This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json) Hash identifier: afV94Tu/OQ3lx8i3dd6B+Nk+nwyXPhmdMrB/8NUQsM0= Subject key identifier: D3:15:B7:A6:AF:D2:DB:F4:DF:E8:1B:91:C5:D1:77:83:39:95:16:44 Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Certificate serial: 019B2062AA94D284C8EE52C2B55AE33D1F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft Manifest number: 1787 Signing time: Mon 15 Dec 2025 05:01:35 +0000 Manifest this update: Mon 15 Dec 2025 05:01:35 +0000 Manifest next update: Tue 16 Dec 2025 05:01:35 +0000 Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: n3dHolLh+znAG4zbkp5MYwPaSheMuLleV3Kh9KziFYk=) 2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:aa:94:d2:84:c8:ee:52:c2:b5:5a:e3:3d:1f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Validity Not Before: Dec 15 05:01:35 2025 GMT Not After : Dec 16 05:01:35 2025 GMT Subject: CN=d315b7a6afd2dbf4dfe81b91c5d1778339951644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:3f:b2:5c:c4:8a:3e:b3:6d:93:96:76:99: 34:d4:49:c5:a5:55:a3:ac:5d:8c:61:ff:91:bd:77: 3f:89:0e:90:70:3e:d6:2f:d1:9d:c9:62:80:b0:b9: 62:a1:9e:3c:e6:49:3e:30:c5:39:59:4b:40:93:c6: 24:af:cc:9b:d8:da:13:ed:f0:db:fe:51:02:54:81: f2:35:85:1c:7f:0b:dc:e2:1a:e2:07:29:de:1a:49: 00:e3:dd:b3:2f:77:d9:1e:6e:84:82:37:67:14:fe: 38:e9:b2:38:63:ff:05:48:c4:0c:20:a8:58:11:5e: 25:d1:ba:3b:d5:1d:64:fc:38:4e:f1:72:f1:4f:3d: d8:17:cf:60:53:da:38:05:cb:e5:00:72:62:a7:ef: 0d:3f:65:b6:2c:2a:6c:78:b1:80:11:dd:53:82:b0: eb:e5:f6:a3:ba:c4:07:84:18:39:88:75:4e:d6:f3: 39:b5:26:97:f6:9b:55:fc:48:86:d8:ca:62:2b:41: 2d:90:8b:92:18:58:6b:67:8e:97:2f:1e:01:fc:80: 07:6f:aa:7b:d6:8a:50:32:0f:f5:04:4e:fb:1f:af: 48:1f:bc:df:fe:17:f2:88:bc:49:f1:0e:44:21:85: ff:f7:68:64:8f:b3:df:5e:5d:56:3f:bf:ce:b9:74: fa:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:B7:A6:AF:D2:DB:F4:DF:E8:1B:91:C5:D1:77:83:39:95:16:44 X509v3 Authority Key Identifier: keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:b4:85:32:cd:76:a0:92:1e:c4:2b:7d:9f:04:14:ce:5c:87: 48:d3:68:b1:7f:21:79:66:50:f0:bf:72:2e:13:69:aa:cd:7b: 5b:66:4b:ae:34:02:77:ac:f0:75:9c:01:9c:54:c9:f4:a1:06: 3d:ac:52:bb:f1:8c:24:6e:ef:84:0a:dc:fe:47:00:ad:35:16: 69:22:af:43:02:48:f3:7f:d8:48:75:88:19:c9:4e:7f:5a:16: 2b:f3:4c:d2:31:5d:6b:8c:c6:a6:18:36:55:08:3d:8e:ff:dc: 21:a9:8c:73:7b:ec:74:9a:97:fd:e8:52:7c:27:0a:5e:25:22: 69:89:73:92:5c:41:7c:60:a7:91:98:fe:47:04:eb:94:b4:cc: f6:41:d2:6b:f2:79:56:0e:67:b5:94:6e:13:1b:5c:68:b3:0f: 33:a8:a1:d6:63:13:aa:5b:5c:b5:93:b9:9a:4b:cd:3a:1a:ba: 64:74:34:03:0f:b4:19:bc:c5:76:0c:39:1e:1d:66:5d:cd:36: c1:9a:a0:72:d6:68:39:d3:12:fe:d2:2d:c2:f0:1a:36:da:dc: 77:c4:83:a4:4f:8f:b6:b1:7d:1e:f9:1b:20:14:6a:a4:e4:0d: dc:6d:44:f8:25:25:b6:1a:9c:a3:01:f7:e0:8e:bf:c3:0f:32: 99:79:e0:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYqqU0oTI7lLCtVrjPR9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5 Yjg2ZDUwHhcNMjUxMjE1MDUwMTM1WhcNMjUxMjE2MDUwMTM1WjAzMTEwLwYDVQQD EyhkMzE1YjdhNmFmZDJkYmY0ZGZlODFiOTFjNWQxNzc4MzM5OTUxNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcI/slzEij6zbZOWdpk01EnFpVWj rF2MYf+RvXc/iQ6QcD7WL9GdyWKAsLlioZ485kk+MMU5WUtAk8Ykr8yb2NoT7fDb /lECVIHyNYUcfwvc4hriByneGkkA492zL3fZHm6EgjdnFP446bI4Y/8FSMQMIKhY EV4l0bo71R1k/DhO8XLxTz3YF89gU9o4BcvlAHJip+8NP2W2LCpseLGAEd1TgrDr 5fajusQHhBg5iHVO1vM5tSaX9ptV/EiG2MpiK0EtkIuSGFhrZ46XLx4B/IAHb6p7 1opQMg/1BE77H69IH7zf/hfyiLxJ8Q5EIYX/92hkj7PfXl1WP7/OuXT6SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMVt6av0tv03+gbkcXRd4M5lRZEMB8GA1UdIwQY MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrSFMs12 oJIexCt9nwQUzlyHSNNosX8heWZQ8L9yLhNpqs17W2ZLrjQCd6zwdZwBnFTJ9KEG PaxSu/GMJG7vhArc/kcArTUWaSKvQwJI83/YSHWIGclOf1oWK/NM0jFda4zGphg2 VQg9jv/cIamMc3vsdJqX/ehSfCcKXiUiaYlzklxBfGCnkZj+RwTrlLTM9kHSa/J5 Vg5ntZRuExtcaLMPM6ih1mMTqltctZO5mkvNOhq6ZHQ0Aw+0GbzFdgw5Hh1mXc02 wZqgctZoOdMS/tItwvAaNtrcd8SDpE+PtrF9HvkbIBRqpOQN3G1E+CUlthqcowH3 4I6/ww8ymXngXA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:15 2025 by rpki-client