This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json) Hash identifier: IZPXi+WMptOVhqttEsU0UDTRtMqKmXcVA5O77CFoq9s= Subject key identifier: 0E:1B:C3:7C:8A:1E:9C:FD:BD:0A:60:2F:29:FA:B2:29:81:40:CD:10 Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019AF50A0369FBD884A80965EE36EDC06C3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft Manifest number: 1166 Signing time: Sat 06 Dec 2025 19:01:05 +0000 Manifest this update: Sat 06 Dec 2025 19:01:05 +0000 Manifest next update: Sun 07 Dec 2025 19:01:05 +0000 Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=) 2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: zVf1J9UHnL2KWqAY351dFCJSHMyh81pJKpW4LEKzepo=) 3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=) 4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=) 5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:03:69:fb:d8:84:a8:09:65:ee:36:ed:c0:6c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Dec 6 19:01:05 2025 GMT Not After : Dec 7 19:01:05 2025 GMT Subject: CN=0e1bc37c8a1e9cfdbd0a602f29fab2298140cd10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:34:47:ec:f0:ff:a8:a3:2a:49:c1:14:5b:54: 15:af:6c:d3:f2:58:db:5c:03:8a:78:13:5e:10:c5: 64:d5:17:1c:5a:46:53:b4:78:8e:48:5c:32:39:c7: 03:4f:cf:90:ff:08:ee:15:89:25:cd:fa:91:ac:85: 33:82:bb:48:e3:12:38:ba:7d:d1:0d:ec:cb:b7:9c: d5:74:72:ac:21:d7:42:4a:48:5c:af:f4:a2:46:9c: 24:55:70:85:81:fb:22:e6:fc:17:d8:7a:1f:3a:c4: da:d0:6c:07:81:b9:8e:e0:9c:55:65:0f:9f:7e:b3: d0:dc:81:a7:8c:36:88:e8:af:d7:c4:84:8c:b7:c1: 76:b5:3e:9c:2b:8c:42:38:92:e1:c5:7b:19:aa:9e: 65:ed:ee:df:d2:93:09:10:87:5a:d6:4d:08:65:05: 18:9d:de:8a:b9:ea:b6:81:92:e3:5a:a6:fc:56:9c: 4d:03:a6:a6:36:c2:53:77:3d:ea:46:04:5f:99:9a: 65:a8:d5:75:62:bd:9b:74:f4:cc:fd:d2:4f:44:06: bc:99:21:34:58:98:86:b3:db:a4:8a:b3:6c:d5:34: 4e:21:ac:9c:bb:1c:49:13:b4:de:28:de:0f:3c:98: 36:05:09:f3:ab:44:c1:e2:bd:e9:20:4e:6b:9e:40: ca:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1B:C3:7C:8A:1E:9C:FD:BD:0A:60:2F:29:FA:B2:29:81:40:CD:10 X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:78:c3:70:f6:18:2f:31:f1:7f:fd:3e:aa:55:17:c9:d9:9e: 68:51:91:ce:c6:9c:fc:34:56:52:34:ca:17:cc:38:b4:09:37: 53:5e:47:79:99:17:3e:04:86:0f:5c:2b:da:b4:48:ab:57:f0: 7d:b4:61:ec:b0:4f:7f:84:e2:fe:22:50:3b:c7:57:08:06:26: a6:e5:93:f5:8b:7e:21:5b:21:e0:c3:1e:5b:f6:d5:d2:00:ef: 26:4b:65:32:c7:61:a5:cf:9b:cb:94:68:da:72:0c:8f:04:71: e3:10:52:94:93:73:fc:22:a0:df:d0:2e:0f:b8:be:3d:23:33: cd:39:d3:b3:fd:50:12:c1:b8:92:42:96:55:f2:e4:f7:7d:6b: 87:9d:4d:cb:37:c2:6b:25:21:77:27:7e:de:2e:f7:78:f2:7e: ba:e0:fb:09:72:20:0c:f2:83:7f:00:c1:2b:a1:d1:0b:cf:c0: 43:01:54:f4:e4:09:63:35:c1:07:ff:42:dc:e9:7d:6d:67:6d: c0:3e:ad:35:ac:10:33:ca:ee:37:34:6c:3e:09:41:d2:e8:9b: 96:43:17:60:8e:c7:d9:1c:a2:80:bd:76:02:db:de:1c:3c:cd: dc:f9:f1:e2:b5:90:5b:7c:6f:fa:3c:62:b2:1b:d5:de:e1:91: a7:1a:bf:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgNp+9iEqAll7jbtwGw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjUxMjA2MTkwMTA1WhcNMjUxMjA3MTkwMTA1WjAzMTEwLwYDVQQD EygwZTFiYzM3YzhhMWU5Y2ZkYmQwYTYwMmYyOWZhYjIyOTgxNDBjZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjRH7PD/qKMqScEUW1QVr2zT8ljb XAOKeBNeEMVk1RccWkZTtHiOSFwyOccDT8+Q/wjuFYklzfqRrIUzgrtI4xI4un3R DezLt5zVdHKsIddCSkhcr/SiRpwkVXCFgfsi5vwX2HofOsTa0GwHgbmO4JxVZQ+f frPQ3IGnjDaI6K/XxISMt8F2tT6cK4xCOJLhxXsZqp5l7e7f0pMJEIda1k0IZQUY nd6Kueq2gZLjWqb8VpxNA6amNsJTdz3qRgRfmZplqNV1Yr2bdPTM/dJPRAa8mSE0 WJiGs9ukirNs1TROIaycuxxJE7TeKN4PPJg2BQnzq0TB4r3pIE5rnkDKAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4bw3yKHpz9vQpgLyn6simBQM0QMB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnjDcPYY LzHxf/0+qlUXydmeaFGRzsac/DRWUjTKF8w4tAk3U15HeZkXPgSGD1wr2rRIq1fw fbRh7LBPf4Ti/iJQO8dXCAYmpuWT9Yt+IVsh4MMeW/bV0gDvJktlMsdhpc+by5Ro 2nIMjwRx4xBSlJNz/CKg39AuD7i+PSMzzTnTs/1QEsG4kkKWVfLk931rh51NyzfC ayUhdyd+3i73ePJ+uuD7CXIgDPKDfwDBK6HRC8/AQwFU9OQJYzXBB/9C3Ol9bWdt wD6tNawQM8ruNzRsPglB0uiblkMXYI7H2RyigL12AtveHDzN3Pnx4rWQW3xv+jxi shvV3uGRpxq/aQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:18:04 2025 by rpki-client