This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json) Hash identifier: VvXnssO0k5eoBYuNDLq+mlsKJTG9Nz6oGFnpg/R6CbE= Subject key identifier: EB:FB:6A:AD:59:14:30:7C:8C:49:E2:57:D6:BF:54:A1:09:3D:B5:23 Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Certificate serial: 019B27ADC52520D48E07591EBC97B28709FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft Manifest number: 04BE Signing time: Tue 16 Dec 2025 15:00:58 +0000 Manifest this update: Tue 16 Dec 2025 15:00:58 +0000 Manifest next update: Wed 17 Dec 2025 15:00:58 +0000 Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: ANvvjdVc6R+JFNZpTIyRCZYfcTe8xqyHAWhsbA86I7I=) 2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:c5:25:20:d4:8e:07:59:1e:bc:97:b2:87:09:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Validity Not Before: Dec 16 15:00:58 2025 GMT Not After : Dec 17 15:00:58 2025 GMT Subject: CN=ebfb6aad5914307c8c49e257d6bf54a1093db523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:92:11:b7:50:67:fe:ec:a2:ce:1b:6d:af:f7: 8d:ba:3f:a8:f7:c3:79:af:af:bb:2b:d8:94:fd:cd: e9:42:fc:1b:f0:61:0e:30:10:98:57:b1:12:bb:b0: 33:a9:16:76:02:2f:33:40:14:9d:f4:db:af:cf:ee: ec:5f:79:40:18:38:ed:3a:76:46:dc:8e:9e:73:63: d8:f5:ca:98:7b:e1:94:c4:6e:09:4b:b3:e8:79:cb: a1:63:7a:c3:33:57:24:07:fb:fb:cb:56:4a:b4:1b: f1:6c:f5:91:7f:a5:71:56:d8:fe:46:36:a9:e9:8a: d0:88:ac:27:e9:af:30:f1:b6:8f:72:4f:ac:d1:04: 1c:9b:6c:f6:74:93:f2:bf:f7:1a:7b:cd:79:b0:65: 88:92:9f:c5:8b:53:56:72:37:f6:ff:da:ce:17:87: 3c:3a:58:30:16:62:c8:f8:e0:c4:0c:a5:a5:af:24: cb:4f:27:69:b7:1b:3a:a1:af:c8:72:f2:e4:39:c8: 5c:78:3d:53:c3:15:c7:04:12:9e:81:4b:4a:67:72: 05:4a:dd:77:0f:5d:ce:50:ce:4f:bc:ff:f5:80:71: c4:0d:eb:07:6a:8a:aa:b9:a5:bb:12:16:dd:ac:a8: 82:c9:7f:40:48:7f:b4:0f:09:5a:37:c8:20:4d:54: e6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FB:6A:AD:59:14:30:7C:8C:49:E2:57:D6:BF:54:A1:09:3D:B5:23 X509v3 Authority Key Identifier: keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ff:76:2d:5a:e5:47:33:8b:fb:01:7e:98:ae:bb:be:c8:d8: b5:72:5c:5c:3f:76:4d:6d:8c:e9:1c:04:57:df:5e:f8:5a:b7: da:23:f3:35:47:0b:65:45:d1:b3:83:5b:ed:14:bb:71:1b:b7: 16:4e:03:2c:e5:8a:15:7a:58:ad:a7:a3:9c:56:0f:e2:e5:71: ae:ea:6a:5d:85:b4:c5:64:4d:a8:92:7b:72:8a:57:4e:83:b0: 08:22:e8:75:35:fb:4b:71:f0:1f:0b:0f:28:37:ac:a7:87:ae: fe:2f:e3:98:cf:6a:fe:bb:c7:69:e9:69:9c:24:17:97:38:ee: 09:a5:a4:09:6f:5a:33:51:4e:6f:5a:eb:64:d2:03:26:3d:c1: 4f:1f:20:75:f2:0a:a1:01:a0:0a:0c:d0:f4:2f:70:ca:f0:17: b7:58:40:22:4a:67:83:e2:46:82:e1:1a:ba:9e:ab:65:b0:db: 84:cf:71:4a:66:c3:52:a4:d7:86:4e:b2:67:24:28:f7:f7:59: ca:16:b6:fe:62:d9:b7:35:57:64:e2:64:fd:27:44:f8:19:e4: e5:a3:6b:bd:31:b3:8c:16:47:94:e7:a7:ad:92:64:f9:1f:5e: 24:29:94:e0:e1:78:74:46:ea:d2:9a:83:50:d3:5e:cb:f1:07: c1:d9:ce:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrcUlINSOB1kevJeyhwn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3 N2Y2NWMwHhcNMjUxMjE2MTUwMDU4WhcNMjUxMjE3MTUwMDU4WjAzMTEwLwYDVQQD EyhlYmZiNmFhZDU5MTQzMDdjOGM0OWUyNTdkNmJmNTRhMTA5M2RiNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55IRt1Bn/uyizhttr/eNuj+o98N5 r6+7K9iU/c3pQvwb8GEOMBCYV7ESu7AzqRZ2Ai8zQBSd9Nuvz+7sX3lAGDjtOnZG 3I6ec2PY9cqYe+GUxG4JS7PoecuhY3rDM1ckB/v7y1ZKtBvxbPWRf6VxVtj+Rjap 6YrQiKwn6a8w8baPck+s0QQcm2z2dJPyv/cae815sGWIkp/Fi1NWcjf2/9rOF4c8 OlgwFmLI+ODEDKWlryTLTydptxs6oa/IcvLkOchceD1TwxXHBBKegUtKZ3IFSt13 D13OUM5PvP/1gHHEDesHaoqquaW7EhbdrKiCyX9ASH+0DwlaN8ggTVTmOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOv7aq1ZFDB8jEniV9a/VKEJPbUjMB8GA1UdIwQY MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/92LVrl RzOL+wF+mK67vsjYtXJcXD92TW2M6RwEV99e+Fq32iPzNUcLZUXRs4Nb7RS7cRu3 Fk4DLOWKFXpYraejnFYP4uVxrupqXYW0xWRNqJJ7copXToOwCCLodTX7S3HwHwsP KDesp4eu/i/jmM9q/rvHaelpnCQXlzjuCaWkCW9aM1FOb1rrZNIDJj3BTx8gdfIK oQGgCgzQ9C9wyvAXt1hAIkpng+JGguEaup6rZbDbhM9xSmbDUqTXhk6yZyQo9/dZ yha2/mLZtzVXZOJk/SdE+Bnk5aNrvTGzjBZHlOenrZJk+R9eJCmU4OF4dEbq0pqD UNNey/EHwdnOtw== -----END CERTIFICATE-----Generated at Tue Dec 16 17:45:32 2025 by rpki-client