This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json) Hash identifier: gRzPTrFG3YGkb9jUGbmk7yzSibPybkRFllNrQtsOMmc= Subject key identifier: 7D:20:44:52:38:08:08:9C:EE:D0:FD:E4:71:8B:FF:1F:51:A3:32:C4 Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Certificate serial: 019B35321F00A63B89D0B16F48CDFF98D859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 06:00:35 +0000 Manifest this update: Fri 19 Dec 2025 06:00:35 +0000 Manifest next update: Sat 20 Dec 2025 06:00:35 +0000 Files and hashes: 1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: ZtcYBjultf+ANKU8xSoZu2JY/u0BPW4OTlxHoHHKUTc=) 2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:1f:00:a6:3b:89:d0:b1:6f:48:cd:ff:98:d8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Validity Not Before: Dec 19 06:00:35 2025 GMT Not After : Dec 20 06:00:35 2025 GMT Subject: CN=7d2044523808089ceed0fde4718bff1f51a332c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:51:22:11:66:b7:08:0a:41:99:6f:07:f1:67: 1b:8a:1c:fd:bb:fc:f9:4e:a5:49:5d:55:af:d7:ef: d3:8b:60:4a:29:ad:a2:59:ca:68:95:e9:7a:cf:9b: c9:f5:53:d3:0d:a2:da:48:20:d3:fb:db:3e:a3:b1: 57:f5:9a:a8:77:7d:54:95:f0:78:63:23:d9:b1:0b: b7:c9:74:1f:3c:b3:9d:08:41:0a:fe:f6:f0:f6:7e: 4c:96:72:0f:77:07:04:b1:4f:6f:eb:c3:fd:ae:31: 3d:9c:1b:47:36:80:ef:52:d1:d2:7c:10:32:7e:a7: de:4f:b8:c3:8f:53:e1:e6:05:f0:83:70:ab:9b:f0: 45:8f:3d:ba:3e:bd:c3:50:b9:9f:68:5b:34:4d:82: a4:92:7d:c1:ce:e4:bc:06:d4:e8:64:8e:ef:2e:dc: 15:aa:02:54:0a:d1:6b:db:b4:7d:56:df:d5:67:20: cb:f1:b5:6d:71:b4:5d:01:da:32:e3:46:11:88:b7: 5e:db:59:dc:5a:95:38:d0:46:9b:5f:e5:60:c4:6b: d1:69:ba:44:f4:8d:bb:4b:34:05:21:9a:0e:d6:5a: 79:c4:61:dc:45:72:26:b9:95:a1:df:c4:50:41:52: 26:36:36:66:ee:29:7e:75:fc:1b:9e:4b:ca:75:01: 3b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:20:44:52:38:08:08:9C:EE:D0:FD:E4:71:8B:FF:1F:51:A3:32:C4 X509v3 Authority Key Identifier: keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:34:47:16:a8:d3:13:1d:02:dd:80:51:7e:df:ac:21:09:a2: e8:b6:59:fc:7f:79:48:13:ac:8c:79:f0:dc:63:46:04:e3:0e: 02:41:4b:35:73:46:80:6c:ce:6c:b8:e6:60:73:1c:39:79:db: 50:bf:ff:a0:9e:8c:75:6d:1c:1d:3f:a1:39:93:b9:5d:99:79: aa:db:7c:18:3f:d8:5c:20:93:d7:cf:12:48:b2:d9:61:b1:a3: 79:6e:c6:68:8b:6c:b5:f7:2e:1f:73:9a:98:0f:0b:c3:67:d0: a3:0f:66:75:d7:7c:eb:ab:73:9d:e0:19:dc:39:6f:fd:36:3d: 75:b4:ce:c8:a5:bb:09:dd:4c:ac:2c:e4:3a:51:6d:5c:13:49: b9:c0:e2:9e:22:73:ef:94:47:bd:1f:68:f4:e2:da:82:7b:d9: f3:49:83:e9:ec:d3:f2:9b:e4:b4:30:6a:11:f1:90:04:96:a6: d8:49:b0:0f:7a:99:04:de:b9:bb:07:2a:44:ce:f7:f8:d7:69: 7b:cd:a6:4d:f3:9c:bf:2a:06:65:13:16:3e:23:2f:fc:3a:ff: 83:f2:4f:25:d8:c0:ee:8d:37:12:ef:50:0f:c8:a6:f1:f3:76: 3d:73:82:92:ad:00:bd:0a:78:14:38:e9:f0:0d:ce:08:cd:71: 11:83:8c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mh8ApjuJ0LFvSM3/mNhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx ZDllMzYwHhcNMjUxMjE5MDYwMDM1WhcNMjUxMjIwMDYwMDM1WjAzMTEwLwYDVQQD Eyg3ZDIwNDQ1MjM4MDgwODljZWVkMGZkZTQ3MThiZmYxZjUxYTMzMmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVEiEWa3CApBmW8H8Wcbihz9u/z5 TqVJXVWv1+/Ti2BKKa2iWcpolel6z5vJ9VPTDaLaSCDT+9s+o7FX9Zqod31UlfB4 YyPZsQu3yXQfPLOdCEEK/vbw9n5MlnIPdwcEsU9v68P9rjE9nBtHNoDvUtHSfBAy fqfeT7jDj1Ph5gXwg3Crm/BFjz26Pr3DULmfaFs0TYKkkn3BzuS8BtToZI7vLtwV qgJUCtFr27R9Vt/VZyDL8bVtcbRdAdoy40YRiLde21ncWpU40EabX+VgxGvRabpE 9I27SzQFIZoO1lp5xGHcRXImuZWh38RQQVImNjZm7il+dfwbnkvKdQE76wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0gRFI4CAic7tD95HGL/x9RozLEMB8GA1UdIwQY MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt MDI4NWMxNWZjNTFlLzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDRHFqjT Ex0C3YBRft+sIQmi6LZZ/H95SBOsjHnw3GNGBOMOAkFLNXNGgGzObLjmYHMcOXnb UL//oJ6MdW0cHT+hOZO5XZl5qtt8GD/YXCCT188SSLLZYbGjeW7GaItstfcuH3Oa mA8Lw2fQow9mddd866tzneAZ3Dlv/TY9dbTOyKW7Cd1MrCzkOlFtXBNJucDiniJz 75RHvR9o9OLagnvZ80mD6ezT8pvktDBqEfGQBJam2EmwD3qZBN65uwcqRM73+Ndp e82mTfOcvyoGZRMWPiMv/Dr/g/JPJdjA7o03Eu9QD8im8fN2PXOCkq0AvQp4FDjp 8A3OCM1xEYOMKA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:14:16 2025 by rpki-client