This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft File: Fo8OK6LQk0M6S2EpVye5m7FF93s.mft (raw, json) Hash identifier: PwJEo48gMBstWi8SNnyCQvwx8pnN8dsIkOMA+FMW4Xc= Subject key identifier: C4:B8:E4:76:53:32:0B:7B:E4:09:DC:68:9E:25:5B:F9:E1:B6:0E:59 Authority key identifier: 16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B Certificate issuer: /CN=168f0e2ba2d093433a4b61295727b99bb145f77b Certificate serial: 019B37FC911761181929144F9B10F263C5CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft Manifest number: 0706 Signing time: Fri 19 Dec 2025 19:00:57 +0000 Manifest this update: Fri 19 Dec 2025 19:00:57 +0000 Manifest next update: Sat 20 Dec 2025 19:00:57 +0000 Files and hashes: 1: 41Kf3SCwnWPoeI3gwt6SuiM3U8E.roa (hash: u7Hgq9t6aNSvvpN1ap2hOUlss087XACBIUhudiFtYGg=) 2: Fo8OK6LQk0M6S2EpVye5m7FF93s.crl (hash: AHFy+JujKI6hmt1ugCEwh2c0KdOKb8rK0p50Btgjzi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:91:17:61:18:19:29:14:4f:9b:10:f2:63:c5:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168f0e2ba2d093433a4b61295727b99bb145f77b Validity Not Before: Dec 19 19:00:57 2025 GMT Not After : Dec 20 19:00:57 2025 GMT Subject: CN=c4b8e47653320b7be409dc689e255bf9e1b60e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c2:a9:6d:f2:1f:97:90:43:5c:ea:e4:76:fa: 99:6b:50:78:24:60:5f:cf:9e:51:ed:23:ec:1d:f8: 04:f7:b9:8d:e0:e8:b3:10:63:f1:cb:b9:32:c2:ef: dd:8d:26:9c:32:a2:57:a0:93:06:6a:c3:c1:b1:fe: d9:63:18:1e:6e:6b:a5:62:07:6a:3d:e5:4d:42:88: de:56:09:dc:e8:79:39:01:61:f4:7e:17:6c:41:9b: 4e:26:83:a9:9a:58:58:f9:70:e0:45:be:e0:87:98: 45:c0:d1:f9:1e:4a:89:49:0f:e1:cf:36:22:2c:1d: 36:ee:fc:99:13:b5:e2:94:1c:70:cb:d4:d1:3b:9d: 53:69:f5:69:e2:b8:fb:8b:89:74:b9:20:34:4e:fe: 2a:27:32:e7:0a:3b:93:f5:c0:52:1b:c0:a6:e7:9e: f2:d9:ef:7b:a6:65:5b:c8:39:17:7c:bc:d8:fd:89: e0:b3:7e:be:3f:01:50:82:a3:b5:c9:80:27:fb:a0: e4:01:12:59:8c:f2:8b:9b:75:7a:d9:19:72:47:d6: 61:2e:74:59:52:43:51:93:e9:48:fe:c3:a3:53:f0: 49:44:07:85:b2:36:f6:67:9b:4b:32:9a:10:a4:bb: f7:7e:9f:cb:e8:e5:29:3c:95:e7:d2:25:07:16:20: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B8:E4:76:53:32:0B:7B:E4:09:DC:68:9E:25:5B:F9:E1:B6:0E:59 X509v3 Authority Key Identifier: keyid:16:8F:0E:2B:A2:D0:93:43:3A:4B:61:29:57:27:B9:9B:B1:45:F7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo8OK6LQk0M6S2EpVye5m7FF93s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0808b2-1633-4c0d-bcbc-f6fcf73cee70/1/Fo8OK6LQk0M6S2EpVye5m7FF93s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:b2:e9:0d:3c:f7:93:20:82:ff:be:da:8b:46:d7:bc:4d:5b: 