This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft File: F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft (raw, json) Hash identifier: uhnGDX2WLKEqzMDSYd6qNJnH1QUT7nB4zRiDgEhjdbM= Subject key identifier: B6:01:96:88:91:7A:06:EF:9F:19:7B:D8:24:A5:1B:88:34:BD:6A:7D Authority key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03 Certificate issuer: /CN=17ec31441691b859b347fd17217a5e5d1b0be303 Certificate serial: 019AF2096CF8C3A02D0D2CCA06AB367495A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft Manifest number: 088E Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl (hash: WIG1NLAsrMpSIvFaVinLOvbVCkfi8yZVpigkpVmkdhw=) 2: ln-QKhvlXAjUZIdfkRE5U6oCsi8.roa (hash: gwe72yNPdMd17mqjkFbILfyleB7233AKjzKUNQmZ/xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6c:f8:c3:a0:2d:0d:2c:ca:06:ab:36:74:95:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ec31441691b859b347fd17217a5e5d1b0be303 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=b6019688917a06ef9f197bd824a51b8834bd6a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:49:14:34:80:06:53:3f:bf:04:97:c4:6e: 03:78:fe:63:00:13:d3:af:ac:64:2e:66:f0:9c:c8: 5e:75:a6:b2:4d:c2:23:8a:7d:13:cf:3f:b3:44:85: 46:05:67:69:73:59:d5:1a:87:95:6d:08:a0:68:61: 7e:cc:10:f0:b3:26:9f:d8:12:e7:8e:7f:a0:4d:46: 1a:da:7b:c3:f8:a6:c1:7a:c0:4b:6f:a5:09:c9:02: 04:c1:b4:81:e0:1e:f8:24:65:3f:7b:35:c8:68:6c: 0a:01:14:06:ae:98:c7:cb:2a:ca:49:57:e2:74:ff: b2:8f:ff:53:13:71:0c:89:65:c0:c7:91:a1:28:91: da:86:29:56:e7:02:13:49:df:29:a0:d7:3e:9a:51: 07:7a:b5:52:9f:02:eb:f8:3c:06:a6:7c:9a:ec:8d: e1:3f:bd:06:d3:36:5a:62:c7:39:b1:e9:45:1d:fb: 24:17:f6:7e:1e:ad:fd:27:e9:65:81:0d:34:47:9d: be:53:e2:01:8c:cd:dd:c3:9b:6a:ea:2a:8c:5e:83: d7:d8:e8:40:bc:90:f1:b6:81:ea:47:57:1d:71:7b: 72:9a:0a:c2:35:a8:68:da:7c:67:30:3d:93:1f:1e: 03:ca:a9:60:ba:bc:d6:f5:6c:a3:dd:78:d1:d1:42: b1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:01:96:88:91:7A:06:EF:9F:19:7B:D8:24:A5:1B:88:34:BD:6A:7D X509v3 Authority Key Identifier: keyid:17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e1:dc:d6:ba:2e:d3:ca:d4:17:14:9d:87:9d:81:18:6d:08: 2f:c1:e4:8c:db:dd:bf:fd:8f:03:32:ba:3e:30:39:2e:97:53: 9b:3b:3d:9c:bb:6a:76:65:7c:e6:5c:e8:7a:5c:50:3e:c8:3f: 5e:99:1c:24:b8:83:ab:fb:1b:79:f7:69:de:e2:02:83:0c:ad: ac:cb:bc:5c:19:0f:4e:30:e8:3f:6a:bb:1a:05:e4:da:51:9b: 70:79:86:24:76:1f:27:e9:d6:f3:67:3c:eb:1f:a3:2a:21:43: 78:30:e3:c8:e0:04:bc:92:fb:a2:2c:f9:6e:87:d8:8e:80:1a: 34:44:14:a7:f6:c7:0c:7b:3d:ab:12:e4:c2:98:41:79:86:cd: 2a:9a:e1:0a:4d:41:b2:5a:90:50:61:ac:ff:a0:ad:6e:ec:c5: 76:d4:77:bd:33:4b:ce:fd:1a:02:e1:02:98:92:b5:69:9d:6f: 31:4f:a0:a0:07:1d:7b:50:24:f4:62:cc:90:6c:6c:4c:ec:4b: 52:a8:a1:4e:91:38:21:fe:75:07:90:a0:95:7d:35:37:b5:16: 79:be:03:ed:00:f1:65:ed:d0:4b:e1:49:8c:3f:8d:10:a4:3d: aa:42:14:11:3a:f1:a7:cb:91:9a:65:c4:81:2a:57:26:93:ab: c7:52:c3:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWz4w6AtDSzKBqs2dJWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWMzMTQ0MTY5MWI4NTliMzQ3ZmQxNzIxN2E1ZTVkMWIw YmUzMDMwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhiNjAxOTY4ODkxN2EwNmVmOWYxOTdiZDgyNGE1MWI4ODM0YmQ2YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZJFDSABlM/vwSXxG4DeP5jABPT r6xkLmbwnMhedaayTcIjin0Tzz+zRIVGBWdpc1nVGoeVbQigaGF+zBDwsyaf2BLn jn+gTUYa2nvD+KbBesBLb6UJyQIEwbSB4B74JGU/ezXIaGwKARQGrpjHyyrKSVfi dP+yj/9TE3EMiWXAx5GhKJHahilW5wITSd8poNc+mlEHerVSnwLr+DwGpnya7I3h P70G0zZaYsc5selFHfskF/Z+Hq39J+llgQ00R52+U+IBjM3dw5tq6iqMXoPX2OhA vJDxtoHqR1cdcXtymgrCNaho2nxnMD2THx4DyqlgurzW9Wyj3XjR0UKx5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYBloiRegbvnxl72CSlG4g0vWp9MB8GA1UdIwQY MBaAFBfsMUQWkbhZs0f9FyF6Xl0bC+MDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mMTc1NjItMzAyMC00NmVmLTljZmYt YTc3MmU1ODM0ZmQyLzEvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mMTc1NjItMzAyMC00NmVmLTljZmYtYTc3MmU1ODM0ZmQy LzEvRi13eFJCYVJ1Rm16Ul8wWElYcGVYUnNMNHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+Hc1rou 08rUFxSdh52BGG0IL8HkjNvdv/2PAzK6PjA5LpdTmzs9nLtqdmV85lzoelxQPsg/ XpkcJLiDq/sbefdp3uICgwytrMu8XBkPTjDoP2q7GgXk2lGbcHmGJHYfJ+nW82c8 6x+jKiFDeDDjyOAEvJL7oiz5bofYjoAaNEQUp/bHDHs9qxLkwphBeYbNKprhCk1B slqQUGGs/6CtbuzFdtR3vTNLzv0aAuECmJK1aZ1vMU+goAcde1Ak9GLMkGxsTOxL UqihTpE4If51B5CglX01N7UWeb4D7QDxZe3QS+FJjD+NEKQ9qkIUETrxp8uRmmXE gSpXJpOrx1LDfA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:57 2025 by rpki-client