This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json) Hash identifier: cQ5LZcHaIe3Zk1HVT/PEYfh9eq+Qv5CuPhSZB9pHJzE= Subject key identifier: F4:CC:6F:71:37:99:06:26:B3:5C:95:62:0D:F1:E5:A1:DA:7A:4F:7E Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Certificate serial: 019AF1D1A440055FCE6104A39FE8FA38B133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: RsjopQIDGhi6phSmQyeamc6IkHvF3wNOKsbT7o/tc+A=) 2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a4:40:05:5f:ce:61:04:a3:9f:e8:fa:38:b1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=f4cc6f7137990626b35c95620df1e5a1da7a4f7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:72:bb:86:2f:51:c7:32:eb:c0:93:11:31:5a: c1:af:80:3d:44:42:b5:a1:08:fa:05:c6:0d:30:c6: 11:31:eb:a6:8c:a8:0e:50:d8:4c:2b:da:0e:29:e4: 28:09:91:0d:5f:52:86:4e:a9:c4:93:45:4d:1c:75: 91:90:21:cf:a5:b7:55:72:ba:b2:47:21:32:7f:18: 59:33:6f:1e:e5:a1:07:08:6d:f9:09:c6:56:cf:ef: d8:5a:7e:be:51:c7:17:a2:2e:ca:28:c8:54:ed:7f: 0c:29:47:03:cc:f1:80:a7:a5:92:a2:61:bf:39:25: 80:ad:68:b9:5f:b2:5e:d8:ef:60:0a:7d:4f:51:c2: 28:14:a5:cb:c8:ba:14:55:ec:25:8a:3e:15:dc:2d: c5:c6:ee:6d:0e:58:c4:06:9a:fd:c6:e2:71:e3:c7: 8d:c0:15:40:c4:37:41:2f:14:a2:82:0f:4d:d5:eb: ed:7f:f3:df:07:92:4a:5f:95:71:04:74:3a:9e:28: 64:5c:aa:5c:6c:f5:08:81:35:e1:ce:96:8f:8b:9b: b3:c3:a7:fa:e5:91:b3:c5:42:2c:90:ee:dc:06:c4: a0:0a:78:78:6c:07:a7:38:74:45:c9:61:41:0c:2e: 30:fb:77:d0:64:20:60:a9:0f:18:0e:c8:17:85:41: b1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:CC:6F:71:37:99:06:26:B3:5C:95:62:0D:F1:E5:A1:DA:7A:4F:7E X509v3 Authority Key Identifier: keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2f:e1:0b:6c:ce:58:59:4d:d9:93:95:b2:f7:59:f3:6c:d9: b0:e0:da:7f:54:89:3f:d4:1b:24:12:ec:9f:3b:fb:98:af:07: 24:a5:79:cf:1d:73:23:17:5d:7e:c0:bc:fd:25:69:db:e5:05: 0b:a0:26:e9:90:6b:0d:aa:89:f0:11:0e:3f:9c:fb:14:eb:3e: 9a:75:6d:0c:de:1c:87:e4:35:b7:12:ba:41:58:95:20:42:b0: c1:29:38:d0:76:b9:ba:f7:88:84:6f:5f:4e:84:73:63:27:68: c3:27:2a:2b:89:32:1e:ca:bb:3d:e6:c0:3e:20:a0:40:b3:b0: d9:59:26:8d:b1:59:1e:34:c3:79:a6:c5:fc:06:b2:85:15:75: da:08:70:0c:20:ae:71:77:6d:0f:ab:79:60:9c:eb:4d:18:48: 6b:3c:c1:a2:1e:97:5a:99:f1:7a:87:25:2a:78:52:ec:c1:0b: 44:66:94:a1:ea:fd:1f:1b:b5:43:da:0d:8e:11:0b:65:76:f0: 44:b8:cc:25:d2:b1:33:b1:64:8e:65:b6:11:2f:f5:3e:fe:6c: b7:af:3f:0f:d3:57:91:71:d4:bf:75:19:9f:f2:fa:6f:d2:17: 41:ce:1e:0a:9c:4f:2a:eb:be:be:a4:cf:1c:1c:17:87:9c:93: 9a:a0:c4:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aRABV/OYQSjn+j6OLEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw ZDllNzMwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EyhmNGNjNmY3MTM3OTkwNjI2YjM1Yzk1NjIwZGYxZTVhMWRhN2E0ZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XK7hi9RxzLrwJMRMVrBr4A9REK1 oQj6BcYNMMYRMeumjKgOUNhMK9oOKeQoCZENX1KGTqnEk0VNHHWRkCHPpbdVcrqy RyEyfxhZM28e5aEHCG35CcZWz+/YWn6+UccXoi7KKMhU7X8MKUcDzPGAp6WSomG/ OSWArWi5X7Je2O9gCn1PUcIoFKXLyLoUVewlij4V3C3Fxu5tDljEBpr9xuJx48eN wBVAxDdBLxSigg9N1evtf/PfB5JKX5VxBHQ6nihkXKpcbPUIgTXhzpaPi5uzw6f6 5ZGzxUIskO7cBsSgCnh4bAenOHRFyWFBDC4w+3fQZCBgqQ8YDsgXhUGxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTMb3E3mQYms1yVYg3x5aHaek9+MB8GA1UdIwQY MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt NzQ1NGExOWQzMmQxLzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei/hC2zO WFlN2ZOVsvdZ82zZsODaf1SJP9QbJBLsnzv7mK8HJKV5zx1zIxddfsC8/SVp2+UF C6Am6ZBrDaqJ8BEOP5z7FOs+mnVtDN4ch+Q1txK6QViVIEKwwSk40Ha5uveIhG9f ToRzYydowycqK4kyHsq7PebAPiCgQLOw2VkmjbFZHjTDeabF/AayhRV12ghwDCCu cXdtD6t5YJzrTRhIazzBoh6XWpnxeoclKnhS7MELRGaUoer9Hxu1Q9oNjhELZXbw RLjMJdKxM7FkjmW2ES/1Pv5st68/D9NXkXHUv3UZn/L6b9IXQc4eCpxPKuu+vqTP HBwXh5yTmqDEMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:00 2025 by rpki-client