This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json) Hash identifier: IO9HtZi/brIERn/lQdxFqYtQRbRj+TDGv6r50++8/Xo= Subject key identifier: 91:7C:A7:8C:C1:F6:9D:BA:B9:1B:E8:70:3C:00:D0:F6:8B:13:96:51 Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a Certificate serial: 019B48B8F9F4DF0596206CA77CBE5736D793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft Manifest number: 0E88 Signing time: Tue 23 Dec 2025 01:00:40 +0000 Manifest this update: Tue 23 Dec 2025 01:00:40 +0000 Manifest next update: Wed 24 Dec 2025 01:00:40 +0000 Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: kKWsI+p9xlNO/y8wgKKfM5ilLV/6q/hOL1VrWKBwVoQ=) 2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b8:f9:f4:df:05:96:20:6c:a7:7c:be:57:36:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a Validity Not Before: Dec 23 01:00:40 2025 GMT Not After : Dec 24 01:00:40 2025 GMT Subject: CN=917ca78cc1f69dbab91be8703c00d0f68b139651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:66:0c:80:df:72:f9:55:04:6e:1c:0b:66:79: 04:c6:89:ee:20:a6:d4:2f:12:23:6d:a4:43:2c:3c: ef:9f:e5:79:bd:05:8b:1e:03:a9:c8:69:ac:31:e8: f3:b5:49:f3:0f:29:eb:57:b4:62:14:3d:1f:53:1d: ae:16:e7:4a:16:54:f1:12:1b:3f:0a:84:7d:79:00: 2a:47:64:5d:d2:52:27:b0:28:fd:9b:cb:5c:ac:6c: 04:e4:3c:a2:2f:7a:eb:82:a6:86:66:51:a5:77:ed: b2:fb:50:38:fd:cb:cd:e9:73:4c:0f:6d:45:8c:c3: 19:55:ee:76:3b:cf:7d:bf:1a:e2:67:cd:a9:d3:f1: a5:a1:ce:e1:8f:67:09:bb:b3:69:f6:35:07:8c:54: 43:d0:38:7f:20:0d:c3:eb:6c:e8:80:ad:cc:84:2e: 09:4c:65:c7:a4:5b:4d:0e:29:8f:35:92:8f:a6:4a: 47:d2:4c:18:26:f4:b4:26:06:94:57:6c:2c:a2:0e: d8:d3:51:d2:86:4b:62:3c:5b:75:b2:ae:ab:d3:d2: 96:73:b9:72:e6:23:33:51:4a:9d:ff:75:18:23:34: 7a:61:38:54:9b:72:a8:9a:43:94:3a:1d:99:38:86: 46:0f:6c:a5:01:c9:ef:7f:9f:42:0d:9a:c4:d4:9c: 56:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:A7:8C:C1:F6:9D:BA:B9:1B:E8:70:3C:00:D0:F6:8B:13:96:51 X509v3 Authority Key Identifier: keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:90:c7:da:d2:c2:ce:c6:74:ef:2c:2b:58:b0:f0:c6:42:ac: 67:d0:f3:7f:a6:ce:3c:56:43:9f:c8:99:4b:26:5e:c2:dc:db: d0:83:33:6a:e8:a4:09:0e:0f:cd:de:37:79:2c:ef:4a:1c:1b: b6:71:21:ef:8d:ed:35:f1:f5:c6:e1:97:d0:6f:cd:1a:a9:1a: 50:4e:79:50:7f:73:7c:f3:a3:47:07:91:0e:73:0b:51:84:85: 53:f7:f0:31:b8:e5:b3:f4:27:e9:f6:be:43:59:b8:e7:1d:58: b9:93:bc:f2:5d:b1:21:ce:49:bd:f2:cd:b4:c2:fc:a4:9a:e7: 4b:0f:69:6f:aa:d3:1b:b7:5e:25:0f:14:78:0f:fd:9c:1c:ce: 7c:d9:29:0b:a4:d3:32:b0:81:c5:81:46:0a:e2:ed:12:d6:20: 10:5a:dc:b4:9e:e8:53:26:ee:f8:76:38:b5:ba:c8:58:90:d8: ce:1a:a3:65:fc:83:df:51:60:31:3c:ed:66:6b:cc:0a:61:66: 25:b1:34:51:dc:e2:17:c9:71:c2:6c:10:78:73:1d:39:08:48: 86:d0:38:76:58:30:c6:1f:0b:1c:8c:41:54:a5:56:fc:3d:a6: 03:4f:a8:53:be:6d:44:76:1c:18:2e:1c:7e:35:16:3f:ed:56: 80:13:b8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuPn03wWWIGynfL5XNteTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4 MmQ0M2EwHhcNMjUxMjIzMDEwMDQwWhcNMjUxMjI0MDEwMDQwWjAzMTEwLwYDVQQD Eyg5MTdjYTc4Y2MxZjY5ZGJhYjkxYmU4NzAzYzAwZDBmNjhiMTM5NjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2YMgN9y+VUEbhwLZnkExonuIKbU LxIjbaRDLDzvn+V5vQWLHgOpyGmsMejztUnzDynrV7RiFD0fUx2uFudKFlTxEhs/ CoR9eQAqR2Rd0lInsCj9m8tcrGwE5DyiL3rrgqaGZlGld+2y+1A4/cvN6XNMD21F jMMZVe52O899vxriZ82p0/Gloc7hj2cJu7Np9jUHjFRD0Dh/IA3D62zogK3MhC4J TGXHpFtNDimPNZKPpkpH0kwYJvS0JgaUV2wsog7Y01HShktiPFt1sq6r09KWc7ly 5iMzUUqd/3UYIzR6YThUm3KomkOUOh2ZOIZGD2ylAcnvf59CDZrE1JxWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF8p4zB9p26uRvocDwA0PaLE5ZRMB8GA1UdIwQY MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4 LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZDH2tLC zsZ07ywrWLDwxkKsZ9Dzf6bOPFZDn8iZSyZewtzb0IMzauikCQ4Pzd43eSzvShwb tnEh743tNfH1xuGX0G/NGqkaUE55UH9zfPOjRweRDnMLUYSFU/fwMbjls/Qn6fa+ Q1m45x1YuZO88l2xIc5JvfLNtML8pJrnSw9pb6rTG7deJQ8UeA/9nBzOfNkpC6TT MrCBxYFGCuLtEtYgEFrctJ7oUybu+HY4tbrIWJDYzhqjZfyD31FgMTztZmvMCmFm JbE0UdziF8lxwmwQeHMdOQhIhtA4dlgwxh8LHIxBVKVW/D2mA0+oU75tRHYcGC4c fjUWP+1WgBO46g== -----END CERTIFICATE-----Generated at Tue Dec 23 11:00:00 2025 by rpki-client