrG8IXyeGNoe8Qm5fbmRu4GgffSgDCy6Id3xMmqBR vrVS7pmNvFezycD4aYTNR3+8mzMD2ovl8RLd3jV4GpHaxbk0XAHkNE2Wnjcr61Fr QIB72u7zFHMXs9YEF/YXsZkIooS3Zw31hcfOTjr195Ppw4vOF6FTAuUZwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqO1fTL4NcKH3zlToMcrPT+pRdTMB8GA1UdIwQY MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt ZTc1YTVlYTg5ZmQxLzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5HxqZly 7Es/Vla++5Ya3T31j3BN7ERYIX83rHKUEDBREFK8ykx2rJuTMtyaOG6wKxS8vLWw gwvXmDZ2Zg66oxKJ6SZbtkvJoexaRkxFfK1uKc3cG5wPvaX+qrwl0rnEJzfevIQ0 gx2DRctZ0W1pquNQ9i5M4GieHHqmUBSrvxHrDDhAoaSiJJcgdUN2b8b7SDWfVsBT duRO8+SADdiC/Uf6lrJMpt1kOCBWiAm+yyJlHGaixoFi7cS1FOZF97Ge2RTtqMJz NMz+GjgYwjoO2isbPRxYXAKrX0rLOQTsy5m3Zj5elwG6SrqaRTMKachYsU3LpkFz p00AAKU1VQ3Fqw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:27 2025 by rpki-client