This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json) Hash identifier: yw2bFiWQZzilylOjy4fbRjudkM3YFtiNsIcggrWb4xU= Subject key identifier: 0B:EE:A6:80:53:FF:E7:19:1A:94:DF:28:FC:A1:55:0B:60:2F:D9:54 Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986 Certificate serial: 019AFE4464450DE2ED359457DFFADF9CFEE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft Manifest number: 0F Signing time: Mon 08 Dec 2025 14:01:26 +0000 Manifest this update: Mon 08 Dec 2025 14:01:26 +0000 Manifest next update: Tue 09 Dec 2025 14:01:26 +0000 Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: ESUH7aG+/na3Abmg7YmG3oUR4m+605RdBD6qjV+qmPA=) 2: wCBr-k0AtLk5d98BUTSeDnbaCIw.roa (hash: 36nmnwOgMPCPBCUdTafpIUXfmFJpoky9F6FQl9mvwM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:44:64:45:0d:e2:ed:35:94:57:df:fa:df:9c:fe:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986 Validity Not Before: Dec 8 14:01:26 2025 GMT Not After : Dec 9 14:01:26 2025 GMT Subject: CN=0beea68053ffe7191a94df28fca1550b602fd954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:16:e1:f6:8a:95:2f:b6:f1:7f:fe:0e:9e: e1:97:39:d7:3a:27:f4:df:aa:92:3b:19:5b:b6:db: fc:60:ba:95:3a:90:7e:b5:89:87:3e:36:99:8f:27: ee:1c:3f:56:1d:2d:dd:54:36:f8:f6:8b:7b:63:da: 79:45:c3:27:79:76:a0:ef:f1:42:6d:d5:bd:8d:ae: 83:f3:0e:3f:09:3e:c5:59:40:d6:4b:1e:36:db:76: a2:bc:ff:40:1b:22:5d:dd:85:0c:90:c8:d6:62:91: ed:72:ba:f2:d5:5b:30:56:d9:22:36:ca:6c:2c:50: 79:3b:1f:91:a4:73:a9:83:3e:76:ee:9b:5b:05:a8: 61:ac:20:9b:bf:82:60:8c:aa:21:fa:ed:20:84:69: 69:5b:9d:e0:48:a3:17:ab:0d:12:48:1b:22:ae:d5: 27:bf:a0:89:02:d3:84:e2:72:cb:9f:1b:10:ee:90: 59:d9:98:87:dd:6f:ac:7e:6a:a4:08:2f:75:9f:c6: 16:c1:1a:5a:33:ec:2d:81:68:46:69:d4:5b:bb:fb: b9:f9:93:5a:1e:05:0b:3b:8a:82:87:a4:1d:3a:23: 36:8d:8c:e9:07:05:97:f2:b7:d3:38:61:2a:87:f8: 8d:06:91:97:3f:23:95:3d:10:14:f5:8b:47:e5:86: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:EE:A6:80:53:FF:E7:19:1A:94:DF:28:FC:A1:55:0B:60:2F:D9:54 X509v3 Authority Key Identifier: keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:21:d8:57:d2:17:33:57:8b:c8:d3:7f:c6:f8:ce:18:b3:ef: 5d:b4:04:3f:05:14:13:1d:ba:09:2f:95:e3:9b:f7:0a:52:c8: 15:dd:88:a3:c4:a1:2e:14:72:e1:ff:3e:24:d5:78:3e:3e:d7: 49:3c:43:a6:8f:ba:a3:46:81:17:43:d0:46:8a:72:d2:ad:44: 6a:f4:00:4a:1c:cf:c7:96:de:18:c8:ca:b5:1a:9f:14:66:92: 2a:2f:3f:8e:2b:c3:cf:01:32:52:63:b0:c4:ec:98:45:9c:23: 15:16:dd:d4:11:7a:20:53:dd:9f:31:04:73:0e:cf:cc:ae:b4: 50:48:66:bd:3c:47:82:97:aa:e7:74:50:e9:88:2b:fb:cd:05: 67:42:ce:ee:4c:09:98:64:ee:28:59:8d:5b:56:e8:78:9a:cd: 90:f4:a0:87:8d:02:fb:73:d6:3f:71:11:ab:8d:17:b1:86:45: 4e:fc:06:f8:02:aa:ef:7b:a0:1d:1d:c1:9a:63:ee:b1:54:00: ab:f1:b8:5c:78:fd:84:8e:8f:a6:a6:36:32:9e:71:7a:15:04: 09:c4:ab:ed:61:51:d0:06:e6:90:1b:0c:31:a4:3c:3d:89:ae: 61:1b:ac:04:41:52:c7:c0:b0:a4:49:db:23:8f:40:22:b7:6c: 90:70:34:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+RGRFDeLtNZRX3/rfnP7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz NjY5ODYwHhcNMjUxMjA4MTQwMTI2WhcNMjUxMjA5MTQwMTI2WjAzMTEwLwYDVQQD EygwYmVlYTY4MDUzZmZlNzE5MWE5NGRmMjhmY2ExNTUwYjYwMmZkOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/MW4faKlS+28X/+Dp7hlznXOif0 36qSOxlbttv8YLqVOpB+tYmHPjaZjyfuHD9WHS3dVDb49ot7Y9p5RcMneXag7/FC bdW9ja6D8w4/CT7FWUDWSx4223aivP9AGyJd3YUMkMjWYpHtcrry1VswVtkiNsps LFB5Ox+RpHOpgz527ptbBahhrCCbv4JgjKoh+u0ghGlpW53gSKMXqw0SSBsirtUn v6CJAtOE4nLLnxsQ7pBZ2ZiH3W+sfmqkCC91n8YWwRpaM+wtgWhGadRbu/u5+ZNa HgULO4qCh6QdOiM2jYzpBwWX8rfTOGEqh/iNBpGXPyOVPRAU9YtH5YbnEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvupoBT/+cZGpTfKPyhVQtgL9lUMB8GA1UdIwQY MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSHYV9IX M1eLyNN/xvjOGLPvXbQEPwUUEx26CS+V45v3ClLIFd2Io8ShLhRy4f8+JNV4Pj7X STxDpo+6o0aBF0PQRopy0q1EavQAShzPx5beGMjKtRqfFGaSKi8/jivDzwEyUmOw xOyYRZwjFRbd1BF6IFPdnzEEcw7PzK60UEhmvTxHgpeq53RQ6Ygr+80FZ0LO7kwJ mGTuKFmNW1boeJrNkPSgh40C+3PWP3ERq40XsYZFTvwG+AKq73ugHR3BmmPusVQA q/G4XHj9hI6PpqY2Mp5xehUECcSr7WFR0AbmkBsMMaQ8PYmuYRusBEFSx8CwpEnb I49AIrdskHA0EQ== -----END CERTIFICATE-----Generated at Mon Dec 8 20:17:32 2025 by rpki-client