This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft File: F1yfOANJZKGpKvgMdo-D0IVAeT4.mft (raw, json) Hash identifier: zBbrubmyN2jImYgX+VMBqaiXOcOD5txO9mrJaMlN9HQ= Subject key identifier: AA:A7:47:5A:2C:82:5D:3E:99:83:9B:AE:8E:4A:CE:5F:41:17:A8:D3 Authority key identifier: 17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E Certificate issuer: /CN=175c9f38034964a1a92af80c768f83d08540793e Certificate serial: 019AF19ABE2FD0B1B15D23F3729EE77EFFD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: F1yfOANJZKGpKvgMdo-D0IVAeT4.crl (hash: UTX8mL7i68rsNJeaplxkBH1G99850Xz50zYnt1dZhTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:be:2f:d0:b1:b1:5d:23:f3:72:9e:e7:7e:ff:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175c9f38034964a1a92af80c768f83d08540793e Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=aaa7475a2c825d3e99839bae8e4ace5f4117a8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:9c:56:29:bb:c4:c5:67:ff:3c:84:f6:76: 6c:46:41:c1:11:31:c8:b4:08:cf:20:be:5c:f5:bc: 1a:ab:d4:12:3d:26:02:0e:24:c5:ce:4f:6b:68:d1: 9e:b4:89:f9:99:10:ea:d3:cf:08:74:fb:0f:c8:75: 3e:2a:79:54:4e:0a:49:94:8d:85:c1:22:64:8e:e4: 57:0e:23:76:17:0d:9d:85:3b:e9:1f:0b:06:bf:10: 1e:9c:21:a7:74:cc:1c:a8:98:f7:2b:e3:d8:eb:15: 03:73:0e:e2:70:28:3b:89:77:39:5d:b8:9c:c9:d1: 76:0a:0e:fc:26:25:bc:bb:39:68:af:02:59:77:2b: 4c:f6:09:2e:96:24:ef:46:d6:db:ad:d2:71:81:56: 41:ea:16:7d:72:bc:36:c3:4d:b3:4b:42:0e:14:19: e0:98:4d:c3:83:28:b8:e6:55:9e:86:12:00:04:28: 78:16:0b:73:ed:50:69:1e:5d:2b:f8:bd:7f:fb:cf: a6:23:43:fe:5a:ec:0b:31:70:73:8c:cb:17:6e:b2: 74:58:03:7a:34:07:c9:ee:48:70:a7:68:69:2a:61: de:1e:b9:37:20:44:74:a2:41:26:40:d0:cd:b0:40: a7:82:f4:ee:ff:36:ee:4a:de:fa:8a:c1:3d:96:fd: 1c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:A7:47:5A:2C:82:5D:3E:99:83:9B:AE:8E:4A:CE:5F:41:17:A8:D3 X509v3 Authority Key Identifier: keyid:17:5C:9F:38:03:49:64:A1:A9:2A:F8:0C:76:8F:83:D0:85:40:79:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1yfOANJZKGpKvgMdo-D0IVAeT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a88dca-290f-4656-afc5-339b4c36bfea/1/F1yfOANJZKGpKvgMdo-D0IVAeT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:23:eb:73:df:c0:de:43:c9:2f:c9:d2:ac:b0:ad:85:55:d7: 5a:68:c4:39:85:3d:01:7f:3f:ca:db:d1:fa:fd:53:80:86:8e: e2:4e:f8:de:86:6f:bd:86:6e:b6:73:41:e6:e9:f9:9c:45:8d: cd:1c:38:cc:99:fa:6e:ca:a2:e8:e2:ec:b3:3a:51:c0:37:0f: 91:0d:2e:81:cc:b7:e1:6c:0d:f4:5f:30:e5:1d:ca:66:b4:03: bc:9c:2b:96:15:f5:47:d0:53:be:93:eb:2d:ac:f9:27:39:e2: 00:db:68:d0:21:b8:a7:1d:aa:ed:15:07:58:7b:de:fb:12:01: c3:a1:92:27:e4:09:d2:79:3e:42:ac:ef:a0:4c:72:25:d1:3f: 93:1c:c3:21:6b:f4:74:59:b6:c7:d2:81:fb:39:a6:1a:07:65: 65:22:31:31:c3:f8:6c:4f:39:a2:d3:e4:d3:3a:30:ed:74:17: 3c:fc:7c:3d:80:b8:13:12:85:e3:c3:8b:a6:10:e3:36:46:33: c7:79:92:16:8c:8f:b0:4c:3e:68:3f:e4:c9:75:f3:33:90:ac: 6b:07:6f:03:ba:d8:0f:5f:fe:1b:2e:90:d4:a1:dc:0f:89:d6: 76:4d:bf:df:e0:b0:77:d1:06:32:25:82:4b:c4:99:3a:08:ce: e8:17:f9:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr4v0LGxXSPzcp7nfv/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWM5ZjM4MDM0OTY0YTFhOTJhZjgwYzc2OGY4M2QwODU0 MDc5M2UwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EyhhYWE3NDc1YTJjODI1ZDNlOTk4MzliYWU4ZTRhY2U1ZjQxMTdhOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovCcVim7xMVn/zyE9nZsRkHBETHI tAjPIL5c9bwaq9QSPSYCDiTFzk9raNGetIn5mRDq088IdPsPyHU+KnlUTgpJlI2F wSJkjuRXDiN2Fw2dhTvpHwsGvxAenCGndMwcqJj3K+PY6xUDcw7icCg7iXc5Xbic ydF2Cg78JiW8uzlorwJZdytM9gkuliTvRtbbrdJxgVZB6hZ9crw2w02zS0IOFBng mE3Dgyi45lWehhIABCh4Fgtz7VBpHl0r+L1/+8+mI0P+WuwLMXBzjMsXbrJ0WAN6 NAfJ7khwp2hpKmHeHrk3IER0okEmQNDNsECngvTu/zbuSt76isE9lv0cVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqnR1osgl0+mYObro5Kzl9BF6jTMB8GA1UdIwQY MBaAFBdcnzgDSWShqSr4DHaPg9CFQHk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hODhkY2EtMjkwZi00NjU2LWFmYzUt MzM5YjRjMzZiZmVhLzEvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hODhkY2EtMjkwZi00NjU2LWFmYzUtMzM5YjRjMzZiZmVh LzEvRjF5Zk9BTkpaS0dwS3ZnTWRvLUQwSVZBZVQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiPrc9/A 3kPJL8nSrLCthVXXWmjEOYU9AX8/ytvR+v1TgIaO4k743oZvvYZutnNB5un5nEWN zRw4zJn6bsqi6OLsszpRwDcPkQ0ugcy34WwN9F8w5R3KZrQDvJwrlhX1R9BTvpPr Laz5JzniANto0CG4px2q7RUHWHve+xIBw6GSJ+QJ0nk+QqzvoExyJdE/kxzDIWv0 dFm2x9KB+zmmGgdlZSIxMcP4bE85otPk0zow7XQXPPx8PYC4ExKF48OLphDjNkYz x3mSFoyPsEw+aD/kyXXzM5CsawdvA7rYD1/+Gy6Q1KHcD4nWdk2/3+Cwd9EGMiWC S8SZOgjO6Bf5iw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:29 2025 by rpki-client