This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json) Hash identifier: M74TUtWz67Y7XFGJJUkzxFe1WcGSfzhQ37E+6l+v6aQ= Subject key identifier: E3:06:53:F8:E6:5F:6C:B2:9E:AF:31:58:5B:A7:C9:10:B3:20:E4:FE Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Certificate serial: 019B0F010B2AF262F95C610ED3E438D218E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft Manifest number: 177E Signing time: Thu 11 Dec 2025 20:01:25 +0000 Manifest this update: Thu 11 Dec 2025 20:01:25 +0000 Manifest next update: Fri 12 Dec 2025 20:01:25 +0000 Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 2TZ5qbyg/QUMqtvtfpSvWlOPcw98aubZfTpt6ilVeTA=) 2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:01:0b:2a:f2:62:f9:5c:61:0e:d3:e4:38:d2:18:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Validity Not Before: Dec 11 20:01:25 2025 GMT Not After : Dec 12 20:01:25 2025 GMT Subject: CN=e30653f8e65f6cb29eaf31585ba7c910b320e4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:64:b4:dd:7c:f3:ee:c7:4f:05:ad:4d:5a:64: be:49:6f:29:dd:84:79:cd:99:66:2b:a7:da:af:7c: fb:1b:45:4a:6b:e1:d3:d3:d0:a2:b9:80:9a:6c:77: 45:78:92:9c:6c:de:e8:cc:cf:00:b9:28:cb:99:c0: ac:73:16:e6:8c:d4:e9:f2:dd:ff:94:e1:f6:e7:3a: 19:9c:e5:b3:c3:9b:75:d3:5b:f8:a3:a4:8b:56:d6: 86:2f:57:e1:2d:5e:18:9d:d2:7e:b3:b1:4d:32:9d: 72:5e:2e:46:3f:57:a3:d6:7b:b7:61:7a:e3:9b:56: 47:b6:6b:bf:c5:26:8d:64:af:a3:e6:0d:be:54:8b: f4:6b:90:5e:9e:0d:be:cf:2a:6c:46:49:71:72:f0: 7d:1a:b0:c2:41:6c:59:e7:db:7e:14:b7:5a:09:83: 6e:0c:26:5c:ac:b6:a7:85:75:0f:f7:ad:6a:a1:a1: 7d:55:4f:c1:30:63:9d:7a:da:8d:8a:8b:9e:fc:e9: 79:f2:d7:00:4a:9a:db:5a:2d:41:b4:71:9e:82:ee: 93:d3:c7:e1:9c:5a:33:4b:4e:24:a1:34:75:b7:dc: 6d:cc:e4:24:0f:2e:f9:80:74:90:2a:b5:b2:e0:38: 7f:aa:bd:89:26:fd:a0:10:6b:c2:62:f7:26:d6:e6: f8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:06:53:F8:E6:5F:6C:B2:9E:AF:31:58:5B:A7:C9:10:B3:20:E4:FE X509v3 Authority Key Identifier: keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e8:57:5d:fa:04:4f:2e:35:94:eb:f8:a6:87:85:eb:a2:15: e3:96:60:58:5e:b9:06:bf:48:38:3f:06:60:c5:51:c4:0c:e8: 34:22:e9:0a:72:c6:36:51:55:98:c1:5c:b1:6d:b6:4c:75:b8: 4b:c1:0f:1d:a7:76:ca:75:93:f8:1f:80:eb:73:0a:27:8c:91: 0b:4a:6e:0d:8c:22:e8:14:3d:5e:44:4d:d6:79:8b:4a:ad:0b: 50:dc:bb:1d:45:f4:a0:7c:a8:93:71:01:10:ec:86:ec:fe:96: e0:75:28:4a:65:f9:c9:90:2d:bc:93:bd:91:45:30:2b:ff:57: 3d:09:9d:e2:d5:62:d0:a2:84:79:a0:50:54:c2:37:05:7d:94: ed:e3:7f:dc:b5:11:4e:ee:53:33:9a:aa:d7:0c:89:6e:32:af: ad:c5:07:26:70:a6:83:2c:56:2a:47:c0:20:86:63:4c:e6:50: eb:40:01:8f:92:95:65:2a:e7:06:d5:d4:a8:52:20:6c:06:88: 44:a2:25:c6:7d:08:e3:08:5d:cc:0b:31:5e:36:59:fa:2b:1d: 99:20:70:45:98:a9:7c:2e:a9:71:9a:59:ab:b6:bf:e2:f1:c9: ca:2b:7d:46:b9:64:5b:fb:f2:1e:ae:21:57:ff:a0:5c:cb:30: d4:6c:2f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAQsq8mL5XGEO0+Q40hjnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5 Yjg2ZDUwHhcNMjUxMjExMjAwMTI1WhcNMjUxMjEyMjAwMTI1WjAzMTEwLwYDVQQD EyhlMzA2NTNmOGU2NWY2Y2IyOWVhZjMxNTg1YmE3YzkxMGIzMjBlNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmS03Xzz7sdPBa1NWmS+SW8p3YR5 zZlmK6far3z7G0VKa+HT09CiuYCabHdFeJKcbN7ozM8AuSjLmcCscxbmjNTp8t3/ lOH25zoZnOWzw5t101v4o6SLVtaGL1fhLV4YndJ+s7FNMp1yXi5GP1ej1nu3YXrj m1ZHtmu/xSaNZK+j5g2+VIv0a5Beng2+zypsRklxcvB9GrDCQWxZ59t+FLdaCYNu DCZcrLanhXUP961qoaF9VU/BMGOdetqNioue/Ol58tcASprbWi1BtHGegu6T08fh nFozS04koTR1t9xtzOQkDy75gHSQKrWy4Dh/qr2JJv2gEGvCYvcm1ub4AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMGU/jmX2yynq8xWFunyRCzIOT+MB8GA1UdIwQY MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFehXXfoE Ty41lOv4poeF66IV45ZgWF65Br9IOD8GYMVRxAzoNCLpCnLGNlFVmMFcsW22THW4 S8EPHad2ynWT+B+A63MKJ4yRC0puDYwi6BQ9XkRN1nmLSq0LUNy7HUX0oHyok3EB EOyG7P6W4HUoSmX5yZAtvJO9kUUwK/9XPQmd4tVi0KKEeaBQVMI3BX2U7eN/3LUR Tu5TM5qq1wyJbjKvrcUHJnCmgyxWKkfAIIZjTOZQ60ABj5KVZSrnBtXUqFIgbAaI RKIlxn0I4whdzAsxXjZZ+isdmSBwRZipfC6pcZpZq7a/4vHJyit9RrlkW/vyHq4h V/+gXMsw1GwvTQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:46:51 2025 by rpki-client