This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json) Hash identifier: AQ2TIYAGokLOnmYgeeiz51KbbKnPSixqVeZkuXF7+Ck= Subject key identifier: E7:A5:83:1D:49:92:09:18:9E:CB:2B:8F:9B:A4:7C:10:80:F0:B8:24 Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986 Certificate serial: 019AF0BF77C952DB430AB48E47D0F8AA2241 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: 3fm570gUWR9usFCXEDnf2qByrHmIQXnJGkV3YqUyy5I=) 2: wCBr-k0AtLk5d98BUTSeDnbaCIw.roa (hash: 36nmnwOgMPCPBCUdTafpIUXfmFJpoky9F6FQl9mvwM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:77:c9:52:db:43:0a:b4:8e:47:d0:f8:aa:22:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986 Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=e7a5831d499209189ecb2b8f9ba47c1080f0b824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:63:19:8e:77:6b:2c:e1:eb:9b:08:81:ec:8b: 44:a1:50:07:91:3c:64:d4:93:1c:5a:1c:16:02:6d: 82:86:28:d4:ff:e4:77:3a:5a:03:e4:74:a7:07:54: b5:27:28:3f:97:71:1f:5e:86:98:a1:52:f8:e3:77: e6:f8:f0:1c:29:3a:71:7d:a8:24:94:da:6a:c2:43: 25:78:67:50:54:fb:05:5c:f5:06:88:63:a7:98:ea: 5e:c1:84:26:40:14:86:4a:46:3c:a7:0e:ad:68:ba: f6:a7:98:6c:e8:f3:0b:8b:f9:5a:84:18:e5:82:c8: d6:46:74:73:08:bb:65:84:68:f7:cc:49:56:85:ce: 63:b8:55:a2:ec:c6:f1:7d:e0:c6:7a:98:b1:5e:32: 55:5e:c6:83:2c:ea:57:fa:d1:03:ba:b9:f5:64:01: 04:21:1c:b3:a6:66:6e:1f:ed:ab:b4:59:b6:56:88: 26:ed:dc:34:de:47:42:7b:3e:ad:3e:a1:38:a5:f3: 45:fb:b5:52:10:44:2a:8d:73:34:20:97:91:1d:5c: 38:8c:80:93:d6:7f:53:00:63:5f:40:9d:22:cf:86: 6d:48:45:06:a9:39:f3:56:5e:e9:23:58:70:1b:28: 26:e8:be:11:bb:5f:ea:99:d7:fe:6a:ff:09:09:2a: c5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A5:83:1D:49:92:09:18:9E:CB:2B:8F:9B:A4:7C:10:80:F0:B8:24 X509v3 Authority Key Identifier: keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:cb:e9:91:5b:b1:01:0f:43:f5:f8:6e:7f:0b:98:68:77:2c: 1a:9e:0e:20:fb:28:f7:6e:29:5b:c7:90:e8:c2:fe:80:f1:ff: d2:37:bc:20:63:98:b9:11:ae:a1:9b:c0:29:bb:8c:08:f1:d8: e1:5c:12:73:2e:82:91:1f:17:34:03:3c:b8:6e:3f:39:e7:ec: 25:d0:b7:17:95:9e:4a:af:5d:37:fd:ac:e5:64:74:66:79:71: 3f:df:77:0c:45:0d:e4:27:f6:3a:b8:eb:6e:44:08:2a:7d:bd: bb:13:22:25:97:f0:77:96:63:dd:b9:a0:01:ac:0d:43:fa:24: 4d:a6:e5:b1:ce:63:dc:2b:3f:08:fb:cf:dd:f2:0b:a1:a7:4a: 6a:25:83:97:10:05:8f:9e:84:6f:1e:96:78:7f:93:12:60:1c: 89:db:8a:5c:47:8f:2b:b9:c4:75:ec:c2:6d:a9:c0:fa:95:29: 22:20:54:b0:8f:db:41:be:10:31:8e:4d:d4:f0:cc:f2:11:9a: 70:93:f1:9c:ff:30:6a:8a:81:17:76:6e:50:9c:01:6a:0a:98: 2a:0f:74:ef:70:05:4b:78:3a:c3:91:1d:e4:73:38:cb:c9:f0: 2f:58:72:8a:36:84:e5:6a:06:89:d8:fb:8f:27:67:81:09:1a: 39:f4:5a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3fJUttDCrSOR9D4qiJBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz NjY5ODYwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EyhlN2E1ODMxZDQ5OTIwOTE4OWVjYjJiOGY5YmE0N2MxMDgwZjBiODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2MZjndrLOHrmwiB7ItEoVAHkTxk 1JMcWhwWAm2ChijU/+R3OloD5HSnB1S1Jyg/l3EfXoaYoVL443fm+PAcKTpxfagk lNpqwkMleGdQVPsFXPUGiGOnmOpewYQmQBSGSkY8pw6taLr2p5hs6PMLi/lahBjl gsjWRnRzCLtlhGj3zElWhc5juFWi7MbxfeDGepixXjJVXsaDLOpX+tEDurn1ZAEE IRyzpmZuH+2rtFm2Vogm7dw03kdCez6tPqE4pfNF+7VSEEQqjXM0IJeRHVw4jICT 1n9TAGNfQJ0iz4ZtSEUGqTnzVl7pI1hwGygm6L4Ru1/qmdf+av8JCSrFnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOelgx1JkgkYnssrj5ukfBCA8LgkMB8GA1UdIwQY MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAesvpkVux AQ9D9fhufwuYaHcsGp4OIPso924pW8eQ6ML+gPH/0je8IGOYuRGuoZvAKbuMCPHY 4VwScy6CkR8XNAM8uG4/OefsJdC3F5WeSq9dN/2s5WR0ZnlxP993DEUN5Cf2Orjr bkQIKn29uxMiJZfwd5Zj3bmgAawNQ/okTablsc5j3Cs/CPvP3fILoadKaiWDlxAF j56Ebx6WeH+TEmAciduKXEePK7nEdezCbanA+pUpIiBUsI/bQb4QMY5N1PDM8hGa cJPxnP8waoqBF3ZuUJwBagqYKg9073AFS3g6w5Ed5HM4y8nwL1hyijaE5WoGidj7 jydngQkaOfRaSw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:23 2025 by rpki-client