This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json) Hash identifier: JYs0M3cZE/Bmdh5nwzDnvzHD4/Gsq4ix/UBW/ysYQFo= Subject key identifier: 2A:5D:ED:AB:16:54:1E:FD:0F:D0:A1:53:D5:8D:BF:F8:51:68:0A:B5 Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Certificate serial: 019B337AFDF59AFB3E022ADC5F63B0BEB561 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft Manifest number: 1058 Signing time: Thu 18 Dec 2025 22:00:56 +0000 Manifest this update: Thu 18 Dec 2025 22:00:56 +0000 Manifest next update: Fri 19 Dec 2025 22:00:56 +0000 Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: 5amNipzGe90g8uPlcFdzhUQNnbSCCZ52Za4hQO3lo+c=) 2: M45Q5osiYzOCttb5qUkWO2UNnW8.roa (hash: 7YD67txjderrmSpgg9cu7S2KQewiqgBNt7grVOcHVbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:fd:f5:9a:fb:3e:02:2a:dc:5f:63:b0:be:b5:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Validity Not Before: Dec 18 22:00:56 2025 GMT Not After : Dec 19 22:00:56 2025 GMT Subject: CN=2a5dedab16541efd0fd0a153d58dbff851680ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:cf:53:df:74:12:15:0d:bb:13:3a:a6:d6: ef:d3:9f:f7:d7:7a:ab:12:11:02:f2:eb:86:ce:39: 1d:e0:d8:47:d9:06:93:28:8a:74:99:f3:bb:d8:22: 9f:75:35:c3:7c:67:c5:6d:3b:37:7e:69:70:13:50: 2a:80:0a:c4:d1:c3:a1:bb:63:e2:a8:4c:48:22:56: 6b:b4:fc:3a:fa:7a:54:c3:5a:c6:0f:4a:8f:5d:a5: 61:db:9e:e6:96:24:1a:d6:0b:65:a8:92:16:fd:a0: 2f:09:ca:9e:2e:3d:41:1f:d1:01:f3:0f:96:ec:9d: 8b:95:7a:ec:68:48:7f:51:43:7d:92:ca:96:77:85: d7:c4:09:ca:bd:1a:b3:f0:2d:84:8d:14:52:9d:a2: 01:10:d5:bd:1e:42:34:99:40:f5:e5:7c:aa:47:5f: f0:2e:c1:ab:a2:e5:38:b0:b6:eb:87:32:91:7e:a9: 47:5b:f5:50:52:b1:72:f4:f4:a4:55:7b:d0:0a:1c: 3b:91:cb:3a:e5:72:7b:77:f0:1b:84:13:ff:cf:0b: 40:fd:e9:00:63:d6:d3:8b:26:73:1f:51:e8:26:1a: 3c:0d:05:ac:f6:9c:96:9c:42:e3:2b:52:f3:4b:58: 69:9a:5f:df:70:4c:52:e0:fa:43:5f:0b:fb:d7:c4: 77:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:ED:AB:16:54:1E:FD:0F:D0:A1:53:D5:8D:BF:F8:51:68:0A:B5 X509v3 Authority Key Identifier: keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:9f:bc:a0:75:50:77:39:28:c3:bb:c7:b6:2a:26:9e:56: 9f:50:99:f9:4e:1f:2e:d1:e2:5d:ce:27:b5:10:7b:24:7a:fc: 01:da:9e:bd:6f:0b:b6:0d:45:cb:2f:5b:24:d9:33:cb:a7:20: 4d:6a:2e:1d:3f:02:c1:f7:eb:51:d9:00:c2:bd:b4:a3:2c:c4: f6:f5:f1:d5:bd:55:7c:43:77:ab:b2:09:20:0e:46:2f:52:cb: 78:9e:69:1e:cd:83:72:36:de:e5:6d:27:df:79:44:d2:7e:05: 08:76:31:ea:53:81:eb:4f:17:9e:b7:ba:72:38:7c:8d:6f:9f: a1:27:ff:52:15:e1:b1:b3:b7:fe:6f:52:28:b5:16:a5:86:fb: 22:30:93:b6:a1:f2:01:5e:fc:b8:27:fb:a0:55:45:12:86:7b: 97:c4:4a:30:b7:52:98:9a:29:7a:51:53:52:cc:35:ed:b0:24: 9c:f3:3c:d4:ec:54:04:69:5c:3e:cf:01:06:45:61:6a:86:be: 6b:ac:3d:8c:75:c9:5d:c6:4d:be:47:97:84:4d:07:a5:91:dd: e7:06:ba:ed:c8:3d:d1:78:43:3e:df:e5:6a:e5:f8:d8:01:ac: 23:35:0b:34:d6:2a:71:f1:89:49:43:ee:67:d2:bf:83:e7:bb: 64:bd:a5:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszev31mvs+AircX2OwvrVhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNk N2RhZDYwHhcNMjUxMjE4MjIwMDU2WhcNMjUxMjE5MjIwMDU2WjAzMTEwLwYDVQQD EygyYTVkZWRhYjE2NTQxZWZkMGZkMGExNTNkNThkYmZmODUxNjgwYWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/nPU990EhUNuxM6ptbv05/313qr EhEC8uuGzjkd4NhH2QaTKIp0mfO72CKfdTXDfGfFbTs3fmlwE1AqgArE0cOhu2Pi qExIIlZrtPw6+npUw1rGD0qPXaVh257mliQa1gtlqJIW/aAvCcqeLj1BH9EB8w+W 7J2LlXrsaEh/UUN9ksqWd4XXxAnKvRqz8C2EjRRSnaIBENW9HkI0mUD15XyqR1/w LsGrouU4sLbrhzKRfqlHW/VQUrFy9PSkVXvQChw7kcs65XJ7d/AbhBP/zwtA/ekA Y9bTiyZzH1HoJho8DQWs9pyWnELjK1LzS1hpml/fcExS4PpDXwv718R3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpd7asWVB79D9ChU9WNv/hRaAq1MB8GA1UdIwQY MBaAFBd4z8CaNjpzzI3aNiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjIt MDEwY2YyZGQ0MGFmLzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFm LzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIwqfvKB1 UHc5KMO7x7YqJp5Wn1CZ+U4fLtHiXc4ntRB7JHr8AdqevW8Ltg1Fyy9bJNkzy6cg TWouHT8CwffrUdkAwr20oyzE9vXx1b1VfEN3q7IJIA5GL1LLeJ5pHs2Dcjbe5W0n 33lE0n4FCHYx6lOB608Xnre6cjh8jW+foSf/UhXhsbO3/m9SKLUWpYb7IjCTtqHy AV78uCf7oFVFEoZ7l8RKMLdSmJopelFTUsw17bAknPM81OxUBGlcPs8BBkVhaoa+ a6w9jHXJXcZNvkeXhE0HpZHd5wa67cg90XhDPt/lauX42AGsIzULNNYqcfGJSUPu Z9K/g+e7ZL2lJw== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:31 2025 by rpki-client