This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json) Hash identifier: LTMniav0XxkDi87v7ClU9RnUmA3PeBpRsEs/S0J2fDY= Subject key identifier: BD:60:33:A1:86:96:5D:DA:1B:7C:67:E3:E1:13:4F:68:CC:FB:90:4F Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10 Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010 Certificate serial: 019B5C408E844706FE16D592C79EDBD17C06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft Manifest number: 1630 Signing time: Fri 26 Dec 2025 20:01:33 +0000 Manifest this update: Fri 26 Dec 2025 20:01:33 +0000 Manifest next update: Sat 27 Dec 2025 20:01:33 +0000 Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: jJ0oabGkMqmLdzc8ffW5VPBIHG2ZeH+x9QqWwrrKtl8=) 2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=) 3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:40:8e:84:47:06:fe:16:d5:92:c7:9e:db:d1:7c:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17672556984415b78e9d15461784c8c4e691d010 Validity Not Before: Dec 26 20:01:33 2025 GMT Not After : Dec 27 20:01:33 2025 GMT Subject: CN=bd6033a186965dda1b7c67e3e1134f68ccfb904f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:31:49:60:b7:79:67:48:00:03:d1:56:66:fa: a8:86:a4:d9:6b:97:24:b4:84:d2:d1:28:b4:e9:b0: 01:e5:d3:8c:e0:6f:49:5d:2d:86:44:a6:80:a5:52: a4:fa:ba:1f:6e:48:34:80:49:71:e7:96:36:da:ce: c1:43:75:7a:fd:44:be:a3:70:bb:cb:0d:15:0a:d6: 67:c4:36:df:5f:cf:35:4c:14:46:eb:25:df:7d:c5: 29:4f:a5:23:d7:9c:cb:c3:2f:28:25:60:5b:ef:65: 5b:2f:69:21:d0:78:05:39:70:99:25:3b:56:84:22: c6:90:a5:ae:fc:57:b3:32:52:be:d5:6e:6a:24:73: f8:e5:19:43:17:41:b2:52:55:2e:99:16:39:fc:83: f2:80:8d:d2:d3:1e:d6:cc:00:90:e8:72:b5:e1:ed: 50:0a:be:d4:eb:b0:d3:3c:7e:ad:3a:52:51:de:f0: 93:d5:7d:b4:53:fb:08:6b:e9:bd:ca:42:e5:88:c1: b5:3a:60:48:80:f7:d3:18:1a:73:25:29:a3:87:59: c2:dd:8e:3f:68:89:15:f5:45:c2:94:cd:d9:88:55: a8:fc:ad:a9:00:c7:d4:4c:15:b7:2c:73:05:9b:86: 2e:ce:b7:6e:09:12:3e:cb:87:8f:e2:23:d8:22:5e: a0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:60:33:A1:86:96:5D:DA:1B:7C:67:E3:E1:13:4F:68:CC:FB:90:4F X509v3 Authority Key Identifier: keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:28:b5:b9:13:a2:11:e2:2c:38:15:e3:39:04:07:74:69:60: b1:f0:80:0a:d9:e8:68:00:34:61:39:d7:9c:7f:1a:80:1b:1c: 9c:bd:3a:c9:72:52:b3:94:e8:fe:ea:0c:7e:dc:3c:01:d9:8e: 1e:58:5b:e4:55:bf:af:1c:a0:41:19:ed:3d:06:30:d7:9d:b4: 99:f7:b5:b9:d6:0f:e5:cd:c6:c7:d5:c3:0f:56:ce:93:67:7e: bf:67:ed:9c:f4:b9:27:74:52:16:7f:65:4d:9e:55:a8:cc:60: 3f:c9:6c:6c:b2:2e:3a:ad:f9:79:b6:cf:46:14:98:47:c9:51: f3:fb:c0:81:af:3d:07:0d:08:9f:34:93:97:d3:ca:f3:6d:40: 28:78:ed:aa:13:22:32:db:19:bb:e7:94:5a:42:2c:b1:a5:f6: 5f:f8:69:41:14:15:13:ab:02:dc:af:99:71:53:d7:16:38:2c: 87:56:c0:1f:fd:87:68:4e:04:58:76:69:59:c4:86:84:e3:0c: 77:8a:98:37:19:70:3a:0f:3b:42:15:61:4e:51:c8:40:fa:20: 31:99:7c:2b:e1:1a:51:df:9e:48:fd:70:4f:4b:e9:37:20:53: 19:38:83:02:18:8a:ec:95:05:2c:46:b7:58:30:d2:cb:b4:e9: 5a:20:4e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcQI6ERwb+FtWSx57b0XwGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5 MWQwMTAwHhcNMjUxMjI2MjAwMTMzWhcNMjUxMjI3MjAwMTMzWjAzMTEwLwYDVQQD EyhiZDYwMzNhMTg2OTY1ZGRhMWI3YzY3ZTNlMTEzNGY2OGNjZmI5MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDFJYLd5Z0gAA9FWZvqohqTZa5ck tITS0Si06bAB5dOM4G9JXS2GRKaApVKk+rofbkg0gElx55Y22s7BQ3V6/US+o3C7 yw0VCtZnxDbfX881TBRG6yXffcUpT6Uj15zLwy8oJWBb72VbL2kh0HgFOXCZJTtW hCLGkKWu/FezMlK+1W5qJHP45RlDF0GyUlUumRY5/IPygI3S0x7WzACQ6HK14e1Q Cr7U67DTPH6tOlJR3vCT1X20U/sIa+m9ykLliMG1OmBIgPfTGBpzJSmjh1nC3Y4/ aIkV9UXClM3ZiFWo/K2pAMfUTBW3LHMFm4YuzrduCRI+y4eP4iPYIl6gmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1gM6GGll3aG3xn4+ETT2jM+5BPMB8GA1UdIwQY MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCi1uROi EeIsOBXjOQQHdGlgsfCACtnoaAA0YTnXnH8agBscnL06yXJSs5To/uoMftw8AdmO Hlhb5FW/rxygQRntPQYw1520mfe1udYP5c3Gx9XDD1bOk2d+v2ftnPS5J3RSFn9l TZ5VqMxgP8lsbLIuOq35ebbPRhSYR8lR8/vAga89Bw0InzSTl9PK821AKHjtqhMi MtsZu+eUWkIssaX2X/hpQRQVE6sC3K+ZcVPXFjgsh1bAH/2HaE4EWHZpWcSGhOMM d4qYNxlwOg87QhVhTlHIQPogMZl8K+EaUd+eSP1wT0vpNyBTGTiDAhiK7JUFLEa3 WDDSy7TpWiBO8g== -----END CERTIFICATE-----Generated at Fri Dec 26 22:44:03 2025 by rpki-client