This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json) Hash identifier: 6VXT/e8sPnuak5XLUBUDVHCW3jkBx4E26XapPc//u5s= Subject key identifier: 25:74:30:87:1C:44:FA:98:CB:81:11:EB:35:1F:90:6A:28:C7:D7:33 Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2 Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2 Certificate serial: 019AF276C953CA37E5C816CEED05DE4F72DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: UKAxdHaVHdSv5mMIK3SgE/XLzsz4Xk3EoLaw+DeykeU=) 2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=) 3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c9:53:ca:37:e5:c8:16:ce:ed:05:de:4f:72:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2 Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=257430871c44fa98cb8111eb351f906a28c7d733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:2d:60:bf:7a:16:0a:d5:8c:08:8f:06:41: 5e:2e:f8:89:b3:80:57:6f:c7:48:cf:73:23:f5:d5: 01:af:dd:9d:33:63:57:39:78:86:16:e9:dc:fc:31: aa:79:ad:6c:c9:aa:65:6b:6d:36:10:11:85:d0:de: 80:86:58:1d:c4:82:9b:f8:0d:da:31:5b:9a:8d:e6: 31:13:e9:7a:61:76:26:aa:e3:82:b8:a8:49:c9:99: ed:3d:5c:96:0f:1b:69:c3:b5:92:dc:0e:91:71:52: 1d:db:76:d8:f1:76:d8:77:9e:e9:93:63:10:a9:94: d4:9f:78:76:9d:d8:ed:9d:cb:54:a0:29:24:ae:d7: 9b:5c:2b:f5:dd:68:73:01:0e:3b:5c:47:67:0a:84: d6:fc:b9:74:ec:6c:d6:d5:35:07:6e:4a:da:02:46: ab:57:64:87:84:a2:21:a3:c4:c9:f7:01:19:17:c6: 21:6c:69:f4:3f:51:97:1b:30:a3:35:d7:b2:ba:20: 22:bd:98:3c:43:21:1b:0c:cd:ab:ab:33:d2:14:ae: 0d:43:6e:25:2c:c1:0f:eb:9a:78:b1:51:94:f3:ed: 4c:d0:97:ef:05:5f:d0:75:5b:49:d9:c5:ba:69:c6: 9e:a2:c0:f2:da:35:b9:15:a6:17:a6:40:92:4f:cb: ac:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:30:87:1C:44:FA:98:CB:81:11:EB:35:1F:90:6A:28:C7:D7:33 X509v3 Authority Key Identifier: keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b0:93:80:60:f3:18:72:6c:03:c0:6f:4f:8c:86:e5:88:74: a2:8a:6d:ab:cb:96:98:06:17:17:41:48:55:c6:01:d2:c4:51: 84:83:f9:7a:f6:16:36:b2:aa:53:73:fd:a7:16:34:82:7c:b9: d8:46:be:77:a9:b4:34:3a:29:75:28:2e:01:06:dc:ac:5d:d3: e9:9f:67:d6:3c:50:71:b8:22:49:79:7e:34:7c:43:20:3c:2b: 3c:8f:d2:eb:e2:ad:8c:54:20:94:ae:cb:c3:3a:7d:26:eb:12: 4d:26:51:30:7a:2e:1a:8f:f8:c5:4c:17:17:26:04:42:67:64: 33:27:df:15:6e:1e:8f:53:bb:c5:22:cc:80:c8:a1:c8:88:50: 87:e8:bd:73:94:de:f4:95:a7:9a:42:d9:d4:5a:25:c8:66:84: 9f:52:4d:b2:78:f3:21:98:12:b9:99:37:ad:22:04:49:f8:79: 21:e9:1d:40:6b:fe:8d:dc:e0:85:ed:51:30:2b:f0:c8:0d:b0: bf:10:74:f6:e9:ef:7a:c4:81:5c:b2:2a:df:96:7f:69:18:8c: 81:fe:fd:bc:37:21:38:ad:e9:9b:25:75:4d:a2:a1:17:a8:4a: b4:b0:3e:0e:b7:4f:1a:e8:f0:74:d1:14:70:84:30:5c:60:31: 6c:54:b6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydslTyjflyBbO7QXeT3LeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz YjNkZTIwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EygyNTc0MzA4NzFjNDRmYTk4Y2I4MTExZWIzNTFmOTA2YTI4YzdkNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0tYL96FgrVjAiPBkFeLviJs4BX b8dIz3Mj9dUBr92dM2NXOXiGFunc/DGqea1syapla202EBGF0N6AhlgdxIKb+A3a MVuajeYxE+l6YXYmquOCuKhJyZntPVyWDxtpw7WS3A6RcVId23bY8XbYd57pk2MQ qZTUn3h2ndjtnctUoCkkrtebXCv13WhzAQ47XEdnCoTW/Ll07GzW1TUHbkraAkar V2SHhKIho8TJ9wEZF8YhbGn0P1GXGzCjNdeyuiAivZg8QyEbDM2rqzPSFK4NQ24l LMEP65p4sVGU8+1M0JfvBV/QdVtJ2cW6acaeosDy2jW5FaYXpkCST8usfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV0MIccRPqYy4ER6zUfkGoox9czMB8GA1UdIwQY MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLCTgGDz GHJsA8BvT4yG5Yh0ooptq8uWmAYXF0FIVcYB0sRRhIP5evYWNrKqU3P9pxY0gny5 2Ea+d6m0NDopdSguAQbcrF3T6Z9n1jxQcbgiSXl+NHxDIDwrPI/S6+KtjFQglK7L wzp9JusSTSZRMHouGo/4xUwXFyYEQmdkMyffFW4ej1O7xSLMgMihyIhQh+i9c5Te 9JWnmkLZ1FolyGaEn1JNsnjzIZgSuZk3rSIESfh5IekdQGv+jdzghe1RMCvwyA2w vxB09unvesSBXLIq35Z/aRiMgf79vDchOK3pmyV1TaKhF6hKtLA+DrdPGujwdNEU cIQwXGAxbFS2rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:20 2025 by rpki-client