This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json) Hash identifier: fnxQHctiPSC/Gp5jqoi4J3u6nciB8d2kouWUbExzznw= Subject key identifier: CE:B6:2A:14:59:02:D5:9A:A8:CF:56:05:20:33:35:01:B4:42:51:0B Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019B10819D02C292F787E4DC1B8FFEF2044D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft Manifest number: 1775 Signing time: Fri 12 Dec 2025 03:01:28 +0000 Manifest this update: Fri 12 Dec 2025 03:01:28 +0000 Manifest next update: Sat 13 Dec 2025 03:01:28 +0000 Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: qftqVQBQToOGAbNQ7rF8TmKuosK8yRXlKOQ860KROgI=) 2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:9d:02:c2:92:f7:87:e4:dc:1b:8f:fe:f2:04:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Dec 12 03:01:28 2025 GMT Not After : Dec 13 03:01:28 2025 GMT Subject: CN=ceb62a145902d59aa8cf560520333501b442510b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:70:38:70:77:ca:5b:56:9b:98:a6:58:be:18: 81:b8:ea:17:78:b8:88:75:98:bf:78:20:7b:75:b9: 7f:de:b5:dc:59:2b:e8:1d:c5:41:c4:bd:b3:e7:8a: f5:d4:53:f3:2c:ee:62:b2:5a:c0:c7:ff:7b:90:72: 87:47:7d:9f:6d:38:1c:b7:9a:0b:78:5d:cf:63:aa: dc:31:72:9f:d0:fb:a7:26:33:2f:0f:a0:8e:2e:79: ca:d6:1f:d6:22:f1:25:f3:6f:87:38:4b:45:bc:bc: 00:60:3e:6f:48:d9:04:c5:00:ef:eb:8b:eb:2e:d9: 5a:63:c2:35:02:8a:83:e5:3a:b2:b4:a0:f5:b4:e0: e3:2e:14:d6:17:ed:70:56:ce:f2:8e:8f:e5:c4:22: 92:6d:50:a3:7b:b4:00:e1:e6:a3:c7:b5:00:c7:ae: c7:17:d6:2f:70:91:8c:84:59:e3:53:23:c7:b5:88: 5d:c3:64:68:82:2a:45:24:ec:29:1b:28:45:24:3c: 3d:50:08:aa:ed:45:eb:af:7c:27:2a:84:99:8a:97: 7a:e1:cd:aa:da:5e:ad:83:2b:8d:1a:81:47:05:8c: d7:2e:ca:9c:87:12:99:89:22:7b:77:59:6f:89:20: ec:b5:08:88:d2:66:14:cc:1d:61:2f:cc:01:24:f6: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B6:2A:14:59:02:D5:9A:A8:CF:56:05:20:33:35:01:B4:42:51:0B X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5c:16:cb:36:b2:84:52:fe:a2:c7:8d:31:77:56:0c:b9:e8: 7a:d9:92:35:33:e8:b6:06:2f:62:82:19:ed:21:bb:b3:22:35: b1:bf:c9:f3:2c:78:ad:92:0e:de:78:59:39:30:a7:d5:0d:28: 3a:56:03:dd:90:38:ae:bc:58:e2:45:c5:1b:4e:6e:df:0e:b3: 92:3a:45:7e:d3:8c:31:ea:1b:0f:ab:56:55:d9:1a:7f:45:43: 74:bb:d9:b2:5b:05:9a:1d:ae:9a:3d:57:20:32:6f:7c:17:00: ea:50:97:78:31:e6:cb:ce:2e:4f:34:56:58:28:e7:9f:f5:cb: d9:ce:c1:ba:da:ff:90:ec:0c:7f:79:d0:e6:64:3e:df:2f:fb: 45:e3:89:97:6d:cf:20:ba:82:0e:bd:b3:b2:91:45:61:20:96: a6:0e:11:de:7b:d6:9c:9c:90:96:e4:2d:48:4c:e7:16:21:60: a4:26:ae:6e:53:da:f0:7e:3a:32:98:2c:2f:c2:4e:7b:28:68: 2e:c8:23:a4:7a:b7:e0:ba:36:d5:56:00:5a:17:70:fb:18:ba: 93:ab:5e:d4:48:65:91:2e:83:c6:86:43:6f:33:11:26:6a:bb: 1f:ca:88:c4:ae:92:85:e8:32:2a:80:34:ab:a4:c5:d1:65:f7: 67:4f:dc:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgZ0CwpL3h+TcG4/+8gRNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjUxMjEyMDMwMTI4WhcNMjUxMjEzMDMwMTI4WjAzMTEwLwYDVQQD EyhjZWI2MmExNDU5MDJkNTlhYThjZjU2MDUyMDMzMzUwMWI0NDI1MTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHA4cHfKW1abmKZYvhiBuOoXeLiI dZi/eCB7dbl/3rXcWSvoHcVBxL2z54r11FPzLO5islrAx/97kHKHR32fbTgct5oL eF3PY6rcMXKf0PunJjMvD6COLnnK1h/WIvEl82+HOEtFvLwAYD5vSNkExQDv64vr LtlaY8I1AoqD5TqytKD1tODjLhTWF+1wVs7yjo/lxCKSbVCje7QA4eajx7UAx67H F9YvcJGMhFnjUyPHtYhdw2RogipFJOwpGyhFJDw9UAiq7UXrr3wnKoSZipd64c2q 2l6tgyuNGoFHBYzXLsqchxKZiSJ7d1lviSDstQiI0mYUzB1hL8wBJPbBRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM62KhRZAtWaqM9WBSAzNQG0QlELMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlwWyzay hFL+oseNMXdWDLnoetmSNTPotgYvYoIZ7SG7syI1sb/J8yx4rZIO3nhZOTCn1Q0o OlYD3ZA4rrxY4kXFG05u3w6zkjpFftOMMeobD6tWVdkaf0VDdLvZslsFmh2umj1X IDJvfBcA6lCXeDHmy84uTzRWWCjnn/XL2c7Butr/kOwMf3nQ5mQ+3y/7ReOJl23P ILqCDr2zspFFYSCWpg4R3nvWnJyQluQtSEznFiFgpCaublPa8H46MpgsL8JOeyho LsgjpHq34Lo21VYAWhdw+xi6k6te1EhlkS6DxoZDbzMRJmq7H8qIxK6ShegyKoA0 q6TF0WX3Z0/cDw== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:03 2025 by rpki-client