This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft File: fCypuamhkyJ5l3TnoXn0qnLMN0E.mft (raw, json) Hash identifier: AZunSL7icoI643Xl2Zt0yg3GKzc15HYeqaDy9KhGzw0= Subject key identifier: 3D:4D:A9:E1:C6:B1:B9:A1:BE:F4:84:6A:5A:FE:3A:DD:C7:D0:EF:D0 Authority key identifier: 7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41 Certificate issuer: /CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741 Certificate serial: 019AF19AB20641AADF3B65D704E130C774A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: 6B9KDmaoJ3rOhd-DXQ38naI0D4Y.roa (hash: ynSoGLNXCvZga5FxofhRDHQzU/lO6RFc2BKWCKFwLDc=) 2: fCypuamhkyJ5l3TnoXn0qnLMN0E.crl (hash: FWhagoEmI61DZxOq+K4OmhHILs8PG5fSg53wDv/3qw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b2:06:41:aa:df:3b:65:d7:04:e1:30:c7:74:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c2ca9b9a9a19322799774e7a179f4aa72cc3741 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=3d4da9e1c6b1b9a1bef4846a5afe3addc7d0efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:40:b8:cd:1c:56:65:42:2c:4a:79:14:68: b7:4b:50:4a:47:0a:b1:e7:a8:46:73:fa:a7:a8:60: 0e:73:3e:36:f7:2a:5d:2b:1e:02:12:64:e8:00:af: be:29:ef:21:f9:a8:8e:65:2b:69:ad:f7:64:5a:37: 22:f3:c3:f8:6b:97:59:d8:d3:ad:81:de:5f:ea:43: 0b:59:b0:ed:a6:76:18:d2:60:2c:3a:d3:ba:ae:bd: f6:29:5d:97:37:10:7b:13:88:ad:3a:fb:e7:7d:b5: 8b:20:ef:10:2a:2c:73:83:18:b4:a2:49:65:05:6d: 2d:f2:e9:7f:12:15:45:17:3b:a4:1b:43:68:5b:c8: a7:90:c1:0d:30:28:9a:82:63:f6:94:f1:7c:3d:4e: 98:13:fa:25:4a:7b:31:22:48:e2:2d:f0:7c:41:a5: 35:e8:82:9e:29:12:02:4f:87:07:19:86:af:36:c1: f8:04:09:01:aa:d1:dd:c6:75:cf:91:d3:9e:85:9f: ac:16:22:17:3b:46:53:29:1a:87:de:6a:2f:da:0c: da:da:3f:88:ef:31:03:fa:e1:28:86:cd:89:77:c1: e7:21:76:64:3e:d3:86:98:4a:75:f4:5a:15:b3:86: c0:b0:ae:5d:75:06:9e:3e:ee:66:fe:1a:a9:a8:e8: 65:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:4D:A9:E1:C6:B1:B9:A1:BE:F4:84:6A:5A:FE:3A:DD:C7:D0:EF:D0 X509v3 Authority Key Identifier: keyid:7C:2C:A9:B9:A9:A1:93:22:79:97:74:E7:A1:79:F4:AA:72:CC:37:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCypuamhkyJ5l3TnoXn0qnLMN0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/5346ec-450a-4fe2-be64-e4cc045ab9ff/1/fCypuamhkyJ5l3TnoXn0qnLMN0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:b8:72:47:e5:3a:cb:f1:3a:93:33:9b:70:8c:98:8e:b9:b1: 7a:3e:05:ec:23:53:ae:ed:b8:7e:2b:17:2e:fa:3c:46:0c:ba: 39:d4:7c:91:e7:c5:53:e2:cd:15:96:14:8d:35:93:41:35:ff: d0:6a:ae:51:f2:4f:ee:c8:ef:6e:c4:c7:74:56:35:44:4f:32: 51:08:3c:25:5a:21:8a:0d:bb:1f:a9:01:8e:09:56:71:34:db: b3:d2:ad:03:c1:4c:21:54:ce:97:fb:d1:89:07:f7:6d:10:a6: 81:fa:93:de:0e:d0:96:25:31:df:88:24:2b:3b:a0:8d:d6:65: 7a:c2:8e:9a:70:bb:a1:91:5e:ee:18:57:30:20:9f:dc:83:a6: f5:40:b4:d1:82:d9:70:bd:c4:41:47:c4:21:e3:28:53:2b:91: 02:6f:bf:d3:3d:c7:83:f5:37:28:00:d5:26:13:ce:c9:10:8b: 6c:bb:b5:6e:6f:83:c3:39:ce:d5:4c:7e:4e:d3:d9:f8:5c:80: c2:b2:a5:85:a9:6d:4e:ae:16:df:02:2e:a4:7d:87:5a:ce:52: e6:58:ed:ca:be:5c:8b:ea:80:80:ba:bd:64:6e:3c:2c:20:d2: 58:84:34:64:09:a5:23:51:c8:21:be:70:21:59:e2:26:ff:45: 9b:58:f7:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrIGQarfO2XXBOEwx3ShMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMmNhOWI5YTlhMTkzMjI3OTk3NzRlN2ExNzlmNGFhNzJj YzM3NDEwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EygzZDRkYTllMWM2YjFiOWExYmVmNDg0NmE1YWZlM2FkZGM3ZDBlZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiVAuM0cVmVCLEp5FGi3S1BKRwqx 56hGc/qnqGAOcz429ypdKx4CEmToAK++Ke8h+aiOZStprfdkWjci88P4a5dZ2NOt gd5f6kMLWbDtpnYY0mAsOtO6rr32KV2XNxB7E4itOvvnfbWLIO8QKixzgxi0okll BW0t8ul/EhVFFzukG0NoW8inkMENMCiagmP2lPF8PU6YE/olSnsxIkjiLfB8QaU1 6IKeKRICT4cHGYavNsH4BAkBqtHdxnXPkdOehZ+sFiIXO0ZTKRqH3mov2gza2j+I 7zED+uEohs2Jd8HnIXZkPtOGmEp19FoVs4bAsK5ddQaePu5m/hqpqOhlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1NqeHGsbmhvvSEalr+Ot3H0O/QMB8GA1UdIwQY MBaAFHwsqbmpoZMieZd056F59KpyzDdBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQt ZTRjYzA0NWFiOWZmLzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS81MzQ2ZWMtNDUwYS00ZmUyLWJlNjQtZTRjYzA0NWFiOWZm LzEvZkN5cHVhbWhreUo1bDNUbm9YbjBxbkxNTjBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0LhyR+U6 y/E6kzObcIyYjrmxej4F7CNTru24fisXLvo8Rgy6OdR8kefFU+LNFZYUjTWTQTX/ 0GquUfJP7sjvbsTHdFY1RE8yUQg8JVohig27H6kBjglWcTTbs9KtA8FMIVTOl/vR iQf3bRCmgfqT3g7QliUx34gkKzugjdZlesKOmnC7oZFe7hhXMCCf3IOm9UC00YLZ cL3EQUfEIeMoUyuRAm+/0z3Hg/U3KADVJhPOyRCLbLu1bm+DwznO1Ux+TtPZ+FyA wrKlhaltTq4W3wIupH2HWs5S5ljtyr5ci+qAgLq9ZG48LCDSWIQ0ZAmlI1HIIb5w IVniJv9Fm1j3/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:30 2025 by rpki-client