This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json) Hash identifier: rxuAlwwDZUaK3jxaaUULcTsyg9itheGM5Bz40uF5Aiw= Subject key identifier: CF:4D:14:BE:DA:D3:81:BD:BE:A7:D9:2F:F9:1A:4D:74:2C:38:CC:8A Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019B3C7E3C7C277132740E02DE0DCFF0968A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft Manifest number: 118B Signing time: Sat 20 Dec 2025 16:01:04 +0000 Manifest this update: Sat 20 Dec 2025 16:01:04 +0000 Manifest next update: Sun 21 Dec 2025 16:01:04 +0000 Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=) 2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: B3dTSxeYNEtRfVtqmXd+gJdnkrgqPmXZ5gTipvPPeJk=) 3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=) 4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=) 5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:3c:7c:27:71:32:74:0e:02:de:0d:cf:f0:96:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Dec 20 16:01:04 2025 GMT Not After : Dec 21 16:01:04 2025 GMT Subject: CN=cf4d14bedad381bdbea7d92ff91a4d742c38cc8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:bc:c5:1a:16:94:ab:72:7c:2b:01:fa:7e: 59:1a:6f:b1:da:0c:f6:c1:3b:5a:05:cc:b5:f9:f7: dd:69:b0:14:e2:61:42:16:12:d5:94:09:fa:2a:0c: b7:6b:fc:3f:eb:5c:c2:42:39:c2:1c:de:6d:0f:08: 66:48:9f:e8:87:aa:8d:3b:fc:a1:2f:b0:d6:83:5d: 5c:13:42:a7:57:00:90:6e:b8:5f:bc:2c:3e:9c:99: e6:6c:6f:ee:d4:ce:b9:4d:6b:92:b5:dd:9f:20:3d: f1:55:b0:17:44:d7:74:84:57:f7:23:85:f8:9c:95: ca:8d:5d:21:e8:23:ba:5f:30:ae:43:cf:3e:87:c7: e2:5f:b3:4c:06:d3:89:d2:ab:1a:05:41:1c:a6:ea: 94:f5:b2:73:2f:ec:f5:ca:0e:54:0a:fb:1c:ec:66: 16:ab:76:1c:d4:5f:80:80:e7:c3:cd:96:57:09:f4: 8f:96:9b:14:d5:ee:80:b6:97:3a:24:48:17:32:31: 08:81:be:13:c5:39:c1:d4:15:fa:94:70:62:35:97: 0b:a9:66:de:44:35:2b:5c:71:87:78:6b:1a:9d:0f: b6:7d:73:16:fc:50:99:6f:a5:e9:34:9f:3d:e1:a8: 44:87:25:ea:ca:bd:32:4f:8a:82:f5:c5:1b:e9:9c: b9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4D:14:BE:DA:D3:81:BD:BE:A7:D9:2F:F9:1A:4D:74:2C:38:CC:8A X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:aa:7a:8a:40:ea:14:96:34:ef:21:1f:c2:0f:13:73:61:6d: 33:0a:d2:2d:b6:b0:a1:c9:51:a3:94:5b:94:01:b0:0a:33:cb: 5f:2d:f0:c4:89:5b:0f:b8:9a:da:12:3c:86:b0:55:fb:5c:2a: c7:eb:6b:e9:96:b3:e7:1e:82:04:8e:a5:4b:e5:1a:88:d3:b3: cc:6d:76:4e:96:08:0d:25:08:4b:49:e4:cc:7a:70:5b:ba:ec: bb:c7:b8:fb:e8:59:4a:a2:07:c6:28:80:ac:85:f4:d2:9d:30: dd:0c:1a:d0:8a:94:e9:4d:16:8f:26:06:96:82:e3:61:49:bf: 67:c2:c3:5e:c0:9f:46:88:e5:44:9b:a2:90:d0:f4:c9:2e:45: 96:4c:31:7d:18:b8:ec:61:e1:70:d8:ce:a5:65:c9:b5:27:02: 53:52:50:0c:fc:95:d7:1e:03:1b:21:36:e9:09:0d:fe:99:c3: 54:cc:c8:1e:da:13:ad:68:8e:aa:72:35:89:b2:3f:47:f7:24: c5:61:cb:f1:c6:09:42:db:62:eb:13:f9:19:7a:78:df:53:cb: d9:31:24:bb:7d:3d:71:68:69:3d:e7:b5:89:07:72:bc:e4:2b: 02:ad:47:47:1f:7c:d3:18:4e:3f:f2:b6:44:76:12:3a:3a:36: d5:ce:33:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fjx8J3EydA4C3g3P8JaKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjUxMjIwMTYwMTA0WhcNMjUxMjIxMTYwMTA0WjAzMTEwLwYDVQQD EyhjZjRkMTRiZWRhZDM4MWJkYmVhN2Q5MmZmOTFhNGQ3NDJjMzhjYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg28xRoWlKtyfCsB+n5ZGm+x2gz2 wTtaBcy1+ffdabAU4mFCFhLVlAn6Kgy3a/w/61zCQjnCHN5tDwhmSJ/oh6qNO/yh L7DWg11cE0KnVwCQbrhfvCw+nJnmbG/u1M65TWuStd2fID3xVbAXRNd0hFf3I4X4 nJXKjV0h6CO6XzCuQ88+h8fiX7NMBtOJ0qsaBUEcpuqU9bJzL+z1yg5UCvsc7GYW q3Yc1F+AgOfDzZZXCfSPlpsU1e6Atpc6JEgXMjEIgb4TxTnB1BX6lHBiNZcLqWbe RDUrXHGHeGsanQ+2fXMW/FCZb6XpNJ894ahEhyXqyr0yT4qC9cUb6Zy51wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9NFL7a04G9vqfZL/kaTXQsOMyKMB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6p6ikDq FJY07yEfwg8Tc2FtMwrSLbawoclRo5RblAGwCjPLXy3wxIlbD7ia2hI8hrBV+1wq x+tr6Zaz5x6CBI6lS+UaiNOzzG12TpYIDSUIS0nkzHpwW7rsu8e4++hZSqIHxiiA rIX00p0w3Qwa0IqU6U0WjyYGloLjYUm/Z8LDXsCfRojlRJuikND0yS5FlkwxfRi4 7GHhcNjOpWXJtScCU1JQDPyV1x4DGyE26QkN/pnDVMzIHtoTrWiOqnI1ibI/R/ck xWHL8cYJQtti6xP5GXp431PL2TEku309cWhpPee1iQdyvOQrAq1HRx980xhOP/K2 RHYSOjo21c4zMg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:20:25 2025 by rpki-client