85:23:1d:ec:94:2a:58:d6:3b:07:7e:cd:88:3c:52:f0:c0:89: 85:70:4b:26:10:f5:8f:a1:a7:4d:59:9b:2b:f9:3b:9a:d6:cf: 7f:19:28:17:36:6b:c2:c0:29:f5:5a:4b:b9:16:10:32:bf:95: 7e:5f:e1:76:26:f5:ec:92:49:44:75:90:f1:58:68:2d:0b:08: 2d:12:00:b9:e7:11:1f:ca:c1:ef:a8:b6:ef:0e:e8:47:6b:28: b5:4a:12:60:d0:50:7c:b2:c4:db:eb:9b:06:d8:b7:1e:c0:c5: 9e:f7:8a:dc:b2:93:79:34:6b:3a:b6:69:d8:47:92:78:6d:d7: 3a:25:f5:dd:88:39:99:16:84:41:92:dc:cf:f7:29:f3:36:f6: d1:35:9d:b2:80:d4:3f:cd:57:aa:53:f2:17:c1:97:6c:67:0a: a5:50:25:dc:e9:43:79:0e:e1:0e:4e:1a:58:3e:38:9c:c0:bf: 1f:a6:58:03:da:b7:37:82:56:39:2b:43:90:07:3b:e3:80:40: d3:f0:4d:d9:b9:c7:c0:d3:79:93:54:11:b8:2e:35:f4:ac:be: da:72:ce:b9:bf:b5:a4:d2:62:cd:c5:15:ac:e1:0a:ed:62:42: 4f:7d:7d:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/JEXYRgZKRRPmxDyY8XKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OGYwZTJiYTJkMDkzNDMzYTRiNjEyOTU3MjdiOTliYjE0 NWY3N2IwHhcNMjUxMjE5MTkwMDU3WhcNMjUxMjIwMTkwMDU3WjAzMTEwLwYDVQQD EyhjNGI4ZTQ3NjUzMzIwYjdiZTQwOWRjNjg5ZTI1NWJmOWUxYjYwZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsKpbfIfl5BDXOrkdvqZa1B4JGBf z55R7SPsHfgE97mN4OizEGPxy7kywu/djSacMqJXoJMGasPBsf7ZYxgebmulYgdq PeVNQojeVgnc6Hk5AWH0fhdsQZtOJoOpmlhY+XDgRb7gh5hFwNH5HkqJSQ/hzzYi LB027vyZE7XilBxwy9TRO51TafVp4rj7i4l0uSA0Tv4qJzLnCjuT9cBSG8Cm557y 2e97pmVbyDkXfLzY/Yngs36+PwFQgqO1yYAn+6DkARJZjPKLm3V62RlyR9ZhLnRZ UkNRk+lI/sOjU/BJRAeFsjb2Z5tLMpoQpLv3fp/L6OUpPJXn0iUHFiBnBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMS45HZTMgt75AncaJ4lW/nhtg5ZMB8GA1UdIwQY MBaAFBaPDiui0JNDOkthKVcnuZuxRfd7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMt ZjZmY2Y3M2NlZTcwLzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8wODA4YjItMTYzMy00YzBkLWJjYmMtZjZmY2Y3M2NlZTcw LzEvRm84T0s2TFFrME02UzJFcFZ5ZTVtN0ZGOTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbLpDTz3 kyCC/77ai0bXvE1bhSMd7JQqWNY7B37NiDxS8MCJhXBLJhD1j6GnTVmbK/k7mtbP fxkoFzZrwsAp9VpLuRYQMr+Vfl/hdib17JJJRHWQ8VhoLQsILRIAuecRH8rB76i2 7w7oR2sotUoSYNBQfLLE2+ubBti3HsDFnveK3LKTeTRrOrZp2EeSeG3XOiX13Yg5 mRaEQZLcz/cp8zb20TWdsoDUP81XqlPyF8GXbGcKpVAl3OlDeQ7hDk4aWD44nMC/ H6ZYA9q3N4JWOStDkAc744BA0/BN2bnHwNN5k1QRuC419Ky+2nLOub+1pNJizcUV rOEK7WJCT319qQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:13:11 2025 by rpki-client