This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json) Hash identifier: C84qgjWjcVMuLKGrPQkfOBwPEOMV53cesy6y6pYbHnw= Subject key identifier: 51:17:F1:F6:6E:B6:6B:B1:28:17:A6:D7:39:58:11:0C:20:B5:8F:DC Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Certificate serial: 019AF19AFEEC75C070FC7819297ED394514A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft Manifest number: 0C6A Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=) 2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: /6llubCNkVYT5NYgdvWmFdkwpW37G5kQWEHRm3M5pGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fe:ec:75:c0:70:fc:78:19:29:7e:d3:94:51:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=5117f1f66eb66bb12817a6d73958110c20b58fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:a1:58:a4:44:de:70:95:9a:e3:a3:69:26: 16:b1:41:97:a6:38:28:c2:fb:73:67:53:8a:55:ba: 56:79:e4:01:fd:9b:b1:73:0a:9d:05:b2:de:0b:fc: 11:c5:8d:5b:c5:75:16:e9:a1:3b:c2:fb:77:96:62: 02:7f:a5:d9:d1:dc:4d:cf:e8:57:c5:1c:1a:9b:a1: aa:06:ed:54:01:c2:94:8f:01:95:35:ff:04:77:7d: 3b:88:9a:25:e6:8e:30:3c:eb:6c:3e:73:17:b4:95: 22:26:7b:55:8a:9d:f9:9e:ab:6f:b3:ce:33:c2:2c: 58:cb:4c:dc:32:6d:2f:e6:de:f8:8d:19:b2:98:73: c8:2b:90:6f:35:d1:4c:ae:5f:3f:4b:88:4d:84:6b: 00:68:a7:d5:d4:f7:1c:e6:5c:30:5e:70:7c:37:04: 06:ca:38:05:d1:bf:ad:e1:2b:8c:c7:3a:a0:7e:70: 17:eb:a2:20:da:07:8e:da:c6:ab:7f:2f:39:29:fa: 7f:aa:ee:3d:97:1e:62:42:4c:30:50:40:02:4c:fe: 10:a9:b6:a5:38:44:37:1b:90:14:71:b4:da:ec:5e: 1c:79:de:00:3c:6b:10:5d:a7:65:11:59:6c:fc:c3: 4c:19:14:13:0b:05:df:68:a9:ba:76:88:09:a5:60: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:17:F1:F6:6E:B6:6B:B1:28:17:A6:D7:39:58:11:0C:20:B5:8F:DC X509v3 Authority Key Identifier: keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a0:15:c8:36:a0:ea:da:ac:ee:5c:7a:b2:36:4a:c1:e2:e3: 7d:d0:d5:b4:42:b4:a3:f4:a8:7a:f7:6d:f7:44:1f:e7:f6:0e: 61:3d:c4:54:ad:71:f6:db:bc:2d:e1:2b:4f:d8:8d:de:14:fe: 4f:2e:b5:d1:08:4b:08:05:c7:02:d1:7d:03:23:29:0f:40:8a: 45:5a:8d:d9:d2:1d:51:6b:6b:1d:cb:2b:d8:4d:89:df:4d:72: a3:65:66:b3:92:e4:2e:fe:3b:bf:60:1d:c2:c2:e6:e2:de:85: c5:81:cd:91:eb:ec:45:1d:32:61:b2:9b:6b:17:dc:fd:f9:56: b7:36:55:f9:cf:96:29:45:69:58:ee:5c:c5:1a:93:62:96:69: 59:75:67:b4:bb:99:4c:07:1d:4a:7f:1a:5d:d6:ce:84:fc:9c: cf:71:eb:cf:25:62:67:6c:14:23:1f:5a:63:b0:24:16:40:9c: 09:37:7b:e2:08:5f:27:04:bd:81:7b:43:ee:ce:ee:ba:2f:c1: 67:4d:0d:fa:8b:db:1b:93:cc:a7:bd:36:4f:55:e3:fd:be:3a: 5c:32:34:b7:38:aa:ac:43:30:05:a8:d1:f9:bf:3c:38:34:34: 7d:7c:38:0d:cb:ee:25:6e:9d:5f:a5:3e:cd:32:7f:e5:7a:9b: 4e:47:b5:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv7sdcBw/HgZKX7TlFFKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj MDFhZjkwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg1MTE3ZjFmNjZlYjY2YmIxMjgxN2E2ZDczOTU4MTEwYzIwYjU4ZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIahWKRE3nCVmuOjaSYWsUGXpjgo wvtzZ1OKVbpWeeQB/ZuxcwqdBbLeC/wRxY1bxXUW6aE7wvt3lmICf6XZ0dxNz+hX xRwam6GqBu1UAcKUjwGVNf8Ed307iJol5o4wPOtsPnMXtJUiJntVip35nqtvs84z wixYy0zcMm0v5t74jRmymHPIK5BvNdFMrl8/S4hNhGsAaKfV1Pcc5lwwXnB8NwQG yjgF0b+t4SuMxzqgfnAX66Ig2geO2sarfy85Kfp/qu49lx5iQkwwUEACTP4Qqbal OEQ3G5AUcbTa7F4ced4APGsQXadlEVls/MNMGRQTCwXfaKm6dogJpWDJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEX8fZutmuxKBem1zlYEQwgtY/cMB8GA1UdIwQY MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqAVyDag 6tqs7lx6sjZKweLjfdDVtEK0o/Soevdt90Qf5/YOYT3EVK1x9tu8LeErT9iN3hT+ Ty610QhLCAXHAtF9AyMpD0CKRVqN2dIdUWtrHcsr2E2J301yo2Vms5LkLv47v2Ad wsLm4t6FxYHNkevsRR0yYbKbaxfc/flWtzZV+c+WKUVpWO5cxRqTYpZpWXVntLuZ TAcdSn8aXdbOhPycz3HrzyViZ2wUIx9aY7AkFkCcCTd74ghfJwS9gXtD7s7uui/B Z00N+ovbG5PMp702T1Xj/b46XDI0tziqrEMwBajR+b88ODQ0fXw4DcvuJW6dX6U+ zTJ/5XqbTke1BQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:51 2025 by rpki-client