This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft File: F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json) Hash identifier: yerogM/+Dc8+n/ZsUxt++wc7JAziK3LILcnk+2nwWDA= Subject key identifier: 4D:EC:EF:97:00:2E:88:43:22:39:8D:DA:C7:6B:AA:AE:7C:E6:4E:A7 Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C Certificate issuer: /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c Certificate serial: 019AF19B75BF96ED8EB385BDAEF47DDAF451 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 03:01:28 +0000 Manifest this update: Sat 06 Dec 2025 03:01:28 +0000 Manifest next update: Sun 07 Dec 2025 03:01:28 +0000 Files and hashes: 1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: aDNNJFEF5U7on116vWafc7hTpKg7KjPRoH61jORQLIM=) 2: ZPoCpq3pmnhAPIwck7l7sD56f3g.roa (hash: zMHDyTabQ6MFQ9QbuOgdVnq/gWPOmwSEqWlxMKx33/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:75:bf:96:ed:8e:b3:85:bd:ae:f4:7d:da:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c Validity Not Before: Dec 6 03:01:28 2025 GMT Not After : Dec 7 03:01:28 2025 GMT Subject: CN=4decef97002e884322398ddac76baaae7ce64ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:40:06:c0:12:5a:99:fe:25:ff:05:f1:d3:bd: b6:34:a6:d2:c8:bf:34:72:54:4a:59:7e:f1:5b:6d: e2:0b:c6:78:57:8f:ea:fc:f8:92:10:1b:bc:5d:6f: fa:18:bf:f1:b3:39:e8:17:63:90:fc:f1:e6:77:41: 32:39:b9:3f:48:5d:0f:64:10:ea:58:92:20:7f:8a: de:80:bb:9c:f9:25:bb:38:6d:83:06:5b:b0:11:11: 71:28:eb:34:34:42:dd:1d:23:16:d4:e8:33:32:1d: f4:4e:55:dd:a9:71:f7:6a:f9:98:8e:e8:53:48:48: 73:e7:8e:0e:a9:84:80:d1:3e:96:8e:b8:cc:24:fe: 43:05:d4:e9:e1:a3:23:52:d5:8f:96:3c:50:e8:16: ee:74:e6:c2:6d:a8:db:08:70:18:a1:35:12:75:a7: 8d:aa:ac:ff:ef:cc:f8:b9:cb:fa:27:34:21:d8:c1: 90:8b:6b:07:6e:95:00:af:34:3f:18:90:3f:eb:93: 99:2e:03:d9:5b:61:f6:a4:55:7c:19:fc:ba:50:38: 6b:5c:55:9b:50:81:7f:ab:03:f6:78:ca:5d:e2:38: 83:e2:43:01:41:ff:ea:37:96:2b:8e:10:4e:b2:0f: 8f:fc:0c:81:35:81:62:1d:94:ea:f8:a4:6d:e7:b0: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:EC:EF:97:00:2E:88:43:22:39:8D:DA:C7:6B:AA:AE:7C:E6:4E:A7 X509v3 Authority Key Identifier: keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2a:d2:ef:93:f9:db:58:3d:58:53:2b:21:85:6d:1b:7c:71: 70:39:74:78:6b:74:65:99:b2:a2:3e:18:79:2b:66:bd:8c:2d: 20:53:ca:49:6b:19:f5:23:1e:84:05:d0:fb:59:0a:37:71:64: d7:1e:3b:34:d1:10:3f:7b:6e:21:68:80:75:16:6b:bc:c5:67: b3:5f:b4:dd:03:0a:56:f9:e6:47:3c:aa:29:21:c8:70:05:5f: c3:b1:f8:af:fe:ac:51:88:26:73:0b:68:c2:9b:c9:f3:5b:71: ff:d7:e2:99:e1:9d:dd:dc:98:45:bf:77:d4:f4:30:f6:9b:6e: d7:b6:6a:e4:6e:b5:bc:56:b0:55:d9:4e:6d:b6:fe:d2:5f:27: 98:e8:65:87:79:c2:a2:83:53:17:70:30:c7:25:35:b1:34:9d: 19:6f:1f:18:16:5c:e3:c1:0e:82:4b:13:a4:61:30:f6:ff:dc: be:c4:22:2d:0f:b1:a9:24:29:bd:7d:d3:e6:17:5e:c5:a3:6c: 0a:1f:d1:cb:e3:06:ac:74:68:96:78:d5:b8:34:7f:d2:62:b7: ed:65:72:14:de:ef:41:17:f0:93:7f:9a:95:2b:b4:8d:66:f5: 40:48:bb:21:f1:14:7b:8f:b1:88:5e:88:5a:74:f5:c4:be:c2: ff:a2:0c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3W/lu2Os4W9rvR92vRRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZmZlZTI1MDUyYzBhYWJmNmNiMzcxZTNmMmUwNzZmNDRm YzFjM2MwHhcNMjUxMjA2MDMwMTI4WhcNMjUxMjA3MDMwMTI4WjAzMTEwLwYDVQQD Eyg0ZGVjZWY5NzAwMmU4ODQzMjIzOThkZGFjNzZiYWFhZTdjZTY0ZWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kAGwBJamf4l/wXx0722NKbSyL80 clRKWX7xW23iC8Z4V4/q/PiSEBu8XW/6GL/xsznoF2OQ/PHmd0EyObk/SF0PZBDq WJIgf4regLuc+SW7OG2DBluwERFxKOs0NELdHSMW1OgzMh30TlXdqXH3avmYjuhT SEhz544OqYSA0T6WjrjMJP5DBdTp4aMjUtWPljxQ6BbudObCbajbCHAYoTUSdaeN qqz/78z4ucv6JzQh2MGQi2sHbpUArzQ/GJA/65OZLgPZW2H2pFV8Gfy6UDhrXFWb UIF/qwP2eMpd4jiD4kMBQf/qN5YrjhBOsg+P/AyBNYFiHZTq+KRt57AA+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3s75cALohDIjmN2sdrqq585k6nMB8GA1UdIwQY MBaAFBf/7iUFLAqr9ss3Hj8uB29E/Bw8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjIt YTJlODgwZmQ1ODUwLzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8wNDUyMjItNWFjZS00ZTdlLTk1YjItYTJlODgwZmQ1ODUw LzEvRl9fdUpRVXNDcXYyeXpjZVB5NEhiMFQ4SER3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArirS75P5 21g9WFMrIYVtG3xxcDl0eGt0ZZmyoj4YeStmvYwtIFPKSWsZ9SMehAXQ+1kKN3Fk 1x47NNEQP3tuIWiAdRZrvMVns1+03QMKVvnmRzyqKSHIcAVfw7H4r/6sUYgmcwto wpvJ81tx/9fimeGd3dyYRb931PQw9ptu17Zq5G61vFawVdlObbb+0l8nmOhlh3nC ooNTF3AwxyU1sTSdGW8fGBZc48EOgksTpGEw9v/cvsQiLQ+xqSQpvX3T5hdexaNs Ch/Ry+MGrHRolnjVuDR/0mK37WVyFN7vQRfwk3+alSu0jWb1QEi7IfEUe4+xiF6I WnT1xL7C/6IMgg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:45 2025 by rpki-client