This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json) Hash identifier: tCaGfViZ9OIys1vmWwEQOxE1cPsrmtXflKRHyrcDZ3Q= Subject key identifier: 6F:92:E2:D3:EB:FD:22:7D:17:50:76:AD:F1:3A:ED:9A:35:78:1D:E2 Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Certificate serial: 019B22F50165931C87C19D489AAEF9242EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft Manifest number: 0730 Signing time: Mon 15 Dec 2025 17:00:40 +0000 Manifest this update: Mon 15 Dec 2025 17:00:40 +0000 Manifest next update: Tue 16 Dec 2025 17:00:40 +0000 Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: SANwU68DZtflXReU2lYCequxmevKvjpgyCM8xPHUHlk=) 2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:01:65:93:1c:87:c1:9d:48:9a:ae:f9:24:2e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Validity Not Before: Dec 15 17:00:40 2025 GMT Not After : Dec 16 17:00:40 2025 GMT Subject: CN=6f92e2d3ebfd227d175076adf13aed9a35781de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cf:f7:48:73:3f:69:df:dc:0c:99:62:60:96: 56:2b:ff:92:7f:98:c4:ed:b4:a2:2d:4f:5a:60:16: e2:b8:34:57:bb:cd:68:39:33:d0:36:b8:88:52:61: ad:b5:65:c3:2a:8b:be:f7:75:75:de:34:21:6c:48: 26:12:d0:f6:00:af:e9:f9:6b:05:e7:72:05:9d:ff: 59:cb:26:67:f8:34:56:43:b4:bf:17:2e:83:59:e8: 21:85:c4:13:7f:be:f9:79:b1:94:22:40:55:a2:9f: 63:5b:e5:4f:ba:4c:ea:fe:98:c8:75:58:35:da:b9: dc:63:58:ad:8a:f6:c3:04:c4:ac:19:27:06:44:b8: 49:97:ba:d6:26:2e:15:15:ca:2e:d9:b7:66:ff:7d: 09:94:d3:9c:cb:e6:83:1d:d8:54:f9:50:e9:ef:95: ab:65:9b:10:74:f6:a3:7f:5f:8e:ed:7b:03:88:4f: b6:b8:ec:64:ed:11:a6:c7:2c:e9:a3:05:b2:e9:e8: 39:6e:d2:9c:39:aa:4d:a2:4b:d8:4e:51:97:2b:be: 4f:cb:46:8a:47:44:94:43:18:88:12:55:e2:ca:3f: 99:6e:0f:99:1d:fd:c5:eb:00:34:36:59:49:d4:31: 63:a6:df:5d:4d:ca:f5:8d:31:7f:a6:20:10:68:ad: 11:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:92:E2:D3:EB:FD:22:7D:17:50:76:AD:F1:3A:ED:9A:35:78:1D:E2 X509v3 Authority Key Identifier: keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f6:3d:94:02:40:c3:d1:66:06:3e:ca:39:3e:57:7e:ca:8f: e7:c8:fe:52:a0:48:2a:ca:45:94:5a:25:b4:af:ae:14:58:68: 15:e7:0f:f4:b7:41:a9:81:94:ea:1a:b6:81:0f:51:1e:84:0f: ad:9e:3e:15:13:72:25:47:25:79:26:9a:13:91:a8:ac:6e:48: 15:ec:f4:a3:d3:66:6f:30:e6:7f:62:94:2c:64:e6:18:42:5e: 1a:b8:ed:33:ec:83:80:e2:d2:79:1c:a9:a3:1f:d1:1c:8c:31: c3:81:5e:08:d5:ce:a2:41:c2:d3:a0:1c:31:35:a4:32:60:76: a4:4f:dd:ac:e5:5d:97:74:1d:dc:95:3f:ca:e2:03:71:d8:0b: d4:d5:ce:5d:8c:8c:10:93:a2:f1:e1:ef:99:36:94:7c:48:5a: 0b:f6:f8:d1:1c:1b:c9:ee:89:4b:75:b0:85:8e:72:82:13:30: ae:39:17:2c:3b:c6:35:58:36:8b:ec:c3:10:dc:a8:ba:9f:87: ab:09:37:bf:46:36:3c:b7:78:8d:7b:1a:52:4f:cb:ed:e2:96: 22:59:20:8c:c8:83:92:ea:5d:7c:98:de:a7:9b:22:19:b3:73: 14:33:ab:e9:38:ba:e8:81:35:3f:db:2d:f4:e5:73:87:31:ef: 9b:80:dc:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9QFlkxyHwZ1Imq75JC77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3 OWM2ZGEwHhcNMjUxMjE1MTcwMDQwWhcNMjUxMjE2MTcwMDQwWjAzMTEwLwYDVQQD Eyg2ZjkyZTJkM2ViZmQyMjdkMTc1MDc2YWRmMTNhZWQ5YTM1NzgxZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqM/3SHM/ad/cDJliYJZWK/+Sf5jE 7bSiLU9aYBbiuDRXu81oOTPQNriIUmGttWXDKou+93V13jQhbEgmEtD2AK/p+WsF 53IFnf9ZyyZn+DRWQ7S/Fy6DWeghhcQTf775ebGUIkBVop9jW+VPukzq/pjIdVg1 2rncY1itivbDBMSsGScGRLhJl7rWJi4VFcou2bdm/30JlNOcy+aDHdhU+VDp75Wr ZZsQdPajf1+O7XsDiE+2uOxk7RGmxyzpowWy6eg5btKcOapNokvYTlGXK75Py0aK R0SUQxiIElXiyj+Zbg+ZHf3F6wA0NllJ1DFjpt9dTcr1jTF/piAQaK0REQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+S4tPr/SJ9F1B2rfE67Zo1eB3iMB8GA1UdIwQY MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt ZDYwYWE3MzNjZDEwLzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPY9lAJA w9FmBj7KOT5XfsqP58j+UqBIKspFlFoltK+uFFhoFecP9LdBqYGU6hq2gQ9RHoQP rZ4+FRNyJUcleSaaE5GorG5IFez0o9NmbzDmf2KULGTmGEJeGrjtM+yDgOLSeRyp ox/RHIwxw4FeCNXOokHC06AcMTWkMmB2pE/drOVdl3Qd3JU/yuIDcdgL1NXOXYyM EJOi8eHvmTaUfEhaC/b40Rwbye6JS3WwhY5yghMwrjkXLDvGNVg2i+zDENyoup+H qwk3v0Y2PLd4jXsaUk/L7eKWIlkgjMiDkupdfJjep5siGbNzFDOr6Ti66IE1P9st 9OVzhzHvm4DcaA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:33:19 2025 by rpki-client