This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft File: _iFRDnSlthGog2amTtL7jmAVQpM.mft (raw, json) Hash identifier: 2goluyM09JBbv3yT8edBOYmaW9y5bKpYOSfxugtUUgI= Subject key identifier: 87:C4:E9:CB:48:F4:81:AF:23:F6:5D:5D:03:F8:24:BA:4E:82:6E:D9 Authority key identifier: FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 Certificate issuer: /CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Certificate serial: 019B0F6E87C8B7138E149637E7B79BEE96CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 22:01:00 +0000 Manifest this update: Thu 11 Dec 2025 22:01:00 +0000 Manifest next update: Fri 12 Dec 2025 22:01:00 +0000 Files and hashes: 1: _iFRDnSlthGog2amTtL7jmAVQpM.crl (hash: UV8MBoI5LY8+SL8jSgVIBAP6A4PtFVS/SLor/UIVrTo=) 2: pA-X0SaB0DP88NQK6S16CRpbIws.roa (hash: /lnCuMiAMJ5HoCTByF87eDA744xmzbWJMwOSkdeAHzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:87:c8:b7:13:8e:14:96:37:e7:b7:9b:ee:96:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe21510e74a5b611a88366a64ed2fb8e60154293 Validity Not Before: Dec 11 22:01:00 2025 GMT Not After : Dec 12 22:01:00 2025 GMT Subject: CN=87c4e9cb48f481af23f65d5d03f824ba4e826ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:52:97:b3:de:b8:f3:5b:f6:c4:c3:2a:a1:4d: 11:84:54:54:e7:43:51:04:16:71:b4:68:11:3c:67: dd:b3:ae:99:90:1e:fd:28:75:cb:4d:13:5b:c3:69: 16:97:dd:bf:0f:79:ec:48:79:e2:5f:37:52:d3:e1: 16:9a:89:72:82:12:d3:a1:de:81:c7:8f:28:53:1d: b6:23:d8:7e:8a:a4:41:df:bb:b9:b9:b2:cf:7b:ea: ca:47:40:eb:8b:e8:3d:0f:88:6b:6a:00:f2:93:f6: 45:d4:4b:91:15:f2:2c:df:da:21:22:d1:d9:df:f7: fc:b3:de:4b:5b:86:6c:da:a7:cd:62:7c:d5:49:d1: 7f:f7:dc:86:b4:f1:c5:bc:e1:09:d1:cd:ac:1c:f7: ab:98:3e:14:67:89:2a:e8:b8:0e:f6:c7:7b:d9:68: 42:b7:93:0e:c2:f1:ba:09:1b:c8:4c:0e:3f:7e:de: 5e:16:83:bd:9a:0c:a8:4f:6a:b5:d5:d8:19:ea:28: 85:33:ff:6a:87:83:ec:a4:a2:6e:47:a4:82:6b:07: 12:dc:aa:ca:bf:4a:98:80:73:d5:d1:bb:a5:dd:9f: 52:95:36:5f:78:b9:44:53:a7:ae:a8:d6:90:19:50: 8a:32:a7:b3:20:19:e4:b6:bb:7b:be:d1:e0:10:0d: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C4:E9:CB:48:F4:81:AF:23:F6:5D:5D:03:F8:24:BA:4E:82:6E:D9 X509v3 Authority Key Identifier: keyid:FE:21:51:0E:74:A5:B6:11:A8:83:66:A6:4E:D2:FB:8E:60:15:42:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_iFRDnSlthGog2amTtL7jmAVQpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3c193-ced3-4362-bb6f-59d649c0db5d/1/_iFRDnSlthGog2amTtL7jmAVQpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:f1:ec:a0:cb:ca:f4:4b:bb:ee:ad:59:b5:73:43:8f:23:d0: 