This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft File: F80TGMkZxu8W0kynhGKgt94UugU.mft (raw, json) Hash identifier: 8fo2Bo6m33y26ctsQbrgxsMyq/ohiJM8rBRVSIK1ATw= Subject key identifier: E3:62:D8:F2:5F:74:FA:BC:7B:FB:40:B3:EF:4D:91:6B:EF:29:51:D4 Authority key identifier: 17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 Certificate issuer: /CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Certificate serial: 019B334454E6311FF70E9D5E77CA17156AFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft Manifest number: 010D Signing time: Thu 18 Dec 2025 21:01:14 +0000 Manifest this update: Thu 18 Dec 2025 21:01:14 +0000 Manifest next update: Fri 19 Dec 2025 21:01:14 +0000 Files and hashes: 1: F80TGMkZxu8W0kynhGKgt94UugU.crl (hash: 92cBry/UUpDaG63WMYo0o4HQPe8W8KsY2ngU3QUe2t8=) 2: fV1WZCcdLfEsqw2EdlQm5P-L0is.roa (hash: 0XqccHFLFqDbT7tC/mcDP32ySvfNB41cuIO9KikZ3oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:54:e6:31:1f:f7:0e:9d:5e:77:ca:17:15:6a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17cd1318c919c6ef16d24ca78462a0b7de14ba05 Validity Not Before: Dec 18 21:01:14 2025 GMT Not After : Dec 19 21:01:14 2025 GMT Subject: CN=e362d8f25f74fabc7bfb40b3ef4d916bef2951d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ce:5e:99:13:4e:2f:4b:46:b2:f6:a0:41:3f: 1d:b3:81:2e:5c:8c:14:19:81:33:84:a2:0e:76:5f: 3f:44:21:80:f9:6f:17:dd:2e:f9:36:00:bd:9d:d6: 36:af:c7:cf:78:c8:dc:fc:62:52:00:66:bc:9e:a2: 1e:fe:96:83:3c:1a:89:0b:f9:61:b3:bb:54:35:3c: b1:b4:af:8e:2f:ce:61:d4:d4:1e:63:78:e4:f3:70: b1:af:05:3e:6a:02:83:d0:91:b4:22:79:42:d7:8f: a3:57:ba:5e:61:32:a4:8a:cb:19:12:3e:78:52:c1: c9:8e:0b:2b:ef:64:1c:5a:7c:b6:4f:29:7b:2e:c7: f3:1a:e0:e7:4d:40:18:16:30:a4:79:59:ad:cf:da: 87:0b:83:9c:52:51:c8:b2:40:f6:be:75:f8:2c:a4: 9d:7a:ea:0e:20:19:05:d9:54:40:10:ca:5f:0c:6a: 16:5c:6a:c0:19:42:f3:ef:23:35:eb:5a:e1:c1:e7: 77:5a:03:86:7c:05:23:fd:e6:32:98:f5:e7:d9:54: a9:7f:29:90:b1:59:a8:c4:24:8a:f1:43:aa:ee:ca: 2e:76:04:c6:d7:56:24:f3:56:a3:ea:ae:1a:50:30: b9:a7:dd:11:f1:72:63:3e:a7:45:87:cf:50:29:1c: 2e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:62:D8:F2:5F:74:FA:BC:7B:FB:40:B3:EF:4D:91:6B:EF:29:51:D4 X509v3 Authority Key Identifier: keyid:17:CD:13:18:C9:19:C6:EF:16:D2:4C:A7:84:62:A0:B7:DE:14:BA:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F80TGMkZxu8W0kynhGKgt94UugU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1baae1-623c-453b-867c-93742c48e0fe/1/F80TGMkZxu8W0kynhGKgt94UugU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:25:0d:f9:d5:25:2f:96:85:35:fc:1e:d4:f9:8c:d1:4b:64: 