This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft File: f_F65Ue58mQeYFd_5VPdtvdJoIc.mft (raw, json) Hash identifier: Ihrb2cl250pkT4hBpgzPOFhZGSAnslFWb0PIP0SkH1g= Subject key identifier: C5:5D:A6:D5:07:AB:BB:42:F8:37:EE:E8:A0:2A:ED:13:28:3F:D8:CD Authority key identifier: 7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 Certificate issuer: /CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Certificate serial: 019AF0BF97A3E2EE365B10F267573C0BB485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft Manifest number: 049F Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: _RxvAeHpFONnYajZa7ON1mGQbhs.asa (hash: xFKcAvCC5vdLzyXxKRsgkirX+IuvxL5Uhr3MSO1dHqk=) 2: f_F65Ue58mQeYFd_5VPdtvdJoIc.crl (hash: 79W8tzaPFeL+CBqSbkiRzKl2hkGehr34ueEGPKJuGGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:97:a3:e2:ee:36:5b:10:f2:67:57:3c:0b:b4:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ff17ae547b9f2641e60577fe553ddb6f749a087 Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=c55da6d507abbb42f837eee8a02aed13283fd8cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:46:f0:53:b5:4c:09:c8:96:5a:5a:6d:37:ec: a2:67:44:97:00:17:fb:43:c7:34:d1:7e:7e:0d:5c: 64:6c:f6:6f:ef:2e:4a:d9:05:51:35:af:81:09:3d: 45:92:8a:f1:6a:e4:06:35:8b:ad:f7:a9:4e:b4:85: 9b:39:99:d3:b9:84:6a:c6:92:1e:96:27:f9:6d:7c: 9a:e4:e2:5e:5c:76:e2:a3:70:e3:dc:81:71:f1:a5: 38:16:cb:3e:db:3a:f9:18:1f:1a:12:5d:0b:bb:bb: b2:f1:2b:9d:28:fd:70:05:72:57:96:70:d2:43:3e: 7d:e2:8c:96:16:47:ff:1c:06:6e:ab:67:08:9d:2e: ae:1c:fe:7a:b0:1e:ec:04:6a:36:9b:d4:af:aa:55: c3:2e:c8:ec:b7:14:61:3d:83:4f:56:00:be:7e:42: e1:54:46:2c:59:90:12:f8:c7:e4:9d:39:8a:a8:c2: 15:c7:93:8a:fb:89:e0:d7:40:2b:f3:db:9e:7e:60: 50:de:97:7e:20:f3:84:ce:99:5a:cf:d2:c6:75:ff: 70:09:d1:21:77:ad:46:cc:56:da:85:a3:69:c6:10: 2c:4e:d0:5d:48:7c:cc:1c:31:55:aa:8f:ff:fe:6f: 01:b7:14:d7:78:45:95:92:4a:d0:5d:84:5f:ed:27: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5D:A6:D5:07:AB:BB:42:F8:37:EE:E8:A0:2A:ED:13:28:3F:D8:CD X509v3 Authority Key Identifier: keyid:7F:F1:7A:E5:47:B9:F2:64:1E:60:57:7F:E5:53:DD:B6:F7:49:A0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_F65Ue58mQeYFd_5VPdtvdJoIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/1bc0f9-bd7c-4f7a-a404-a43ff25d447d/1/f_F65Ue58mQeYFd_5VPdtvdJoIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f5:8f:a4:72:58:a1:33:4e:70:94:43:99:45:67:7f:9e:34: fe:2a:52:b4:87:55:2a:89:0e:72:b7:b9:5b:ee:81:df:01:56: 29:9a:cc:34:da:46:59:fc:88:d5:c4:97:55:97:da:75:20:77: 53:9c:cd:74:8c:a6:99:0a:c6:d2:b4:da:e0:73:ff:88:e2:40: 0f:6c:a1:21:5f:b6:13:61:92:2c:f0:e2:14:4d:84:60:72:84: ed:bd:04:3c:88:74:da:17:f2:a6:27:d9:d3:2e:45:ab:c3:89: 54:93:0a:19:f9:8d:d5:73:e5:13:c0:88:56:cb:7f:50:7d:dc: 68:48:df:38:28:89:2a:91:5e:05:f4:fe:24:81:76:8a:27:fd: eb:d0:56:40:57:6a:74:06:3d:c9:12:f8:2d:ab:e8:4d:3f:ed: f1:5d:1e:82:b7:22:ab:e0:c4:8a:79:5f:18:50:30:22:79:60: 79:b9:7e:7f:4b:2b:fb:dd:1e:9d:1c:af:91:89:f6:a3:7d:8d: 78:b3:e9:01:92:c6:f3:cf:56:cb:0a:f6:f2:6d:2f:7a:46:df: 15:9e:fc:21:15:6c:54:9a:57:16:57:63:b7:c2:fc:54:e3:08: f3:10:88:97:91:ba:a9:88:ea:9f:8e:28:b9:ee:df:56:f8:fa: dc:0f:2f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5ej4u42WxDyZ1c8C7SFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZjE3YWU1NDdiOWYyNjQxZTYwNTc3ZmU1NTNkZGI2Zjc0 OWEwODcwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EyhjNTVkYTZkNTA3YWJiYjQyZjgzN2VlZThhMDJhZWQxMzI4M2ZkOGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUbwU7VMCciWWlptN+yiZ0SXABf7 Q8c00X5+DVxkbPZv7y5K2QVRNa+BCT1FkorxauQGNYut96lOtIWbOZnTuYRqxpIe lif5bXya5OJeXHbio3Dj3IFx8aU4Fss+2zr5GB8aEl0Lu7uy8SudKP1wBXJXlnDS Qz594oyWFkf/HAZuq2cInS6uHP56sB7sBGo2m9SvqlXDLsjstxRhPYNPVgC+fkLh VEYsWZAS+MfknTmKqMIVx5OK+4ng10Ar89uefmBQ3pd+IPOEzplaz9LGdf9wCdEh d61GzFbahaNpxhAsTtBdSHzMHDFVqo///m8BtxTXeEWVkkrQXYRf7SeSAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVdptUHq7tC+Dfu6KAq7RMoP9jNMB8GA1UdIwQY MBaAFH/xeuVHufJkHmBXf+VT3bb3SaCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQt YTQzZmYyNWQ0NDdkLzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8xYmMwZjktYmQ3Yy00ZjdhLWE0MDQtYTQzZmYyNWQ0NDdk LzEvZl9GNjVVZTU4bVFlWUZkXzVWUGR0dmRKb0ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPWPpHJY oTNOcJRDmUVnf540/ipStIdVKokOcre5W+6B3wFWKZrMNNpGWfyI1cSXVZfadSB3 U5zNdIymmQrG0rTa4HP/iOJAD2yhIV+2E2GSLPDiFE2EYHKE7b0EPIh02hfypifZ 0y5Fq8OJVJMKGfmN1XPlE8CIVst/UH3caEjfOCiJKpFeBfT+JIF2iif969BWQFdq dAY9yRL4LavoTT/t8V0egrciq+DEinlfGFAwInlgebl+f0sr+90enRyvkYn2o32N eLPpAZLG889Wywr28m0vekbfFZ78IRVsVJpXFldjt8L8VOMI8xCIl5G6qYjqn44o ue7fVvj63A8vOg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:18:19 2025 by rpki-client