This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json) Hash identifier: FWejm87qK1VK2oRi41G94WGI8aLKKrCK2DMcArsjFP8= Subject key identifier: CD:E9:0E:6C:9F:CB:88:29:EC:53:AA:D0:31:90:1E:EC:6F:EF:AC:EC Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Certificate serial: 019B0E9311AB14E1174DC0EDB8992E011684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft Manifest number: 0686 Signing time: Thu 11 Dec 2025 18:01:17 +0000 Manifest this update: Thu 11 Dec 2025 18:01:17 +0000 Manifest next update: Fri 12 Dec 2025 18:01:17 +0000 Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: wfqp2Ex8UwE+ubxiGAHtydRbrOHFE47puTfA/69XiJw=) 2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:11:ab:14:e1:17:4d:c0:ed:b8:99:2e:01:16:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Validity Not Before: Dec 11 18:01:17 2025 GMT Not After : Dec 12 18:01:17 2025 GMT Subject: CN=cde90e6c9fcb8829ec53aad031901eec6fefacec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ab:89:8f:ed:f1:e8:05:f2:42:d0:46:2c:a1: 04:39:b5:d0:20:c9:44:f9:75:63:3c:ce:86:ac:49: 0d:a6:c5:e6:b7:e7:f5:21:3f:17:e2:18:1f:6f:5f: ae:49:c9:d6:fd:e4:3b:f3:be:30:d5:42:8d:06:c3: 5d:ab:c8:3a:54:20:0a:18:a0:86:90:6f:84:41:30: ef:e6:f0:ef:c8:0d:a1:72:75:11:03:73:b5:7e:af: cf:40:fc:3d:17:a5:56:a1:e8:87:5f:87:82:d2:a6: a6:95:12:06:c1:78:b0:bc:d9:9d:b8:a7:96:39:b3: 03:b7:e2:23:2f:b5:50:67:42:e2:a2:3e:35:04:0d: 63:74:5f:3b:a3:51:79:eb:a2:ed:86:ff:df:23:bb: f0:35:b0:c4:c7:7e:7d:07:9f:29:5c:5e:3a:07:83: a3:74:a1:0f:cc:39:50:6e:65:06:83:b3:a1:69:c8: b1:fa:20:cd:d5:9a:0f:db:99:ab:2c:73:34:12:6f: b3:45:9b:cf:91:f1:5c:ac:bd:f9:19:82:3b:0e:dd: f6:dc:41:2c:51:5e:7b:cb:e1:78:71:d4:7b:0c:bb: fb:00:27:c8:15:05:06:a1:fd:cd:c7:79:2f:4c:5b: b9:d3:2b:9e:f4:4b:c3:50:2b:91:c7:89:e6:89:32: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:0E:6C:9F:CB:88:29:EC:53:AA:D0:31:90:1E:EC:6F:EF:AC:EC X509v3 Authority Key Identifier: keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d2:ec:48:d1:a3:13:c4:25:72:0a:1a:69:46:15:4e:02:d8: 0d:e4:e1:b2:90:11:e4:da:62:a2:09:9f:76:05:86:e6:11:3f: 9c:6b:65:e3:fa:39:f0:fb:3c:6a:e5:d5:eb:1a:d5:0a:1f:4d: 7f:80:d4:5b:a5:01:6a:56:57:73:21:f8:b3:6b:72:70:2b:34: 58:12:46:99:63:9d:9d:dd:25:f4:96:83:32:ce:40:5d:5c:4c: 46:3d:02:9b:28:7d:7f:38:06:1e:e2:a9:95:91:04:1d:36:1b: a8:49:cd:f2:b9:43:bd:38:06:6c:4b:a2:1e:0a:07:95:57:65: 24:50:3d:71:7d:2e:17:95:52:fa:54:e9:75:56:58:5d:06:6b: f0:f5:e4:60:26:83:b4:2b:7a:87:6d:08:62:1b:ee:de:08:ec: 81:d8:b1:8a:37:5c:6b:0f:49:e6:eb:60:ff:7c:e0:56:2e:ad: d2:61:9d:bc:0c:c4:dc:8e:c0:fd:f5:9d:85:3a:fd:b5:74:e2: 43:8a:08:3e:2f:0c:3f:ba:1f:2d:db:62:97:95:77:2e:51:42: f2:0b:33:55:2b:ff:58:41:1a:51:82:8e:82:24:3f:05:af:be: 27:1d:a1:22:14:b6:c6:88:95:79:81:f3:17:d8:70:69:8a:1a: 56:21:e3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkxGrFOEXTcDtuJkuARaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk MDRiOTUwHhcNMjUxMjExMTgwMTE3WhcNMjUxMjEyMTgwMTE3WjAzMTEwLwYDVQQD EyhjZGU5MGU2YzlmY2I4ODI5ZWM1M2FhZDAzMTkwMWVlYzZmZWZhY2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4auJj+3x6AXyQtBGLKEEObXQIMlE +XVjPM6GrEkNpsXmt+f1IT8X4hgfb1+uScnW/eQ7874w1UKNBsNdq8g6VCAKGKCG kG+EQTDv5vDvyA2hcnURA3O1fq/PQPw9F6VWoeiHX4eC0qamlRIGwXiwvNmduKeW ObMDt+IjL7VQZ0Lioj41BA1jdF87o1F566Lthv/fI7vwNbDEx359B58pXF46B4Oj dKEPzDlQbmUGg7Ohacix+iDN1ZoP25mrLHM0Em+zRZvPkfFcrL35GYI7Dt323EEs UV57y+F4cdR7DLv7ACfIFQUGof3Nx3kvTFu50yue9EvDUCuRx4nmiTKiTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3pDmyfy4gp7FOq0DGQHuxv76zsMB8GA1UdIwQY MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9LsSNGj E8QlcgoaaUYVTgLYDeThspAR5NpiogmfdgWG5hE/nGtl4/o58Ps8auXV6xrVCh9N f4DUW6UBalZXcyH4s2tycCs0WBJGmWOdnd0l9JaDMs5AXVxMRj0Cmyh9fzgGHuKp lZEEHTYbqEnN8rlDvTgGbEuiHgoHlVdlJFA9cX0uF5VS+lTpdVZYXQZr8PXkYCaD tCt6h20IYhvu3gjsgdixijdcaw9J5utg/3zgVi6t0mGdvAzE3I7A/fWdhTr9tXTi Q4oIPi8MP7ofLdtil5V3LlFC8gszVSv/WEEaUYKOgiQ/Ba++Jx2hIhS2xoiVeYHz F9hwaYoaViHjlA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:12:22 2025 by rpki-client