7a:5e:09:0c:9c:8e:82:ae:15:18:a7:da:4c:20:e9:87:c5:eb: a8:d7:2b:22:46:4e:3d:ac:ad:9d:59:a6:b0:bc:4a:1e:e0:e1: 4b:e3:c8:0f:22:29:ab:d7:53:f9:c3:e5:31:8e:a5:14:0a:11: cb:85:00:46:3f:5c:af:37:88:ad:fc:a9:ea:59:1c:6e:7b:dc: da:95:24:b3:4f:f4:46:b2:1d:bb:3a:08:09:79:11:a5:dc:07: 78:d1:63:fe:3d:ac:14:8a:6b:cf:c2:52:5b:bd:d1:30:0b:50: 5c:4c:a3:2c:14:23:8c:39:fa:9e:ef:33:95:cd:d7:47:78:22: 91:c0:07:7a:02:36:91:eb:16:ee:c6:7c:51:fb:2b:19:02:e1: 38:5b:0e:98:3e:96:ed:d6:f8:f3:4e:cf:1d:7e:f2:e7:dc:30: 2f:7f:37:e9:d8:c3:d1:62:8c:8c:9d:79:54:e2:2d:66:0e:d7: 70:bc:3b:c7:88:44:9a:71:d8:ec:e7:a5:42:ec:f9:f8:4a:a3: 80:22:01:fd:34:90:9e:ee:ad:ee:5a:f6:37:eb:ab:fd:a1:50: ad:05:44:e0:f3:19:ee:aa:f8:ff:fc:cb:31:2a:98:14:65:1b: 6b:62:78:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbofItxOOFJY357eb7pbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMjE1MTBlNzRhNWI2MTFhODgzNjZhNjRlZDJmYjhlNjAx NTQyOTMwHhcNMjUxMjExMjIwMTAwWhcNMjUxMjEyMjIwMTAwWjAzMTEwLwYDVQQD Eyg4N2M0ZTljYjQ4ZjQ4MWFmMjNmNjVkNWQwM2Y4MjRiYTRlODI2ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolKXs96481v2xMMqoU0RhFRU50NR BBZxtGgRPGfds66ZkB79KHXLTRNbw2kWl92/D3nsSHniXzdS0+EWmolyghLTod6B x48oUx22I9h+iqRB37u5ubLPe+rKR0Dri+g9D4hragDyk/ZF1EuRFfIs39ohItHZ 3/f8s95LW4Zs2qfNYnzVSdF/99yGtPHFvOEJ0c2sHPermD4UZ4kq6LgO9sd72WhC t5MOwvG6CRvITA4/ft5eFoO9mgyoT2q11dgZ6iiFM/9qh4PspKJuR6SCawcS3KrK v0qYgHPV0bul3Z9SlTZfeLlEU6euqNaQGVCKMqezIBnktrt7vtHgEA1chQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfE6ctI9IGvI/ZdXQP4JLpOgm7ZMB8GA1UdIwQY MBaAFP4hUQ50pbYRqINmpk7S+45gFUKTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYt NTlkNjQ5YzBkYjVkLzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2MxOTMtY2VkMy00MzYyLWJiNmYtNTlkNjQ5YzBkYjVk LzEvX2lGUkRuU2x0aEdvZzJhbVR0TDdqbUFWUXBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvHsoMvK 9Eu77q1ZtXNDjyPQel4JDJyOgq4VGKfaTCDph8XrqNcrIkZOPaytnVmmsLxKHuDh S+PIDyIpq9dT+cPlMY6lFAoRy4UARj9crzeIrfyp6lkcbnvc2pUks0/0RrIduzoI CXkRpdwHeNFj/j2sFIprz8JSW73RMAtQXEyjLBQjjDn6nu8zlc3XR3gikcAHegI2 kesW7sZ8UfsrGQLhOFsOmD6W7db4807PHX7y59wwL3836djD0WKMjJ15VOItZg7X cLw7x4hEmnHY7OelQuz5+EqjgCIB/TSQnu6t7lr2N+ur/aFQrQVE4PMZ7qr4//zL MSqYFGUba2J4cQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:49:41 2025 by rpki-client