This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft File: fNG8cAkF0axtdzOuvDJj5q52-pc.mft (raw, json) Hash identifier: Pc/kVJltR9AD4Zu3SH2livLu3SlBZ9NkDpemZUMG+eU= Subject key identifier: 84:8B:B1:C9:54:8B:36:9D:19:A0:34:8C:7B:EB:04:3C:C0:D4:BE:17 Authority key identifier: 7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 Certificate issuer: /CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Certificate serial: 019AF6C1088F1E85897C577AEB0179965D49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft Manifest number: 014C Signing time: Sun 07 Dec 2025 03:00:37 +0000 Manifest this update: Sun 07 Dec 2025 03:00:37 +0000 Manifest next update: Mon 08 Dec 2025 03:00:37 +0000 Files and hashes: 1: MXRadGpzqEbp0mkxJfqHUigmWBA.roa (hash: wm6CRKGDQ4Q1PS4u4levZbaZ8tcUlI9RmOi9JQKCpTM=) 2: fNG8cAkF0axtdzOuvDJj5q52-pc.crl (hash: 0e7/xoQgbfSWDyaN9JzJPdsXhq9k8cMNzpTYT7vBavg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:c1:08:8f:1e:85:89:7c:57:7a:eb:01:79:96:5d:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd1bc700905d1ac6d7733aebc3263e6ae76fa97 Validity Not Before: Dec 7 03:00:37 2025 GMT Not After : Dec 8 03:00:37 2025 GMT Subject: CN=848bb1c9548b369d19a0348c7beb043cc0d4be17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b0:7c:78:fd:ff:ac:05:40:aa:ed:c4:6e:3b: 91:2a:2e:14:d8:82:a5:17:fb:98:73:cf:a2:b0:37: f5:78:2c:f2:8a:9f:17:f2:07:2f:b4:ab:a6:2d:e0: 4d:be:72:e5:0b:0f:12:06:ac:9b:4a:f2:70:62:1f: d3:0f:8c:7f:a3:52:b4:86:59:ef:44:28:29:8e:ee: 00:9e:6f:f9:11:dc:77:7a:bc:48:37:53:8b:a9:d8: 67:33:58:82:77:c5:53:b5:a1:fc:4d:19:f1:af:e5: 6c:80:72:dc:94:56:38:a0:8d:c8:4e:cb:13:e2:31: 2b:d8:a3:9e:d9:2b:03:58:08:c0:42:bb:1c:ee:19: 5b:b4:23:5e:ae:65:7d:2b:00:db:02:dd:7e:f5:13: 1c:a4:c8:90:bc:eb:86:2a:6b:7c:b6:a5:9e:20:e7: d9:2c:77:62:c5:b2:af:2c:20:ee:7f:b1:1c:c7:6a: 9c:8a:5d:7f:a3:40:61:d8:76:3e:25:14:1e:0d:aa: 7d:26:53:00:e6:6f:93:98:d4:91:f3:a4:8a:d1:03: 63:a6:0e:65:6d:15:de:3e:07:99:5e:05:3b:4f:b4: fa:dd:e8:0d:1a:8d:ae:9d:a0:2b:b9:5a:b0:fc:cc: c1:28:76:06:bc:38:5f:eb:9e:fa:76:dc:23:76:3f: 5d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8B:B1:C9:54:8B:36:9D:19:A0:34:8C:7B:EB:04:3C:C0:D4:BE:17 X509v3 Authority Key Identifier: keyid:7C:D1:BC:70:09:05:D1:AC:6D:77:33:AE:BC:32:63:E6:AE:76:FA:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNG8cAkF0axtdzOuvDJj5q52-pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bade83-7a84-4c42-9d26-fce9e2bf4ef9/1/fNG8cAkF0axtdzOuvDJj5q52-pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ad:1f:c2:a7:56:a0:e9:74:b4:62:4f:1a:6b:44:ad:24:dd: 