70:f0:34:0a:bc:42:e2:98:eb:9c:f8:8e:bc:0e:96:5b:25:e3: 78:c9:0d:8a:1f:2c:ed:93:72:98:66:ef:aa:6d:e2:13:7d:02: 2d:ee:4b:b5:3e:6b:74:7a:73:0c:a5:5d:71:ea:fe:44:91:ba: 28:95:d1:17:39:38:49:7d:6f:2a:85:ed:f6:3c:48:03:2b:1b: 87:1f:7f:1c:3d:7e:2e:87:e1:2d:98:10:20:78:cb:55:01:75: 4e:36:de:96:9a:bb:ac:19:1f:58:1f:8d:1a:62:bf:86:7e:3e: 9e:ea:c0:d6:8f:2d:1f:ea:38:5c:be:2e:c8:d6:12:60:99:ab: 83:70:2b:23:d0:d2:ad:0b:07:97:13:4e:3a:a7:2e:56:ad:f1: 70:59:fa:3a:66:6a:40:61:0c:07:40:7f:3c:28:59:b8:bd:a7: 4c:79:7a:3f:57:48:aa:6d:8b:a4:0d:07:17:72:a3:29:71:37: b9:70:84:a3:32:6f:86:42:d3:7c:91:20:85:ae:78:b5:32:ed: cb:76:87:c3:5b:c7:76:1c:89:cd:25:50:f9:36:46:9f:26:82: 45:bc:56:ef:98:83:dd:97:0a:27:8c:f3:d6:32:e9:d0:60:9f: de:5a:a3:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRFTmMR/3Dp1ed8oXFWr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3Y2QxMzE4YzkxOWM2ZWYxNmQyNGNhNzg0NjJhMGI3ZGUx NGJhMDUwHhcNMjUxMjE4MjEwMTE0WhcNMjUxMjE5MjEwMTE0WjAzMTEwLwYDVQQD EyhlMzYyZDhmMjVmNzRmYWJjN2JmYjQwYjNlZjRkOTE2YmVmMjk1MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus5emRNOL0tGsvagQT8ds4EuXIwU GYEzhKIOdl8/RCGA+W8X3S75NgC9ndY2r8fPeMjc/GJSAGa8nqIe/paDPBqJC/lh s7tUNTyxtK+OL85h1NQeY3jk83CxrwU+agKD0JG0InlC14+jV7peYTKkissZEj54 UsHJjgsr72QcWny2Tyl7LsfzGuDnTUAYFjCkeVmtz9qHC4OcUlHIskD2vnX4LKSd euoOIBkF2VRAEMpfDGoWXGrAGULz7yM161rhwed3WgOGfAUj/eYymPXn2VSpfymQ sVmoxCSK8UOq7soudgTG11Yk81aj6q4aUDC5p90R8XJjPqdFh89QKRwuHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONi2PJfdPq8e/tAs+9NkWvvKVHUMB8GA1UdIwQY MBaAFBfNExjJGcbvFtJMp4RioLfeFLoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2Mt OTM3NDJjNDhlMGZlLzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8xYmFhZTEtNjIzYy00NTNiLTg2N2MtOTM3NDJjNDhlMGZl LzEvRjgwVEdNa1p4dThXMGt5bmhHS2d0OTRVdWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiUN+dUl L5aFNfwe1PmM0UtkcPA0CrxC4pjrnPiOvA6WWyXjeMkNih8s7ZNymGbvqm3iE30C Le5LtT5rdHpzDKVdcer+RJG6KJXRFzk4SX1vKoXt9jxIAysbhx9/HD1+LofhLZgQ IHjLVQF1Tjbelpq7rBkfWB+NGmK/hn4+nurA1o8tH+o4XL4uyNYSYJmrg3ArI9DS rQsHlxNOOqcuVq3xcFn6OmZqQGEMB0B/PChZuL2nTHl6P1dIqm2LpA0HF3KjKXE3 uXCEozJvhkLTfJEgha54tTLty3aHw1vHdhyJzSVQ+TZGnyaCRbxW75iD3ZcKJ4zz 1jLp0GCf3lqj2w== -----END CERTIFICATE-----Generated at Fri Dec 19 04:40:44 2025 by rpki-client