This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft File: F0ATLlBfeLrQES-RtVmGh5U1ysA.mft (raw, json) Hash identifier: eob0qFWJBcrvLbBuWpWkx0BG6yaQoLTPXFe46l5/z2k= Subject key identifier: 2C:59:BB:BB:74:FF:19:33:48:DE:EA:A9:D3:9E:DB:C5:68:9E:89:75 Authority key identifier: 17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0 Certificate issuer: /CN=1740132e505f78bad0112f91b55986879535cac0 Certificate serial: 019AF164290040B368CD813A4FB7246B8FB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft Manifest number: 0C0F Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: F0ATLlBfeLrQES-RtVmGh5U1ysA.crl (hash: RAVnLFxdRUg+Fv4EVib+/MkEYVwZL6YqjLC1udGEe3c=) 2: oxrkuug8AeqnDXiePFRxFStRfUU.roa (hash: 162L3/TFgaGzm3cQaHpx46n6luZunWT9NHyefRNQMS0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:29:00:40:b3:68:cd:81:3a:4f:b7:24:6b:8f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1740132e505f78bad0112f91b55986879535cac0 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=2c59bbbb74ff193348deeaa9d39edbc5689e8975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:16:44:f2:6a:b5:a3:29:ed:13:75:7b:e1:01: 65:d7:cc:0c:32:4e:4c:4b:7f:04:77:54:ea:0e:a4: 20:d2:00:84:5e:1f:d3:bf:a9:c6:22:f4:01:7a:bb: 4b:89:d1:ac:05:0c:61:91:05:ce:bd:7d:f7:a2:ca: 1d:08:fb:6c:5b:7f:81:42:8a:a8:69:4d:dc:c1:54: 92:ef:b3:4d:a7:5f:5d:0a:3e:f5:b5:af:c3:69:f0: 5b:56:d8:4a:4a:de:1c:58:f0:17:11:b5:20:5f:d7: 7c:6d:7e:15:a1:23:53:fa:10:6a:69:5b:42:8e:00: 78:df:54:22:2a:e3:c3:ee:cb:2b:c4:b2:80:74:7a: a6:2d:df:7a:fc:25:8e:7b:b8:2e:57:e1:fd:46:90: 22:15:be:0e:d1:5d:d8:79:07:e8:e8:00:f0:40:81: 52:46:d5:71:f4:95:52:10:e2:ab:26:41:fe:9e:79: 99:59:58:3e:5f:3c:ad:a4:68:e5:a7:df:fb:ac:da: fa:54:23:06:72:2e:04:75:0e:e9:dd:5f:81:ac:fb: 7e:22:b3:89:a8:c4:fa:00:73:a9:35:43:8a:0a:58: c9:df:70:b9:d1:e2:5f:b5:0c:2e:64:15:ce:8e:71: 83:ea:08:df:f4:3d:45:f8:fc:5d:0f:b0:c3:92:c2: a5:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:59:BB:BB:74:FF:19:33:48:DE:EA:A9:D3:9E:DB:C5:68:9E:89:75 X509v3 Authority Key Identifier: keyid:17:40:13:2E:50:5F:78:BA:D0:11:2F:91:B5:59:86:87:95:35:CA:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0ATLlBfeLrQES-RtVmGh5U1ysA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/fbbdfa-dcfa-4ded-97a1-4e3807a38158/1/F0ATLlBfeLrQES-RtVmGh5U1ysA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:25:98:38:76:49:f3:bd:11:20:fe:09:92:7f:5d:05:86:53: 04:49:5a:81:6f:8c:97:02:54:e0:3a:c4:14:e3:2d:51:7d:a1: fb:99:98:4e:a9:94:86:45:8d:b9:c3:1b:b9:0f:8a:e2:c1:20: 19:59:ea:07:c1:b2:6a:de:49:93:de:c2:11:53:e2:d5:31:6c: 92:a0:e6:8b:54:ac:28:f6:f4:bd:e3:74:c9:b7:f4:51:97:2a: 94:95:7f:81:93:e5:d9:f0:71:3f:34:38:08:07:79:6c:8a:37: 16:cf:02:1f:58:73:94:0c:47:00:51:1b:08:c2:41:2d:6f:49: b5:00:8b:47:0c:05:8e:78:e2:95:5b:11:db:18:48:9d:44:b2: 83:fc:c3:c7:9c:bc:79:c6:ce:d0:29:82:e1:0e:3d:ce:9c:57: 32:ae:7a:ef:35:91:b4:40:b1:e8:92:b9:01:b8:d6:e4:58:48: d5:ec:15:94:38:60:29:7b:d0:b5:5a:c5:63:37:04:95:19:2d: a5:74:76:c6:f4:00:61:f9:e0:c0:9b:c2:a1:e5:ab:b6:9c:42: 7f:cf:4b:39:94:40:3d:2b:75:33:b7:ab:bd:b2:7d:19:17:1f: 42:64:93:e7:76:47:2e:08:1f:a2:a0:01:8c:52:ef:df:27:4b: 8c:6d:83:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCkAQLNozYE6T7cka4+3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDAxMzJlNTA1Zjc4YmFkMDExMmY5MWI1NTk4Njg3OTUz NWNhYzAwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EygyYzU5YmJiYjc0ZmYxOTMzNDhkZWVhYTlkMzllZGJjNTY4OWU4OTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxZE8mq1oyntE3V74QFl18wMMk5M S38Ed1TqDqQg0gCEXh/Tv6nGIvQBertLidGsBQxhkQXOvX33osodCPtsW3+BQoqo aU3cwVSS77NNp19dCj71ta/DafBbVthKSt4cWPAXEbUgX9d8bX4VoSNT+hBqaVtC jgB431QiKuPD7ssrxLKAdHqmLd96/CWOe7guV+H9RpAiFb4O0V3YeQfo6ADwQIFS RtVx9JVSEOKrJkH+nnmZWVg+XzytpGjlp9/7rNr6VCMGci4EdQ7p3V+BrPt+IrOJ qMT6AHOpNUOKCljJ33C50eJftQwuZBXOjnGD6gjf9D1F+PxdD7DDksKliQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxZu7t0/xkzSN7qqdOe28Vonol1MB8GA1UdIwQY MBaAFBdAEy5QX3i60BEvkbVZhoeVNcrAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEt NGUzODA3YTM4MTU4LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9mYmJkZmEtZGNmYS00ZGVkLTk3YTEtNGUzODA3YTM4MTU4 LzEvRjBBVExsQmZlTHJRRVMtUnRWbUdoNVUxeXNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSWYOHZJ 870RIP4Jkn9dBYZTBElagW+MlwJU4DrEFOMtUX2h+5mYTqmUhkWNucMbuQ+K4sEg GVnqB8Gyat5Jk97CEVPi1TFskqDmi1SsKPb0veN0ybf0UZcqlJV/gZPl2fBxPzQ4 CAd5bIo3Fs8CH1hzlAxHAFEbCMJBLW9JtQCLRwwFjnjilVsR2xhInUSyg/zDx5y8 ecbO0CmC4Q49zpxXMq567zWRtECx6JK5AbjW5FhI1ewVlDhgKXvQtVrFYzcElRkt pXR2xvQAYfngwJvCoeWrtpxCf89LOZRAPSt1M7ervbJ9GRcfQmST53ZHLggfoqAB jFLv3ydLjG2Dig== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:09 2025 by rpki-client