This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft File: F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json) Hash identifier: vG1M4KmvRgWD1LphePyTX4LpllWmH4RYjttapjYW0RA= Subject key identifier: 0D:DB:EA:CD:51:00:B9:D3:59:62:E0:3B:1A:1D:62:5D:3C:C2:A3:FC Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F Certificate issuer: /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f Certificate serial: 019AF1D1A4845BA63828A80CA83C56A89971 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft Manifest number: 1633 Signing time: Sat 06 Dec 2025 04:00:39 +0000 Manifest this update: Sat 06 Dec 2025 04:00:39 +0000 Manifest next update: Sun 07 Dec 2025 04:00:39 +0000 Files and hashes: 1: 1-JQsoXrJF1cL02AU4m3DYLwbUEg.roa (hash: 79cS9UiptLRApHw1SGPwVnRtKo+MdI4f+PG1mm8Q0Oo=) 2: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: 1zojaSeP8BsVjQDFnxL24v0M6xWn9OGc4yKQzxTtUqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a4:84:5b:a6:38:28:a8:0c:a8:3c:56:a8:99:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f Validity Not Before: Dec 6 04:00:39 2025 GMT Not After : Dec 7 04:00:39 2025 GMT Subject: CN=0ddbeacd5100b9d35962e03b1a1d625d3cc2a3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:8c:7e:1a:52:07:4b:60:b4:4e:17:0b:39: df:34:ed:06:5d:e4:09:52:57:1e:b1:44:b7:a0:d3: da:6b:6d:c7:d8:90:e0:4a:25:cc:bf:ff:d0:e6:fb: af:00:b8:76:f9:b0:e8:90:95:d0:4a:7d:1b:a6:f4: 4c:a0:be:a7:bc:8f:c4:7d:64:62:31:fa:90:68:34: 10:b3:aa:7c:45:26:09:43:f2:8b:a1:88:10:a2:fe: 74:4c:1c:b3:d7:81:dc:48:08:4e:4e:f5:0d:26:ca: fc:e0:54:f4:45:f1:0c:0e:e2:a1:0b:bd:77:8b:57: 56:e8:77:8f:9e:bb:ee:fc:64:77:5b:4a:14:9b:51: 0f:32:53:4b:c6:1d:f7:52:c2:5d:c3:cb:87:43:c1: 62:df:2e:96:91:02:c5:c0:7c:ec:cd:39:19:e6:82: d0:b7:98:83:3d:77:f9:cd:88:ba:77:41:ef:b9:c8: 82:08:c0:ab:38:0b:55:75:ef:b0:75:3d:0c:12:12: 85:9f:a4:c1:e9:33:31:ed:aa:12:23:cb:3d:2f:45: 8b:f1:86:25:1a:b7:04:36:ab:01:b7:e3:9e:b1:43: 01:13:b2:90:6c:23:83:34:ac:de:7c:2c:c4:be:e7: 8d:1d:71:b7:fd:8d:f1:48:c8:a5:cd:20:76:ff:69: c2:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:EA:CD:51:00:B9:D3:59:62:E0:3B:1A:1D:62:5D:3C:C2:A3:FC X509v3 Authority Key Identifier: keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:05:5a:2a:3e:47:66:72:a4:c2:43:37:8d:d9:58:0d:53:c9: 67:c6:88:9e:a2:84:4a:ff:bb:42:07:1b:c7:e5:28:bb:91:4f: ab:37:97:0e:6a:2d:20:27:22:c8:6e:44:8f:09:e6:ea:87:51: ee:af:6b:16:9b:4d:f0:66:4e:7e:88:74:d1:b5:32:9a:0c:37: 4b:9a:85:1a:ba:42:88:0c:76:76:50:5b:5f:99:66:29:00:29: 0d:70:f5:37:df:2b:39:8c:94:76:ea:dc:e3:04:fa:eb:1b:6b: 73:d1:6c:b5:6d:ff:34:3d:88:2c:f2:05:9c:d4:32:af:39:03: 6a:94:50:67:d9:9d:4d:3c:d6:9e:69:3f:35:aa:97:ae:8e:ed: 6e:05:2a:3e:00:37:b4:06:3b:b3:ca:24:3f:4f:3b:83:28:73: 03:42:29:20:07:5b:a8:f7:65:82:95:e0:e2:19:47:c3:08:4a: 1d:07:4f:57:13:e0:3f:b5:06:e4:11:bf:e7:95:3f:27:9f:f3: a0:26:28:a3:a3:e5:13:54:b0:25:0d:d7:95:5d:c0:84:a0:f7: 5e:c9:92:1f:cc:51:88:ea:b2:c2:10:00:0d:8f:dc:44:22:0a: 39:80:e6:e0:2d:14:d0:4a:ee:f0:fc:4b:44:80:13:24:48:b0: 24:99:92:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aSEW6Y4KKgMqDxWqJlxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWJjODZkODUzZjdlM2E5MjAxNTNmMWZiMGIxOWY3YjBl NDFhN2YwHhcNMjUxMjA2MDQwMDM5WhcNMjUxMjA3MDQwMDM5WjAzMTEwLwYDVQQD EygwZGRiZWFjZDUxMDBiOWQzNTk2MmUwM2IxYTFkNjI1ZDNjYzJhM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZuMfhpSB0tgtE4XCznfNO0GXeQJ UlcesUS3oNPaa23H2JDgSiXMv//Q5vuvALh2+bDokJXQSn0bpvRMoL6nvI/EfWRi MfqQaDQQs6p8RSYJQ/KLoYgQov50TByz14HcSAhOTvUNJsr84FT0RfEMDuKhC713 i1dW6HePnrvu/GR3W0oUm1EPMlNLxh33UsJdw8uHQ8Fi3y6WkQLFwHzszTkZ5oLQ t5iDPXf5zYi6d0HvuciCCMCrOAtVde+wdT0MEhKFn6TB6TMx7aoSI8s9L0WL8YYl GrcENqsBt+OesUMBE7KQbCODNKzefCzEvueNHXG3/Y3xSMilzSB2/2nC9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA3b6s1RALnTWWLgOxodYl08wqP8MB8GA1UdIwQY MBaAFBfryG2FP346kgFT8fsLGfew5Bp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTIt Zjc1NjE4YmU2MmQ3LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9lZWU4YjUtYjQ1MS00MWQ3LWFkMTItZjc1NjE4YmU2MmQ3 LzEvRi12SWJZVV9manFTQVZQeC13c1o5N0RrR244LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAVaKj5H ZnKkwkM3jdlYDVPJZ8aInqKESv+7Qgcbx+Uou5FPqzeXDmotICciyG5Ejwnm6odR 7q9rFptN8GZOfoh00bUymgw3S5qFGrpCiAx2dlBbX5lmKQApDXD1N98rOYyUdurc 4wT66xtrc9FstW3/ND2ILPIFnNQyrzkDapRQZ9mdTTzWnmk/NaqXro7tbgUqPgA3 tAY7s8okP087gyhzA0IpIAdbqPdlgpXg4hlHwwhKHQdPVxPgP7UG5BG/55U/J5/z oCYoo6PlE1SwJQ3XlV3AhKD3XsmSH8xRiOqywhAADY/cRCIKOYDm4C0U0Eru8PxL RIATJEiwJJmSTg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:02:58 2025 by rpki-client