This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json) Hash identifier: C7m1UvxX6QkfGh7vgPE6378vvjxrFGXSlRFRm/qN7pM= Subject key identifier: D2:EF:EF:B0:46:52:04:22:2F:B6:C8:70:58:75:DD:79:43:3E:C0:0A Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5 Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5 Certificate serial: 019B378E605E14D7349B542E6D6E672C773D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft Manifest number: 0F27 Signing time: Fri 19 Dec 2025 17:00:36 +0000 Manifest this update: Fri 19 Dec 2025 17:00:36 +0000 Manifest next update: Sat 20 Dec 2025 17:00:36 +0000 Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: /SKxL55EWFPLuyHcOtK1NSXW3XVzbGfEm8RvOiPO60g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:60:5e:14:d7:34:9b:54:2e:6d:6e:67:2c:77:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5 Validity Not Before: Dec 19 17:00:36 2025 GMT Not After : Dec 20 17:00:36 2025 GMT Subject: CN=d2efefb0465204222fb6c8705875dd79433ec00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:dc:77:54:a5:4b:e7:af:0c:d0:ad:07:75:2a: bf:c3:90:5e:b2:cf:23:37:36:13:8a:85:44:aa:06: b1:ac:1b:cb:a9:ff:d7:a2:de:c8:3b:74:1b:a6:bc: c1:24:8d:31:5a:54:13:43:55:a0:3e:c3:0c:51:ec: 5a:e6:4b:cf:d2:d0:18:6b:bc:d4:33:fc:ca:0f:25: c4:dc:96:9f:94:02:94:e9:c8:1e:4e:5b:dd:4c:0c: ff:8e:16:00:5a:d0:9e:99:9c:72:6b:e8:c9:85:44: 56:5e:48:c4:42:81:38:b2:28:54:81:98:3d:89:48: a7:9d:08:95:7a:ed:15:07:1d:f6:57:30:2f:f7:69: 37:47:65:82:cf:f1:23:65:c2:c9:28:e6:39:43:64: ad:8d:c7:58:7b:d6:f3:0f:ce:c2:61:9f:84:40:da: fe:e4:03:ba:68:40:05:25:87:c0:1d:73:42:5a:d9: 87:ed:4e:99:0f:1a:6e:85:9b:95:99:41:46:d7:1f: b7:a7:5f:de:e3:ff:19:bb:49:17:6d:11:37:1f:5a: db:69:8e:f7:eb:0b:cc:25:ce:5e:fb:b6:cc:30:91: d3:66:bd:18:bf:4b:cd:1f:fb:7e:42:33:39:5b:dd: bc:34:72:d6:5a:64:34:13:79:ff:44:ac:d0:36:8b: 39:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:EF:EF:B0:46:52:04:22:2F:B6:C8:70:58:75:DD:79:43:3E:C0:0A X509v3 Authority Key Identifier: keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:f9:e1:f1:fa:0d:fd:05:92:23:5d:7f:c7:de:e4:f4:7f: 0f:44:1f:48:63:82:b2:df:3e:92:3b:08:b4:70:49:e0:fe:72: 7d:1b:b4:17:2f:ad:bf:84:71:03:b9:26:f8:96:3e:ef:7e:4e: e4:bd:fd:e8:b8:bd:0a:26:d4:e2:23:25:05:b8:05:34:c1:ad: af:f0:e6:03:dc:9a:99:9a:dd:c3:71:fa:74:b5:56:0d:8c:60: 00:0c:c7:0f:6e:1a:7d:06:fe:97:52:86:3f:3e:8b:7d:e6:a9: 96:7c:0b:64:f1:cd:22:72:a2:ab:8d:05:57:fc:7e:4c:d5:4f: 01:db:12:7e:5b:53:7e:20:1c:2a:5d:ca:a0:3c:bd:fd:1f:d7: 75:ae:4e:5c:e0:f5:9d:83:e4:5d:9a:0d:2f:dd:6a:95:0d:41: d7:30:d4:f2:cd:a5:f0:5f:4a:8d:05:07:19:3c:a5:1e:91:b2: 20:c9:8f:22:1b:8f:5f:57:f0:7a:63:14:83:27:19:64:8c:53: ab:f0:0e:90:42:f8:ad:ae:00:67:84:04:7b:ab:eb:0e:dd:e0: 55:b9:68:1e:66:51:b3:c9:e4:2a:80:eb:d4:a9:1a:05:63:ea: 66:f9:e8:56:67:ac:52:6d:3e:4c:f3:c5:c3:55:4c:49:d3:4e: fe:23:9b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmBeFNc0m1QubW5nLHc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTE2NjU3YTI0OTc3MzdjYTAzNjIxY2M2NjhkMjBjNzYy MTM2ZDUwHhcNMjUxMjE5MTcwMDM2WhcNMjUxMjIwMTcwMDM2WjAzMTEwLwYDVQQD EyhkMmVmZWZiMDQ2NTIwNDIyMmZiNmM4NzA1ODc1ZGQ3OTQzM2VjMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdx3VKVL568M0K0HdSq/w5Bess8j NzYTioVEqgaxrBvLqf/Xot7IO3QbprzBJI0xWlQTQ1WgPsMMUexa5kvP0tAYa7zU M/zKDyXE3JaflAKU6cgeTlvdTAz/jhYAWtCemZxya+jJhURWXkjEQoE4sihUgZg9 iUinnQiVeu0VBx32VzAv92k3R2WCz/EjZcLJKOY5Q2StjcdYe9bzD87CYZ+EQNr+ 5AO6aEAFJYfAHXNCWtmH7U6ZDxpuhZuVmUFG1x+3p1/e4/8Zu0kXbRE3H1rbaY73 6wvMJc5e+7bMMJHTZr0Yv0vNH/t+QjM5W928NHLWWmQ0E3n/RKzQNos5ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLv77BGUgQiL7bIcFh13XlDPsAKMB8GA1UdIwQY MBaAFBehZleiSXc3ygNiHMZo0gx2ITbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgt OTZjOGY0MzlhYjgxLzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgtOTZjOGY0MzlhYjgx LzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcv54fH6 Df0FkiNdf8fe5PR/D0QfSGOCst8+kjsItHBJ4P5yfRu0Fy+tv4RxA7km+JY+735O 5L396Li9CibU4iMlBbgFNMGtr/DmA9yamZrdw3H6dLVWDYxgAAzHD24afQb+l1KG Pz6LfeaplnwLZPHNInKiq40FV/x+TNVPAdsSfltTfiAcKl3KoDy9/R/Xda5OXOD1 nYPkXZoNL91qlQ1B1zDU8s2l8F9KjQUHGTylHpGyIMmPIhuPX1fwemMUgycZZIxT q/AOkEL4ra4AZ4QEe6vrDt3gVbloHmZRs8nkKoDr1KkaBWPqZvnoVmesUm0+TPPF w1VMSdNO/iObVg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:58 2025 by rpki-client