This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft File: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft (raw, json) Hash identifier: TxcBk/bPlmO9VaYSDmjW+yf9xGMgZkP28wJAY2o3ZFs= Subject key identifier: 01:37:D2:72:B5:D2:17:7E:F7:5A:C6:27:E3:7A:82:8B:31:2A:FB:50 Authority key identifier: 7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 Certificate issuer: /CN=7fefebd15fbc651487acaf67424f4783d43eb420 Certificate serial: 019AF0F5DDDE88AB441D8AA678E0256662CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 00:00:36 +0000 Manifest this update: Sat 06 Dec 2025 00:00:36 +0000 Manifest next update: Sun 07 Dec 2025 00:00:36 +0000 Files and hashes: 1: aoK4LjzvW24iCl2Hm5SfIHEA-7M.roa (hash: JYGSbmnC0FqsVCIRhlEAGEVGEQbQz4POmiiJzlboiKY=) 2: f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl (hash: LoUdn7HOKNR3OIOgcHSDhS1xTRyN7xU4p9lcN6qS9WE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dd:de:88:ab:44:1d:8a:a6:78:e0:25:66:62:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fefebd15fbc651487acaf67424f4783d43eb420 Validity Not Before: Dec 6 00:00:36 2025 GMT Not After : Dec 7 00:00:36 2025 GMT Subject: CN=0137d272b5d2177ef75ac627e37a828b312afb50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:5e:cf:69:83:2b:97:3c:70:c3:93:ba:92: 85:0c:9a:1a:c8:d3:75:a5:a3:db:66:41:da:ae:56: dd:ac:db:ce:21:c9:ce:04:53:a4:97:42:d0:ad:71: 35:2c:2a:9f:5e:39:ce:59:21:cb:14:f2:f9:d8:e0: 65:da:48:ac:9f:e3:1f:df:cd:0e:52:cd:c1:73:67: 7c:80:b9:68:ad:ac:5f:1f:71:13:39:56:5a:36:3c: b3:72:ce:36:8e:39:8e:94:a8:98:2d:c6:0e:c1:62: 6e:0d:5f:b9:45:a7:be:d6:41:f3:ee:62:78:49:30: 86:58:e6:44:ea:35:72:d1:43:58:08:8d:5c:9e:e0: 9e:e4:1d:b2:24:de:1e:91:27:d1:62:8c:00:c6:28: c4:20:12:72:5d:a7:55:6a:c2:30:42:27:3b:e2:83: c3:16:2d:3e:aa:76:cd:9f:09:c7:b8:a4:e7:b8:76: e3:d3:11:68:b9:f5:d7:08:7b:d7:be:a7:77:da:b7: b7:81:56:2b:93:7b:0b:68:5d:f1:b9:d5:5b:34:f8: 04:16:d4:fb:7b:4c:72:b1:72:bc:72:36:e8:ca:5e: 2b:b1:a7:a4:54:90:e2:00:35:8c:7c:9e:45:d8:89: 7b:79:ca:90:54:be:09:f8:c4:ad:a4:89:fb:ba:c2: fc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:37:D2:72:B5:D2:17:7E:F7:5A:C6:27:E3:7A:82:8B:31:2A:FB:50 X509v3 Authority Key Identifier: keyid:7F:EF:EB:D1:5F:BC:65:14:87:AC:AF:67:42:4F:47:83:D4:3E:B4:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26ef63-b72f-4b3c-8dfc-2bc84519227a/1/f-_r0V-8ZRSHrK9nQk9Hg9Q-tCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:1e:9b:a4:1b:c7:06:79:3f:4d:51:e0:b1:6d:6a:f0:3b:46: 