This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft File: F6zfazcM8QTIcsxNuutzcbL3xoo.mft (raw, json) Hash identifier: rv273JDoEHkotArnwALIJxbHTwM/RUXhGBw5C9WbDzY= Subject key identifier: F2:13:60:0E:A8:8A:2A:11:A2:84:04:63:90:59:CF:68:42:2D:B2:FD Authority key identifier: 17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A Certificate issuer: /CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a Certificate serial: 019AF4658644C111F0C1C4A3485E6AD6F06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft Manifest number: 01E0 Signing time: Sat 06 Dec 2025 16:01:25 +0000 Manifest this update: Sat 06 Dec 2025 16:01:25 +0000 Manifest next update: Sun 07 Dec 2025 16:01:25 +0000 Files and hashes: 1: F6zfazcM8QTIcsxNuutzcbL3xoo.crl (hash: MV5ytvhnXwLDw4ipWjz2cl/ZwYXJhb/4AX7eniUeYQg=) 2: KFM6Xxb4yGnXw8_bU_5u9NFp1Jw.roa (hash: FzqITUktotdSEgzJPKi/MbN0jwrtNR+ishuw7Jc2ADw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:86:44:c1:11:f0:c1:c4:a3:48:5e:6a:d6:f0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17acdf6b370cf104c872cc4dbaeb7371b2f7c68a Validity Not Before: Dec 6 16:01:25 2025 GMT Not After : Dec 7 16:01:25 2025 GMT Subject: CN=f213600ea88a2a11a28404639059cf68422db2fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:44:56:fb:13:28:08:4f:ab:0f:91:2d:c4:16: 41:36:17:a9:d9:d2:e8:0c:c2:ef:7f:b5:18:13:16: 11:3c:90:0b:3a:40:67:3c:93:9f:33:1a:8c:ad:96: 14:37:6d:9a:10:17:77:82:37:67:49:e1:47:d8:cd: df:3d:bb:fb:dd:c9:98:db:6b:d4:f4:1a:f4:e0:02: 10:4f:d6:5e:ea:a5:35:d5:fb:fc:b2:c7:3a:76:05: a6:fc:89:d4:bb:3b:0c:0d:ae:bd:69:bf:e6:06:6e: 17:af:ba:c3:59:96:14:d3:c1:36:3f:d5:a1:97:42: 0b:0d:48:c9:2f:60:97:f4:95:5f:65:ac:f6:f1:7e: 7a:d3:c9:08:67:3d:4e:ea:8c:38:3a:fd:70:61:60: ad:5b:37:4c:26:2e:15:9d:8a:f2:69:df:41:3a:01: f2:64:02:13:21:b6:20:ba:74:6a:9b:6a:11:34:56: a9:f4:e8:1c:a7:3c:ac:15:01:9f:8b:82:ac:45:64: c7:f2:3f:66:3d:61:3b:40:d8:ae:b9:08:7c:9a:ae: 2e:2a:43:de:9b:66:67:67:58:72:c3:62:55:9e:2e: 13:5f:06:44:27:3f:12:23:18:83:c9:82:79:af:e9: 0c:3e:8e:8c:b0:c4:d1:86:11:e4:d1:87:b3:00:0f: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:13:60:0E:A8:8A:2A:11:A2:84:04:63:90:59:CF:68:42:2D:B2:FD X509v3 Authority Key Identifier: keyid:17:AC:DF:6B:37:0C:F1:04:C8:72:CC:4D:BA:EB:73:71:B2:F7:C6:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6zfazcM8QTIcsxNuutzcbL3xoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0f25ca-734a-432a-8d46-dfc85ae379d4/1/F6zfazcM8QTIcsxNuutzcbL3xoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:44:bc:97:1a:de:28:47:82:58:a1:e2:f3:18:b3:66:b4:c7: 