This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft File: fC4N6VOoXYdf1kZKwSNQcr95xto.mft (raw, json) Hash identifier: wRfnFw2F+SJmidZQSlWRnCIgcNgH/uCSMUHJAdTkVXA= Subject key identifier: EE:FC:84:B1:A0:FA:D0:28:0B:54:D8:B0:93:63:BA:BC:1A:3A:6B:B7 Authority key identifier: 7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA Certificate issuer: /CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Certificate serial: 019AF2AD72964AF5C07F55921B63CD74F366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft Manifest number: 0717 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: fC4N6VOoXYdf1kZKwSNQcr95xto.crl (hash: +me6gqrL017VI1tIVlL7lcgJrEgkgtxrjBBZWWzS1ME=) 2: lnM8FCGF8fRbpieUbEQd8sXstK8.roa (hash: fZ4mA2DPYBcr3ruplZ8MmHZ+BtKN9pxbg2b5pcYF7Tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:72:96:4a:f5:c0:7f:55:92:1b:63:cd:74:f3:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2e0de953a85d875fd6464ac1235072bf79c6da Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=eefc84b1a0fad0280b54d8b09363babc1a3a6bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:4a:8f:41:d7:10:6a:96:13:6c:19:0e:26: 36:d7:fa:cf:8c:8b:c2:4a:8e:3c:1a:b0:5d:ad:6b: 5e:71:b7:25:bf:33:ae:ef:a0:82:0f:cf:4a:61:1b: e8:36:4e:06:58:bb:50:62:d1:f2:1b:8d:4b:d6:9d: 67:aa:13:c8:1b:f1:41:0c:c1:5b:50:48:74:c9:e5: 02:b4:3f:06:84:2d:4d:57:fc:fc:17:87:ef:7e:b5: ed:21:3f:d8:3f:d9:8b:9d:93:df:98:67:a5:ae:5f: 76:70:59:5f:61:cb:37:37:67:05:54:d3:66:d2:e3: 93:2d:d3:10:7d:ec:9b:86:6c:26:15:10:4b:9f:c1: c5:38:08:ed:c5:21:a7:5c:5f:38:e7:7f:67:50:96: bd:bc:e1:93:22:1c:14:bc:47:c0:3a:01:ec:ba:c7: f8:6e:64:b4:b0:6f:b7:ac:dd:ce:25:60:c3:51:98: 88:f9:17:91:b1:4e:8b:c4:ff:76:a9:1a:b2:89:3e: 81:fa:60:ef:b6:30:8e:94:84:a1:e0:f1:27:31:aa: 00:b0:be:bc:ea:5f:f2:66:1a:23:28:a5:7a:41:48: 11:3a:e1:a3:cc:82:2f:1d:0b:43:7f:ea:83:0b:4c: 97:91:f2:e2:82:92:7e:fa:69:40:08:45:50:6f:c6: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FC:84:B1:A0:FA:D0:28:0B:54:D8:B0:93:63:BA:BC:1A:3A:6B:B7 X509v3 Authority Key Identifier: keyid:7C:2E:0D:E9:53:A8:5D:87:5F:D6:46:4A:C1:23:50:72:BF:79:C6:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC4N6VOoXYdf1kZKwSNQcr95xto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/d1c881-eb75-4413-8b64-d60aa733cd10/1/fC4N6VOoXYdf1kZKwSNQcr95xto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c1:07:72:e5:b6:5b:81:20:d9:d3:03:8b:9c:7d:b6:f5:66: b3:94:f6:f8:b6:e6:8f:fb:71:22:13:5d:76:1b:40:b0:33:b4: 44:02:a4:55:dd:9a:22:92:57:7f:6e:8b:81:ae:98:89:b6:b3: 3b:a7:62:4b:a7:33:70:ec:ea:87:d8:5a:0f:5e:3a:59:da:3b: b9:97:ca:bf:6c:aa:d5:27:cd:9d:c3:94:d6:8a:ce:bd:5f:83: f5:1f:51:63:c0:98:b9:ea:a8:58:a7:2f:42:f3:21:96:8a:e3: dd:40:4c:26:33:68:66:93:ef:59:9d:28:f1:f9:a2:c3:46:dc: 5c:e7:42:e7:4a:af:d0:7d:72:8a:e4:f8:f1:e2:c3:7c:62:8e: 7e:78:64:79:ed:7e:d2:27:7c:4f:4a:78:2c:1a:cc:75:64:ff: 2f:b9:85:d5:b7:27:87:06:14:54:33:98:ae:07:5b:75:17:5d: 10:64:90:38:77:73:64:58:ee:7b:17:41:01:fb:ef:e2:15:94: 28:8c:92:24:2a:3b:ce:b5:2e:e5:d7:ab:67:59:a0:d8:1b:17: 6d:ab:a7:0f:2b:67:ff:40:bb:99:08:19:c8:55:aa:79:82:e9: 05:7c:9c:3f:08:5d:74:a2:64:e6:46:81:5c:f9:19:bc:ca:f1: 53:40:56:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXKWSvXAf1WSG2PNdPNmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmUwZGU5NTNhODVkODc1ZmQ2NDY0YWMxMjM1MDcyYmY3 OWM2ZGEwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhlZWZjODRiMWEwZmFkMDI4MGI1NGQ4YjA5MzYzYmFiYzFhM2E2YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9BKj0HXEGqWE2wZDiY21/rPjIvC So48GrBdrWtecbclvzOu76CCD89KYRvoNk4GWLtQYtHyG41L1p1nqhPIG/FBDMFb UEh0yeUCtD8GhC1NV/z8F4fvfrXtIT/YP9mLnZPfmGelrl92cFlfYcs3N2cFVNNm 0uOTLdMQfeybhmwmFRBLn8HFOAjtxSGnXF84539nUJa9vOGTIhwUvEfAOgHsusf4 bmS0sG+3rN3OJWDDUZiI+ReRsU6LxP92qRqyiT6B+mDvtjCOlISh4PEnMaoAsL68 6l/yZhojKKV6QUgROuGjzIIvHQtDf+qDC0yXkfLigpJ++mlACEVQb8bp9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO78hLGg+tAoC1TYsJNjurwaOmu3MB8GA1UdIwQY MBaAFHwuDelTqF2HX9ZGSsEjUHK/ecbaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQt ZDYwYWE3MzNjZDEwLzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kMWM4ODEtZWI3NS00NDEzLThiNjQtZDYwYWE3MzNjZDEw LzEvZkM0TjZWT29YWWRmMWtaS3dTTlFjcjk1eHRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcEHcuW2 W4Eg2dMDi5x9tvVms5T2+Lbmj/txIhNddhtAsDO0RAKkVd2aIpJXf26Lga6Yibaz O6diS6czcOzqh9haD146Wdo7uZfKv2yq1SfNncOU1orOvV+D9R9RY8CYueqoWKcv QvMhlorj3UBMJjNoZpPvWZ0o8fmiw0bcXOdC50qv0H1yiuT48eLDfGKOfnhkee1+ 0id8T0p4LBrMdWT/L7mF1bcnhwYUVDOYrgdbdRddEGSQOHdzZFjuexdBAfvv4hWU KIySJCo7zrUu5derZ1mg2BsXbaunDytn/0C7mQgZyFWqeYLpBXycPwhddKJk5kaB XPkZvMrxU0BWuA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:17 2025 by rpki-client