This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json) Hash identifier: AaPK6zKUZMf3ePzDqcs8FmLrb60mH97/mJB8KERs14o= Subject key identifier: 98:F0:F0:BE:66:26:19:6D:26:42:D6:E4:37:7A:14:6F:67:F6:FA:64 Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5 Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5 Certificate serial: 019AF3F71BC3C37EF1E676510ACB40B68A12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft Manifest number: 0F04 Signing time: Sat 06 Dec 2025 14:00:49 +0000 Manifest this update: Sat 06 Dec 2025 14:00:49 +0000 Manifest next update: Sun 07 Dec 2025 14:00:49 +0000 Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: 4ldl9Sp44Sl6vmwem/qLipD6OIugk/lSfps/I4ZgcAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:1b:c3:c3:7e:f1:e6:76:51:0a:cb:40:b6:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5 Validity Not Before: Dec 6 14:00:49 2025 GMT Not After : Dec 7 14:00:49 2025 GMT Subject: CN=98f0f0be6626196d2642d6e4377a146f67f6fa64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:8c:b1:c9:14:e6:7f:16:44:8e:d6:e7:40: 68:b7:d3:9f:51:9d:e5:dd:34:11:24:ea:c3:1c:47: 79:70:e0:27:e4:16:e4:85:14:9a:11:f6:0c:11:7a: b5:24:5b:bf:9e:d5:0c:98:4f:b9:27:08:96:86:58: 8f:9f:bd:e5:0f:8c:d3:9f:96:ff:d9:a2:b7:95:08: da:f2:96:57:2a:52:95:a4:ef:f7:76:12:8f:b4:95: 31:e0:30:ed:3d:9f:f5:ae:d8:ef:96:97:5c:fd:ed: dd:f2:d6:58:16:a9:ce:b1:4e:43:8d:b6:7e:6e:7c: de:c5:01:50:1c:7c:77:fd:99:f4:2f:76:15:01:f1: f4:e7:19:c6:5e:17:ef:70:c2:75:c6:e3:de:39:f0: 29:f3:d2:da:7e:ca:5e:a7:1e:d9:53:97:b1:74:fb: 7e:97:f6:d7:ac:90:7f:f9:0d:5f:6b:cd:53:eb:62: 23:03:78:bb:82:52:68:28:b3:be:4a:67:aa:c9:72: e2:bf:94:5f:7a:72:41:f2:9b:3c:e9:9c:ae:5b:a0: 07:1d:1e:8c:eb:50:e6:eb:7a:e6:1c:31:e5:b6:c3: 4e:d4:5a:8a:87:e5:18:f7:dc:8a:e6:d1:66:38:cf: 3c:1e:84:42:06:e5:7b:b5:b9:c2:1f:3f:ba:e8:db: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:F0:F0:BE:66:26:19:6D:26:42:D6:E4:37:7A:14:6F:67:F6:FA:64 X509v3 Authority Key Identifier: keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bb:8c:49:31:75:56:0b:bd:7f:c9:b1:a6:0a:e7:e6:56:18: 68:1e:05:26:e8:b8:63:0b:b5:af:59:65:44:c4:d6:1e:7e:67: d5:d8:a6:b0:7e:6a:35:07:a5:c1:da:40:13:27:0c:b5:bf:e2: 5d:c5:07:49:80:c9:55:b2:34:18:a3:a0:4f:bb:3b:f1:c8:b7: c0:88:41:2a:85:af:19:2b:ad:bc:f8:75:49:d8:9c:a7:0e:7c: 46:27:90:10:50:46:a6:bf:f4:ab:24:b7:e9:aa:94:d5:b3:a3: 71:99:24:d3:0c:17:36:81:b1:b8:00:63:5f:4c:04:89:24:3e: 0f:ac:37:af:1d:c1:fa:4b:fe:ae:9f:99:83:46:d2:54:a6:df: b7:55:2b:9b:e4:a9:79:21:96:e6:f2:9b:c2:89:7c:3c:2c:4b: 39:ae:b3:cb:3f:06:84:d7:4c:37:cf:89:fd:6c:16:0f:20:38: 35:80:ce:cf:7d:2c:9e:3a:34:74:ca:a4:58:70:87:9f:aa:9a: bd:5d:2a:62:cb:f1:e5:26:94:67:40:d2:6e:1f:1b:a2:7d:78: 6b:4f:79:03:9a:01:e3:c0:62:68:84:50:5e:11:3c:9d:b4:24: 17:47:a6:48:d9:67:9d:c3:00:45:40:67:f4:d9:3b:ab:c9:01: 12:03:c3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9xvDw37x5nZRCstAtooSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTE2NjU3YTI0OTc3MzdjYTAzNjIxY2M2NjhkMjBjNzYy MTM2ZDUwHhcNMjUxMjA2MTQwMDQ5WhcNMjUxMjA3MTQwMDQ5WjAzMTEwLwYDVQQD Eyg5OGYwZjBiZTY2MjYxOTZkMjY0MmQ2ZTQzNzdhMTQ2ZjY3ZjZmYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AqMsckU5n8WRI7W50Bot9OfUZ3l 3TQRJOrDHEd5cOAn5BbkhRSaEfYMEXq1JFu/ntUMmE+5JwiWhliPn73lD4zTn5b/ 2aK3lQja8pZXKlKVpO/3dhKPtJUx4DDtPZ/1rtjvlpdc/e3d8tZYFqnOsU5DjbZ+ bnzexQFQHHx3/Zn0L3YVAfH05xnGXhfvcMJ1xuPeOfAp89Lafspepx7ZU5exdPt+ l/bXrJB/+Q1fa81T62IjA3i7glJoKLO+SmeqyXLiv5RfenJB8ps86ZyuW6AHHR6M 61Dm63rmHDHltsNO1FqKh+UY99yK5tFmOM88HoRCBuV7tbnCHz+66Nu/TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjw8L5mJhltJkLW5Dd6FG9n9vpkMB8GA1UdIwQY MBaAFBehZleiSXc3ygNiHMZo0gx2ITbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgt OTZjOGY0MzlhYjgxLzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80YWM4NWYtZTNmZi00YjUyLWI4OTgtOTZjOGY0MzlhYjgx LzEvRjZGbVY2SkpkemZLQTJJY3htalNESFloTnRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7uMSTF1 Vgu9f8mxpgrn5lYYaB4FJui4Ywu1r1llRMTWHn5n1dimsH5qNQelwdpAEycMtb/i XcUHSYDJVbI0GKOgT7s78ci3wIhBKoWvGSutvPh1Sdicpw58RieQEFBGpr/0qyS3 6aqU1bOjcZkk0wwXNoGxuABjX0wEiSQ+D6w3rx3B+kv+rp+Zg0bSVKbft1Urm+Sp eSGW5vKbwol8PCxLOa6zyz8GhNdMN8+J/WwWDyA4NYDOz30snjo0dMqkWHCHn6qa vV0qYsvx5SaUZ0DSbh8bon14a095A5oB48BiaIRQXhE8nbQkF0emSNlnncMARUBn 9Nk7q8kBEgPDFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:05 2025 by rpki-client