This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json) Hash identifier: ssbpNnWjCYhb0TBRr6k9TZmbBR3rb9WSPWMVRBLzE5I= Subject key identifier: 16:10:55:76:CC:DC:3C:22:F1:9F:EE:96:0F:04:13:73:8C:16:90:5B Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302 Certificate serial: 019AF1D1BA5E464A451CA4EEC863303DC5B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft Manifest number: 0DF4 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: cjk0vMSsXoDvlQKBPQEQrlwoYDbXK7xlHrZC5/HUvgw=) 2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ba:5e:46:4a:45:1c:a4:ee:c8:63:30:3d:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=16105576ccdc3c22f19fee960f0413738c16905b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:71:4e:82:05:c6:76:b5:e9:98:15:db:eb:c3: db:53:19:db:4e:29:cd:c2:69:ab:b1:ad:8c:c7:e3: 16:0e:09:17:51:24:32:d3:0c:e1:73:c3:19:a4:49: 66:85:5e:28:2d:ec:63:f8:b9:d3:22:85:e2:26:0a: c0:4e:71:97:ff:a9:1a:4c:69:1b:51:5a:2e:b9:ee: f6:02:3b:4c:67:63:98:f2:84:c1:29:9b:ce:c7:fd: bd:a3:b9:66:07:01:92:2c:a5:d7:f3:d8:97:b7:f9: ac:5d:69:b4:91:88:ae:c8:bf:3a:10:75:65:d5:45: 1d:be:3f:ab:89:b5:91:b5:3e:38:68:04:15:93:87: af:97:82:7c:2f:e3:d4:b5:74:56:94:0d:a1:6f:8e: c1:62:dd:f6:c7:96:ca:97:a4:ef:af:37:87:ad:0f: aa:5c:c2:0c:89:ee:84:e2:f3:d8:7b:58:b3:a1:b0: f0:09:d1:a5:cd:d5:79:fb:56:64:c4:be:f3:e6:59: 41:a6:9b:b2:97:43:95:86:74:a2:fc:1d:4e:36:c2: fe:a7:4d:38:ff:78:21:06:01:78:b2:a8:46:ad:18: 1f:6e:3e:29:c7:0d:e4:0a:65:68:3a:bf:f5:89:a4: 90:b9:8f:43:99:0a:5d:ca:51:f8:24:8d:fb:b0:f7: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:10:55:76:CC:DC:3C:22:F1:9F:EE:96:0F:04:13:73:8C:16:90:5B X509v3 Authority Key Identifier: keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:db:68:d3:a1:57:40:6a:ad:26:71:06:34:cc:c9:16:f0:7d: 81:f8:a8:00:d6:32:20:92:06:56:f9:8c:91:06:26:c3:8a:25: 46:fa:78:19:13:63:c1:05:1f:0a:d1:b6:de:da:85:cc:91:36: fc:ed:c2:a4:d8:22:17:2a:84:66:6d:79:77:0f:5c:22:58:b5: 3e:89:db:bc:15:b5:f3:22:e4:60:96:7c:44:e0:85:36:14:eb: 39:12:7c:fb:02:a6:d3:ab:5b:f6:1e:60:7f:3f:94:08:9a:09: 82:12:c7:c5:0d:6c:45:e1:d2:cf:02:a4:55:6d:48:b6:d3:a1: 42:8d:82:16:2f:64:7b:04:cc:27:9f:12:b7:38:b7:23:47:4e: 77:92:83:d3:a8:4b:fa:8f:04:fe:c3:3e:99:ed:b1:a9:f8:17: 87:df:1e:6a:a3:6f:15:f5:cf:08:22:80:ee:3b:ad:b4:d4:15: cb:9f:f7:08:8c:97:49:c7:29:7e:24:f5:6d:5d:4c:66:e2:a2: ab:da:ff:92:1d:4f:b5:6f:83:32:db:1d:92:cc:d5:e5:a3:62: e1:94:f6:76:7b:c7:52:e0:39:94:39:93:59:99:81:af:3c:fe: 24:38:1c:09:bf:9f:cb:8b:47:a1:e2:f2:1d:c8:94:c5:09:06: aa:a3:e5:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bpeRkpFHKTuyGMwPcW5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3 OTIzMDIwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EygxNjEwNTU3NmNjZGMzYzIyZjE5ZmVlOTYwZjA0MTM3MzhjMTY5MDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXFOggXGdrXpmBXb68PbUxnbTinN wmmrsa2Mx+MWDgkXUSQy0wzhc8MZpElmhV4oLexj+LnTIoXiJgrATnGX/6kaTGkb UVouue72AjtMZ2OY8oTBKZvOx/29o7lmBwGSLKXX89iXt/msXWm0kYiuyL86EHVl 1UUdvj+ribWRtT44aAQVk4evl4J8L+PUtXRWlA2hb47BYt32x5bKl6TvrzeHrQ+q XMIMie6E4vPYe1izobDwCdGlzdV5+1ZkxL7z5llBppuyl0OVhnSi/B1ONsL+p004 /3ghBgF4sqhGrRgfbj4pxw3kCmVoOr/1iaSQuY9DmQpdylH4JI37sPdJQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYQVXbM3Dwi8Z/ulg8EE3OMFpBbMB8GA1UdIwQY MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1 LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONto06FX QGqtJnEGNMzJFvB9gfioANYyIJIGVvmMkQYmw4olRvp4GRNjwQUfCtG23tqFzJE2 /O3CpNgiFyqEZm15dw9cIli1PonbvBW18yLkYJZ8ROCFNhTrORJ8+wKm06tb9h5g fz+UCJoJghLHxQ1sReHSzwKkVW1IttOhQo2CFi9kewTMJ58Stzi3I0dOd5KD06hL +o8E/sM+me2xqfgXh98eaqNvFfXPCCKA7juttNQVy5/3CIyXSccpfiT1bV1MZuKi q9r/kh1PtW+DMtsdkszV5aNi4ZT2dnvHUuA5lDmTWZmBrzz+JDgcCb+fy4tHoeLy HciUxQkGqqPluA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:55 2025 by rpki-client