This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft File: fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json) Hash identifier: B15jgHYk+81ZqsciWbZE5aIC3/CDVAvfncxdVdp812I= Subject key identifier: 34:40:97:66:36:9B:B3:D7:AC:67:4E:BD:0A:2B:67:02:AC:E7:99:5A Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 Certificate issuer: /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Certificate serial: 019AF5AEFDFE01EABE10CD665D8042783E3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft Manifest number: 070F Signing time: Sat 06 Dec 2025 22:01:17 +0000 Manifest this update: Sat 06 Dec 2025 22:01:17 +0000 Manifest next update: Sun 07 Dec 2025 22:01:17 +0000 Files and hashes: 1: 8Rj91VmErY8nG9AvttlpyE1wLJw.roa (hash: M9Ao53zeBk6GPnJYr5ZYdgrGPitX+aJ7EjLXG/7qqNM=) 2: NdI4eek8jOjsWz1VECAlKFSlieY.roa (hash: KdGGoQzPMHoGucfApjzpne/EBBMfi+F0OYkvglIdCSE=) 3: OEhtadn0DUNS84bfQrg1WlzSzCQ.roa (hash: HF+3GH/+d8FVR6v6MNdyNa599Q4jMft4g5RBqFNqn7s=) 4: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: tPbuhItloR/O/z5nAmSmcl9AfToDlZ8GuuRGhOqyVvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:fd:fe:01:ea:be:10:cd:66:5d:80:42:78:3e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9 Validity Not Before: Dec 6 22:01:17 2025 GMT Not After : Dec 7 22:01:17 2025 GMT Subject: CN=34409766369bb3d7ac674ebd0a2b6702ace7995a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:2e:46:57:cc:95:bd:06:bf:27:6a:f4:cc: 1b:05:36:56:13:8c:e7:f5:65:65:d6:f3:4a:99:8c: 33:a7:c7:40:4d:70:eb:06:93:16:ea:9c:07:c9:b5: 73:02:48:b6:e5:83:05:97:b8:67:34:45:c0:8e:2e: 36:12:ac:eb:fd:f1:f8:6a:7b:86:2d:74:0c:8b:68: 37:f7:24:38:9e:25:24:90:0f:04:b6:f0:52:04:77: 8f:b8:38:06:a5:d5:17:6a:7c:10:f2:33:bc:c5:88: c5:e1:f7:bd:60:6e:8b:80:73:cd:76:6c:e0:c8:c8: 61:d3:d9:e5:9f:b4:49:02:84:70:dc:f7:8f:07:b1: 72:c7:91:f1:61:83:0c:77:08:b0:67:0e:35:00:92: cf:e8:03:6c:79:9b:c1:22:f8:49:42:f9:03:5e:bc: 86:70:50:69:40:cb:14:6f:7f:ba:7c:ea:e0:9a:7d: 7e:44:06:f1:c0:84:00:6b:a9:a7:c9:c0:c4:81:96: 19:b3:c8:d1:b8:fe:d3:69:b5:ce:f6:47:f9:70:a3: 5b:44:e4:e5:9a:41:ce:57:c0:1a:26:62:83:ef:fb: 45:a0:a6:3d:49:38:74:62:1d:f1:3f:d8:61:ee:64: 39:af:90:37:76:41:cf:04:26:95:6b:0d:85:fb:0d: f0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:40:97:66:36:9B:B3:D7:AC:67:4E:BD:0A:2B:67:02:AC:E7:99:5A X509v3 Authority Key Identifier: keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:c7:0a:0f:e6:70:6a:a4:9d:fe:3f:b3:96:4a:08:95:8b: aa:ac:58:63:a6:a9:78:3f:e3:2c:81:f4:81:8b:8f:5c:31:18: 03:5d:a9:db:6c:1d:14:3e:82:9a:93:59:7d:31:c3:69:d5:c2: 59:e8:5e:02:08:eb:93:a2:a0:4d:92:2a:cc:d6:c5:cb:65:69: 8b:0a:7a:80:77:99:6e:01:18:5c:f5:65:6a:a7:3e:ee:3e:3d: 2a:28:00:69:ad:5b:de:0c:77:90:dc:c5:01:c7:08:20:10:9e: ef:7d:94:f9:df:96:47:0a:1a:d1:29:06:ef:76:5f:e9:c1:0b: b5:23:84:b5:a9:0a:a1:1a:97:53:0e:95:23:df:6d:cc:1d:33: 14:75:e1:20:47:91:dd:01:7c:d5:a1:a3:f9:20:a2:4f:a1:10: e4:78:ad:b0:68:60:8d:87:e7:32:55:fa:a5:4a:bd:2c:2a:03: 07:53:6c:ff:51:26:d5:86:6c:7d:bc:26:8f:0a:45:0c:68:ce: 74:0d:91:3e:30:4c:92:e5:8d:67:73:35:21:56:bb:5c:ef:07: 4c:89:87:96:7e:08:7e:49:f6:af:9e:ab:ce:72:71:eb:af:e7: 46:2b:76:3a:6e:96:cd:6b:85:40:af:a0:12:ff:95:7d:f1:8c: f2:e4:7c:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rv3+Aeq+EM1mXYBCeD47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMjljMmY1NzIzZjI5ZWM1ZTBlNzkzZTczYWI1NWI4YTFj ODZiYTkwHhcNMjUxMjA2MjIwMTE3WhcNMjUxMjA3MjIwMTE3WjAzMTEwLwYDVQQD EygzNDQwOTc2NjM2OWJiM2Q3YWM2NzRlYmQwYTJiNjcwMmFjZTc5OTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KkuRlfMlb0Gvydq9MwbBTZWE4zn 9WVl1vNKmYwzp8dATXDrBpMW6pwHybVzAki25YMFl7hnNEXAji42Eqzr/fH4anuG LXQMi2g39yQ4niUkkA8EtvBSBHePuDgGpdUXanwQ8jO8xYjF4fe9YG6LgHPNdmzg yMhh09nln7RJAoRw3PePB7Fyx5HxYYMMdwiwZw41AJLP6ANseZvBIvhJQvkDXryG cFBpQMsUb3+6fOrgmn1+RAbxwIQAa6mnycDEgZYZs8jRuP7TabXO9kf5cKNbROTl mkHOV8AaJmKD7/tFoKY9STh0Yh3xP9hh7mQ5r5A3dkHPBCaVaw2F+w3wLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRAl2Y2m7PXrGdOvQorZwKs55laMB8GA1UdIwQY MBaAFHwpwvVyPynsXg55PnOrVbihyGupMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUt ZjE5NTIyM2QwM2IzLzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOTlmYWMtMzVkYy00ZjJjLThmOTUtZjE5NTIyM2QwM2Iz LzEvZkNuQzlYSV9LZXhlRG5rLWM2dFZ1S0hJYTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjTHCg/m cGqknf4/s5ZKCJWLqqxYY6apeD/jLIH0gYuPXDEYA12p22wdFD6CmpNZfTHDadXC WeheAgjrk6KgTZIqzNbFy2Vpiwp6gHeZbgEYXPVlaqc+7j49KigAaa1b3gx3kNzF AccIIBCe732U+d+WRwoa0SkG73Zf6cELtSOEtakKoRqXUw6VI99tzB0zFHXhIEeR 3QF81aGj+SCiT6EQ5HitsGhgjYfnMlX6pUq9LCoDB1Ns/1Em1YZsfbwmjwpFDGjO dA2RPjBMkuWNZ3M1IVa7XO8HTImHln4Ifkn2r56rznJx66/nRit2Om6WzWuFQK+g Ev+VffGM8uR8hw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:11 2025 by rpki-client