31:d1:1e:6f:20:d7:40:ca:b5:68:41:ab:ad:39:05:21:13:d2: e8:69:eb:87:c1:b1:f0:1c:de:98:12:9a:47:f1:af:dc:a7:a0: f0:68:81:87:59:64:db:cb:20:a5:fd:d6:70:25:cb:5b:16:93: 1d:00:16:22:0f:f6:38:fd:c1:ea:d5:84:ae:21:fc:16:cc:73: 57:13:f0:ad:8d:f0:bd:9a:ee:f2:11:49:c6:0d:5e:8c:6f:e2: 70:1a:db:ff:a0:56:5d:0c:fa:72:7f:43:c8:75:61:2d:6f:98: f5:2b:5a:36:b3:89:5d:32:1e:83:56:bd:d8:0d:b3:0a:97:fd: 22:00:09:ac:97:95:6b:8d:a2:97:e5:84:86:14:38:a1:07:d5: 8a:c6:46:33:f8:a8:63:cb:be:ed:b3:dd:2b:2c:d6:02:09:02: 15:d5:c1:95:42:26:4b:72:a3:81:23:73:6f:8f:65:b1:6f:a3: a6:6b:48:de:6c:bd:dc:b9:5a:79:bb:0e:00:5f:cf:07:e3:18: b0:52:8b:ae:25:fe:5c:d6:17:bb:70:03:a6:54:ee:14:39:1c: 71:72:7a:83:e6:96:a2:0c:ba:cf:9e:75:cf:93:2e:ce:cd:77: 0b:75:9f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZYZEwRHwwcSjSF5q1vBuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YWNkZjZiMzcwY2YxMDRjODcyY2M0ZGJhZWI3MzcxYjJm N2M2OGEwHhcNMjUxMjA2MTYwMTI1WhcNMjUxMjA3MTYwMTI1WjAzMTEwLwYDVQQD EyhmMjEzNjAwZWE4OGEyYTExYTI4NDA0NjM5MDU5Y2Y2ODQyMmRiMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA90RW+xMoCE+rD5EtxBZBNhep2dLo DMLvf7UYExYRPJALOkBnPJOfMxqMrZYUN22aEBd3gjdnSeFH2M3fPbv73cmY22vU 9Br04AIQT9Ze6qU11fv8ssc6dgWm/InUuzsMDa69ab/mBm4Xr7rDWZYU08E2P9Wh l0ILDUjJL2CX9JVfZaz28X5608kIZz1O6ow4Ov1wYWCtWzdMJi4VnYryad9BOgHy ZAITIbYgunRqm2oRNFap9OgcpzysFQGfi4KsRWTH8j9mPWE7QNiuuQh8mq4uKkPe m2ZnZ1hyw2JVni4TXwZEJz8SIxiDyYJ5r+kMPo6MsMTRhhHk0YezAA8RgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPITYA6oiioRooQEY5BZz2hCLbL9MB8GA1UdIwQY MBaAFBes32s3DPEEyHLMTbrrc3Gy98aKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYt ZGZjODVhZTM3OWQ0LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8wZjI1Y2EtNzM0YS00MzJhLThkNDYtZGZjODVhZTM3OWQ0 LzEvRjZ6ZmF6Y004UVRJY3N4TnV1dHpjYkwzeG9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkS8lxre KEeCWKHi8xizZrTHMdEebyDXQMq1aEGrrTkFIRPS6Gnrh8Gx8BzemBKaR/Gv3Keg 8GiBh1lk28sgpf3WcCXLWxaTHQAWIg/2OP3B6tWEriH8FsxzVxPwrY3wvZru8hFJ xg1ejG/icBrb/6BWXQz6cn9DyHVhLW+Y9StaNrOJXTIeg1a92A2zCpf9IgAJrJeV a42il+WEhhQ4oQfVisZGM/ioY8u+7bPdKyzWAgkCFdXBlUImS3KjgSNzb49lsW+j pmtI3my93LlaebsOAF/PB+MYsFKLriX+XNYXu3ADplTuFDkccXJ6g+aWogy6z551 z5Muzs13C3WfUg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:10 2025 by rpki-client