This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft File: F6ECNM-1UiqimzJgp1-Kn3mTPns.mft (raw, json) Hash identifier: sxi2/wOv0Qry56UFMOaX5MXCwNfefbYR2tn2J02E3/I= Subject key identifier: 1E:A3:0E:DD:E3:84:C9:2B:0D:ED:54:36:4E:EA:DA:41:6D:FE:9A:10 Authority key identifier: 17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B Certificate issuer: /CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Certificate serial: 019AF087FDF58CEE7EDC0D3B7404289DC20E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft Manifest number: 0696 Signing time: Fri 05 Dec 2025 22:00:35 +0000 Manifest this update: Fri 05 Dec 2025 22:00:35 +0000 Manifest next update: Sat 06 Dec 2025 22:00:35 +0000 Files and hashes: 1: CwQ0CgjdF-eK2zokEY5D8Y0SzTs.roa (hash: yxsFQV6dBnKck8poM3ye5c/2LN+fCyAwRwDUyRgSq/U=) 2: F6ECNM-1UiqimzJgp1-Kn3mTPns.crl (hash: kkMtpzTJmcgy8diNCVYrIUeEJSAziaCkzPLkhocvczk=) 3: X1HXVRGjUS2FqgMh5Es7IolTp3M.roa (hash: ZdR2JfGdY7ork0aTakNr5aewEZPJySl7nT5P2fOaw24=) 4: xT_cHkX9miZbsMvc7yYpjkfX3zc.roa (hash: MAGu+VbFwRGwGQOut2CLfQFpcWvB1OYzYgzup1WQgKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:fd:f5:8c:ee:7e:dc:0d:3b:74:04:28:9d:c2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17a10234cfb5522aa29b3260a75f8a9f79933e7b Validity Not Before: Dec 5 22:00:35 2025 GMT Not After : Dec 6 22:00:35 2025 GMT Subject: CN=1ea30edde384c92b0ded54364eeada416dfe9a10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:e5:2d:75:75:d6:62:e9:8b:6b:d2:7d:5a: 56:72:46:b7:b8:c2:ed:af:9e:15:06:3b:75:a9:10: 4c:e2:27:92:e5:e2:18:24:8d:02:84:ae:d3:74:5d: 4e:42:8e:c8:49:32:fe:f0:eb:6d:f9:1f:b1:40:c3: 85:a5:6d:96:8e:99:15:a6:92:94:c2:46:e9:0c:7e: e5:eb:fb:13:6d:35:5a:bb:3f:a0:43:78:b5:b3:15: 10:60:3a:f3:ae:ef:58:01:01:fa:22:fa:92:d3:7d: 1c:b7:17:67:ec:5a:54:e7:76:2a:95:27:ab:79:e4: be:25:31:7d:d5:74:de:39:f9:d2:28:a2:e8:b0:59: c3:3a:ba:33:92:5d:07:49:0d:0c:f2:c6:a1:19:71: 6c:5e:2f:10:97:65:b7:01:1f:a7:0f:54:d4:35:99: 5b:f2:31:42:ee:2b:fa:81:43:39:37:06:97:37:88: 5e:07:12:99:15:cc:ae:69:1f:d7:a8:85:f4:48:ac: c9:c1:ad:c8:2f:0c:bc:96:e4:97:0d:de:7f:88:cb: c6:2b:2d:e0:59:66:14:dc:fa:f4:da:33:5b:cb:9c: d7:43:56:04:0a:67:9c:c4:21:17:4a:16:1e:99:5a: 00:00:64:34:5d:21:a2:a1:8a:0d:d1:42:73:93:9f: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A3:0E:DD:E3:84:C9:2B:0D:ED:54:36:4E:EA:DA:41:6D:FE:9A:10 X509v3 Authority Key Identifier: