This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json) Hash identifier: Ddor1NGdIwqDmjTwCgvl2JGCv2E/6a/ncrGjQCl5pfY= Subject key identifier: 2B:A1:99:CA:43:20:8D:7F:8E:6B:8F:38:91:AE:02:49:76:17:0F:29 Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Certificate serial: 019B180361FBD72767B208FC19C63EB45840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft Manifest number: 0A30 Signing time: Sat 13 Dec 2025 14:00:33 +0000 Manifest this update: Sat 13 Dec 2025 14:00:33 +0000 Manifest next update: Sun 14 Dec 2025 14:00:33 +0000 Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: PnS/lG4bLuTw0l7WaRm8iLlXNuv7dV3UjaSz+QM8pCw=) 2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:03:61:fb:d7:27:67:b2:08:fc:19:c6:3e:b4:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Validity Not Before: Dec 13 14:00:33 2025 GMT Not After : Dec 14 14:00:33 2025 GMT Subject: CN=2ba199ca43208d7f8e6b8f3891ae024976170f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:a0:fb:a0:72:e1:ab:f4:b0:58:12:4a:0c:1f: 0f:38:56:c2:6b:de:33:51:16:7e:18:ac:2f:e9:d3: c9:d1:c8:fa:b6:ef:70:21:b2:01:62:17:aa:ac:3b: 2d:1d:2b:2b:0d:f9:89:6f:a0:ce:59:83:13:5b:16: 13:14:53:e2:27:d1:9a:07:c4:a6:2e:62:d3:3e:14: 3c:58:a1:d4:29:28:d4:5b:9b:3d:1a:99:51:08:ed: 7e:28:1f:55:d7:bf:0a:e7:b3:7b:d7:fe:cd:81:60: fc:78:d6:94:37:e7:44:7f:d0:8b:e8:2e:fb:97:6f: e2:33:d4:e3:f9:d1:ab:f3:ad:10:c5:fd:39:38:ed: 59:cb:28:a9:30:ad:09:a7:0f:96:d6:2a:06:32:ff: bc:98:b6:85:87:51:4b:34:3d:09:2d:ae:c9:c2:9c: 4c:97:66:9a:a4:76:71:f4:12:50:d4:e2:1b:ee:2e: d6:4d:72:ac:de:46:95:56:f2:82:02:e7:ad:f7:96: 46:bb:0d:4b:08:fb:2d:07:f2:7d:87:c1:0b:f5:2b: 33:8f:db:34:78:76:dc:9d:9d:ee:30:72:10:e2:f2: 8b:39:ae:c4:40:65:23:f0:b4:c0:00:18:fe:1a:c1: 5a:bd:ec:ac:50:91:ac:9d:ae:a6:5e:82:74:ec:e8: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A1:99:CA:43:20:8D:7F:8E:6B:8F:38:91:AE:02:49:76:17:0F:29 X509v3 Authority Key Identifier: keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e2:b3:ac:7f:e5:1d:ef:0a:be:b4:6b:43:a6:ba:d2:c2:c1: 10:8b:70:e3:9a:49:d0:1b:01:14:93:0f:db:2a:07:51:cc:7a: 11:1b:76:29:f4:be:3f:21:1c:b4:30:9c:ab:9c:f5:11:b4:c1: 82:2a:4c:5c:fe:6e:cd:f7:c5:78:1a:2f:65:99:ed:94:ef:82: 9a:42:47:3f:00:f2:7c:9f:1e:84:75:fa:27:71:98:7b:30:08: 5d:19:38:73:8d:d4:ea:da:c2:89:f6:3a:72:35:9c:ed:3a:51: 5b:04:9d:e9:72:c6:0e:7f:69:c3:27:bc:f6:bc:fd:9c:18:c4: 83:44:c0:c3:d2:de:f1:95:4a:c2:10:d9:cb:f5:9e:be:70:f9: 29:ae:51:43:f9:bc:a0:87:4d:7f:ed:f2:64:af:9b:ad:44:62: 36:5f:bc:f5:a1:fb:f7:e5:fb:a4:92:df:f2:55:c8:16:1c:a9: 24:d0:23:f6:a6:3f:f4:fe:e8:46:b2:f7:d6:46:d4:53:50:03: 85:93:f5:1f:0b:e1:06:8c:28:d9:60:26:5f:8c:a4:03:11:69: d7:c8:65:f7:2d:79:80:a8:80:d4:ef:dd:be:3e:01:04:e9:e8: 90:ce:1b:a7:87:34:e1:52:64:1f:ac:56:b4:32:33:1b:84:fe: e3:32:24:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsYA2H71ydnsgj8GcY+tFhAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy ZDZmZjkwHhcNMjUxMjEzMTQwMDMzWhcNMjUxMjE0MTQwMDMzWjAzMTEwLwYDVQQD EygyYmExOTljYTQzMjA4ZDdmOGU2YjhmMzg5MWFlMDI0OTc2MTcwZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qD7oHLhq/SwWBJKDB8POFbCa94z URZ+GKwv6dPJ0cj6tu9wIbIBYheqrDstHSsrDfmJb6DOWYMTWxYTFFPiJ9GaB8Sm LmLTPhQ8WKHUKSjUW5s9GplRCO1+KB9V178K57N71/7NgWD8eNaUN+dEf9CL6C77 l2/iM9Tj+dGr860Qxf05OO1ZyyipMK0Jpw+W1ioGMv+8mLaFh1FLND0JLa7JwpxM l2aapHZx9BJQ1OIb7i7WTXKs3kaVVvKCAuet95ZGuw1LCPstB/J9h8EL9Sszj9s0 eHbcnZ3uMHIQ4vKLOa7EQGUj8LTAABj+GsFaveysUJGsna6mXoJ07Ojo7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuhmcpDII1/jmuPOJGuAkl2Fw8pMB8GA1UdIwQY MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuKzrH/l He8KvrRrQ6a60sLBEItw45pJ0BsBFJMP2yoHUcx6ERt2KfS+PyEctDCcq5z1EbTB gipMXP5uzffFeBovZZntlO+CmkJHPwDyfJ8ehHX6J3GYezAIXRk4c43U6trCifY6 cjWc7TpRWwSd6XLGDn9pwye89rz9nBjEg0TAw9Le8ZVKwhDZy/WevnD5Ka5RQ/m8 oIdNf+3yZK+brURiNl+89aH79+X7pJLf8lXIFhypJNAj9qY/9P7oRrL31kbUU1AD hZP1HwvhBowo2WAmX4ykAxFp18hl9y15gKiA1O/dvj4BBOnokM4bp4c04VJkH6xW tDIzG4T+4zIkow== -----END CERTIFICATE-----Generated at Sun Dec 14 00:04:42 2025 by rpki-client