This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json) Hash identifier: +tCTZtYxFrvjzi5FSShVUn/fGEXtSE7PGoh0rXpNgYo= Subject key identifier: 97:0A:93:2B:39:1A:37:BF:E4:E4:94:02:DF:D7:71:67:D4:16:82:6C Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Certificate serial: 019AF209919433C967F270000CB2697FE40F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft Manifest number: 176F Signing time: Sat 06 Dec 2025 05:01:44 +0000 Manifest this update: Sat 06 Dec 2025 05:01:44 +0000 Manifest next update: Sun 07 Dec 2025 05:01:44 +0000 Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 2nJmXCxJbG3MTEYq9v9yvXHUPQ4R2v2BM0urTkKm3lo=) 2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:91:94:33:c9:67:f2:70:00:0c:b2:69:7f:e4:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Validity Not Before: Dec 6 05:01:44 2025 GMT Not After : Dec 7 05:01:44 2025 GMT Subject: CN=970a932b391a37bfe4e49402dfd77167d416826c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a2:7f:5b:63:08:b7:53:72:da:d1:80:da:41: ee:66:3b:5a:cc:ee:6b:96:4f:fc:6c:f5:43:ce:14: f6:31:12:f3:11:b5:48:9c:67:f5:dd:44:03:19:fb: da:a9:65:5b:ad:7c:53:13:a7:dc:f8:39:cd:94:ee: 96:88:d6:8e:99:ef:09:be:15:ce:d7:2b:7f:96:c3: 18:45:75:10:88:23:27:8d:a7:9c:da:5f:a4:fb:a5: f9:a7:54:d6:1b:d9:ae:06:2e:2b:8e:5e:72:0b:a4: 85:8a:6c:26:ed:9e:4d:df:b8:be:b0:b8:03:a3:f5: f4:1f:61:58:48:48:6d:fd:d6:2f:ca:53:29:68:04: b5:14:81:37:c4:2c:d1:5d:a1:f6:11:f5:b6:9b:23: 34:10:09:e4:fd:0e:77:39:20:b0:94:4d:a6:cd:36: 41:86:12:88:6a:3d:5a:af:d8:de:2c:a2:fb:fc:41: 94:c9:db:a3:2f:96:cb:67:3f:f3:16:36:f3:09:c6: 74:5e:46:d4:b9:be:ad:81:5c:fc:af:18:37:13:ab: dd:84:d5:62:6e:26:8f:38:c9:57:2b:67:cb:2d:a3: ee:97:c9:2f:26:84:fe:6b:98:6c:63:34:c6:19:cf: 69:0c:e9:4f:ad:a2:d7:ef:89:88:97:79:b5:3e:95: 9f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0A:93:2B:39:1A:37:BF:E4:E4:94:02:DF:D7:71:67:D4:16:82:6C X509v3 Authority Key Identifier: keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:77:64:d6:81:ba:e6:16:e3:4a:01:00:73:9e:a3:5d:c0:5d: ad:3a:a0:ae:5b:8c:7f:c2:35:a9:97:a4:44:ef:3b:a9:8d:3b: 63:34:1d:2e:93:77:b2:76:83:83:72:68:32:d7:da:b5:ea:4e: 5b:4d:29:eb:62:00:25:d2:76:b2:a2:79:34:51:68:2a:1e:b7: 47:be:d4:36:0d:74:04:28:58:32:15:21:2e:8d:d1:6f:64:0c: 13:19:94:22:c2:96:04:a0:2d:f5:ad:f0:9b:04:e0:52:5e:bb: fa:d1:84:07:d3:ff:ad:63:a5:8b:ee:83:58:7b:46:80:d9:19: f5:11:71:67:b9:53:f2:65:39:75:2b:21:69:02:a6:35:04:ca: 59:fc:f4:81:a7:a2:05:21:3a:46:5c:73:46:ec:0b:95:35:60: 37:73:bc:4a:db:d4:08:9c:5e:fc:32:e6:72:5b:66:4a:89:0c: a6:a7:16:79:24:1c:93:44:78:a8:18:cc:d2:2e:e8:02:e0:1f: 4e:f9:f1:04:d1:aa:d7:a0:ae:17:ad:6a:0e:e1:f1:01:d1:5e: 2a:42:0f:9e:cf:a9:cb:5b:c1:bb:48:de:cb:1a:e3:07:e8:d3: 5e:fa:52:c4:20:96:d6:fc:ea:7b:97:45:6c:0f:bc:2f:40:ca: ea:95:97:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZGUM8ln8nAADLJpf+QPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5 Yjg2ZDUwHhcNMjUxMjA2MDUwMTQ0WhcNMjUxMjA3MDUwMTQ0WjAzMTEwLwYDVQQD Eyg5NzBhOTMyYjM5MWEzN2JmZTRlNDk0MDJkZmQ3NzE2N2Q0MTY4MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aJ/W2MIt1Ny2tGA2kHuZjtazO5r lk/8bPVDzhT2MRLzEbVInGf13UQDGfvaqWVbrXxTE6fc+DnNlO6WiNaOme8JvhXO 1yt/lsMYRXUQiCMnjaec2l+k+6X5p1TWG9muBi4rjl5yC6SFimwm7Z5N37i+sLgD o/X0H2FYSEht/dYvylMpaAS1FIE3xCzRXaH2EfW2myM0EAnk/Q53OSCwlE2mzTZB hhKIaj1ar9jeLKL7/EGUydujL5bLZz/zFjbzCcZ0XkbUub6tgVz8rxg3E6vdhNVi biaPOMlXK2fLLaPul8kvJoT+a5hsYzTGGc9pDOlPraLX74mIl3m1PpWfJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcKkys5Gje/5OSUAt/XcWfUFoJsMB8GA1UdIwQY MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyHdk1oG6 5hbjSgEAc56jXcBdrTqgrluMf8I1qZekRO87qY07YzQdLpN3snaDg3JoMtfatepO W00p62IAJdJ2sqJ5NFFoKh63R77UNg10BChYMhUhLo3Rb2QMExmUIsKWBKAt9a3w mwTgUl67+tGEB9P/rWOli+6DWHtGgNkZ9RFxZ7lT8mU5dSshaQKmNQTKWfz0gaei BSE6RlxzRuwLlTVgN3O8StvUCJxe/DLmcltmSokMpqcWeSQck0R4qBjM0i7oAuAf TvnxBNGq16CuF61qDuHxAdFeKkIPns+py1vBu0jeyxrjB+jTXvpSxCCW1vzqe5dF bA+8L0DK6pWXbw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:41 2025 by rpki-client