This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json) Hash identifier: kd2TM+unsr9bpmNBNckD2mCJzYHH1k5y4jjRIpZU7Sc= Subject key identifier: FA:49:42:AE:9B:59:07:9E:CB:45:2D:ED:1D:42:DC:5C:FA:72:10:BA Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Certificate serial: 019AF653AB32751FB827793C147838F948BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft Manifest number: 176A Signing time: Sun 07 Dec 2025 01:01:09 +0000 Manifest this update: Sun 07 Dec 2025 01:01:09 +0000 Manifest next update: Mon 08 Dec 2025 01:01:09 +0000 Files and hashes: 1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=) 2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: AXTWRTaWW9EOVewYwzpH08W46ONSi36zhZeNZ99SyEY=) 3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=) 4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:ab:32:75:1f:b8:27:79:3c:14:78:38:f9:48:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb Validity Not Before: Dec 7 01:01:09 2025 GMT Not After : Dec 8 01:01:09 2025 GMT Subject: CN=fa4942ae9b59079ecb452ded1d42dc5cfa7210ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:84:ec:e3:8b:00:c8:a0:95:0d:58:b0:23: 82:68:f1:b0:7b:cb:6b:09:df:52:a2:47:07:1a:57: f0:81:13:0e:c2:0f:8e:98:db:a6:b6:a9:fd:cb:66: e0:be:53:d4:90:f1:96:78:12:4e:fd:a0:43:72:fd: c3:bb:31:a4:5b:d8:87:85:20:db:1e:8b:cf:f7:63: 1a:8d:07:b7:3f:1e:16:70:a0:ad:11:f0:2a:81:20: 2c:d5:b5:65:47:f9:79:fe:ba:ce:d2:59:ed:77:ee: 80:9c:a9:92:f7:71:12:de:39:c9:b6:a0:d9:24:87: 13:87:15:c2:10:e7:e3:12:f0:47:0e:14:71:9c:c3: ab:30:14:97:d5:f1:d3:08:da:65:4e:62:ee:70:17: d4:d9:aa:2b:e2:90:ee:da:11:32:7c:36:94:bf:b4: b7:b1:03:01:b2:3e:f2:a9:ec:75:7d:de:a5:7c:a0: 34:61:4c:0a:6c:64:82:69:61:8c:ee:53:e2:ca:35: d7:3c:7d:44:f9:c9:c8:fc:96:cc:f2:19:ad:6c:a6: 15:f2:0b:3b:95:96:6a:b1:0e:39:8e:58:b5:22:03: c8:d8:b7:ea:84:cd:8c:fe:01:e3:3f:e0:7e:df:92: 28:a6:84:17:d7:a5:fb:f6:ad:59:6d:aa:f7:12:14: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:49:42:AE:9B:59:07:9E:CB:45:2D:ED:1D:42:DC:5C:FA:72:10:BA X509v3 Authority Key Identifier: keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e5:48:eb:89:a8:b7:d4:af:7e:ef:15:88:ef:61:55:48:73: 48:fb:bc:6f:90:15:53:0f:4e:56:cd:b5:99:d8:d4:90:b3:7a: ca:56:c8:b2:b4:c6:a1:48:61:56:68:58:80:cf:83:af:c1:8c: 7b:50:26:20:07:0e:df:af:1f:b1:ba:b6:48:9c:ac:26:3d:43: c3:16:16:c1:7d:48:3f:bd:5e:2b:9c:f1:2e:71:75:54:76:91: 4b:8e:fd:53:b0:be:4c:6a:ae:30:ca:92:a0:ac:de:ea:e3:d3: 2a:bf:98:21:ca:57:5e:f7:8c:56:fc:e6:0d:18:94:41:59:e9: 3d:a6:db:9b:46:8b:9a:4d:10:9f:1f:ca:b9:dc:8f:77:94:f4: f8:ad:66:b2:d8:72:d8:79:da:27:c2:54:12:0f:b1:63:1e:e8: 90:fe:cf:de:87:ba:f5:c4:07:aa:24:40:b5:89:c9:84:28:47: 09:bf:3f:d5:22:51:67:a1:f6:6c:7b:42:c1:52:18:0f:14:1c: 42:84:d2:50:f7:01:c9:ce:90:69:c6:49:b3:a2:d0:48:cf:c7: f0:45:83:ac:29:27:1e:db:5f:1f:26:db:c7:40:8b:f6:12:36: ea:f2:ad:a3:bf:39:98:b0:3c:af:95:82:95:61:4a:ea:73:df: 73:15:23:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6sydR+4J3k8FHg4+Ui+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTAwNzdkMmRkOGE2N2ExYWU4YjZhYmQ2YmJiMzQ4OTAy OGE1YmIwHhcNMjUxMjA3MDEwMTA5WhcNMjUxMjA4MDEwMTA5WjAzMTEwLwYDVQQD EyhmYTQ5NDJhZTliNTkwNzllY2I0NTJkZWQxZDQyZGM1Y2ZhNzIxMGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7mE7OOLAMiglQ1YsCOCaPGwe8tr Cd9SokcHGlfwgRMOwg+OmNumtqn9y2bgvlPUkPGWeBJO/aBDcv3DuzGkW9iHhSDb HovP92MajQe3Px4WcKCtEfAqgSAs1bVlR/l5/rrO0lntd+6AnKmS93ES3jnJtqDZ JIcThxXCEOfjEvBHDhRxnMOrMBSX1fHTCNplTmLucBfU2aor4pDu2hEyfDaUv7S3 sQMBsj7yqex1fd6lfKA0YUwKbGSCaWGM7lPiyjXXPH1E+cnI/JbM8hmtbKYV8gs7 lZZqsQ45jli1IgPI2LfqhM2M/gHjP+B+35IopoQX16X79q1Zbar3EhQIsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpJQq6bWQeey0Ut7R1C3Fz6chC6MB8GA1UdIwQY MBaAFH9QB30t2KZ6Gui2q9a7s0iQKKW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2Mt M2U3Y2FkZDg4YzcwLzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWMxY2UtZWE1OS00ZGNmLWJjY2MtM2U3Y2FkZDg4Yzcw LzEvZjFBSGZTM1lwbm9hNkxhcjFydXpTSkFvcGJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG+VI64mo t9Svfu8ViO9hVUhzSPu8b5AVUw9OVs21mdjUkLN6ylbIsrTGoUhhVmhYgM+Dr8GM e1AmIAcO368fsbq2SJysJj1DwxYWwX1IP71eK5zxLnF1VHaRS479U7C+TGquMMqS oKze6uPTKr+YIcpXXveMVvzmDRiUQVnpPabbm0aLmk0Qnx/KudyPd5T0+K1msthy 2HnaJ8JUEg+xYx7okP7P3oe69cQHqiRAtYnJhChHCb8/1SJRZ6H2bHtCwVIYDxQc QoTSUPcByc6QacZJs6LQSM/H8EWDrCknHttfHybbx0CL9hI26vKto785mLA8r5WC lWFK6nPfcxUjSQ== -----END CERTIFICATE-----Generated at Sun Dec 7 09:24:31 2025 by rpki-client