This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft File: F34R9SM-kzmZoqDGiQP8J1rkWeY.mft (raw, json) Hash identifier: aZE3hoFRAXA4RFHp0osympuRXP+7Ljyay5CLx/W4GYM= Subject key identifier: 68:EA:A7:36:5B:C3:FE:F8:8C:B5:E1:D6:1F:1C:EC:44:54:83:0D:62 Authority key identifier: 17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 Certificate issuer: /CN=177e11f5233e933999a2a0c68903fc275ae459e6 Certificate serial: 019AF465A18FECC6628785466D4084AC60F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft Manifest number: 0D94 Signing time: Sat 06 Dec 2025 16:01:32 +0000 Manifest this update: Sat 06 Dec 2025 16:01:32 +0000 Manifest next update: Sun 07 Dec 2025 16:01:32 +0000 Files and hashes: 1: 5sCkK7bklit8UCUa80RZqIi-t9k.roa (hash: x447DPcTaj4M634Ku+wuq5YFVtP2ChxFRDLcvpSmPLg=) 2: B2JmCPoyhnai-DrPu98QS4-q4eY.roa (hash: woSQjHInZQrl0IFraZgxQZSnFc0QedADaWjQdsYiLbY=) 3: F34R9SM-kzmZoqDGiQP8J1rkWeY.crl (hash: jvy7jJkO1hLemasiqgzWnSfNgvhX4e3gaEJUSYKF0pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a1:8f:ec:c6:62:87:85:46:6d:40:84:ac:60:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177e11f5233e933999a2a0c68903fc275ae459e6 Validity Not Before: Dec 6 16:01:32 2025 GMT Not After : Dec 7 16:01:32 2025 GMT Subject: CN=68eaa7365bc3fef88cb5e1d61f1cec4454830d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:02:ad:de:bd:16:c0:44:d5:13:24:22:df:2e: 6f:26:f7:27:0b:22:20:bc:54:ba:85:1e:0a:ea:61: 70:e3:9b:4d:2c:0f:38:17:de:74:a8:ad:9d:e1:41: 12:67:ec:e0:94:8f:a3:51:f6:0e:38:f9:01:16:31: eb:2d:17:93:20:8d:61:23:3a:49:7b:3e:56:42:1d: 50:0f:87:8b:e8:e2:44:64:43:f7:e6:81:a2:12:ec: 77:39:c6:f6:48:14:04:0d:c3:47:9c:f4:86:a0:00: c8:d7:cc:ea:c9:c8:c4:e1:3b:70:32:ff:4d:a5:f8: 01:5d:f3:42:be:64:47:95:a7:54:62:04:44:cb:3a: 2c:93:0e:3e:2c:03:56:34:69:00:e9:93:e9:62:30: 3c:61:bb:41:e2:7e:d3:b2:da:38:86:3e:52:dc:2b: 6f:0c:47:16:a2:60:8d:85:ce:f0:f4:13:55:80:82: 99:b9:61:ea:e7:5d:8a:dc:3d:ac:a8:02:3d:d0:24: 54:c8:2e:0b:4f:66:44:65:69:af:61:1b:64:76:b2: d1:72:ef:f7:ca:69:86:90:6b:ed:57:b9:7c:9c:01: df:6d:18:0e:cb:36:8c:94:b2:70:85:7f:12:15:a3: 1d:e1:52:78:9f:32:c5:b7:32:f4:69:ce:69:af:dc: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:EA:A7:36:5B:C3:FE:F8:8C:B5:E1:D6:1F:1C:EC:44:54:83:0D:62 X509v3 Authority Key Identifier: