This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json) Hash identifier: VgMc8DwwiaF40ZpYQOo18o3NMAdydSfYX4fLkz6xMiI= Subject key identifier: F6:C7:47:1E:A3:E6:F1:54:54:79:C5:17:DE:76:B6:CF:D6:0B:12:E9 Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Certificate serial: 019AF3C017277A56F9D2B053E4B13878991A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft Manifest number: 1037 Signing time: Sat 06 Dec 2025 13:00:43 +0000 Manifest this update: Sat 06 Dec 2025 13:00:43 +0000 Manifest next update: Sun 07 Dec 2025 13:00:43 +0000 Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: 7KNaEICmiN25Ak6siBKTOoc1XrZezTxBFStViuKbYCM=) 2: M45Q5osiYzOCttb5qUkWO2UNnW8.roa (hash: 7YD67txjderrmSpgg9cu7S2KQewiqgBNt7grVOcHVbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:17:27:7a:56:f9:d2:b0:53:e4:b1:38:78:99:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Validity Not Before: Dec 6 13:00:43 2025 GMT Not After : Dec 7 13:00:43 2025 GMT Subject: CN=f6c7471ea3e6f1545479c517de76b6cfd60b12e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:77:49:3e:ef:eb:3d:2f:54:7b:d8:53:84: 64:f5:00:31:6b:b8:a3:ae:35:32:99:3a:c7:d2:5e: b6:c2:08:13:52:76:c0:ba:77:96:f4:76:f1:c3:9b: 82:d8:10:24:00:cf:b7:bc:c4:2f:ec:48:88:66:c4: b0:97:d7:18:5e:7c:2b:a2:75:60:a6:9c:4f:3c:3c: 6c:72:09:64:fb:d3:3a:8c:45:d1:c4:5a:d7:18:ab: 69:6f:63:5a:62:86:09:22:01:40:c9:57:90:c4:cd: c5:04:0f:58:ff:77:bd:1f:11:01:31:9b:92:11:0c: 3c:66:42:a5:55:fa:65:d3:4c:6d:d1:5a:eb:dd:57: 02:56:c2:b6:84:5e:e6:29:40:91:eb:88:2e:fa:fb: 82:d3:60:5f:81:69:44:11:14:b0:57:32:a8:2d:0d: 81:cb:2b:70:ed:b7:a2:64:31:61:46:75:a7:54:07: 22:74:b5:0e:31:2a:32:bf:f5:a9:4d:b8:6a:07:dc: 58:3b:6a:a4:6b:e3:fe:1f:e9:1b:1d:90:2e:25:9f: 0e:9d:58:84:26:ad:40:dd:a5:c7:86:42:43:66:00: bb:f3:71:a5:d6:71:0f:e5:65:61:c9:bc:27:d4:9b: f3:24:dc:1c:30:59:ae:73:23:f6:99:d4:7f:13:e1: ad:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C7:47:1E:A3:E6:F1:54:54:79:C5:17:DE:76:B6:CF:D6:0B:12:E9 X509v3 Authority Key Identifier: keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:08:0c:54:63:96:e4:5f:32:68:0c:50:b9:9d:77:95:5b:32: 84:d1:3d:a5:37:af:f6:31:62:96:a0:9a:32:0e:15:af:c3:ee: ab:59:19:e8:da:b7:20:67:49:00:e1:08:98:be:ce:46:56:9e: 93:9a:ee:5a:fc:78:e3:fe:9f:47:28:59:8a:20:05:04:8d:d9: 63:77:14:ed:ec:24:3b:a2:20:19:4b:56:58:55:9c:62:eb:d9: 41:2f:6f:34:83:69:76:af:84:b1:fb:02:e5:e1:24:41:7d:ee: 3d:98:ce:b2:de:d8:d2:f7:a2:ce:0c:e7:38:3d:fd:7f:98:b1: 79:f8:e3:69:a7:93:25:7d:8e:c5:a8:ac:4c:3d:9f:83:07:d5: a7:c3:03:1e:01:23:ba:e0:92:c8:3d:14:38:32:ba:57:77:20: 7d:36:ba:fa:72:2b:80:b0:1c:5a:45:af:01:75:57:44:86:04: a7:2d:df:53:20:97:64:74:0f:1a:dd:50:64:af:b4:9a:02:f8: 08:41:45:ca:01:70:b5:d3:4e:e1:a5:89:fb:67:25:25:44:4f: a9:b8:e4:7b:f9:f4:c3:27:fc:74:cb:f9:00:d3:4e:07:43:94: d3:e5:fc:10:fe:6f:18:48:62:cc:63:e0:3d:c1:a2:67:28:06: a5:18:5e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBcnelb50rBT5LE4eJkaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNk N2RhZDYwHhcNMjUxMjA2MTMwMDQzWhcNMjUxMjA3MTMwMDQzWjAzMTEwLwYDVQQD EyhmNmM3NDcxZWEzZTZmMTU0NTQ3OWM1MTdkZTc2YjZjZmQ2MGIxMmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOx3ST7v6z0vVHvYU4Rk9QAxa7ij rjUymTrH0l62wggTUnbAuneW9Hbxw5uC2BAkAM+3vMQv7EiIZsSwl9cYXnwronVg ppxPPDxscglk+9M6jEXRxFrXGKtpb2NaYoYJIgFAyVeQxM3FBA9Y/3e9HxEBMZuS EQw8ZkKlVfpl00xt0Vrr3VcCVsK2hF7mKUCR64gu+vuC02BfgWlEERSwVzKoLQ2B yytw7beiZDFhRnWnVAcidLUOMSoyv/WpTbhqB9xYO2qka+P+H+kbHZAuJZ8OnViE Jq1A3aXHhkJDZgC783Gl1nEP5WVhybwn1JvzJNwcMFmucyP2mdR/E+GtnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbHRx6j5vFUVHnFF952ts/WCxLpMB8GA1UdIwQY MBaAFBd4z8CaNjpzzI3aNiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjIt MDEwY2YyZGQ0MGFmLzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFm LzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGggMVGOW 5F8yaAxQuZ13lVsyhNE9pTev9jFilqCaMg4Vr8Puq1kZ6Nq3IGdJAOEImL7ORlae k5ruWvx44/6fRyhZiiAFBI3ZY3cU7ewkO6IgGUtWWFWcYuvZQS9vNINpdq+EsfsC 5eEkQX3uPZjOst7Y0veizgznOD39f5ixefjjaaeTJX2OxaisTD2fgwfVp8MDHgEj uuCSyD0UODK6V3cgfTa6+nIrgLAcWkWvAXVXRIYEpy3fUyCXZHQPGt1QZK+0mgL4 CEFFygFwtdNO4aWJ+2clJURPqbjke/n0wyf8dMv5ANNOB0OU0+X8EP5vGEhizGPg PcGiZygGpRhe5w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:04:29 2025 by rpki-client