keyid:17:A1:02:34:CF:B5:52:2A:A2:9B:32:60:A7:5F:8A:9F:79:93:3E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6ECNM-1UiqimzJgp1-Kn3mTPns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9f108a-7785-4d3f-9f0c-2ad2bb532613/1/F6ECNM-1UiqimzJgp1-Kn3mTPns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8b:38:bb:a8:35:5e:88:4a:c7:2f:85:20:3c:e1:f4:94:cf: 5d:73:92:20:3e:87:19:c5:4f:fe:c8:e4:c0:9f:57:a1:50:6e: f9:77:f9:70:20:c1:ec:28:b1:aa:0b:f7:82:d1:eb:69:8a:41: c7:2a:6f:f2:cf:bf:bf:55:ec:c6:c6:1d:08:44:90:48:43:88: 30:37:be:76:11:c0:76:7f:ec:09:ce:0e:fe:ee:e7:ae:38:34: 8f:ac:95:cc:74:e8:be:49:43:0d:ad:f4:22:c4:a0:8e:6c:c1: a5:db:75:8e:f4:5e:e8:3a:af:2f:f5:75:01:a1:20:df:6f:9c: c3:75:11:73:bc:85:e8:52:8b:3a:25:50:99:9c:85:53:81:d4: 56:6f:a1:0a:0a:ce:a8:2d:c9:e5:a0:7d:b2:e7:b5:5a:da:07: 32:3b:ca:8f:f6:a2:da:7a:8e:fb:c6:e6:3d:74:2e:8a:11:de: 5d:da:50:e9:5c:7a:e0:56:e0:1a:47:b0:f1:85:f6:2b:cd:3d: 73:47:f6:36:f8:f1:20:56:c5:ee:af:23:78:4a:0d:c1:f3:90: 74:64:8d:5f:66:79:8a:0b:d6:bd:6c:4e:93:4a:57:da:2e:69: ab:ac:29:43:ed:cc:32:f3:7b:b1:79:ca:d7:44:82:7f:c5:fd: 4b:48:8f:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh/31jO5+3A07dAQoncIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YTEwMjM0Y2ZiNTUyMmFhMjliMzI2MGE3NWY4YTlmNzk5 MzNlN2IwHhcNMjUxMjA1MjIwMDM1WhcNMjUxMjA2MjIwMDM1WjAzMTEwLwYDVQQD EygxZWEzMGVkZGUzODRjOTJiMGRlZDU0MzY0ZWVhZGE0MTZkZmU5YTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGHlLXV11mLpi2vSfVpWcka3uMLt r54VBjt1qRBM4ieS5eIYJI0ChK7TdF1OQo7ISTL+8Ott+R+xQMOFpW2WjpkVppKU wkbpDH7l6/sTbTVauz+gQ3i1sxUQYDrzru9YAQH6IvqS030ctxdn7FpU53YqlSer eeS+JTF91XTeOfnSKKLosFnDOrozkl0HSQ0M8sahGXFsXi8Ql2W3AR+nD1TUNZlb 8jFC7iv6gUM5NwaXN4heBxKZFcyuaR/XqIX0SKzJwa3ILwy8luSXDd5/iMvGKy3g WWYU3Pr02jNby5zXQ1YECmecxCEXShYemVoAAGQ0XSGioYoN0UJzk5+9bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6jDt3jhMkrDe1UNk7q2kFt/poQMB8GA1UdIwQY MBaAFBehAjTPtVIqopsyYKdfip95kz57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMt MmFkMmJiNTMyNjEzLzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi85ZjEwOGEtNzc4NS00ZDNmLTlmMGMtMmFkMmJiNTMyNjEz LzEvRjZFQ05NLTFVaXFpbXpKZ3AxLUtuM21UUG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4s4u6g1 XohKxy+FIDzh9JTPXXOSID6HGcVP/sjkwJ9XoVBu+Xf5cCDB7Cixqgv3gtHraYpB xypv8s+/v1XsxsYdCESQSEOIMDe+dhHAdn/sCc4O/u7nrjg0j6yVzHTovklDDa30 IsSgjmzBpdt1jvRe6DqvL/V1AaEg32+cw3URc7yF6FKLOiVQmZyFU4HUVm+hCgrO qC3J5aB9sue1WtoHMjvKj/ai2nqO+8bmPXQuihHeXdpQ6Vx64FbgGkew8YX2K809 c0f2NvjxIFbF7q8jeEoNwfOQdGSNX2Z5igvWvWxOk0pX2i5pq6wpQ+3MMvN7sXnK 10SCf8X9S0iPBw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:59:24 2025 by rpki-client