keyid:17:7E:11:F5:23:3E:93:39:99:A2:A0:C6:89:03:FC:27:5A:E4:59:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F34R9SM-kzmZoqDGiQP8J1rkWeY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/119dcd-84e1-48d5-a280-aa09d6e1ffee/1/F34R9SM-kzmZoqDGiQP8J1rkWeY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:15:aa:0a:57:75:f9:2c:e9:ba:20:a5:14:f7:16:21:0d:05: 4a:cc:d5:ab:87:18:f4:7d:e4:ec:79:18:b9:72:16:09:5f:d9: 56:82:cf:9d:d6:7d:35:a6:ca:0f:da:27:7e:0a:f8:90:a8:11: fb:e5:e9:12:20:7b:f4:40:b6:c8:e6:cd:ff:a0:f9:3b:e2:be: d4:55:20:c3:0d:40:6c:c0:48:4a:5c:bb:db:fe:72:8b:4d:d1: 07:37:ed:20:be:b2:19:a8:a9:6e:54:9b:1a:5e:72:ab:d5:10: b9:47:2a:b1:ee:75:12:df:69:b4:08:eb:82:45:8c:72:25:7c: 9e:e4:de:00:a7:10:cb:14:d7:7b:43:12:07:91:76:d0:3c:4e: 4b:18:f3:b9:8d:9b:09:10:54:3f:1e:8b:6a:c3:f7:d6:59:be: c7:12:f1:6e:f4:43:5c:ff:2e:97:ce:55:04:74:2e:94:a9:fd: 2a:40:c7:47:f3:de:7a:68:54:33:62:03:c6:9d:84:64:69:41: 65:63:fc:88:0a:8b:a8:58:45:fe:84:e0:b3:14:c8:23:ec:58: 23:b6:6b:ef:d1:84:21:63:a5:3d:0d:54:ce:24:5b:70:dc:07: c6:83:43:7b:55:b1:0b:a6:3a:cb:37:03:16:05:74:99:17:17: 9e:94:b8:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaGP7MZih4VGbUCErGD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3N2UxMWY1MjMzZTkzMzk5OWEyYTBjNjg5MDNmYzI3NWFl NDU5ZTYwHhcNMjUxMjA2MTYwMTMyWhcNMjUxMjA3MTYwMTMyWjAzMTEwLwYDVQQD Eyg2OGVhYTczNjViYzNmZWY4OGNiNWUxZDYxZjFjZWM0NDU0ODMwZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwKt3r0WwETVEyQi3y5vJvcnCyIg vFS6hR4K6mFw45tNLA84F950qK2d4UESZ+zglI+jUfYOOPkBFjHrLReTII1hIzpJ ez5WQh1QD4eL6OJEZEP35oGiEux3Ocb2SBQEDcNHnPSGoADI18zqycjE4TtwMv9N pfgBXfNCvmRHladUYgREyzoskw4+LANWNGkA6ZPpYjA8YbtB4n7Tsto4hj5S3Ctv DEcWomCNhc7w9BNVgIKZuWHq512K3D2sqAI90CRUyC4LT2ZEZWmvYRtkdrLRcu/3 ymmGkGvtV7l8nAHfbRgOyzaMlLJwhX8SFaMd4VJ4nzLFtzL0ac5pr9z3+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjqpzZbw/74jLXh1h8c7ERUgw1iMB8GA1UdIwQY MBaAFBd+EfUjPpM5maKgxokD/Cda5FnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAt YWEwOWQ2ZTFmZmVlLzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8xMTlkY2QtODRlMS00OGQ1LWEyODAtYWEwOWQ2ZTFmZmVl LzEvRjM0UjlTTS1rem1ab3FER2lRUDhKMXJrV2VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5xWqCld1 +SzpuiClFPcWIQ0FSszVq4cY9H3k7HkYuXIWCV/ZVoLPndZ9NabKD9onfgr4kKgR ++XpEiB79EC2yObN/6D5O+K+1FUgww1AbMBISly72/5yi03RBzftIL6yGaipblSb Gl5yq9UQuUcqse51Et9ptAjrgkWMciV8nuTeAKcQyxTXe0MSB5F20DxOSxjzuY2b CRBUPx6LasP31lm+xxLxbvRDXP8ul85VBHQulKn9KkDHR/PeemhUM2IDxp2EZGlB ZWP8iAqLqFhF/oTgsxTII+xYI7Zr79GEIWOlPQ1UziRbcNwHxoNDe1WxC6Y6yzcD FgV0mRcXnpS4Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:07 2025 by rpki-client