This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json) Hash identifier: WfDQIggfuclBa9yA9y5n1WnkBK1d8De6Ii19H/C91aU= Subject key identifier: FF:C8:B2:39:C7:50:49:3F:5F:47:75:10:61:16:A0:A0:FF:BB:02:BA Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4 Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4 Certificate serial: 019AF23F8FC4333FF7CE15B1E29F8B907832 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=) 2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: zJ1o0oH22Nv+c/xU5zGmLUMuaWwG4Sd5UqlJ1P3Kc9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8f:c4:33:3f:f7:ce:15:b1:e2:9f:8b:90:78:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=ffc8b239c750493f5f4775106116a0a0ffbb02ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:fd:09:fd:e7:0d:e1:9e:3d:95:32:56:fc: d6:7e:b5:c5:12:5e:4d:7b:b1:0d:c1:25:4d:3f:65: 8c:15:31:44:19:a0:ab:e6:61:4b:94:fa:5c:db:54: b8:9f:ea:97:ce:6c:dc:4c:05:77:c3:e3:fe:45:61: 21:74:bf:c0:62:4a:c4:45:e3:ba:af:bf:6c:cd:6a: 6e:b2:9c:42:b8:82:87:6c:41:19:40:a3:fd:29:ca: da:3d:1d:e9:72:f6:67:87:93:73:a9:7f:65:03:48: f7:05:3a:c5:9d:da:08:dc:67:60:fa:ed:e2:80:ad: 7a:ee:b6:a7:3a:a2:84:f4:d7:07:4c:da:6e:77:84: 7b:8d:fb:5c:04:73:9c:64:ac:57:ce:96:4b:ac:1f: 9e:3d:17:3a:c2:c1:49:b7:91:18:c2:26:d6:fc:e8: 2f:9f:c3:3c:bb:0a:c1:42:6a:fe:46:4f:8f:8c:67: 5e:ac:4a:b2:4a:8a:03:03:c9:14:ed:c2:48:c7:eb: 61:86:f1:78:e0:e0:71:36:41:57:36:2d:0b:a5:29: 1f:8a:77:84:d6:36:2b:17:bd:2b:90:2a:38:97:e5: 18:7b:28:01:be:0a:81:15:06:b1:41:28:8a:0c:b2: e5:09:94:24:9d:ea:f9:63:a1:c2:eb:00:86:dc:7b: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C8:B2:39:C7:50:49:3F:5F:47:75:10:61:16:A0:A0:FF:BB:02:BA X509v3 Authority Key Identifier: keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:51:97:26:4f:27:78:c1:d3:89:32:0c:c5:31:7d:56:64: 6f:94:20:73:45:18:da:45:36:c4:c8:d1:6a:78:f1:c6:2f:95: 12:35:ad:43:86:82:48:76:15:1d:d2:e4:26:65:5e:9a:93:e2: 9a:f0:80:1d:86:f2:45:19:fb:35:3b:e7:00:16:51:e8:c3:f8: eb:e3:97:59:87:74:1f:5c:f5:13:ae:ff:15:df:e1:18:a6:e7: 02:d4:c3:3f:a9:32:11:79:8e:c0:76:0a:ef:05:a6:51:77:95: ca:2f:44:b0:e0:c7:65:13:22:15:ee:9c:36:c5:0e:1e:ba:ce: 38:8c:50:97:75:cd:a8:ed:eb:71:a1:e5:1c:31:48:5a:e1:96: 3c:71:e7:b8:2f:c9:1d:d2:79:73:c3:27:52:43:c7:b5:37:40: d5:3b:cd:13:cf:6a:54:55:13:00:b1:af:ac:69:87:c9:50:c2: 63:99:2c:a5:d0:f2:6b:1b:d8:b8:c0:3f:8f:57:5d:33:db:31: 25:3b:f4:76:80:98:a0:d6:44:22:e9:f3:70:18:8f:eb:b9:1a: a3:65:38:3d:6d:ed:2d:08:60:fa:4f:f7:69:77:e3:99:1e:87: d1:97:fe:11:ee:71:e3:3c:56:31:b2:64:92:44:2a:a7:2e:4f: 60:56:96:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4/EMz/3zhWx4p+LkHgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZmIwMjQzMjY4ODY3NDI2MGM2ZDAxMmE1OTdkNzBiY2Q1 MTQ5YzQwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhmZmM4YjIzOWM3NTA0OTNmNWY0Nzc1MTA2MTE2YTBhMGZmYmIwMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnj9Cf3nDeGePZUyVvzWfrXFEl5N e7ENwSVNP2WMFTFEGaCr5mFLlPpc21S4n+qXzmzcTAV3w+P+RWEhdL/AYkrEReO6 r79szWpuspxCuIKHbEEZQKP9KcraPR3pcvZnh5NzqX9lA0j3BTrFndoI3Gdg+u3i gK167ranOqKE9NcHTNpud4R7jftcBHOcZKxXzpZLrB+ePRc6wsFJt5EYwibW/Ogv n8M8uwrBQmr+Rk+PjGderEqySooDA8kU7cJIx+thhvF44OBxNkFXNi0LpSkfineE 1jYrF70rkCo4l+UYeygBvgqBFQaxQSiKDLLlCZQkner5Y6HC6wCG3HszQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/IsjnHUEk/X0d1EGEWoKD/uwK6MB8GA1UdIwQY MBaAFKz7AkMmiGdCYMbQEqWX1wvNUUnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQt MzFkNzAxMGE3MjU2LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQtMzFkNzAxMGE3MjU2 LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM1RlyZP J3jB04kyDMUxfVZkb5Qgc0UY2kU2xMjRanjxxi+VEjWtQ4aCSHYVHdLkJmVempPi mvCAHYbyRRn7NTvnABZR6MP46+OXWYd0H1z1E67/Fd/hGKbnAtTDP6kyEXmOwHYK 7wWmUXeVyi9EsODHZRMiFe6cNsUOHrrOOIxQl3XNqO3rcaHlHDFIWuGWPHHnuC/J HdJ5c8MnUkPHtTdA1TvNE89qVFUTALGvrGmHyVDCY5kspdDyaxvYuMA/j1ddM9sx JTv0doCYoNZEIunzcBiP67kao2U4PW3tLQhg+k/3aXfjmR6H0Zf+Ee5x4zxWMbJk kkQqpy5PYFaWxg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:48 2025 by rpki-client