This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json) Hash identifier: cV8bYbd+ljfeMaqM/4JV1rL0I8Mo6IEhjlq87xzo53I= Subject key identifier: CB:C9:5A:3B:80:71:76:46:88:B7:D7:BB:9B:C1:3A:19:19:24:44:F2 Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39 Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39 Certificate serial: 019B48826751B7C2C560F3C3E879D2B9A131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft Manifest number: 06E6 Signing time: Tue 23 Dec 2025 00:01:04 +0000 Manifest this update: Tue 23 Dec 2025 00:01:04 +0000 Manifest next update: Wed 24 Dec 2025 00:01:04 +0000 Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: YoOtE0jvO5/0aRj0witMzPULwUZXIXnPCMJBRoe9yPY=) 2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:67:51:b7:c2:c5:60:f3:c3:e8:79:d2:b9:a1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39 Validity Not Before: Dec 23 00:01:04 2025 GMT Not After : Dec 24 00:01:04 2025 GMT Subject: CN=cbc95a3b8071764688b7d7bb9bc13a19192444f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7e:61:89:11:a2:af:48:d4:e7:e0:a0:1c:22: 5f:f9:4a:21:cd:65:23:ef:c3:61:0b:b9:47:59:a2: e9:b4:a6:cc:7a:71:8f:fe:6d:60:8a:e2:2f:03:1f: b6:bf:bf:f6:13:72:bb:f6:64:56:9e:dc:8d:c3:91: 74:40:c5:ac:5b:f8:85:a9:51:48:dd:7b:81:ce:6f: c5:7c:8f:10:b2:ec:60:49:0f:91:35:8d:85:0d:3c: 29:08:b2:7d:92:71:f6:2d:95:1a:b2:b3:ee:33:a4: 4c:2c:68:d6:b3:a6:25:85:e6:e5:64:4c:46:ea:a6: bf:53:53:1b:aa:a4:66:a8:9b:d6:69:a1:db:9f:c2: 65:e8:36:c0:35:2c:df:38:62:b0:32:81:d1:ee:49: f9:54:7f:84:72:82:ad:3e:e0:93:15:a6:33:30:bc: 5e:34:97:c4:8a:4d:5d:4e:27:df:79:09:ac:4d:80: 03:b0:ef:cf:1e:50:1b:c3:e8:4e:97:36:26:f8:2d: 87:30:c1:de:b8:b7:fd:70:5f:bc:cd:7b:fe:82:2f: 99:0c:a3:a3:cd:6c:6d:58:86:37:3a:4e:1f:00:c1: 75:01:e2:21:03:d2:37:fd:e3:5a:d8:ff:e4:9e:89: f9:35:0f:ff:5f:ef:77:5e:d6:f3:54:61:b9:74:d0: fa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C9:5A:3B:80:71:76:46:88:B7:D7:BB:9B:C1:3A:19:19:24:44:F2 X509v3 Authority Key Identifier: keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:64:1b:ff:f7:18:d9:36:b4:32:ad:cf:2d:fb:83:43:33:5e: 53:d9:35:54:3c:99:36:40:ec:7b:50:d3:5b:18:3c:e9:43:ad: f9:d9:4b:b8:d4:4e:02:ab:e5:88:6f:92:51:0d:11:e0:4d:da: 70:dc:3b:3e:35:8e:a3:74:53:46:b2:4d:4e:07:98:5a:ba:a6: ed:b0:27:fb:b0:82:fb:fa:ec:f4:a2:66:ca:22:5f:27:b1:08: f6:7d:24:8e:bc:1d:11:d8:fc:a2:76:80:ed:a4:f8:44:1f:96: 8e:61:4f:14:7d:90:08:8e:88:25:40:1b:1c:db:75:83:02:61: 81:2d:57:da:24:1e:88:20:58:27:e7:90:b0:78:1f:47:0e:d8: 34:5f:d2:db:20:94:d8:e1:20:36:13:ec:ed:64:08:9e:0b:fb: 8b:4c:0e:5b:85:66:f5:09:13:0b:63:13:b6:45:00:c4:3b:b5: 01:df:ff:27:ca:38:12:f9:80:70:d9:b8:f8:ad:2f:12:56:87: 53:78:0d:7b:61:f2:f6:3f:a2:00:e6:ea:ac:7d:1e:06:ff:c2: 45:f3:2e:a2:d4:9c:a9:ad:b9:62:fd:2e:12:a1:c8:5b:88:58: 18:50:40:aa:4c:e3:75:c5:d9:ad:53:e1:d8:0d:a2:4a:bb:ef: 16:cf:9c:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgmdRt8LFYPPD6HnSuaExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OGQ4MTIxZWY3MDRkN2E5NzcwYzNlY2UxZTIwNTYxNDc5 MGFjMzkwHhcNMjUxMjIzMDAwMTA0WhcNMjUxMjI0MDAwMTA0WjAzMTEwLwYDVQQD EyhjYmM5NWEzYjgwNzE3NjQ2ODhiN2Q3YmI5YmMxM2ExOTE5MjQ0NGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH5hiRGir0jU5+CgHCJf+UohzWUj 78NhC7lHWaLptKbMenGP/m1giuIvAx+2v7/2E3K79mRWntyNw5F0QMWsW/iFqVFI 3XuBzm/FfI8QsuxgSQ+RNY2FDTwpCLJ9knH2LZUasrPuM6RMLGjWs6YlheblZExG 6qa/U1MbqqRmqJvWaaHbn8Jl6DbANSzfOGKwMoHR7kn5VH+EcoKtPuCTFaYzMLxe NJfEik1dTiffeQmsTYADsO/PHlAbw+hOlzYm+C2HMMHeuLf9cF+8zXv+gi+ZDKOj zWxtWIY3Ok4fAMF1AeIhA9I3/eNa2P/knon5NQ//X+93XtbzVGG5dND6VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvJWjuAcXZGiLfXu5vBOhkZJETyMB8GA1UdIwQY MBaAFBeNgSHvcE16l3DD7OHiBWFHkKw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2It OTAwMmZhZDllYTFlLzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2ItOTAwMmZhZDllYTFl LzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGQb//cY 2Ta0Mq3PLfuDQzNeU9k1VDyZNkDse1DTWxg86UOt+dlLuNROAqvliG+SUQ0R4E3a cNw7PjWOo3RTRrJNTgeYWrqm7bAn+7CC+/rs9KJmyiJfJ7EI9n0kjrwdEdj8onaA 7aT4RB+WjmFPFH2QCI6IJUAbHNt1gwJhgS1X2iQeiCBYJ+eQsHgfRw7YNF/S2yCU 2OEgNhPs7WQIngv7i0wOW4Vm9QkTC2MTtkUAxDu1Ad//J8o4EvmAcNm4+K0vElaH U3gNe2Hy9j+iAObqrH0eBv/CRfMuotScqa25Yv0uEqHIW4hYGFBAqkzjdcXZrVPh 2A2iSrvvFs+cQw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:58:27 2025 by rpki-client