This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json) Hash identifier: Tu9TEI1BIxhKXCvgBH9ukb/6ENqQNcpI+1eSV2LxOVg= Subject key identifier: 51:64:EC:47:68:10:F3:5B:D2:16:D7:E5:05:15:A2:33:9B:8A:85:86 Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Certificate serial: 019B1126053DD5BDA772150096AA374D81DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft Manifest number: 04E9 Signing time: Fri 12 Dec 2025 06:01:02 +0000 Manifest this update: Fri 12 Dec 2025 06:01:02 +0000 Manifest next update: Sat 13 Dec 2025 06:01:02 +0000 Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: Kcw2QPAwknxzUxehEdXe6DZLwRN01DlJcG1duzAInVo=) 2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:05:3d:d5:bd:a7:72:15:00:96:aa:37:4d:81:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Validity Not Before: Dec 12 06:01:02 2025 GMT Not After : Dec 13 06:01:02 2025 GMT Subject: CN=5164ec476810f35bd216d7e50515a2339b8a8586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:fd:11:39:67:bb:56:6d:65:24:15:3e:37: 6f:ab:fb:9b:4a:7d:9d:09:ed:56:97:d6:89:4e:d1: 50:57:4a:4e:77:8b:28:ce:e2:20:13:e4:c2:01:6d: 3e:46:b7:23:a2:b9:69:89:a6:71:9d:c4:cf:7b:8a: a3:02:7f:92:0e:13:9d:0f:38:b1:60:91:61:9c:ce: 4d:10:54:36:3b:98:01:ff:1d:13:be:32:b1:7e:5d: 5d:eb:6b:e3:c5:fb:b9:78:f3:84:96:f7:0a:2c:5c: ca:5e:09:aa:ca:cf:66:a3:cf:f6:ea:a5:d2:d7:8b: ef:ba:86:f9:98:e8:33:6a:fc:9f:f3:5c:91:86:d0: bf:23:4a:e9:83:72:95:98:b6:ae:83:58:1b:50:c0: e3:31:72:35:ae:18:a1:21:6c:b0:67:a3:f8:fd:a6: f1:5d:e7:7b:2e:82:7c:e7:9a:cf:0d:67:67:91:bc: 68:41:cd:54:6d:3e:c7:76:71:de:c0:5f:1f:a9:5d: dc:a8:8e:57:ce:f0:4f:e1:d4:7d:de:8f:d3:19:57: 8b:66:8f:b5:d7:59:c4:0f:a4:3e:d6:83:23:23:85: 72:e7:36:e9:eb:36:63:3b:94:71:fe:5a:5f:88:03: 0c:1d:a2:10:f1:06:36:7f:7d:c0:8b:df:5a:e2:ce: 7f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:64:EC:47:68:10:F3:5B:D2:16:D7:E5:05:15:A2:33:9B:8A:85:86 X509v3 Authority Key Identifier: keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2f:0a:b9:ca:21:8f:c1:90:37:d4:ab:69:4d:eb:f0:8b:97: 5c:85:18:e3:a0:ff:4b:da:0a:f1:d9:27:3f:aa:5e:58:c9:73: 60:4e:4b:4b:23:0f:6f:44:9c:45:d6:64:5b:b4:a4:f2:19:a6: 19:b9:d7:42:3b:72:83:77:4d:6f:cd:54:62:1a:1a:e3:4d:a1: 11:1f:94:9f:5a:89:ab:fc:d8:fd:6f:20:d2:f3:34:10:c8:a4: 51:b6:ac:64:d1:95:f0:e4:a9:61:81:69:11:92:9d:94:8c:f3: d8:e4:dd:84:29:bf:cf:e7:e1:7e:e7:fd:57:6b:16:bf:66:02: 13:dc:ea:03:14:8f:d5:4e:8e:13:d1:3b:cc:8e:b1:28:19:7a: c9:4c:3f:05:13:80:25:8d:d0:d8:7f:b0:1f:8f:49:87:81:dd: 8a:92:b9:76:72:dd:67:f0:bb:db:bf:98:78:63:32:94:ec:67: 6b:74:c4:e9:b9:e0:a9:73:76:ba:bb:6d:5e:ba:0b:89:97:03: 11:6a:2f:9d:c5:6c:a9:3d:fa:e5:49:05:e8:e8:71:68:77:f4: 06:50:c2:75:7b:df:dd:25:ae:e0:b2:25:93:1a:f2:e6:90:41: 49:52:e5:12:28:c2:c0:46:de:33:27:b4:5d:66:e9:41:5e:32: 93:93:9d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJgU91b2nchUAlqo3TYHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3 ZTY5ZTAwHhcNMjUxMjEyMDYwMTAyWhcNMjUxMjEzMDYwMTAyWjAzMTEwLwYDVQQD Eyg1MTY0ZWM0NzY4MTBmMzViZDIxNmQ3ZTUwNTE1YTIzMzliOGE4NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f/9ETlnu1ZtZSQVPjdvq/ubSn2d Ce1Wl9aJTtFQV0pOd4sozuIgE+TCAW0+RrcjorlpiaZxncTPe4qjAn+SDhOdDzix YJFhnM5NEFQ2O5gB/x0TvjKxfl1d62vjxfu5ePOElvcKLFzKXgmqys9mo8/26qXS 14vvuob5mOgzavyf81yRhtC/I0rpg3KVmLaug1gbUMDjMXI1rhihIWywZ6P4/abx Xed7LoJ855rPDWdnkbxoQc1UbT7HdnHewF8fqV3cqI5XzvBP4dR93o/TGVeLZo+1 11nED6Q+1oMjI4Vy5zbp6zZjO5Rx/lpfiAMMHaIQ8QY2f33Ai99a4s5/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFk7EdoEPNb0hbX5QUVojObioWGMB8GA1UdIwQY MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApi8Kucoh j8GQN9SraU3r8IuXXIUY46D/S9oK8dknP6peWMlzYE5LSyMPb0ScRdZkW7Sk8hmm GbnXQjtyg3dNb81UYhoa402hER+Un1qJq/zY/W8g0vM0EMikUbasZNGV8OSpYYFp EZKdlIzz2OTdhCm/z+fhfuf9V2sWv2YCE9zqAxSP1U6OE9E7zI6xKBl6yUw/BROA JY3Q2H+wH49Jh4HdipK5dnLdZ/C727+YeGMylOxna3TE6bngqXN2urttXroLiZcD EWovncVsqT365UkF6OhxaHf0BlDCdXvf3SWu4LIlkxry5pBBSVLlEijCwEbeMye0 XWbpQV4yk5OdKA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:30 2025 by rpki-client