This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json) Hash identifier: epxEnVrJyvBIUNidAYChNU+/WRRSnwN2GnJjeb8i0g0= Subject key identifier: FC:0F:EC:04:6F:0C:46:7B:2D:E4:DB:18:99:74:20:EF:F5:D7:FC:F8 Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Certificate serial: 019AF1641487E265122047FFA45487015D43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft Manifest number: 1332 Signing time: Sat 06 Dec 2025 02:00:59 +0000 Manifest this update: Sat 06 Dec 2025 02:00:59 +0000 Manifest next update: Sun 07 Dec 2025 02:00:59 +0000 Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=) 2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=) 3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: IWrjKi1YCmjpYAT9XCY22xU7ElTM5V6Zkt3OGpiwctc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:14:87:e2:65:12:20:47:ff:a4:54:87:01:5d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db Validity Not Before: Dec 6 02:00:59 2025 GMT Not After : Dec 7 02:00:59 2025 GMT Subject: CN=fc0fec046f0c467b2de4db18997420eff5d7fcf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:14:43:21:74:c8:13:56:84:e8:1a:12:20:4f: f0:09:f7:f8:c8:9f:04:a1:7d:54:e7:5b:bb:a6:87: 3a:a4:39:77:0d:e9:4c:f1:ec:4a:7a:6d:42:76:f6: d9:22:84:92:f4:12:51:f7:81:98:1b:de:35:dc:59: 00:b9:b0:ac:9d:29:50:58:3b:7b:be:b6:1c:5c:5c: 3b:51:d2:72:19:b5:6f:36:eb:70:4a:43:fd:48:08: 7d:10:97:a3:ef:5c:a8:72:6d:6d:c6:cc:d1:f3:c0: 84:c5:e1:35:a2:18:0b:a3:2c:3c:a7:91:87:90:c9: 95:91:08:49:a3:fa:a2:c8:c7:72:9b:c8:b8:a5:4a: b3:fb:27:c4:e2:d2:15:17:eb:fb:35:90:75:2f:c7: bb:d0:98:6a:06:7c:5d:7a:cd:ca:f4:ea:2b:2c:94: 45:dc:83:1b:40:ce:85:e3:18:70:26:7b:8b:3a:a2: bf:8e:01:7a:bc:c9:d9:6f:28:01:e1:c3:9e:34:c2: 3f:d8:cc:ff:f3:14:c6:d2:cf:77:75:0b:15:9c:c8: b0:63:06:87:e7:98:86:5f:3d:32:b2:97:46:42:d6: 64:c9:69:e7:f4:cd:c4:78:85:09:c5:57:6b:38:b9: 74:22:2d:79:3d:02:8c:f3:3b:89:57:1b:f1:51:1a: 8d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0F:EC:04:6F:0C:46:7B:2D:E4:DB:18:99:74:20:EF:F5:D7:FC:F8 X509v3 Authority Key Identifier: keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:65:e6:5a:15:54:35:11:be:47:1d:58:9c:53:2f:db:45:15: 2f:74:df:f4:d2:51:8d:b8:89:80:3b:02:93:88:84:a1:a1:3a: bf:c1:d2:41:4e:c1:87:f9:59:18:96:0e:9b:a1:e4:28:fc:49: 30:1c:55:1b:ff:79:be:d7:fd:6d:b3:2a:00:5c:f8:ed:c2:a5: 39:c2:6b:21:cd:0d:2a:a6:e0:44:93:46:b0:83:89:88:60:9b: 21:ce:ed:d8:6b:1f:5f:c9:21:48:ce:a8:55:61:a8:35:9d:2c: a5:99:f9:32:8f:4c:d5:75:7f:b3:df:21:69:9d:35:c2:55:80: 77:63:63:d4:53:55:fa:fb:33:0b:ef:7a:0a:3f:88:1c:91:42: 89:0d:03:9c:a7:c7:dd:8a:8b:f7:5b:7b:af:37:d9:e5:d6:ab: 1f:5d:b1:89:04:03:82:4f:15:50:08:d0:40:aa:ef:59:51:51: a8:df:7b:7e:43:52:a8:df:74:aa:60:91:8a:e5:d9:13:d6:12: 33:d5:f0:26:df:17:3c:d4:c0:aa:0c:3b:aa:23:b7:26:7e:77: dd:d4:5b:bc:0c:88:d9:14:a9:2e:53:dc:c9:ac:f1:86:0b:30: 2b:0f:53:cb:d1:03:26:38:4f:7f:8d:ea:33:30:5d:a1:45:9f: 0c:0e:0e:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZBSH4mUSIEf/pFSHAV1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkYzhhOWJiYzJiYzNhNGM4YmI4NzZjY2RkOTVmZDg2NTI1 MGI2ZGIwHhcNMjUxMjA2MDIwMDU5WhcNMjUxMjA3MDIwMDU5WjAzMTEwLwYDVQQD EyhmYzBmZWMwNDZmMGM0NjdiMmRlNGRiMTg5OTc0MjBlZmY1ZDdmY2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhRDIXTIE1aE6BoSIE/wCff4yJ8E oX1U51u7poc6pDl3DelM8exKem1CdvbZIoSS9BJR94GYG9413FkAubCsnSlQWDt7 vrYcXFw7UdJyGbVvNutwSkP9SAh9EJej71yocm1txszR88CExeE1ohgLoyw8p5GH kMmVkQhJo/qiyMdym8i4pUqz+yfE4tIVF+v7NZB1L8e70JhqBnxdes3K9OorLJRF 3IMbQM6F4xhwJnuLOqK/jgF6vMnZbygB4cOeNMI/2Mz/8xTG0s93dQsVnMiwYwaH 55iGXz0yspdGQtZkyWnn9M3EeIUJxVdrOLl0Ii15PQKM8zuJVxvxURqN3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwP7ARvDEZ7LeTbGJl0IO/11/z4MB8GA1UdIwQY MBaAFK3IqbvCvDpMi7h2zN2V/YZSULbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUt MTY1NGE4MGRiYzM2LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS84Njc3MmUtNWU2Yi00MDZjLThhOWUtMTY1NGE4MGRiYzM2 LzEvcmNpcHU4SzhPa3lMdUhiTTNaWDlobEpRdHRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvmXmWhVU NRG+Rx1YnFMv20UVL3Tf9NJRjbiJgDsCk4iEoaE6v8HSQU7Bh/lZGJYOm6HkKPxJ MBxVG/95vtf9bbMqAFz47cKlOcJrIc0NKqbgRJNGsIOJiGCbIc7t2GsfX8khSM6o VWGoNZ0spZn5Mo9M1XV/s98haZ01wlWAd2Nj1FNV+vszC+96Cj+IHJFCiQ0DnKfH 3YqL91t7rzfZ5darH12xiQQDgk8VUAjQQKrvWVFRqN97fkNSqN90qmCRiuXZE9YS M9XwJt8XPNTAqgw7qiO3Jn533dRbvAyI2RSpLlPcyazxhgswKw9Ty9EDJjhPf43q MzBdoUWfDA4O4g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:53 2025 by rpki-client