This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft File: f6gWozONMnQc1P_49J3bLMg4_cU.mft (raw, json) Hash identifier: uL4gvG574ofYLx12f3hEekZsO9nmbitmAfcJqqXzl1M= Subject key identifier: 81:78:5E:02:63:BF:12:FD:DF:23:21:0C:9C:84:B2:B2:AC:69:90:12 Authority key identifier: 7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5 Certificate issuer: /CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5 Certificate serial: 019AF164021C3C3EC3F4D836E320E1D19CD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft Manifest number: 04D1 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: R0Tg1S6YqpnwSmmNGg5sv_IgptU.roa (hash: W7Vg4tcIuHbVrHthiRGSMMWZT9gGTwwdzQz+ZIBO3NQ=) 2: f6gWozONMnQc1P_49J3bLMg4_cU.crl (hash: cB85fksaY6eB8Y0GKBezt70iOh9Iqra3PqwXvRgKgGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:02:1c:3c:3e:c3:f4:d8:36:e3:20:e1:d1:9c:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fa816a3338d32741cd4fff8f49ddb2cc838fdc5 Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=81785e0263bf12fddf23210c9c84b2b2ac699012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d7:bf:20:da:86:4f:ac:27:ca:32:37:10:74: d0:1f:cb:de:b0:9f:e8:6e:cb:ac:76:49:80:d4:73: 49:d7:d9:db:8d:9b:76:ea:f4:e6:14:18:fc:fb:ac: 91:58:67:27:7a:de:f8:2b:f2:a7:97:11:fa:2f:73: 61:4d:ae:08:50:18:67:82:33:3c:5d:10:c7:30:ec: 04:9e:ec:06:6e:86:5a:77:38:cf:d2:be:ee:d0:0b: fe:8b:02:3c:f8:83:6d:69:51:c0:71:58:ac:e5:0a: e5:da:65:88:df:87:62:81:87:ae:21:93:60:64:e3: b4:bf:81:9e:68:a2:d4:4c:9b:9d:53:00:3b:13:63: 76:9f:af:64:25:c0:f4:77:c0:0e:1d:40:60:b3:fb: 53:b9:41:14:35:35:d2:7d:5d:41:81:18:c2:8e:93: 81:e4:60:bc:80:7c:af:a8:c1:87:ef:1b:d2:54:ae: 5c:eb:6c:00:5a:fe:95:70:7e:79:aa:d5:f7:01:44: 79:e0:a6:aa:ee:0e:92:6f:f3:1c:ed:aa:b0:d9:3a: c7:b7:43:cc:ba:0f:40:5b:8e:38:57:a8:2f:1e:33: 53:1e:22:3b:f5:90:f0:a9:ed:39:37:ec:ad:95:1b: 5e:93:a7:27:6e:78:cd:0c:70:5d:ca:4d:40:a3:dc: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:78:5E:02:63:BF:12:FD:DF:23:21:0C:9C:84:B2:B2:AC:69:90:12 X509v3 Authority Key Identifier: keyid:7F:A8:16:A3:33:8D:32:74:1C:D4:FF:F8:F4:9D:DB:2C:C8:38:FD:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6gWozONMnQc1P_49J3bLMg4_cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a4528a-90e6-4d91-a52c-f0717ea485c6/1/f6gWozONMnQc1P_49J3bLMg4_cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:97:bd:47:0e:34:6c:85:c7:71:f4:7a:3a:26:6a:23:22:d1: 41:4a:fb:0d:95:15:ee:76:70:f6:e2:72:dc:24:11:6b:47:10: bb:05:8b:85:88:9c:55:33:e8:3c:a4:e3:28:9c:fc:9c:08:aa: e2:61:5e:4b:f5:5d:4f:37:78:fb:cf:45:39:53:e8:2c:68:95: 25:70:52:2e:d4:3b:bf:7a:31:bd:69:e3:2d:1a:8a:29:1f:0e: 04:f3:49:a4:a8:83:a7:55:d4:f7:5a:31:3d:f1:f4:50:44:27: a1:4b:ee:d9:43:0b:c8:e7:03:72:e1:83:2d:80:97:a3:47:ee: 74:6e:c6:7b:c7:54:64:c0:a0:10:3e:14:c4:fe:71:6a:e5:99: ad:68:85:2d:75:d0:5f:dd:02:a0:d6:e6:ac:5e:71:db:d4:1e: 67:b9:bc:b1:5b:d1:72:4e:99:ea:cd:ff:bd:10:c3:40:06:8d: 6a:f5:a3:5e:62:3a:90:3d:60:6f:25:30:3f:8f:17:06:f8:9c: 27:1c:7b:f3:02:75:f2:03:a8:0e:d6:88:d2:95:ec:75:29:12: 8b:2e:96:d7:dd:43:79:01:65:a4:42:65:63:16:7f:33:fd:39: ef:36:86:b9:d9:34:b8:52:25:9d:c6:bc:22:07:c9:1e:15:09: 56:3e:7e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAIcPD7D9Ng24yDh0ZzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmYTgxNmEzMzM4ZDMyNzQxY2Q0ZmZmOGY0OWRkYjJjYzgz OGZkYzUwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD Eyg4MTc4NWUwMjYzYmYxMmZkZGYyMzIxMGM5Yzg0YjJiMmFjNjk5MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7te/INqGT6wnyjI3EHTQH8vesJ/o bsusdkmA1HNJ19nbjZt26vTmFBj8+6yRWGcnet74K/KnlxH6L3NhTa4IUBhngjM8 XRDHMOwEnuwGboZadzjP0r7u0Av+iwI8+INtaVHAcVis5Qrl2mWI34digYeuIZNg ZOO0v4GeaKLUTJudUwA7E2N2n69kJcD0d8AOHUBgs/tTuUEUNTXSfV1BgRjCjpOB 5GC8gHyvqMGH7xvSVK5c62wAWv6VcH55qtX3AUR54Kaq7g6Sb/Mc7aqw2TrHt0PM ug9AW444V6gvHjNTHiI79ZDwqe05N+ytlRtek6cnbnjNDHBdyk1Ao9yN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIF4XgJjvxL93yMhDJyEsrKsaZASMB8GA1UdIwQY MBaAFH+oFqMzjTJ0HNT/+PSd2yzIOP3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMt ZjA3MTdlYTQ4NWM2LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hNDUyOGEtOTBlNi00ZDkxLWE1MmMtZjA3MTdlYTQ4NWM2 LzEvZjZnV296T05NblFjMVBfNDlKM2JMTWc0X2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5e9Rw40 bIXHcfR6OiZqIyLRQUr7DZUV7nZw9uJy3CQRa0cQuwWLhYicVTPoPKTjKJz8nAiq 4mFeS/VdTzd4+89FOVPoLGiVJXBSLtQ7v3oxvWnjLRqKKR8OBPNJpKiDp1XU91ox PfH0UEQnoUvu2UMLyOcDcuGDLYCXo0fudG7Ge8dUZMCgED4UxP5xauWZrWiFLXXQ X90CoNbmrF5x29QeZ7m8sVvRck6Z6s3/vRDDQAaNavWjXmI6kD1gbyUwP48XBvic Jxx78wJ18gOoDtaI0pXsdSkSiy6W191DeQFlpEJlYxZ/M/057zaGudk0uFIlnca8 IgfJHhUJVj5+IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:24:17 2025 by rpki-client