This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft File: F1rTPU9qTQU5wncOK0-7qU_PHx0.mft (raw, json) Hash identifier: f5qaUuhNCsAIfbIapTMpPsrw1E3hmg/iEQEq4Ka6j2M= Subject key identifier: 5F:DB:85:27:4D:4D:87:2E:B3:7D:6E:DD:EF:7E:E8:F8:B8:95:0C:3D Authority key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D Certificate issuer: /CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d Certificate serial: 019AF46578C5D0532D7EE053186F342DBA25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft Manifest number: 0DFC Signing time: Sat 06 Dec 2025 16:01:21 +0000 Manifest this update: Sat 06 Dec 2025 16:01:21 +0000 Manifest next update: Sun 07 Dec 2025 16:01:21 +0000 Files and hashes: 1: F1rTPU9qTQU5wncOK0-7qU_PHx0.crl (hash: +sQThX+NPr33+7xjdriXUh6V7Y0A7ZO24Q99xmwMdAo=) 2: v2_TK4-REFwVL-mrNBvq6f4sDVk.roa (hash: yZE8bYF7utpoM00wO6cfNJ1eaodSy7TIyviaRMC6vn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:78:c5:d0:53:2d:7e:e0:53:18:6f:34:2d:ba:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d Validity Not Before: Dec 6 16:01:21 2025 GMT Not After : Dec 7 16:01:21 2025 GMT Subject: CN=5fdb85274d4d872eb37d6eddef7ee8f8b8950c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:8d:eb:e1:40:a6:74:99:df:a0:8b:5a:3f: 5b:ce:fb:a8:44:4b:58:5a:37:33:80:5b:2a:b6:7d: 97:46:1d:ad:e3:54:75:66:33:8a:66:85:38:24:07: 5d:6f:5e:96:98:81:41:18:9b:18:ae:aa:e2:31:88: 69:49:79:d4:46:51:34:c2:bc:bf:0f:cb:bc:f8:e9: 07:22:31:88:3f:b0:68:d6:4a:5c:7c:09:1d:77:02: 0e:b3:77:79:0c:27:97:da:ed:02:bc:65:fb:af:e2: 7a:14:4b:9f:22:a3:46:89:6a:b7:98:96:78:be:cc: 1d:ff:76:0e:b1:8f:10:d9:ea:42:f9:cb:06:6b:15: 99:9e:b7:de:b0:95:27:ff:71:84:1a:7f:d8:fa:e6: 78:7e:3d:9a:15:f7:f2:7b:9b:45:0e:24:7e:7d:8f: 3d:4e:85:fc:3c:80:ba:41:76:35:12:df:c7:f5:9e: 66:6a:3b:b1:f9:32:16:fa:08:d5:c7:18:be:fe:39: 50:8b:0f:a0:55:ce:88:60:6f:5f:87:dc:9c:38:a8: b4:a6:5b:56:e7:db:bd:ca:c5:94:a9:78:bf:a2:31: a8:7b:1b:5f:1b:05:04:d4:31:15:00:02:eb:d5:e3: ef:71:8c:69:74:c7:a0:7c:87:61:78:70:bc:42:d9: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DB:85:27:4D:4D:87:2E:B3:7D:6E:DD:EF:7E:E8:F8:B8:95:0C:3D X509v3 Authority Key Identifier: keyid:17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:69:23:57:ea:2b:13:e8:57:90:f8:de:29:01:94:06:a6:53: 22:af:eb:b5:ed:d3:ea:4a:6b:ba:d3:9b:bb:64:e9:13:72:29: ca:7c:a9:4f:1c:ad:73:2c:2e:01:e0:ff:4d:e6:23:88:cb:47: 42:15:7f:53:0d:3a:c8:f7:1c:82:da:4c:68:28:be:15:96:d2: 8a:b8:95:68:f9:89:03:15:c2:c8:47:1f:77:1a:ee:be:88:a0: 14:bf:34:50:ab:85:31:2d:62:b4:79:98:53:b6:00:97:9e:4a: 82:37:f7:25:45:5f:43:c4:2c:a2:1d:ad:f6:3f:11:4a:b4:7c: 91:eb:1e:41:63:41:28:2e:1c:e2:ab:07:bd:57:ad:2c:e5:03: 76:57:b6:c0:c5:b6:63:6d:4a:7a:a9:12:cb:77:28:e0:c2:3f: df:09:45:bf:3e:ec:18:da:65:3b:7b:89:c6:89:97:39:fe:7a: 57:b6:5a:e3:86:49:a0:72:9d:bf:70:eb:55:e0:70:b5:f1:3d: ff:f7:56:1c:b0:55:06:65:06:ba:6c:0b:b3:22:9c:fe:54:f7: 58:d6:05:65:37:05:b2:d2:5d:65:cf:f1:36:68:77:dd:7a:c0: af:47:18:ff:64:f8:60:7a:e9:19:72:31:c2:21:47:82:b5:de: 73:a8:21:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXjF0FMtfuBTGG80LbolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWFkMzNkNGY2YTRkMDUzOWMyNzcwZTJiNGZiYmE5NGZj ZjFmMWQwHhcNMjUxMjA2MTYwMTIxWhcNMjUxMjA3MTYwMTIxWjAzMTEwLwYDVQQD Eyg1ZmRiODUyNzRkNGQ4NzJlYjM3ZDZlZGRlZjdlZThmOGI4OTUwYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZ2N6+FApnSZ36CLWj9bzvuoREtY WjczgFsqtn2XRh2t41R1ZjOKZoU4JAddb16WmIFBGJsYrqriMYhpSXnURlE0wry/ D8u8+OkHIjGIP7Bo1kpcfAkddwIOs3d5DCeX2u0CvGX7r+J6FEufIqNGiWq3mJZ4 vswd/3YOsY8Q2epC+csGaxWZnrfesJUn/3GEGn/Y+uZ4fj2aFffye5tFDiR+fY89 ToX8PIC6QXY1Et/H9Z5majux+TIW+gjVxxi+/jlQiw+gVc6IYG9fh9ycOKi0pltW 59u9ysWUqXi/ojGoextfGwUE1DEVAALr1ePvcYxpdMegfIdheHC8Qtn0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/bhSdNTYcus31u3e9+6Pi4lQw9MB8GA1UdIwQY MBaAFBda0z1Pak0FOcJ3DitPu6lPzx8dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEt MDcyMDNjZDgxNmI4LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8wYWM3N2YtZGNlNi00ZWIyLTgwOGEtMDcyMDNjZDgxNmI4 LzEvRjFyVFBVOXFUUVU1d25jT0swLTdxVV9QSHgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiGkjV+or E+hXkPjeKQGUBqZTIq/rte3T6kprutObu2TpE3IpynypTxytcywuAeD/TeYjiMtH QhV/Uw06yPccgtpMaCi+FZbSiriVaPmJAxXCyEcfdxruvoigFL80UKuFMS1itHmY U7YAl55Kgjf3JUVfQ8Qsoh2t9j8RSrR8keseQWNBKC4c4qsHvVetLOUDdle2wMW2 Y21KeqkSy3co4MI/3wlFvz7sGNplO3uJxomXOf56V7Za44ZJoHKdv3DrVeBwtfE9 //dWHLBVBmUGumwLsyKc/lT3WNYFZTcFstJdZc/xNmh33XrAr0cY/2T4YHrpGXIx wiFHgrXec6ghuA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:04:34 2025 by rpki-client