This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft File: F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json) Hash identifier: 9R/vxBS71rxUwax4KYcwaTbr7pLRPF0D4mUoD7M+sqg= Subject key identifier: FF:DD:1D:BF:24:86:EE:33:61:FE:E5:4E:34:C4:25:72:21:D2:EC:88 Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f Certificate serial: 019B5A1B18459A5F1DA9BB8FB2C69C4F0F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft Manifest number: 1669 Signing time: Fri 26 Dec 2025 10:01:23 +0000 Manifest this update: Fri 26 Dec 2025 10:01:23 +0000 Manifest next update: Sat 27 Dec 2025 10:01:23 +0000 Files and hashes: 1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=) 2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: vNVXjmtMnAXYvWTIhhzyHnrFHmpD/W6aBaHFwAOj7ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:18:45:9a:5f:1d:a9:bb:8f:b2:c6:9c:4f:0f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f Validity Not Before: Dec 26 10:01:23 2025 GMT Not After : Dec 27 10:01:23 2025 GMT Subject: CN=ffdd1dbf2486ee3361fee54e34c4257221d2ec88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:90:a3:f1:fb:c5:a9:d0:7b:b4:7b:d8:20: 56:9c:34:db:88:12:40:25:60:b8:de:cc:50:da:b4: f5:ed:0c:ff:b0:6e:53:18:63:b0:a6:d8:1e:d1:85: af:29:be:88:2d:19:d1:f9:af:47:61:f6:4f:5f:39: 16:cd:80:1a:22:94:b1:ab:91:bb:87:d4:27:39:74: be:f1:06:54:c6:8c:34:20:cd:bf:f5:d5:2e:87:78: 96:b4:95:7b:0d:21:6a:e2:d6:0b:ba:0a:75:2e:99: 1e:87:a2:36:24:8e:40:79:35:32:35:aa:13:df:87: a9:f4:a4:11:1c:51:36:33:5a:ae:d0:76:cf:e2:b0: 54:81:c3:af:6a:95:38:cb:7c:8d:c8:70:b4:15:ef: e6:78:3d:b4:44:8a:bc:ea:c4:6a:86:1a:34:bc:18: db:26:3f:81:26:f9:26:ae:fd:f3:e8:64:fe:0d:63: 40:c1:df:29:60:b7:8f:6d:1d:33:0e:46:6f:3b:00: cf:e6:9c:41:a2:4b:06:d8:3e:95:c5:6d:d6:e2:bb: ca:1e:e0:d8:3b:aa:30:05:1a:da:1e:ed:25:32:2f: f4:f1:1f:b2:e8:03:08:23:35:27:50:0e:24:55:99: a6:1b:73:ec:5d:8d:b4:1d:2d:a8:d6:bb:83:c2:2c: 5c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:DD:1D:BF:24:86:EE:33:61:FE:E5:4E:34:C4:25:72:21:D2:EC:88 X509v3 Authority Key Identifier: keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a1:cb:1f:16:d4:f5:76:9b:ad:e3:a0:18:57:76:b6:95:20: 14:ef:be:7e:8d:00:58:ad:5d:a6:5b:05:32:e1:db:7f:98:95: ee:7e:23:07:a2:77:67:b5:00:1e:96:f0:4f:3a:5d:69:2e:c3: 9c:52:5e:5c:a1:d6:1b:37:46:84:6e:71:90:3f:3b:7d:34:0d: 9d:1a:65:d0:98:65:96:40:f7:0a:21:0b:e6:fb:f9:35:4f:83: 2f:c1:6a:81:cc:5a:5a:a1:0a:07:ae:0a:e6:dc:ee:85:f5:5b: 49:8b:b3:5d:cc:95:cc:4f:27:ef:d4:d1:f6:dc:de:23:40:63: c6:0a:30:a6:e6:29:03:57:1e:04:84:37:82:9f:d0:f5:55:f4: c3:bf:9a:fb:93:0e:25:d0:d9:04:4c:bd:f8:db:3d:14:49:3a: 12:5d:c3:1f:2e:78:9d:b6:ec:b0:60:0b:1a:ce:e4:6c:cb:df: 0a:f7:be:13:e8:06:26:40:a8:f6:dc:7f:d4:31:45:89:8b:3f: ef:ab:1d:72:9e:eb:a9:39:2f:b5:bc:b5:fe:8a:81:fd:65:1b: f0:34:9d:95:b9:38:bf:76:e8:9f:55:b9:ca:fd:90:6f:c9:d1: 4a:ed:7d:b5:ae:ba:47:d6:42:e7:84:ff:95:73:41:70:0a:88: 70:4f:41:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGxhFml8dqbuPssacTw9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWJjODZkODUzZjdlM2E5MjAxNTNmMWZiMGIxOWY3YjBl NDFhN2YwHhcNMjUxMjI2MTAwMTIzWhcNMjUxMjI3MTAwMTIzWjAzMTEwLwYDVQQD EyhmZmRkMWRiZjI0ODZlZTMzNjFmZWU1NGUzNGM0MjU3MjIxZDJlYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfiQo/H7xanQe7R72CBWnDTbiBJA JWC43sxQ2rT17Qz/sG5TGGOwptge0YWvKb6ILRnR+a9HYfZPXzkWzYAaIpSxq5G7 h9QnOXS+8QZUxow0IM2/9dUuh3iWtJV7DSFq4tYLugp1Lpkeh6I2JI5AeTUyNaoT 34ep9KQRHFE2M1qu0HbP4rBUgcOvapU4y3yNyHC0Fe/meD20RIq86sRqhho0vBjb Jj+BJvkmrv3z6GT+DWNAwd8pYLePbR0zDkZvOwDP5pxBoksG2D6VxW3W4rvKHuDY O6owBRraHu0lMi/08R+y6AMIIzUnUA4kVZmmG3PsXY20HS2o1ruDwixcpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/dHb8khu4zYf7lTjTEJXIh0uyIMB8GA1UdIwQY MBaAFBfryG2FP346kgFT8fsLGfew5Bp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTIt Zjc1NjE4YmU2MmQ3LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTItZjc1NjE4YmU2MmQ3 LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqHLHxbU 9XabreOgGFd2tpUgFO++fo0AWK1dplsFMuHbf5iV7n4jB6J3Z7UAHpbwTzpdaS7D nFJeXKHWGzdGhG5xkD87fTQNnRpl0JhllkD3CiEL5vv5NU+DL8FqgcxaWqEKB64K 5tzuhfVbSYuzXcyVzE8n79TR9tzeI0BjxgowpuYpA1ceBIQ3gp/Q9VX0w7+a+5MO JdDZBEy9+Ns9FEk6El3DHy54nbbssGALGs7kbMvfCve+E+gGJkCo9tx/1DFFiYs/ 76sdcp7rqTkvtby1/oqB/WUb8DSdlbk4v3bon1W5yv2Qb8nRSu19ta66R9ZC54T/ lXNBcAqIcE9Bpg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:32 2025 by rpki-client