This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json) Hash identifier: IRp7OJBVNQGWDHmIH84Tc5BxT6EfaF9QNVDZlx9hJXE= Subject key identifier: 5A:95:EE:9A:14:ED:E4:35:0F:9E:9C:62:63:91:9E:CD:50:B8:69:9F Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8 Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8 Certificate serial: 019AF540C07B17ACA7427527EFA6C1E46733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft Manifest number: 1370 Signing time: Sat 06 Dec 2025 20:00:52 +0000 Manifest this update: Sat 06 Dec 2025 20:00:52 +0000 Manifest next update: Sun 07 Dec 2025 20:00:52 +0000 Files and hashes: 1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=) 2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: ftECCTAD8jH//fivh8CoqJKs0t+b98MsX+INGtGk3Mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:c0:7b:17:ac:a7:42:75:27:ef:a6:c1:e4:67:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8 Validity Not Before: Dec 6 20:00:52 2025 GMT Not After : Dec 7 20:00:52 2025 GMT Subject: CN=5a95ee9a14ede4350f9e9c6263919ecd50b8699f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7a:4e:d7:5f:a0:6e:42:50:e4:68:9e:9d:d1: b3:78:80:c3:c3:e6:ed:ca:52:5d:6a:ec:13:c7:32: 47:42:0a:d9:3e:84:cf:c9:47:2d:76:77:35:23:ba: dc:dd:f7:d3:47:91:29:3d:ed:b2:7f:03:1e:a1:fc: 87:68:33:c3:dc:32:23:f6:cd:ff:d8:1f:a2:0a:ea: 4d:14:7b:16:c4:a4:41:03:a0:32:08:d6:d5:19:9e: 33:96:e1:81:a7:26:d3:90:c1:14:90:70:dc:ee:78: ef:25:9f:a4:bc:97:31:d8:9c:f7:8c:c5:02:20:a8: 01:db:36:37:66:ed:43:2e:1c:7a:43:d2:c0:f4:ca: be:1c:f0:98:9e:70:84:16:04:97:09:a1:29:57:f1: 82:b0:e9:87:8f:43:b0:ea:92:eb:53:32:d1:aa:05: 38:f2:94:a6:3d:db:a7:fe:1a:05:dc:51:9c:aa:e1: 01:13:91:33:85:14:26:cb:08:99:30:6f:92:07:03: ca:4a:86:43:8f:7c:f1:2b:20:17:92:19:8b:bf:db: 03:fe:74:3d:9e:6c:e5:cc:9f:d8:35:d8:4a:2d:5a: 7e:28:71:92:5d:c2:45:31:07:94:bf:a6:c7:ac:9a: f4:88:50:fc:8d:76:7d:ad:39:41:74:86:e1:eb:07: e6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:95:EE:9A:14:ED:E4:35:0F:9E:9C:62:63:91:9E:CD:50:B8:69:9F X509v3 Authority Key Identifier: keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:c2:73:2b:36:70:e1:06:c1:2b:0b:79:96:30:51:9e:47:40: 9f:68:7c:17:74:e3:53:71:12:1e:b8:d8:b7:29:65:8e:e3:80: 48:91:93:3a:3b:b0:b2:b1:8e:f2:a7:16:99:50:b1:48:4b:34: f5:db:9c:19:51:8a:5c:2e:ec:c2:4e:80:a3:0b:56:94:10:7c: 91:ad:2b:f0:03:15:7d:43:92:b1:9d:03:cf:dd:de:42:9d:fb: 68:28:3c:29:70:57:b0:71:d7:4d:ee:b4:5a:42:70:81:67:98: 3e:5d:73:47:67:e8:c1:68:fc:ea:ab:5a:fd:52:e7:78:09:82: 9a:cb:ce:0a:9b:d7:9a:6e:84:3b:06:5e:ce:6c:be:09:be:21: 5b:4c:8c:e3:3b:f7:6b:e0:bd:11:6e:a5:a6:15:12:0f:31:a5: 1c:6f:a4:1b:dc:c5:e1:6a:9b:46:8e:0b:ec:43:9d:ea:bc:b7: 61:30:c2:95:ec:16:96:37:0a:cd:2f:46:52:9e:0d:49:db:6b: 15:08:af:30:56:78:31:42:dc:7e:8c:50:1e:9f:d8:22:c4:b5: f3:20:b3:f9:c2:a9:b5:63:8b:9a:8d:0d:93:73:08:c4:7a:24: 6d:b5:67:33:1b:5c:d2:a1:15:20:b8:08:3d:09:9c:54:77:41: 11:e0:2f:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QMB7F6ynQnUn76bB5GczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTEyNGExN2I4NzIxNWY3OTIwNWNkMTQ4NmY2MTgzOWNm OWU2ZjgwHhcNMjUxMjA2MjAwMDUyWhcNMjUxMjA3MjAwMDUyWjAzMTEwLwYDVQQD Eyg1YTk1ZWU5YTE0ZWRlNDM1MGY5ZTljNjI2MzkxOWVjZDUwYjg2OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHpO11+gbkJQ5GiendGzeIDDw+bt ylJdauwTxzJHQgrZPoTPyUctdnc1I7rc3ffTR5EpPe2yfwMeofyHaDPD3DIj9s3/ 2B+iCupNFHsWxKRBA6AyCNbVGZ4zluGBpybTkMEUkHDc7njvJZ+kvJcx2Jz3jMUC IKgB2zY3Zu1DLhx6Q9LA9Mq+HPCYnnCEFgSXCaEpV/GCsOmHj0Ow6pLrUzLRqgU4 8pSmPdun/hoF3FGcquEBE5EzhRQmywiZMG+SBwPKSoZDj3zxKyAXkhmLv9sD/nQ9 nmzlzJ/YNdhKLVp+KHGSXcJFMQeUv6bHrJr0iFD8jXZ9rTlBdIbh6wfmPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqV7poU7eQ1D56cYmORns1QuGmfMB8GA1UdIwQY MBaAFBdRJKF7hyFfeSBc0UhvYYOc+eb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wZDRhZmYtNDJkYi00MjdkLWFkNWUt YzYzN2IwZGNkYzhlLzEvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8wZDRhZmYtNDJkYi00MjdkLWFkNWUtYzYzN2IwZGNkYzhl LzEvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMJzKzZw 4QbBKwt5ljBRnkdAn2h8F3TjU3ESHrjYtylljuOASJGTOjuwsrGO8qcWmVCxSEs0 9ducGVGKXC7swk6AowtWlBB8ka0r8AMVfUOSsZ0Dz93eQp37aCg8KXBXsHHXTe60 WkJwgWeYPl1zR2fowWj86qta/VLneAmCmsvOCpvXmm6EOwZezmy+Cb4hW0yM4zv3 a+C9EW6lphUSDzGlHG+kG9zF4WqbRo4L7EOd6ry3YTDClewWljcKzS9GUp4NSdtr FQivMFZ4MULcfoxQHp/YIsS18yCz+cKptWOLmo0Nk3MIxHokbbVnMxtc0qEVILgI PQmcVHdBEeAvag== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:49 2025 by rpki-client