This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json) Hash identifier: aSGwFL0lh9IpXRvD8BEdf/TDJ7F6kO+Bdt6tMA9XbVk= Subject key identifier: 20:D2:A9:D2:8B:22:0E:5C:F6:AD:A6:4A:AF:D6:4B:67:A0:D2:CA:5E Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Certificate serial: 019AF1D1F2F0C408998EE3BB8F5A3F6EC321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: DhG27gBlaNNxnkp9zcmHTsSV07auj8G3simR7O3RXO4=) 2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f2:f0:c4:08:99:8e:e3:bb:8f:5a:3f:6e:c3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=20d2a9d28b220e5cf6ada64aafd64b67a0d2ca5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d5:4f:ab:a4:08:28:65:49:f6:b5:49:d4:82: 3c:45:cd:d4:72:5c:9a:e6:4b:bb:c1:70:9b:43:09: 10:ab:19:9a:5c:83:0d:2a:e2:07:e8:b0:49:a0:b6: 79:27:c5:c6:10:6d:97:6f:d7:3d:7e:12:54:7c:a5: 44:75:fb:e1:46:f0:21:c4:b6:9c:7f:24:9b:2d:74: 3b:c7:4f:50:66:f6:f9:e3:19:f5:a7:8b:36:29:dd: ea:6d:b6:39:a0:72:aa:49:67:d2:62:50:f7:78:02: 60:0f:a7:45:fa:7c:37:96:fe:ac:46:b4:25:78:da: 5f:d4:bd:76:97:6b:00:ea:df:8a:77:76:0b:1c:de: 19:dc:5a:6c:a7:24:1f:55:40:ab:bb:fb:60:c5:c0: a5:30:86:29:20:72:31:93:96:d4:6f:f4:7e:b1:2d: 64:03:be:2b:b0:f9:f9:f6:e5:0a:46:f1:61:3f:b8: 92:13:52:96:ce:3a:de:9b:20:e3:d1:05:5e:76:a0: c6:30:cb:b3:00:8d:bd:8a:e6:10:cb:87:c6:6c:79: 87:da:df:4b:94:b9:26:c8:93:b3:44:9b:6a:de:5f: 17:27:52:cb:8e:33:72:d6:7b:15:6b:47:ad:c7:29: 9a:ba:2a:78:7b:d1:24:ab:18:be:a6:c9:a7:87:c2: c7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D2:A9:D2:8B:22:0E:5C:F6:AD:A6:4A:AF:D6:4B:67:A0:D2:CA:5E X509v3 Authority Key Identifier: keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:cd:13:c8:4f:76:66:ab:b0:6c:4e:ea:ca:0d:6c:a0:97:f0: 73:dd:f7:16:7b:51:fd:17:79:a4:6d:17:5f:38:ed:64:1d:9c: 4d:72:31:3d:ef:22:ef:1c:19:13:75:15:32:b0:02:2a:c1:05: e7:6d:21:dd:98:89:19:dc:f6:31:ba:88:b4:d0:b1:8c:8a:66: ee:5d:d0:e8:c7:22:2e:49:66:a3:65:8c:28:fd:c7:4d:a6:62: 31:9e:31:9a:c4:64:74:4a:9e:48:b8:ac:a9:18:b8:bd:aa:3d: 27:72:47:9c:f7:03:37:c1:2b:ac:6a:62:6c:af:7c:f5:b9:57: 54:f3:de:90:f9:f3:11:2d:67:94:80:87:5b:e1:99:1b:c0:6b: 55:4f:8e:5d:47:89:ba:79:e4:f7:e9:10:b4:21:da:5e:ee:4d: 9f:bc:f2:8a:e8:44:be:22:1f:8b:e3:e2:cc:1e:29:61:46:48: e5:9c:40:f4:06:dd:e3:36:95:f7:87:78:a7:b0:b1:97:b7:05: df:bc:70:f9:d2:42:7b:5a:cd:0b:8c:8a:78:28:cd:ba:38:a2: 93:8d:4c:fd:5b:ad:5e:54:26:46:94:51:bb:94:d8:8a:cd:66: b0:3e:4e:03:c6:b9:85:2d:b1:51:3a:81:df:8f:2d:53:b9:1c: 47:86:3c:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fLwxAiZjuO7j1o/bsMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw YzA3YmEwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygyMGQyYTlkMjhiMjIwZTVjZjZhZGE2NGFhZmQ2NGI2N2EwZDJjYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tVPq6QIKGVJ9rVJ1II8Rc3Uclya 5ku7wXCbQwkQqxmaXIMNKuIH6LBJoLZ5J8XGEG2Xb9c9fhJUfKVEdfvhRvAhxLac fySbLXQ7x09QZvb54xn1p4s2Kd3qbbY5oHKqSWfSYlD3eAJgD6dF+nw3lv6sRrQl eNpf1L12l2sA6t+Kd3YLHN4Z3FpspyQfVUCru/tgxcClMIYpIHIxk5bUb/R+sS1k A74rsPn59uUKRvFhP7iSE1KWzjremyDj0QVedqDGMMuzAI29iuYQy4fGbHmH2t9L lLkmyJOzRJtq3l8XJ1LLjjNy1nsVa0etxymauip4e9Ekqxi+psmnh8LHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDSqdKLIg5c9q2mSq/WS2eg0speMB8GA1UdIwQY MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI80TyE92 ZquwbE7qyg1soJfwc933FntR/Rd5pG0XXzjtZB2cTXIxPe8i7xwZE3UVMrACKsEF 520h3ZiJGdz2MbqItNCxjIpm7l3Q6MciLklmo2WMKP3HTaZiMZ4xmsRkdEqeSLis qRi4vao9J3JHnPcDN8ErrGpibK989blXVPPekPnzES1nlICHW+GZG8BrVU+OXUeJ unnk9+kQtCHaXu5Nn7zyiuhEviIfi+PizB4pYUZI5ZxA9Abd4zaV94d4p7Cxl7cF 37xw+dJCe1rNC4yKeCjNujiik41M/VutXlQmRpRRu5TYis1msD5OA8a5hS2xUTqB 348tU7kcR4Y8Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:57 2025 by rpki-client