02:d3:b7:26:6b:60:67:84:a3:5b:bd:45:94:57:df:87:aa:6b: c0:94:35:52:eb:0c:59:64:f1:5c:9d:5b:98:dc:43:32:b0:47: 18:89:5e:0e:e4:f3:38:9a:f0:2c:3c:74:e5:d7:61:e6:69:24: 71:36:21:4a:40:e1:05:ea:ef:5d:b5:34:3e:37:0c:40:72:1f: 7a:a1:4e:09:f7:71:cd:35:ae:93:57:c6:ec:33:2f:72:5f:00: 29:da:e5:3e:be:62:92:cc:7a:cb:76:7e:fd:cd:d2:d9:0b:ec: 3d:88:96:ed:90:8a:33:82:99:4b:a0:be:d7:74:56:f5:9b:f4: d8:51:23:fa:b8:7f:17:15:79:eb:8d:31:fc:c0:7b:21:3c:48: 81:52:88:45:c9:a7:55:f5:7d:d0:f1:79:c7:17:3c:3a:08:07: 59:1a:d2:61:ab:ff:a5:20:66:df:fc:6e:9e:47:4c:cd:c6:5e: 93:16:7c:6c:0a:16:ab:86:81:2f:d1:cd:74:37:a1:57:ae:13: f2:4c:4d:97:0f:e1:97:ae:75:69:83:d4:fd:95:6a:a0:3d:7d: 16:d4:dc:0c:77:f2:87:b7:3b:e1:2b:95:5e:84:90:be:1c:bb: 0d:05:7d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9d3eiKtEHYqmeOAlZmLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZWZlYmQxNWZiYzY1MTQ4N2FjYWY2NzQyNGY0NzgzZDQz ZWI0MjAwHhcNMjUxMjA2MDAwMDM2WhcNMjUxMjA3MDAwMDM2WjAzMTEwLwYDVQQD EygwMTM3ZDI3MmI1ZDIxNzdlZjc1YWM2MjdlMzdhODI4YjMxMmFmYjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2xez2mDK5c8cMOTupKFDJoayNN1 paPbZkHarlbdrNvOIcnOBFOkl0LQrXE1LCqfXjnOWSHLFPL52OBl2kisn+Mf380O Us3Bc2d8gLloraxfH3ETOVZaNjyzcs42jjmOlKiYLcYOwWJuDV+5Rae+1kHz7mJ4 STCGWOZE6jVy0UNYCI1cnuCe5B2yJN4ekSfRYowAxijEIBJyXadVasIwQic74oPD Fi0+qnbNnwnHuKTnuHbj0xFoufXXCHvXvqd32re3gVYrk3sLaF3xudVbNPgEFtT7 e0xysXK8cjboyl4rsaekVJDiADWMfJ5F2Il7ecqQVL4J+MStpIn7usL8aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE30nK10hd+91rGJ+N6gosxKvtQMB8GA1UdIwQY MBaAFH/v69FfvGUUh6yvZ0JPR4PUPrQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMt MmJjODQ1MTkyMjdhLzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNmVmNjMtYjcyZi00YjNjLThkZmMtMmJjODQ1MTkyMjdh LzEvZi1fcjBWLThaUlNIcks5blFrOUhnOVEtdENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB6bpBvH Bnk/TVHgsW1q8DtGAtO3JmtgZ4SjW71FlFffh6prwJQ1UusMWWTxXJ1bmNxDMrBH GIleDuTzOJrwLDx05ddh5mkkcTYhSkDhBervXbU0PjcMQHIfeqFOCfdxzTWuk1fG 7DMvcl8AKdrlPr5iksx6y3Z+/c3S2QvsPYiW7ZCKM4KZS6C+13RW9Zv02FEj+rh/ FxV5640x/MB7ITxIgVKIRcmnVfV90PF5xxc8OggHWRrSYav/pSBm3/xunkdMzcZe kxZ8bAoWq4aBL9HNdDehV64T8kxNlw/hl651aYPU/ZVqoD19FtTcDHfyh7c74SuV XoSQvhy7DQV9IQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:07 2025 by rpki-client