This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json) Hash identifier: PFOX6ckBGfEueoDpi4ij/xZV7xups8XlcIDE4MweSII= Subject key identifier: 92:98:5A:2A:AF:A2:93:26:21:3F:6A:D4:7A:E6:6E:A0:7C:8D:03:10 Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Certificate serial: 019AF35270332D83C112B77DAEE54C73E578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft Manifest number: 0A1D Signing time: Sat 06 Dec 2025 11:00:57 +0000 Manifest this update: Sat 06 Dec 2025 11:00:57 +0000 Manifest next update: Sun 07 Dec 2025 11:00:57 +0000 Files and hashes: 1: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: Q9rLy1EOjMsaw5jy2a6/dfHnk833FIHc5xJFB2h5lFY=) 2: kyUP_zUxJzKqp_WSRe64xjQTn88.roa (hash: IIbLVXzFiGKxHkStsyV2IH0lCTK/4GbGDWn4D7OnNxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:70:33:2d:83:c1:12:b7:7d:ae:e5:4c:73:e5:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Validity Not Before: Dec 6 11:00:57 2025 GMT Not After : Dec 7 11:00:57 2025 GMT Subject: CN=92985a2aafa29326213f6ad47ae66ea07c8d0310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f6:99:f8:43:12:d6:27:08:03:5b:ba:89:ef: 3b:2a:b0:b6:60:6f:f3:be:97:ff:da:77:c2:be:04: 8e:2e:f6:b3:a8:ab:28:34:f2:08:2d:b9:53:ff:c8: 93:9a:16:43:15:47:2c:fb:fb:aa:3e:4f:02:42:24: b3:e5:87:28:ec:4f:85:d5:ca:b4:5d:e5:5f:35:c0: 73:a1:bc:1e:d0:23:84:ee:3a:73:22:b2:53:30:6e: a8:dd:b0:c2:ab:93:2e:8d:1f:86:91:b4:56:75:c7: 50:fd:02:9f:b8:b1:2c:63:d8:27:03:38:5f:34:05: 88:49:eb:d9:0c:7d:cd:70:a5:fb:a7:24:28:db:24: fd:7c:b2:5a:2c:4c:b1:47:3f:2b:a7:49:36:77:60: b7:41:84:69:ed:ef:ee:fb:82:53:1f:8a:3b:8e:97: a1:f1:40:63:09:ba:4e:45:f8:90:e6:fa:30:87:81: 0a:ba:bc:eb:2a:ac:91:f0:08:44:e1:a1:5d:fb:c1: 36:0a:54:84:a6:2c:8e:68:59:12:d0:46:e4:e1:c4: c5:80:26:27:e8:db:08:a9:9e:73:74:44:c5:42:81: d0:92:f3:35:4c:c7:f7:71:06:4f:60:b0:b0:c0:37: 02:d2:6a:57:c0:eb:24:67:64:08:49:dc:0b:5b:78: 53:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:5A:2A:AF:A2:93:26:21:3F:6A:D4:7A:E6:6E:A0:7C:8D:03:10 X509v3 Authority Key Identifier: keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d4:fe:ba:85:dd:74:05:2d:28:2f:f8:ac:a8:09:58:01:9b: cd:17:f2:2b:1d:13:18:13:66:81:1c:8e:4e:d4:8f:82:34:49: 11:45:25:cd:09:0c:a1:9c:2d:f9:2c:68:18:19:05:0c:3f:7c: a2:8f:02:06:c5:ab:ad:13:d2:c2:b5:c4:78:79:08:c1:9b:36: c7:8e:c5:d8:13:fb:79:d7:b6:a3:35:18:3f:43:c4:13:80:40: 02:84:9c:94:d2:c0:8a:69:f0:46:32:2d:10:58:0d:b5:8d:0b: 97:0a:66:2c:ee:e3:41:34:fa:6c:5f:2e:eb:c7:58:3e:1d:04: 83:c6:62:7a:c4:4c:84:1e:b0:4b:ba:b5:9c:30:e2:d4:07:6c: 6e:4a:05:df:cf:23:a4:8a:e2:76:ba:2d:78:64:33:3f:fa:48: 5d:e6:d5:85:6b:f5:3e:77:75:1a:cb:b4:64:04:36:15:f2:ce: 03:b5:f2:63:52:d7:0f:7e:e7:4b:82:cf:68:65:84:3b:88:41: ad:37:fc:23:83:6c:e2:64:14:a7:b8:71:46:e1:65:0d:dc:78: 27:78:8d:94:d7:c2:16:43:59:b1:87:a4:82:45:f6:54:ff:5c: fd:63:84:e3:3b:dc:5c:d1:e9:32:70:45:ea:5d:d0:7e:5a:50: f5:7f:a4:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUnAzLYPBErd9ruVMc+V4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy ZDZmZjkwHhcNMjUxMjA2MTEwMDU3WhcNMjUxMjA3MTEwMDU3WjAzMTEwLwYDVQQD Eyg5Mjk4NWEyYWFmYTI5MzI2MjEzZjZhZDQ3YWU2NmVhMDdjOGQwMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/aZ+EMS1icIA1u6ie87KrC2YG/z vpf/2nfCvgSOLvazqKsoNPIILblT/8iTmhZDFUcs+/uqPk8CQiSz5Yco7E+F1cq0 XeVfNcBzobwe0COE7jpzIrJTMG6o3bDCq5MujR+GkbRWdcdQ/QKfuLEsY9gnAzhf NAWISevZDH3NcKX7pyQo2yT9fLJaLEyxRz8rp0k2d2C3QYRp7e/u+4JTH4o7jpeh 8UBjCbpORfiQ5vowh4EKurzrKqyR8AhE4aFd+8E2ClSEpiyOaFkS0Ebk4cTFgCYn 6NsIqZ5zdETFQoHQkvM1TMf3cQZPYLCwwDcC0mpXwOskZ2QISdwLW3hTkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKYWiqvopMmIT9q1HrmbqB8jQMQMB8GA1UdIwQY MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9T+uoXd dAUtKC/4rKgJWAGbzRfyKx0TGBNmgRyOTtSPgjRJEUUlzQkMoZwt+SxoGBkFDD98 oo8CBsWrrRPSwrXEeHkIwZs2x47F2BP7ede2ozUYP0PEE4BAAoSclNLAimnwRjIt EFgNtY0LlwpmLO7jQTT6bF8u68dYPh0Eg8ZiesRMhB6wS7q1nDDi1AdsbkoF388j pIridroteGQzP/pIXebVhWv1Pnd1Gsu0ZAQ2FfLOA7XyY1LXD37nS4LPaGWEO4hB rTf8I4Ns4mQUp7hxRuFlDdx4J3iNlNfCFkNZsYekgkX2VP9c/WOE4zvcXNHpMnBF 6l3QflpQ9X+kdA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:31:07 2025 by rpki-client