This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json) Hash identifier: tQWZlDWqhU4E6ZG3AJWP8xdQyG2geDf5s9347X4oGIM= Subject key identifier: 28:05:CF:FF:F5:43:4F:EF:E1:88:90:C6:79:C4:02:20:85:7A:D9:BD Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52 Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652 Certificate serial: 019AF088189424ADBC83C6D09165DD240E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft Manifest number: 06BC Signing time: Fri 05 Dec 2025 22:00:42 +0000 Manifest this update: Fri 05 Dec 2025 22:00:42 +0000 Manifest next update: Sat 06 Dec 2025 22:00:42 +0000 Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: 1fenM9qBIP2reOXGkmJ+JucJP30kfxYaLws3uPuPrtk=) 2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:18:94:24:ad:bc:83:c6:d0:91:65:dd:24:0e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652 Validity Not Before: Dec 5 22:00:42 2025 GMT Not After : Dec 6 22:00:42 2025 GMT Subject: CN=2805cffff5434fefe18890c679c40220857ad9bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:62:2e:9b:37:16:9e:47:eb:50:b9:94:a0:95: f8:fd:48:40:55:22:b2:21:77:e3:5e:54:70:03:e4: 0c:34:04:35:da:8d:58:9b:eb:40:0a:6e:a6:f9:f1: 26:90:db:01:f8:35:17:f6:d0:df:14:67:c0:4e:b3: e4:d2:cc:84:f1:95:b1:d8:d7:d7:2b:11:29:b6:05: 10:b3:84:9d:53:44:2e:bf:dc:9f:d1:8f:fc:11:31: 2e:ef:96:33:85:d2:92:79:43:a4:06:8c:8b:17:08: 16:36:d6:ce:04:26:9e:4f:7b:d8:5b:91:72:69:ee: 4a:37:71:4a:03:b7:d0:ea:c3:2f:df:9a:21:b3:40: 15:90:2c:cc:14:6b:ee:b9:8f:c5:be:36:63:5d:b3: 01:61:12:14:db:fe:f2:94:b8:3a:bf:20:77:7f:72: cb:da:58:b7:64:1c:69:4f:54:2a:27:f4:1e:a1:9f: c7:5f:e5:83:67:71:be:37:03:31:94:6b:f0:57:99: 1d:47:34:ef:bf:f5:62:d5:e0:08:23:08:e8:77:b3: e0:45:cc:5c:e9:f5:81:13:ac:73:68:7d:6e:a6:b4: a1:21:c6:f2:28:59:91:3b:47:b9:43:b1:71:1b:54: dc:a4:9e:01:9f:97:be:2f:03:f3:ae:1a:27:f3:b5: 6a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:CF:FF:F5:43:4F:EF:E1:88:90:C6:79:C4:02:20:85:7A:D9:BD X509v3 Authority Key Identifier: keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:25:b7:22:f4:7f:9e:23:98:48:47:b5:b4:40:cc:e2:25:7a: 7c:52:d3:b4:91:de:58:6e:b8:3f:4f:24:a6:f7:b3:99:d4:39: 4d:40:27:23:65:3b:df:fa:91:45:50:78:e3:bb:ef:2c:e2:76: b0:5a:ee:1a:94:f5:92:e5:86:6c:67:44:b4:2f:5f:dc:ec:67: 5b:a1:4b:25:a2:7f:05:cb:10:8d:5a:11:d7:e5:a1:91:71:2a: 4f:7f:f2:0e:44:6a:75:ce:9c:00:fe:fd:60:f5:f9:0a:24:e0: 6d:ae:a8:cf:0b:50:ce:66:e1:5c:5a:fb:d2:c1:2d:33:2e:8b: 7d:9b:1d:6a:08:c3:e8:c2:5a:35:94:19:b1:94:45:08:9d:cb: 43:3e:9b:a5:b1:92:6a:94:2e:c3:85:8b:56:ba:7a:0e:c0:86: 4e:9f:86:ab:69:f2:c7:7d:ca:b1:92:fb:04:35:a7:ee:b2:92: dc:6d:68:5d:e3:b0:bb:d0:bf:94:0d:32:c8:80:64:ef:66:f2: 18:9a:02:ce:69:13:e6:e2:08:5d:95:74:e6:af:72:78:f1:1b: 03:bf:3f:68:f3:00:3e:57:37:59:d0:f1:04:b7:1b:e9:29:94: 4a:38:d6:41:3b:56:00:fa:b3:10:86:c0:11:85:c6:6d:ff:32: b0:7a:ed:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiBiUJK28g8bQkWXdJA6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzAwNTE3NzUyNmQ2NjhlODQ0YjJhN2E1YTU5YWM2NGE0 OTU2NTIwHhcNMjUxMjA1MjIwMDQyWhcNMjUxMjA2MjIwMDQyWjAzMTEwLwYDVQQD EygyODA1Y2ZmZmY1NDM0ZmVmZTE4ODkwYzY3OWM0MDIyMDg1N2FkOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWIumzcWnkfrULmUoJX4/UhAVSKy IXfjXlRwA+QMNAQ12o1Ym+tACm6m+fEmkNsB+DUX9tDfFGfATrPk0syE8ZWx2NfX KxEptgUQs4SdU0Quv9yf0Y/8ETEu75YzhdKSeUOkBoyLFwgWNtbOBCaeT3vYW5Fy ae5KN3FKA7fQ6sMv35ohs0AVkCzMFGvuuY/FvjZjXbMBYRIU2/7ylLg6vyB3f3LL 2li3ZBxpT1QqJ/QeoZ/HX+WDZ3G+NwMxlGvwV5kdRzTvv/Vi1eAIIwjod7PgRcxc 6fWBE6xzaH1uprShIcbyKFmRO0e5Q7FxG1TcpJ4Bn5e+LwPzrhon87VqxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgFz//1Q0/v4YiQxnnEAiCFetm9MB8GA1UdIwQY MBaAFBdwBRd1JtZo6ESyp6WlmsZKSVZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYt MGNkZWZiZmM3ODdhLzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYtMGNkZWZiZmM3ODdh LzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiW3IvR/ niOYSEe1tEDM4iV6fFLTtJHeWG64P08kpvezmdQ5TUAnI2U73/qRRVB447vvLOJ2 sFruGpT1kuWGbGdEtC9f3OxnW6FLJaJ/BcsQjVoR1+WhkXEqT3/yDkRqdc6cAP79 YPX5CiTgba6ozwtQzmbhXFr70sEtMy6LfZsdagjD6MJaNZQZsZRFCJ3LQz6bpbGS apQuw4WLVrp6DsCGTp+Gq2nyx33KsZL7BDWn7rKS3G1oXeOwu9C/lA0yyIBk72by GJoCzmkT5uIIXZV05q9yePEbA78/aPMAPlc3WdDxBLcb6SmUSjjWQTtWAPqzEIbA EYXGbf8ysHrt5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client