This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json) Hash identifier: WDCIplEUFZf6RNhQ6xZ8v7pAXKlxdGh+fmmK6qABLq4= Subject key identifier: D3:7D:35:25:69:97:82:27:CE:2A:09:B8:1D:2E:F5:10:0C:6B:60:18 Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c Certificate serial: 019B1A294CC06FAC0DE5E629D5E50DC15D8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft Manifest number: 1707 Signing time: Sun 14 Dec 2025 00:01:12 +0000 Manifest this update: Sun 14 Dec 2025 00:01:12 +0000 Manifest next update: Mon 15 Dec 2025 00:01:12 +0000 Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: hLn52qXRc4FA1wmSAM2g6mmVMX2GtT9nyJtHvfRDmk8=) 2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:4c:c0:6f:ac:0d:e5:e6:29:d5:e5:0d:c1:5d:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c Validity Not Before: Dec 14 00:01:12 2025 GMT Not After : Dec 15 00:01:12 2025 GMT Subject: CN=d37d352569978227ce2a09b81d2ef5100c6b6018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:ed:4e:ab:67:f5:b2:d8:fe:a3:44:93:9f: 23:0d:8e:0a:11:52:72:0c:65:30:8e:a6:8e:02:4e: 9d:c4:61:22:ad:c5:e0:ae:78:70:46:f7:6c:7a:bc: 84:0b:65:c3:eb:47:9d:99:fa:ce:16:10:49:10:ed: 87:be:3a:fb:67:15:76:20:90:d2:6d:e1:3d:31:f1: 05:95:12:a5:24:e8:ea:54:2f:0d:54:7c:21:6c:17: 9f:6f:44:fc:4b:3b:fa:a3:59:88:af:ec:6a:2f:0d: b8:38:0d:89:f1:1e:ab:16:04:b0:b0:2d:3b:00:ce: 3b:1c:18:98:d7:d8:d7:6c:ac:08:5a:aa:61:d5:07: 91:4d:74:89:62:6c:de:3f:b1:b6:7d:43:5d:97:02: 43:2f:05:61:4a:2b:61:8d:8d:64:71:90:eb:01:6b: 85:82:f0:25:50:9c:6c:03:28:e6:cc:f4:f5:ad:ca: 88:d0:cd:73:b8:07:55:64:95:25:3c:33:b3:3c:d5: 3c:94:37:07:a6:3e:c6:39:f7:bd:5a:2f:14:7c:5d: b3:9a:a7:cb:d1:bc:9f:a1:f8:89:27:0b:77:9a:db: 16:49:50:93:21:d4:73:fe:8b:e8:9e:fb:e3:6e:30: 9b:a2:79:ca:0c:d9:51:1f:d0:12:24:88:88:1c:58: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:7D:35:25:69:97:82:27:CE:2A:09:B8:1D:2E:F5:10:0C:6B:60:18 X509v3 Authority Key Identifier: keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:32:a6:a1:24:66:fa:5b:e4:81:fb:77:0f:41:c8:53:f6:87: 07:75:d4:52:b1:a7:ab:05:65:52:5d:8d:66:4e:32:c2:a7:da: e1:30:15:87:61:3a:84:6d:bc:05:47:46:b4:12:33:a3:fe:92: ca:db:0a:5a:67:74:6a:a6:ea:a1:a3:64:0f:b0:f1:23:03:6d: 86:b9:94:cf:47:92:86:33:0a:e0:4f:ff:f6:72:6f:32:3f:2c: 60:07:bc:ad:30:02:ba:68:d2:e2:db:9b:0d:6c:a5:60:dd:b9: 60:29:22:40:e9:2d:07:21:b5:0f:49:28:66:53:fd:c8:56:1e: 9e:33:b7:0d:4c:ff:8a:79:45:30:21:e0:41:af:70:24:10:6d: 09:81:ce:30:71:d5:5b:97:7e:7e:4f:f8:00:a2:72:54:f0:30: 90:6f:91:06:b6:4f:26:98:6c:14:6d:a9:ad:35:d7:00:57:9d: ce:de:d6:bc:99:fe:9d:d3:a8:09:8a:1f:be:3f:21:d0:7b:fd: b9:a3:97:70:ae:df:69:d0:e7:3d:ff:be:c6:f4:dd:a8:f0:d2: 58:af:f4:f3:d2:54:9a:7d:1f:83:2d:76:93:f9:79:90:bc:f2: 13:04:41:ce:8a:ad:2e:2e:f7:65:5a:d5:2f:b0:7a:54:ac:53: 51:20:27:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKUzAb6wN5eYp1eUNwV2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm YzFjM2MwHhcNMjUxMjE0MDAwMTEyWhcNMjUxMjE1MDAwMTEyWjAzMTEwLwYDVQQD EyhkMzdkMzUyNTY5OTc4MjI3Y2UyYTA5YjgxZDJlZjUxMDBjNmI2MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrLtTqtn9bLY/qNEk58jDY4KEVJy DGUwjqaOAk6dxGEircXgrnhwRvdseryEC2XD60edmfrOFhBJEO2Hvjr7ZxV2IJDS beE9MfEFlRKlJOjqVC8NVHwhbBefb0T8Szv6o1mIr+xqLw24OA2J8R6rFgSwsC07 AM47HBiY19jXbKwIWqph1QeRTXSJYmzeP7G2fUNdlwJDLwVhSithjY1kcZDrAWuF gvAlUJxsAyjmzPT1rcqI0M1zuAdVZJUlPDOzPNU8lDcHpj7GOfe9Wi8UfF2zmqfL 0byfofiJJwt3mtsWSVCTIdRz/ovonvvjbjCbonnKDNlRH9ASJIiIHFjAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNN9NSVpl4InzioJuB0u9RAMa2AYMB8GA1UdIwQY MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzKmoSRm +lvkgft3D0HIU/aHB3XUUrGnqwVlUl2NZk4ywqfa4TAVh2E6hG28BUdGtBIzo/6S ytsKWmd0aqbqoaNkD7DxIwNthrmUz0eShjMK4E//9nJvMj8sYAe8rTACumjS4tub DWylYN25YCkiQOktByG1D0koZlP9yFYenjO3DUz/inlFMCHgQa9wJBBtCYHOMHHV W5d+fk/4AKJyVPAwkG+RBrZPJphsFG2prTXXAFedzt7WvJn+ndOoCYofvj8h0Hv9 uaOXcK7fadDnPf++xvTdqPDSWK/089JUmn0fgy12k/l5kLzyEwRBzoqtLi73ZVrV L7B6VKxTUSAnMQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:50:08 2025 by rpki-client