This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft File: F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json) Hash identifier: F1BnaYych7UcgioszF5JCXKj3J989ntac8Bc98OvX8Y= Subject key identifier: BB:59:35:0D:10:CD:DB:E6:5C:CB:E7:D0:8B:61:2B:C0:41:C0:E3:07 Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03 Certificate issuer: /CN=17ec31441691b859b347fd17217a5e5d1b0be303 Certificate serial: 019AF7D48B6178B1AEA39C541B072160EB45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft Manifest number: 0891 Signing time: Sun 07 Dec 2025 08:01:32 +0000 Manifest this update: Sun 07 Dec 2025 08:01:32 +0000 Manifest next update: Mon 08 Dec 2025 08:01:32 +0000 Files and hashes: 1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: AewC4dQUBiEDAgcIX7NZpgQyZjWu8CixKFOsFQDrBb4=) 2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:d4:8b:61:78:b1:ae:a3:9c:54:1b:07:21:60:eb:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303 Validity Not Before: Dec 7 08:01:32 2025 GMT Not After : Dec 8 08:01:32 2025 GMT Subject: CN=bb59350d10cddbe65ccbe7d08b612bc041c0e307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:14:2a:c7:58:da:41:4c:57:16:2e:00:dc: 9c:d2:73:91:ed:a6:37:b1:f4:2e:df:4b:a6:2c:3e: 70:0f:a0:59:79:c4:db:0a:5c:cb:a5:9a:64:6d:4b: df:29:b1:41:87:f0:31:92:d5:dd:2f:02:6f:cd:25: 32:ac:ab:92:b3:5a:a3:92:4c:2f:91:8c:b2:80:49: d1:ee:11:91:ce:77:57:2a:a8:81:87:ea:f6:ae:a7: 2c:eb:17:ee:6e:6e:8c:8b:08:a7:97:9a:14:bf:6d: d5:c4:f7:3f:ee:18:a5:e7:1b:17:71:9d:a9:1d:f8: 71:73:8b:9e:a3:32:0b:de:37:50:6e:49:70:b7:58: 9c:ce:c5:e4:fc:3e:b6:d4:4c:dd:1e:c1:74:20:ed: d0:ab:bb:6c:c3:87:4c:7b:c5:64:f7:15:df:53:ec: 01:04:b7:b2:d9:6b:c7:ef:68:b1:b6:1c:5a:b4:27: ae:1b:16:19:6f:9b:68:5b:7d:ce:d0:ea:64:bc:44: 1e:fb:c1:d4:02:e0:ea:12:a1:50:35:7e:51:ae:bd: 4f:c7:9f:ed:f5:6d:e8:af:b7:d1:99:d9:6a:a1:63: 8f:57:59:d9:15:a2:49:85:ef:14:17:d2:85:6d:2e: ba:59:84:66:60:0a:f2:b3:93:29:d8:d0:82:04:71: 31:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:59:35:0D:10:CD:DB:E6:5C:CB:E7:D0:8B:61:2B:C0:41:C0:E3:07 X509v3 Authority Key Identifier: keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8c:37:b0:d1:87:30:e4:6d:32:4e:13:0b:03:3a:c6:1f:9d: d4:29:6a:b4:0e:87:07:6d:09:e9:51:7f:c3:4f:bc:4b:9f:ae: a6:21:4e:ac:10:2c:f4:74:7a:ba:39:5d:e7:21:db:fe:d9:22: 00:37:f5:78:4f:34:2b:b3:e5:37:e0:5e:ce:b0:0e:47:b8:40: 39:bf:3a:7b:dc:a7:b1:e8:47:fa:7d:5f:a2:db:57:bc:92:58: 94:05:da:33:b1:74:e2:fb:8a:d9:b1:3e:ea:c9:c2:f3:17:78: a7:ab:61:53:a6:2c:96:62:d7:16:08:da:72:73:b4:4d:59:f4: 25:96:30:c3:1a:8b:b2:2b:15:e0:50:58:90:1c:fb:b5:b0:06: 64:16:0f:48:d1:72:a1:ee:14:c1:85:e8:9b:01:4b:b0:c1:7f: 4e:d6:cf:71:d3:b6:4c:a7:78:15:2c:5c:d7:41:71:5f:4f:98: af:81:3b:c2:47:48:f0:9c:76:81:e6:0f:74:17:17:a3:2f:f3: 43:ae:7a:32:e3:94:3e:a5:e1:b7:bb:0b:81:11:30:de:a9:ed: 80:d7:8b:8d:46:75:c7:c1:70:c1:d1:05:1a:d4:d6:00:68:ba: 4c:78:13:e8:aa:45:2e:e5:6f:1a:ff:b1:46:43:f2:7f:9f:ce: b0:ff:99:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr31ItheLGuo5xUGwchYOtFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWMzMTQ0MTY5MWI4NTliMzQ3ZmQxNzIxN2E1ZTVkMWIw YmUzMDMwHhcNMjUxMjA3MDgwMTMyWhcNMjUxMjA4MDgwMTMyWjAzMTEwLwYDVQQD EyhiYjU5MzUwZDEwY2RkYmU2NWNjYmU3ZDA4YjYxMmJjMDQxYzBlMzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQoUKsdY2kFMVxYuANyc0nOR7aY3 sfQu30umLD5wD6BZecTbClzLpZpkbUvfKbFBh/AxktXdLwJvzSUyrKuSs1qjkkwv kYyygEnR7hGRzndXKqiBh+r2rqcs6xfubm6Miwinl5oUv23VxPc/7hil5xsXcZ2p Hfhxc4ueozIL3jdQbklwt1iczsXk/D621EzdHsF0IO3Qq7tsw4dMe8Vk9xXfU+wB BLey2WvH72ixthxatCeuGxYZb5toW33O0OpkvEQe+8HUAuDqEqFQNX5Rrr1Px5/t 9W3or7fRmdlqoWOPV1nZFaJJhe8UF9KFbS66WYRmYArys5Mp2NCCBHExnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtZNQ0QzdvmXMvn0IthK8BBwOMHMB8GA1UdIwQY MBaAFBfsMUQWkbhZs0f9FyF6Xl0bC+MDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mMTc1NjItMzAyMC00NmVmLTljZmYt YTc3MmU1ODM0ZmQyLzEvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mMTc1NjItMzAyMC00NmVmLTljZmYtYTc3MmU1ODM0ZmQy LzEvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHow3sNGH MORtMk4TCwM6xh+d1ClqtA6HB20J6VF/w0+8S5+upiFOrBAs9HR6ujld5yHb/tki ADf1eE80K7PlN+BezrAOR7hAOb86e9ynsehH+n1fottXvJJYlAXaM7F04vuK2bE+ 6snC8xd4p6thU6YslmLXFgjacnO0TVn0JZYwwxqLsisV4FBYkBz7tbAGZBYPSNFy oe4UwYXomwFLsMF/TtbPcdO2TKd4FSxc10FxX0+Yr4E7wkdI8Jx2geYPdBcXoy/z Q656MuOUPqXht7sLgREw3qntgNeLjUZ1x8FwwdEFGtTWAGi6THgT6KpFLuVvGv+x RkPyf5/OsP+Zww== -----END CERTIFICATE-----Generated at Sun Dec 7 15:29:11 2025 by rpki-client