This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft File: F9elKrbseLxKdZt8RmMqo-Jgsug.mft (raw, json) Hash identifier: MsRVnf3OK59t6y0nJltlf8/7s9tnUC+Vqjng3hvQ0mM= Subject key identifier: 0B:38:FC:EA:40:71:AE:D6:D6:5D:A0:48:DC:F9:F8:F8:CA:30:43:88 Authority key identifier: 17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8 Certificate issuer: /CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8 Certificate serial: 019AF3C04C57CE825322B8828EB645E722FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft Manifest number: 0127 Signing time: Sat 06 Dec 2025 13:00:57 +0000 Manifest this update: Sat 06 Dec 2025 13:00:57 +0000 Manifest next update: Sun 07 Dec 2025 13:00:57 +0000 Files and hashes: 1: F9elKrbseLxKdZt8RmMqo-Jgsug.crl (hash: XyAoe3ov+N5P/nXInTgRhCZYFdeZPLR6lHg6Pu4c9sk=) 2: sbMYQYJxwfNPp6440gILA9mzbx0.roa (hash: RnVE2MTd07RWpWjHS41qs+TCVp95W8O0zBW8ou5pEzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:4c:57:ce:82:53:22:b8:82:8e:b6:45:e7:22:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d7a52ab6ec78bc4a759b7c46632aa3e260b2e8 Validity Not Before: Dec 6 13:00:57 2025 GMT Not After : Dec 7 13:00:57 2025 GMT Subject: CN=0b38fcea4071aed6d65da048dcf9f8f8ca304388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:85:90:b5:fd:34:7e:8a:5b:4e:c1:48:54:89: 14:55:50:4e:a8:86:89:68:93:7d:78:62:e0:64:da: 04:9e:2b:3b:1e:88:4b:2c:0d:ff:ab:51:d2:0f:5a: 70:2a:b2:ab:4c:4b:1e:c7:41:e1:33:37:f1:af:10: 59:2a:56:b2:b0:d0:ad:42:e7:79:be:fe:09:89:cf: fa:87:9c:46:a9:b6:fd:6f:77:a0:b3:06:d5:e6:6f: 65:7a:bf:77:49:56:2f:88:60:25:f1:c2:d6:e5:5c: f6:fb:b0:33:0a:56:2b:9e:16:5b:44:12:59:0a:78: fd:78:6c:d2:42:42:7a:14:c5:bf:07:ef:35:63:2e: a6:bd:64:fc:87:40:c8:a4:89:e1:7d:33:86:5e:8a: 08:ea:9d:55:3d:f8:ec:fd:5b:00:3a:b4:fb:d6:a8: 0d:f9:f9:dd:9d:61:1a:7e:14:d9:a1:b6:52:66:c0: d2:9d:09:10:60:34:6b:22:75:e7:41:e0:ef:51:9f: 84:26:16:fc:6c:d3:59:9f:fb:d6:30:80:04:10:23: ba:03:bb:e7:96:95:41:1a:88:26:46:52:a9:44:8f: 82:b7:64:83:63:2e:78:be:79:8f:8f:76:9b:04:b5: 11:c1:d6:80:b2:fa:6f:bb:be:e5:00:fa:20:c0:16: e4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:38:FC:EA:40:71:AE:D6:D6:5D:A0:48:DC:F9:F8:F8:CA:30:43:88 X509v3 Authority Key Identifier: keyid:17:D7:A5:2A:B6:EC:78:BC:4A:75:9B:7C:46:63:2A:A3:E2:60:B2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9elKrbseLxKdZt8RmMqo-Jgsug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/a5832b-789a-40bf-a712-628d950137f2/1/F9elKrbseLxKdZt8RmMqo-Jgsug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:5d:e9:4e:73:ec:70:b0:c3:86:28:c6:38:5e:04:74:15:12: a1:10:71:8f:cc:ec:05:00:7b:55:c1:f2:9c:68:9e:f8:a0:61: e2:7d:1a:32:07:7f:97:51:47:f3:9e:9b:1e:f3:f1:aa:7c:2c: 5b:ee:c0:a7:83:29:50:3a:dd:e2:ef:e4:51:95:9f:1f:a8:dd: 43:13:01:82:af:23:7a:cc:28:1a:4a:d3:b4:d6:68:32:07:cd: 6e:d7:24:6c:b0:e9:99:85:2e:ed:eb:36:23:64:0d:2f:42:fb: 1b:49:8c:6f:15:67:f8:cd:17:2e:e0:f7:2f:30:11:21:c8:b4: da:21:a0:4b:2f:9c:d5:f4:28:b9:3f:d2:59:b5:e3:b5:eb:4c: 17:95:9d:e6:82:c3:c1:b4:22:17:19:f9:4a:60:e5:ef:0b:37: 7c:06:be:63:56:71:15:14:18:b0:05:81:82:47:a7:41:39:39: 53:8c:50:1f:6d:ed:31:1f:df:c2:cc:e1:fc:ba:60:22:3f:20: 88:a6:ae:0d:45:5a:c5:db:0c:87:33:ea:76:0a:07:1d:d1:3b: 66:44:97:7e:d5:87:ee:93:20:78:b4:1b:8a:c6:64:ee:2e:25: 14:36:65:b2:d0:ac:4b:18:6d:73:60:6e:a7:7d:44:e6:6d:ee: 60:14:9d:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwExXzoJTIriCjrZF5yL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDdhNTJhYjZlYzc4YmM0YTc1OWI3YzQ2NjMyYWEzZTI2 MGIyZTgwHhcNMjUxMjA2MTMwMDU3WhcNMjUxMjA3MTMwMDU3WjAzMTEwLwYDVQQD EygwYjM4ZmNlYTQwNzFhZWQ2ZDY1ZGEwNDhkY2Y5ZjhmOGNhMzA0Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44WQtf00fopbTsFIVIkUVVBOqIaJ aJN9eGLgZNoEnis7HohLLA3/q1HSD1pwKrKrTEsex0HhMzfxrxBZKlaysNCtQud5 vv4Jic/6h5xGqbb9b3egswbV5m9ler93SVYviGAl8cLW5Vz2+7AzClYrnhZbRBJZ Cnj9eGzSQkJ6FMW/B+81Yy6mvWT8h0DIpInhfTOGXooI6p1VPfjs/VsAOrT71qgN +fndnWEafhTZobZSZsDSnQkQYDRrInXnQeDvUZ+EJhb8bNNZn/vWMIAEECO6A7vn lpVBGogmRlKpRI+Ct2SDYy54vnmPj3abBLURwdaAsvpvu77lAPogwBbkrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs4/OpAca7W1l2gSNz5+PjKMEOIMB8GA1UdIwQY MBaAFBfXpSq27Hi8SnWbfEZjKqPiYLLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjllbEtyYnNlTHhLZFp0OFJtTXFvLUpnc3VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni9hNTgzMmItNzg5YS00MGJmLWE3MTIt NjI4ZDk1MDEzN2YyLzEvRjllbEtyYnNlTHhLZFp0OFJtTXFvLUpnc3VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni9hNTgzMmItNzg5YS00MGJmLWE3MTItNjI4ZDk1MDEzN2Yy LzEvRjllbEtyYnNlTHhLZFp0OFJtTXFvLUpnc3VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADV3pTnPs cLDDhijGOF4EdBUSoRBxj8zsBQB7VcHynGie+KBh4n0aMgd/l1FH856bHvPxqnws W+7Ap4MpUDrd4u/kUZWfH6jdQxMBgq8jeswoGkrTtNZoMgfNbtckbLDpmYUu7es2 I2QNL0L7G0mMbxVn+M0XLuD3LzARIci02iGgSy+c1fQouT/SWbXjtetMF5Wd5oLD wbQiFxn5SmDl7ws3fAa+Y1ZxFRQYsAWBgkenQTk5U4xQH23tMR/fwszh/LpgIj8g iKauDUVaxdsMhzPqdgoHHdE7ZkSXftWH7pMgeLQbisZk7i4lFDZlstCsSxhtc2Bu p31E5m3uYBSd6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:02:35 2025 by rpki-client