This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json) Hash identifier: JVRinFvEXFh9fti6u8dVNk8vYYgrg//KITF8HJuYfAg= Subject key identifier: AB:64:AA:41:0A:0E:70:D8:1A:C3:93:8A:F6:6C:83:15:34:81:5B:EE Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf Certificate serial: 019AF23F8CC432B33AC9954A65C0991217C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft Manifest number: 061D Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=) 2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: y37yZDIFiMjoEvmiecJ30wODS2ofdFuR8t8iJzVXC+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8c:c4:32:b3:3a:c9:95:4a:65:c0:99:12:17:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=ab64aa410a0e70d81ac3938af66c831534815bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:f3:93:cb:b8:42:9f:83:a8:2e:27:5b:66: 19:9b:5a:0a:a8:ec:d5:e2:94:0e:54:53:e2:8a:a0: 69:38:3f:df:53:e6:b7:fa:60:34:6c:4f:7d:cb:5a: 7a:29:f9:29:64:28:b0:15:56:53:33:a5:37:c2:22: ea:c6:19:5b:b2:5c:a1:eb:64:76:d1:66:aa:f3:12: f4:f0:55:64:e6:18:58:0d:05:b3:d4:a6:84:b3:3e: e9:30:e6:b9:47:50:12:e4:dc:82:ca:97:25:fb:fa: 37:72:65:3c:9f:41:b2:05:ae:56:e8:f6:8c:d0:4d: be:30:00:d6:8d:b3:15:80:a6:bd:24:c2:46:bd:ec: b7:cc:aa:0d:31:62:4c:cc:41:c5:29:d5:ee:28:7a: 5a:77:49:87:58:50:23:d5:09:2d:4b:32:0d:63:3a: 60:30:ff:c1:96:f1:95:5c:ca:41:9d:67:a2:7d:ac: 42:3e:f6:0b:24:72:f1:98:39:53:0a:30:65:f5:18: 4b:56:8c:7e:4d:66:cb:8e:e0:fb:e9:88:bf:8f:39: b1:cf:5a:02:aa:48:54:87:42:39:00:8b:f0:80:cd: b9:1a:1d:7c:1b:5a:75:2a:16:84:f0:76:3c:72:48: 2d:81:98:7e:c8:c7:c4:ba:4b:b5:39:48:f4:21:3b: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:64:AA:41:0A:0E:70:D8:1A:C3:93:8A:F6:6C:83:15:34:81:5B:EE X509v3 Authority Key Identifier: keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:31:36:f6:a5:15:5b:6b:90:c2:89:00:b6:2d:c3:92:ec:06: 39:6b:6c:39:91:92:a7:8a:f2:98:24:af:5b:79:2f:0e:0e:4c: 10:ac:3d:39:76:9c:97:fd:80:5e:39:19:32:e0:71:ce:4d:e2: bb:49:0a:2c:3c:01:ea:bd:44:7a:60:0b:b9:1c:fb:dd:76:91: d1:38:b4:48:c7:2e:be:f2:18:a7:1f:05:4b:ab:7b:28:6c:b0: 56:d3:d6:6d:0b:be:81:74:f1:c5:0b:6a:d2:98:c9:12:04:97: 7b:40:7c:5e:0b:e9:f3:a1:0d:a9:5e:90:7c:b3:72:b3:64:68: e6:0d:29:9b:d9:a5:86:c0:73:6e:8c:93:bb:30:4c:11:fd:a2: 36:f8:f6:fb:38:fa:91:de:20:ad:e0:8f:af:ac:0e:95:74:4c: 4b:66:f9:40:42:b5:96:2a:ba:25:cc:91:40:63:0f:71:df:de: e1:17:ff:a8:b6:04:7f:67:7e:f4:d2:a1:da:cb:29:c1:0d:67: 0d:30:b1:34:dc:36:20:6c:54:ff:77:56:65:20:95:0d:c9:99: dc:89:cf:05:07:0d:95:80:b0:b4:04:54:e5:09:15:79:d2:33: 8d:00:c0:94:46:f9:b5:82:03:fb:be:c9:ee:81:79:eb:62:f6: ae:c2:45:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4zEMrM6yZVKZcCZEhfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5 ZTJhYmYwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD EyhhYjY0YWE0MTBhMGU3MGQ4MWFjMzkzOGFmNjZjODMxNTM0ODE1YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Frzk8u4Qp+DqC4nW2YZm1oKqOzV 4pQOVFPiiqBpOD/fU+a3+mA0bE99y1p6KfkpZCiwFVZTM6U3wiLqxhlbslyh62R2 0Waq8xL08FVk5hhYDQWz1KaEsz7pMOa5R1AS5NyCypcl+/o3cmU8n0GyBa5W6PaM 0E2+MADWjbMVgKa9JMJGvey3zKoNMWJMzEHFKdXuKHpad0mHWFAj1QktSzINYzpg MP/BlvGVXMpBnWeifaxCPvYLJHLxmDlTCjBl9RhLVox+TWbLjuD76Yi/jzmxz1oC qkhUh0I5AIvwgM25Gh18G1p1KhaE8HY8ckgtgZh+yMfEuku1OUj0ITtpNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtkqkEKDnDYGsOTivZsgxU0gVvuMB8GA1UdIwQY MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt YTYwNWNhZDU1MDg2LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2 LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDE29qUV W2uQwokAti3DkuwGOWtsOZGSp4rymCSvW3kvDg5MEKw9OXacl/2AXjkZMuBxzk3i u0kKLDwB6r1EemALuRz73XaR0Ti0SMcuvvIYpx8FS6t7KGywVtPWbQu+gXTxxQtq 0pjJEgSXe0B8Xgvp86ENqV6QfLNys2Ro5g0pm9mlhsBzboyTuzBMEf2iNvj2+zj6 kd4greCPr6wOlXRMS2b5QEK1liq6JcyRQGMPcd/e4Rf/qLYEf2d+9NKh2sspwQ1n DTCxNNw2IGxU/3dWZSCVDcmZ3InPBQcNlYCwtARU5QkVedIzjQDAlEb5tYID+77J 7oF562L2rsJFRQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:35 2025 by rpki-client