This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json) Hash identifier: 1ump6ttRfCbTQSmlYtQyJ9QV8W4GoTmJhNH2UbhJ5/w= Subject key identifier: E1:03:04:3B:A9:19:D3:3B:27:EB:B7:3C:91:21:64:21:60:79:8F:B6 Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Certificate serial: 019AFBE7CB330E17DD5203455C198B097D67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft Manifest number: 04DE Signing time: Mon 08 Dec 2025 03:01:03 +0000 Manifest this update: Mon 08 Dec 2025 03:01:03 +0000 Manifest next update: Tue 09 Dec 2025 03:01:03 +0000 Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: 4Ok02GvdcRJ3HhzNZhbUljNe+xYPSEVLA8NDR7pdOF0=) 2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:cb:33:0e:17:dd:52:03:45:5c:19:8b:09:7d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Validity Not Before: Dec 8 03:01:03 2025 GMT Not After : Dec 9 03:01:03 2025 GMT Subject: CN=e103043ba919d33b27ebb73c9121642160798fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:4a:15:aa:d6:c1:40:ce:10:85:3c:c3:c3: b5:d2:91:5f:33:53:40:61:f2:3f:4c:d8:1d:5f:c8: f0:21:61:cf:97:32:78:a2:d0:a3:64:7b:8d:6c:a8: 49:64:50:f2:ec:c1:c7:96:5a:b7:e8:dd:27:4d:0e: ee:e6:e7:5e:9c:d5:71:cd:dd:5d:b4:3b:d2:68:c3: 75:85:23:5c:0e:af:8d:26:5a:f0:1b:e9:2b:bc:a2: d5:0a:3b:7a:0e:f8:f3:42:21:7a:71:ee:12:d1:99: 17:c5:69:de:b4:4b:51:5f:22:80:8d:42:62:78:08: f2:27:1c:54:93:be:8c:78:e8:88:8a:b6:7a:15:7e: 61:ff:a5:49:54:c7:29:b6:b2:f3:b9:06:41:1f:4c: 7f:6e:b9:e6:80:c3:e8:e0:06:15:9b:10:f6:5e:ac: be:54:a7:41:30:73:0f:9e:9b:f9:0f:39:c6:05:26: 3f:7a:f7:86:7a:c0:a9:ed:46:20:fa:e7:0f:a1:0f: 69:5c:25:fb:d6:46:4f:07:fd:2e:a8:99:5c:16:5e: 48:53:6f:38:4e:56:f2:ca:bb:a9:71:a8:a0:d3:75: 4f:5e:e3:16:9e:86:c1:d9:d5:63:42:30:47:7a:96: c8:1c:31:b0:02:88:6e:b3:99:a2:b9:60:1b:7c:c9: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:03:04:3B:A9:19:D3:3B:27:EB:B7:3C:91:21:64:21:60:79:8F:B6 X509v3 Authority Key Identifier: keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c2:36:34:5f:5e:cb:50:82:ab:58:89:41:b6:84:97:b7:7b: 03:9a:e1:34:26:36:4f:3a:cb:c6:3f:e7:dd:60:14:97:0e:d3: 0d:cd:07:6c:e0:80:62:c2:a6:de:84:02:fb:f2:e4:de:63:27: 00:5d:05:bb:4e:46:05:1d:f8:01:49:44:b9:26:72:00:a7:86: ec:be:78:f7:77:2c:b5:e0:c7:2a:37:26:d1:f2:aa:51:dd:4c: c8:18:b8:1f:91:bf:33:e7:db:11:77:9d:79:15:f0:c8:a8:b7: df:1c:fb:0a:6a:60:b5:9b:08:d1:f0:ff:ef:a4:eb:ca:f0:d9: 04:8d:cc:96:ef:f0:7c:a0:fa:9f:cd:69:06:5d:42:af:f5:53: 42:4f:30:98:ea:76:21:23:10:e1:95:42:11:8f:a2:c7:e8:61: 1a:78:44:fb:e8:dc:91:da:7b:4c:fe:c1:c0:aa:7f:74:92:af: e1:bb:2e:12:d2:7f:20:ea:de:d3:a0:1a:1c:0a:a6:a2:37:55: b9:96:57:a9:9e:28:4e:1d:33:33:da:c4:2b:0e:c2:c4:da:91: 43:cb:06:91:13:b9:d5:47:a4:23:1e:98:39:29:97:6d:9b:c8: aa:bb:51:06:42:d0:05:49:c3:c6:8a:39:31:75:e6:64:90:a6: 58:33:8c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr758szDhfdUgNFXBmLCX1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3 ZTY5ZTAwHhcNMjUxMjA4MDMwMTAzWhcNMjUxMjA5MDMwMTAzWjAzMTEwLwYDVQQD EyhlMTAzMDQzYmE5MTlkMzNiMjdlYmI3M2M5MTIxNjQyMTYwNzk4ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkJKFarWwUDOEIU8w8O10pFfM1NA YfI/TNgdX8jwIWHPlzJ4otCjZHuNbKhJZFDy7MHHllq36N0nTQ7u5udenNVxzd1d tDvSaMN1hSNcDq+NJlrwG+krvKLVCjt6DvjzQiF6ce4S0ZkXxWnetEtRXyKAjUJi eAjyJxxUk76MeOiIirZ6FX5h/6VJVMcptrLzuQZBH0x/brnmgMPo4AYVmxD2Xqy+ VKdBMHMPnpv5DznGBSY/eveGesCp7UYg+ucPoQ9pXCX71kZPB/0uqJlcFl5IU284 Tlbyyrupcaig03VPXuMWnobB2dVjQjBHepbIHDGwAohus5miuWAbfMnS3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEDBDupGdM7J+u3PJEhZCFgeY+2MB8GA1UdIwQY MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8I2NF9e y1CCq1iJQbaEl7d7A5rhNCY2TzrLxj/n3WAUlw7TDc0HbOCAYsKm3oQC+/Lk3mMn AF0Fu05GBR34AUlEuSZyAKeG7L5493csteDHKjcm0fKqUd1MyBi4H5G/M+fbEXed eRXwyKi33xz7CmpgtZsI0fD/76TryvDZBI3Mlu/wfKD6n81pBl1Cr/VTQk8wmOp2 ISMQ4ZVCEY+ix+hhGnhE++jckdp7TP7BwKp/dJKv4bsuEtJ/IOre06AaHAqmojdV uZZXqZ4oTh0zM9rEKw7CxNqRQ8sGkRO51UekIx6YOSmXbZvIqrtRBkLQBUnDxoo5 MXXmZJCmWDOMCQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:10:46 2025 by rpki-client