This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json) Hash identifier: SBi7cz0LSV63FHFJPP6VNkW09jqVbmqtymo2vUFgJzM= Subject key identifier: DD:D0:FD:5C:C9:C1:FA:33:13:8E:36:92:48:6B:3B:D2:95:56:84:68 Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Certificate serial: 019AF19B629B220D0F99ABD4E5535D11D410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: OgBkgaGJF87nT2+YhuirAarSqdYiJ+2yY4X+x0ZDzqU=) 2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:62:9b:22:0d:0f:99:ab:d4:e5:53:5d:11:d4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=ddd0fd5cc9c1fa33138e3692486b3bd295568468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b5:8c:65:3e:b7:6b:04:61:ca:2a:5e:26:02: 6a:68:9f:d1:a0:f3:2f:8d:d8:2c:c6:c2:f6:40:cd: 12:5b:23:b0:e4:f5:82:d1:51:c1:92:c7:f0:28:58: dc:98:2c:18:1b:40:6b:77:51:a9:fe:64:89:9a:b2: b0:70:47:47:78:67:1d:1b:23:aa:bb:a2:40:6b:c5: 0e:01:ef:d2:ac:19:06:6f:5d:f6:ab:42:16:bb:c0: 14:60:da:20:4c:0d:45:cc:a7:58:f5:1b:57:fe:53: 41:06:fb:a1:88:5a:90:ff:da:03:99:02:cf:40:85: 17:f7:74:16:7a:c5:7d:2d:f7:c9:40:89:08:af:f1: a4:f4:53:f0:44:cd:cf:c3:f2:31:19:23:5b:a6:52: bc:c1:5d:3d:2f:1c:0e:d6:1e:41:75:1a:95:62:66: 28:3e:39:41:73:f5:c2:e1:3d:24:53:70:fa:90:3d: 14:0a:56:d8:40:c5:32:1c:c3:18:6f:71:af:ed:76: ac:78:22:72:90:e8:a6:7d:a9:6a:f5:3d:d2:7d:e1: dc:5d:42:93:68:91:bf:c1:c3:bc:b8:a2:97:65:1d: 84:cd:27:c5:ad:67:de:5e:ff:cb:b5:dd:e4:2a:04: f9:38:91:d8:b4:f1:06:70:ee:5a:6f:71:9b:f4:53: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D0:FD:5C:C9:C1:FA:33:13:8E:36:92:48:6B:3B:D2:95:56:84:68 X509v3 Authority Key Identifier: keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e8:55:fc:9f:d6:3a:df:2d:0b:36:ff:c1:97:57:10:14:95: 0e:4a:54:58:d0:55:9e:12:74:fd:86:4a:8b:f8:00:bf:3c:83: df:77:b0:51:16:6b:06:fc:e4:5e:40:d1:de:3e:c0:2a:5b:23: be:a3:fa:ed:f8:cc:eb:c8:90:41:81:0b:d6:ec:75:0d:ac:93: 8c:54:2c:6a:3d:fd:87:30:16:c8:cb:23:1d:44:97:20:ec:7f: cd:51:61:30:c5:02:68:44:69:e3:62:a3:36:4d:3c:67:ba:fe: 38:04:2b:28:04:d4:f9:2f:61:dd:63:a1:f7:2f:30:d4:6e:db: 65:de:a2:25:92:fc:cf:2e:78:ab:69:b0:16:17:cd:79:4c:f5: a4:21:11:2b:6f:48:02:24:c9:a9:ce:81:7c:df:72:22:d3:1d: 8d:e9:3b:b6:f2:31:b9:5c:55:a6:d0:14:be:1f:fe:11:39:50: 02:2d:cc:17:81:fc:64:c4:f8:0a:8b:40:a9:04:fc:ca:0a:ef: 4e:06:0a:39:43:2b:b4:d2:3d:f9:d8:76:69:70:7d:ac:50:b1: 7b:65:19:cb:8d:4c:e8:25:d2:8f:84:48:d6:09:c8:7a:ac:d2: ac:20:13:e9:d2:dc:cc:be:df:07:c0:2c:63:33:3f:86:a4:aa: f8:b3:fa:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2KbIg0PmavU5VNdEdQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx ZDllMzYwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD EyhkZGQwZmQ1Y2M5YzFmYTMzMTM4ZTM2OTI0ODZiM2JkMjk1NTY4NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7WMZT63awRhyipeJgJqaJ/RoPMv jdgsxsL2QM0SWyOw5PWC0VHBksfwKFjcmCwYG0Brd1Gp/mSJmrKwcEdHeGcdGyOq u6JAa8UOAe/SrBkGb132q0IWu8AUYNogTA1FzKdY9RtX/lNBBvuhiFqQ/9oDmQLP QIUX93QWesV9LffJQIkIr/Gk9FPwRM3Pw/IxGSNbplK8wV09LxwO1h5BdRqVYmYo PjlBc/XC4T0kU3D6kD0UClbYQMUyHMMYb3Gv7XaseCJykOimfalq9T3SfeHcXUKT aJG/wcO8uKKXZR2EzSfFrWfeXv/Ltd3kKgT5OJHYtPEGcO5ab3Gb9FOrvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Q/VzJwfozE442kkhrO9KVVoRoMB8GA1UdIwQY MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt MDI4NWMxNWZjNTFlLzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuhV/J/W Ot8tCzb/wZdXEBSVDkpUWNBVnhJ0/YZKi/gAvzyD33ewURZrBvzkXkDR3j7AKlsj vqP67fjM68iQQYEL1ux1DayTjFQsaj39hzAWyMsjHUSXIOx/zVFhMMUCaERp42Kj Nk08Z7r+OAQrKATU+S9h3WOh9y8w1G7bZd6iJZL8zy54q2mwFhfNeUz1pCERK29I AiTJqc6BfN9yItMdjek7tvIxuVxVptAUvh/+ETlQAi3MF4H8ZMT4CotAqQT8ygrv TgYKOUMrtNI9+dh2aXB9rFCxe2UZy41M6CXSj4RI1gnIeqzSrCAT6dLczL7fB8As YzM/hqSq+LP6zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:59 2025 by rpki-client