This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft File: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json) Hash identifier: 7+BbEXfp0nnM7IZ5xMjwBXnrxUdIeWUVcf254zV/nzQ= Subject key identifier: 5F:72:C4:F7:F0:AC:4B:51:AF:E1:D4:37:10:ED:A2:32:0E:6B:C4:EC Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Certificate serial: 019B08C80CF8D15DAFE92B641B17DAB73881 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft Manifest number: 09E7 Signing time: Wed 10 Dec 2025 15:01:26 +0000 Manifest this update: Wed 10 Dec 2025 15:01:26 +0000 Manifest next update: Thu 11 Dec 2025 15:01:26 +0000 Files and hashes: 1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=) 2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: 6qW0aN8ynDDtOBUQ6Ea174Ez7jmeuIjduqYVsOyCRH0=) 3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=) 4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:c8:0c:f8:d1:5d:af:e9:2b:64:1b:17:da:b7:38:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Validity Not Before: Dec 10 15:01:26 2025 GMT Not After : Dec 11 15:01:26 2025 GMT Subject: CN=5f72c4f7f0ac4b51afe1d43710eda2320e6bc4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bc:9f:8c:3a:64:8d:94:af:34:19:30:04:40: a5:4e:4f:36:6f:3e:88:20:65:17:0d:96:3f:27:82: 81:30:c0:f1:90:63:74:b5:29:f1:0a:19:26:aa:f1: ee:34:12:25:7d:fc:7b:60:07:6d:6d:ce:c2:44:f4: 90:71:2d:5a:73:a3:9c:f4:e2:be:1d:a5:0c:90:e0: f8:35:fd:60:b6:86:ab:22:fc:a4:1f:60:4e:a7:2d: 7c:61:34:b0:80:7f:9b:09:07:9a:aa:e4:e7:7d:9a: 83:59:cc:f0:68:19:48:80:4a:9f:de:5a:f5:bb:87: 05:f6:a2:5e:99:67:6b:11:36:4d:5b:53:39:eb:23: 2d:cc:92:21:7b:52:f2:af:4b:11:e0:e1:a7:01:f0: f4:6e:ad:b5:da:37:26:38:f5:27:63:33:49:bb:86: 26:e9:3d:e9:a3:62:73:8d:fc:13:62:95:6a:6b:a1: f2:05:80:ff:19:2c:1c:82:7b:cd:01:bf:a2:d2:2f: 0b:2e:5a:a1:f9:b0:e8:21:d9:2d:7b:ab:9b:fc:e3: 14:c9:64:1f:97:ce:72:b0:bf:1b:77:6d:14:15:5e: a3:83:df:42:00:41:3a:01:ea:53:f8:ba:9d:b7:56: 96:fb:3b:5a:d5:e3:f0:0d:fd:e7:45:28:da:9f:cc: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:72:C4:F7:F0:AC:4B:51:AF:E1:D4:37:10:ED:A2:32:0E:6B:C4:EC X509v3 Authority Key Identifier: keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d4:ce:e1:3a:cb:2b:c3:e5:e0:73:d0:93:7a:cd:37:c9:12: 1d:54:ae:bc:24:6b:de:9e:b6:12:3a:8e:95:19:f3:2a:c1:9f: 55:6c:09:04:8b:25:2c:7f:0d:f5:b1:fd:dd:9b:06:7a:e7:32: 6d:08:f5:43:ca:c2:5b:26:0f:38:36:8e:41:22:c3:fc:15:67: cc:fd:d4:79:d6:e1:ce:0a:9c:c0:28:8c:da:a2:58:97:62:c7: 2e:0f:d1:8d:32:96:f1:f7:e1:df:7b:3b:6e:1f:61:d2:78:7c: 72:84:ce:e6:db:dc:ce:f2:1f:4e:33:33:29:b8:14:0e:52:38: 5c:41:68:fd:c2:d9:43:ea:de:f5:15:ad:3c:cf:52:e5:44:19: 5d:d5:2f:d2:dc:c4:f9:3a:df:c0:51:33:37:64:76:81:40:59: f5:d1:00:7b:97:ab:02:19:61:27:a2:fe:e1:49:4a:de:ab:62: 2f:27:0d:37:42:02:48:2a:47:ad:cd:ed:4c:70:b7:5b:8f:3c: 84:ce:c8:87:05:d6:a7:7c:fe:4b:32:d1:12:d7:58:50:07:d6: 97:90:61:85:aa:4a:d3:bd:88:23:28:2f:4d:fc:6c:fc:c4:5a: e3:40:55:f8:17:ed:fb:60:c8:37:31:24:4f:5d:33:b4:16:30: d5:3f:d2:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIyAz40V2v6StkGxfatziBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4 ZmVkMjEwHhcNMjUxMjEwMTUwMTI2WhcNMjUxMjExMTUwMTI2WjAzMTEwLwYDVQQD Eyg1ZjcyYzRmN2YwYWM0YjUxYWZlMWQ0MzcxMGVkYTIzMjBlNmJjNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7yfjDpkjZSvNBkwBEClTk82bz6I IGUXDZY/J4KBMMDxkGN0tSnxChkmqvHuNBIlffx7YAdtbc7CRPSQcS1ac6Oc9OK+ HaUMkOD4Nf1gtoarIvykH2BOpy18YTSwgH+bCQeaquTnfZqDWczwaBlIgEqf3lr1 u4cF9qJemWdrETZNW1M56yMtzJIhe1Lyr0sR4OGnAfD0bq212jcmOPUnYzNJu4Ym 6T3po2JzjfwTYpVqa6HyBYD/GSwcgnvNAb+i0i8LLlqh+bDoIdkte6ub/OMUyWQf l85ysL8bd20UFV6jg99CAEE6AepT+Lqdt1aW+zta1ePwDf3nRSjan8w5QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9yxPfwrEtRr+HUNxDtojIOa8TsMB8GA1UdIwQY MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt Y2RmODk2ODM1NDBlLzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtTO4TrL K8Pl4HPQk3rNN8kSHVSuvCRr3p62EjqOlRnzKsGfVWwJBIslLH8N9bH93ZsGeucy bQj1Q8rCWyYPODaOQSLD/BVnzP3UedbhzgqcwCiM2qJYl2LHLg/RjTKW8ffh33s7 bh9h0nh8coTO5tvczvIfTjMzKbgUDlI4XEFo/cLZQ+re9RWtPM9S5UQZXdUv0tzE +TrfwFEzN2R2gUBZ9dEAe5erAhlhJ6L+4UlK3qtiLycNN0ICSCpHrc3tTHC3W488 hM7IhwXWp3z+SzLREtdYUAfWl5BhhapK072IIygvTfxs/MRa40BV+Bft+2DINzEk T10ztBYw1T/SqA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:23:49 2025 by rpki-client