5a:1c:78:ae:7f:a8:db:7e:9f:8c:4d:e4:47:ae:8f:a7:e1:81: 1f:19:15:3e:83:ac:1c:39:c3:23:11:95:f9:8b:0a:02:96:19: 98:e7:2f:d1:12:1a:57:97:d7:fc:20:02:d9:b6:1e:78:bf:77: 2d:49:60:5e:0a:a3:99:24:8f:c5:e2:a3:65:3f:ad:2a:00:39: cd:aa:9c:19:6c:69:75:8b:5a:4a:a1:10:36:1c:b9:7c:6f:82: e9:20:f3:29:48:b7:6d:52:59:93:27:8f:c8:5c:a3:2f:ca:3c: 73:4e:40:95:22:af:e1:6c:fb:c9:e4:4d:50:bb:10:30:86:f6: 26:be:08:21:e9:38:9b:b7:41:93:fe:54:a0:0c:d9:32:69:50: bf:8d:f9:28:0b:60:6e:28:be:9e:0e:92:33:39:95:45:ee:be: 06:29:f4:44:62:3b:82:1c:dd:6e:ce:31:a2:15:e9:2b:95:3a: 23:4b:40:aa:74:c2:79:e0:6e:3b:b8:b7:35:17:66:59:30:b5: dd:98:c5:2c:26:d5:76:13:62:d2:f7:35:32:ac:79:94:8c:1c: c7:e0:28:16:7b:a2:8c:f8:38:d2:20:33:be:46:6a:a2:7d:b4: 1a:24:68:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2wQiPHoWJfFd66wF5ll1JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDFiYzcwMDkwNWQxYWM2ZDc3MzNhZWJjMzI2M2U2YWU3 NmZhOTcwHhcNMjUxMjA3MDMwMDM3WhcNMjUxMjA4MDMwMDM3WjAzMTEwLwYDVQQD Eyg4NDhiYjFjOTU0OGIzNjlkMTlhMDM0OGM3YmViMDQzY2MwZDRiZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrB8eP3/rAVAqu3EbjuRKi4U2IKl F/uYc8+isDf1eCzyip8X8gcvtKumLeBNvnLlCw8SBqybSvJwYh/TD4x/o1K0hlnv RCgpju4Anm/5Edx3erxIN1OLqdhnM1iCd8VTtaH8TRnxr+VsgHLclFY4oI3ITssT 4jEr2KOe2SsDWAjAQrsc7hlbtCNermV9KwDbAt1+9RMcpMiQvOuGKmt8tqWeIOfZ LHdixbKvLCDuf7Ecx2qcil1/o0Bh2HY+JRQeDap9JlMA5m+TmNSR86SK0QNjpg5l bRXePgeZXgU7T7T63egNGo2unaAruVqw/MzBKHYGvDhf6576dtwjdj9ddwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISLsclUizadGaA0jHvrBDzA1L4XMB8GA1UdIwQY MBaAFHzRvHAJBdGsbXczrrwyY+audvqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYt ZmNlOWUyYmY0ZWY5LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9iYWRlODMtN2E4NC00YzQyLTlkMjYtZmNlOWUyYmY0ZWY5 LzEvZk5HOGNBa0YwYXh0ZHpPdXZESmo1cTUyLXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXq0fwqdW oOl0tGJPGmtErSTdWhx4rn+o236fjE3kR66Pp+GBHxkVPoOsHDnDIxGV+YsKApYZ mOcv0RIaV5fX/CAC2bYeeL93LUlgXgqjmSSPxeKjZT+tKgA5zaqcGWxpdYtaSqEQ Nhy5fG+C6SDzKUi3bVJZkyePyFyjL8o8c05AlSKv4Wz7yeRNULsQMIb2Jr4IIek4 m7dBk/5UoAzZMmlQv435KAtgbii+ng6SMzmVRe6+Bin0RGI7ghzdbs4xohXpK5U6 I0tAqnTCeeBuO7i3NRdmWTC13ZjFLCbVdhNi0vc1Mqx5lIwcx+AoFnuijPg40iAz vkZqon20GiRodw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:23 2025 by rpki-client