This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json) Hash identifier: 4nxKMQuMke0J3uZq9izOA9Je6B1L/4ECe66LjsY3Se8= Subject key identifier: E6:0A:C6:AF:D6:FA:FA:71:B1:67:6A:3E:5D:1D:56:0F:97:46:CE:C7 Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302 Certificate serial: 019B37584DFEE0FAB7F5C67E0649D9350A47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft Manifest number: 0E18 Signing time: Fri 19 Dec 2025 16:01:32 +0000 Manifest this update: Fri 19 Dec 2025 16:01:32 +0000 Manifest next update: Sat 20 Dec 2025 16:01:32 +0000 Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: +1GPgwTQmKPD3aNxTZBopV3gm/AtkFVBUQBcU3v4tyg=) 2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:4d:fe:e0:fa:b7:f5:c6:7e:06:49:d9:35:0a:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302 Validity Not Before: Dec 19 16:01:32 2025 GMT Not After : Dec 20 16:01:32 2025 GMT Subject: CN=e60ac6afd6fafa71b1676a3e5d1d560f9746cec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:97:60:83:26:e9:5b:a4:1c:b6:15:b2:a3:3c: 66:01:b9:02:61:05:f7:b4:52:8a:6e:e0:0b:dc:b0: f2:3d:19:d5:04:d9:a6:0e:b7:63:b1:46:16:b4:b5: d9:42:ec:0f:bd:c3:72:91:85:3a:1a:96:cb:f0:e3: 0d:b6:1f:86:da:20:a4:ff:00:08:c9:a6:b2:f0:b0: cf:95:22:b7:ff:a9:29:dc:c2:db:61:1f:8e:b7:f8: a2:29:bc:12:35:a2:a4:98:b6:2e:f9:06:46:23:0e: 70:73:59:0e:11:2d:33:15:a9:32:cb:27:38:50:3f: 24:e2:1b:bb:55:5b:da:f6:92:36:cb:23:6a:f2:bb: ba:cd:3e:80:07:46:81:f2:f1:02:c8:27:e6:10:df: 0b:39:9d:b0:92:b5:c4:67:fd:3f:75:f0:87:58:cf: 8f:27:b0:98:ca:4c:c3:5d:83:e1:c3:d1:29:28:df: 02:d1:aa:96:72:44:e6:19:37:01:66:2f:1d:64:39: f7:0a:0a:4b:71:39:ea:e7:48:2b:f2:3b:bd:19:5b: f3:3c:29:4c:d1:f5:d8:c5:89:f6:f6:6d:63:59:63: c8:23:c4:33:e0:36:f7:80:62:eb:57:82:5d:d6:7d: 7e:58:d1:c8:bf:03:f6:c0:e9:c1:18:36:c0:8a:2d: 27:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0A:C6:AF:D6:FA:FA:71:B1:67:6A:3E:5D:1D:56:0F:97:46:CE:C7 X509v3 Authority Key Identifier: keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d5:47:33:97:df:cb:fe:2c:70:62:18:41:a9:c7:f7:47:e4: b4:d1:c1:2d:15:7d:eb:04:c6:25:89:85:94:58:a7:79:dc:26: 16:0a:ca:c9:82:88:c8:a9:21:26:df:48:a4:ed:7c:72:76:8c: d4:7c:48:62:04:97:dd:d1:ff:3c:33:8a:7f:56:a3:3a:b8:d2: 88:c8:84:c9:ad:89:75:dc:49:50:d5:f3:64:2e:38:bb:27:11: 1f:db:f3:be:af:2f:a4:3a:bb:4a:26:b7:bb:24:84:f7:17:e7: 62:4c:03:42:b5:24:2a:a8:2a:07:f9:10:de:43:a2:ef:17:54: 07:f9:65:3d:49:c8:e1:aa:f2:85:ee:b4:1f:0e:d0:4e:0e:ee: b7:82:8d:77:2a:e2:59:57:be:50:54:70:c7:e0:73:4d:e5:86: cc:97:fa:3b:83:38:dd:58:e8:c9:3b:a0:7c:79:c8:f0:8e:7c: 6b:88:f6:8e:18:56:43:50:ea:18:8a:7d:bb:f2:8c:5a:89:f4: e0:9c:32:9a:46:98:92:9e:e8:25:24:45:dd:7d:9b:c3:65:b3: 8a:43:b7:06:d7:e2:f1:b1:8e:f9:a4:14:45:d9:eb:69:0a:21: 54:fe:2c:18:75:9a:bf:ae:4f:c6:3a:e9:e8:de:9e:fe:71:2d: a7:f3:cf:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WE3+4Pq39cZ+BknZNQpHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3 OTIzMDIwHhcNMjUxMjE5MTYwMTMyWhcNMjUxMjIwMTYwMTMyWjAzMTEwLwYDVQQD EyhlNjBhYzZhZmQ2ZmFmYTcxYjE2NzZhM2U1ZDFkNTYwZjk3NDZjZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZdggybpW6QcthWyozxmAbkCYQX3 tFKKbuAL3LDyPRnVBNmmDrdjsUYWtLXZQuwPvcNykYU6GpbL8OMNth+G2iCk/wAI yaay8LDPlSK3/6kp3MLbYR+Ot/iiKbwSNaKkmLYu+QZGIw5wc1kOES0zFakyyyc4 UD8k4hu7VVva9pI2yyNq8ru6zT6AB0aB8vECyCfmEN8LOZ2wkrXEZ/0/dfCHWM+P J7CYykzDXYPhw9EpKN8C0aqWckTmGTcBZi8dZDn3CgpLcTnq50gr8ju9GVvzPClM 0fXYxYn29m1jWWPII8Qz4Db3gGLrV4Jd1n1+WNHIvwP2wOnBGDbAii0n4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYKxq/W+vpxsWdqPl0dVg+XRs7HMB8GA1UdIwQY MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1 LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9VHM5ff y/4scGIYQanH90fktNHBLRV96wTGJYmFlFinedwmFgrKyYKIyKkhJt9IpO18cnaM 1HxIYgSX3dH/PDOKf1ajOrjSiMiEya2JddxJUNXzZC44uycRH9vzvq8vpDq7Sia3 uySE9xfnYkwDQrUkKqgqB/kQ3kOi7xdUB/llPUnI4aryhe60Hw7QTg7ut4KNdyri WVe+UFRwx+BzTeWGzJf6O4M43VjoyTugfHnI8I58a4j2jhhWQ1DqGIp9u/KMWon0 4JwymkaYkp7oJSRF3X2bw2WzikO3Btfi8bGO+aQURdnraQohVP4sGHWav65Pxjrp 6N6e/nEtp/PPYg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:48:14 2025 by rpki-client