This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json) Hash identifier: WgI7fLazcEFRX1lZCJx6Zj61Ly+xkHRUQoUCDU2s+nQ= Subject key identifier: A0:0D:EF:57:13:30:8E:F1:39:F8:05:9C:6A:78:08:F1:D4:F5:E4:64 Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f Certificate serial: 019AF163EC017282C73DC812FFB0761ADEE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 02:00:48 +0000 Manifest this update: Sat 06 Dec 2025 02:00:48 +0000 Manifest next update: Sun 07 Dec 2025 02:00:48 +0000 Files and hashes: 1: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=) 2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: lKGLYep20QkVkOE5Hk6P/m49zZ9GmcIX1byvimcHeq4=) 3: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=) 4: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=) 5: g2ksWtxpPbPFQrOSviBQAOSUcSs.roa (hash: S1SF/AyZjw5ZhUKFDKMzcO8zhjr04XXNLLkxtApWuio=) 6: io80l1tuBZlvtmsc3O2CUblyXEk.roa (hash: Ee8tLpUdxcl7RdODwc+jsH7Hsy3sy1biq2Koz6VaGbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ec:01:72:82:c7:3d:c8:12:ff:b0:76:1a:de:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f Validity Not Before: Dec 6 02:00:48 2025 GMT Not After : Dec 7 02:00:48 2025 GMT Subject: CN=a00def5713308ef139f8059c6a7808f1d4f5e464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:ca:9c:df:a6:06:b6:26:9c:7d:76:d5:a4:f1: b7:f9:5e:f3:3e:c0:66:aa:9e:60:2e:d4:a0:05:9b: a5:1a:1c:22:35:eb:ea:3f:f7:cd:d5:95:2f:ea:6d: 04:d5:f2:14:4b:db:aa:85:cb:f0:32:0e:8a:f7:a2: 94:8d:64:31:70:3e:a6:29:6f:1e:d5:33:04:91:da: 2e:6c:a2:f5:68:b5:ee:f2:5e:3c:87:8c:ff:1f:5c: bb:aa:31:fc:6f:02:e3:c1:1a:dd:8a:95:d4:11:ac: e3:b1:55:25:f8:fb:eb:b0:bc:9f:66:ff:bf:f4:45: 7a:96:08:cd:fd:27:b5:39:5b:70:32:f7:13:04:31: 6b:8d:0d:69:bd:8b:6c:37:af:bc:40:52:c3:b3:b9: 17:d7:ca:c8:21:1a:26:a0:6f:c1:ba:2e:27:9e:cc: 8e:7a:fd:c5:6f:7e:d5:2a:40:41:ea:4b:56:e2:6b: 6d:ee:9c:ef:56:4c:fa:2a:08:8f:33:99:55:6a:b9: 01:cc:0d:18:ef:ed:23:96:bd:3c:95:7a:d9:27:0e: dc:01:85:67:83:da:53:f5:c3:16:87:bb:a2:be:d8: d2:9d:0a:02:cf:b6:de:f4:f7:e6:fd:c2:f1:d3:64: fb:e3:0f:9a:e7:35:05:94:00:63:a2:de:1d:a7:c5: c7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0D:EF:57:13:30:8E:F1:39:F8:05:9C:6A:78:08:F1:D4:F5:E4:64 X509v3 Authority Key Identifier: keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:af:e1:fc:03:6d:a8:cd:26:88:64:05:24:40:8b:b8:22:97: 70:c2:9c:4d:50:04:65:b5:b3:6d:cb:b9:d7:fe:40:87:82:80: 76:ec:fc:8c:2c:2a:e1:44:6b:3f:de:58:71:dc:25:5b:b9:c7: d4:ce:28:04:b2:e2:ea:29:b9:40:12:c9:5b:ec:c3:1e:5c:95: aa:ea:15:b5:df:62:d2:83:3c:74:61:b3:21:92:51:ec:75:5e: 96:e2:1b:c4:40:ba:dd:b7:e1:45:d5:e7:c8:87:53:a1:f1:39: b3:75:60:10:6d:91:10:3d:11:b6:ad:48:89:f3:c2:b1:2f:48: ef:80:a9:44:f9:cf:6b:98:09:82:42:d6:dc:2d:3b:98:e5:eb: b6:c5:49:0a:ae:d8:cf:28:dc:e0:57:4c:c0:b8:eb:f7:18:79: 6f:d3:4e:4d:bf:52:78:e1:e7:1a:23:d3:75:ce:ac:a2:8c:9e: b0:b6:23:9c:af:37:e5:93:fe:7e:f7:0f:5b:a9:23:f4:6b:75: 09:93:cb:8f:6d:66:2b:bc:a7:c1:89:1c:17:82:76:89:8d:30: 88:92:fd:f4:9a:34:50:73:27:e8:11:64:76:26:a8:e4:21:e6: 72:04:b2:83:86:27:85:b2:01:20:05:02:d8:58:83:09:7e:65: e1:8a:a9:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+wBcoLHPcgS/7B2Gt7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YzIwM2UzZjM2NTkyM2E4NDNkMzIyMDMxN2ExYzY4Y2Y3 NGRlMGYwHhcNMjUxMjA2MDIwMDQ4WhcNMjUxMjA3MDIwMDQ4WjAzMTEwLwYDVQQD EyhhMDBkZWY1NzEzMzA4ZWYxMzlmODA1OWM2YTc4MDhmMWQ0ZjVlNDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sqc36YGtiacfXbVpPG3+V7zPsBm qp5gLtSgBZulGhwiNevqP/fN1ZUv6m0E1fIUS9uqhcvwMg6K96KUjWQxcD6mKW8e 1TMEkdoubKL1aLXu8l48h4z/H1y7qjH8bwLjwRrdipXUEazjsVUl+PvrsLyfZv+/ 9EV6lgjN/Se1OVtwMvcTBDFrjQ1pvYtsN6+8QFLDs7kX18rIIRomoG/Bui4nnsyO ev3Fb37VKkBB6ktW4mtt7pzvVkz6KgiPM5lVarkBzA0Y7+0jlr08lXrZJw7cAYVn g9pT9cMWh7uivtjSnQoCz7be9Pfm/cLx02T74w+a5zUFlABjot4dp8XHMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAN71cTMI7xOfgFnGp4CPHU9eRkMB8GA1UdIwQY MBaAFBfCA+PzZZI6hD0yIDF6HGjPdN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMt YWM2N2EzNmU0YWFiLzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy84OWFlOGUtNDY3NC00NTVkLTlmMjMtYWM2N2EzNmU0YWFi LzEvRjhJRDRfTmxranFFUFRJZ01Yb2NhTTkwM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK/h/ANt qM0miGQFJECLuCKXcMKcTVAEZbWzbcu51/5Ah4KAduz8jCwq4URrP95YcdwlW7nH 1M4oBLLi6im5QBLJW+zDHlyVquoVtd9i0oM8dGGzIZJR7HVeluIbxEC63bfhRdXn yIdTofE5s3VgEG2RED0Rtq1IifPCsS9I74CpRPnPa5gJgkLW3C07mOXrtsVJCq7Y zyjc4FdMwLjr9xh5b9NOTb9SeOHnGiPTdc6sooyesLYjnK835ZP+fvcPW6kj9Gt1 CZPLj21mK7ynwYkcF4J2iY0wiJL99Jo0UHMn6BFkdiao5CHmcgSyg4YnhbIBIAUC 2FiDCX5l4YqpHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:31 2025 by rpki-client