This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft File: F42BIe9wTXqXcMPs4eIFYUeQrDk.mft (raw, json) Hash identifier: GTYiQ1lMx1+ZNF895K+YLomo5xRg0KAm5eJOzHKF6GU= Subject key identifier: 87:9D:2C:64:13:42:97:A7:55:B9:86:09:CA:94:08:E5:9A:A1:91:5C Authority key identifier: 17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39 Certificate issuer: /CN=178d8121ef704d7a9770c3ece1e205614790ac39 Certificate serial: 019AF577A75CE48F50197D80582BDDCA08CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft Manifest number: 06BB Signing time: Sat 06 Dec 2025 21:00:50 +0000 Manifest this update: Sat 06 Dec 2025 21:00:50 +0000 Manifest next update: Sun 07 Dec 2025 21:00:50 +0000 Files and hashes: 1: F42BIe9wTXqXcMPs4eIFYUeQrDk.crl (hash: uMispCHk5wgZxGbHuUqlJOG0EfD72hYXB9BwjLWG11k=) 2: tQhQQED_2rbtgmsDxQqfycOcoj4.roa (hash: 7QkytynjV9fTl5bHPu2TPRokrjL3zXWtRN7glg7QEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:a7:5c:e4:8f:50:19:7d:80:58:2b:dd:ca:08:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178d8121ef704d7a9770c3ece1e205614790ac39 Validity Not Before: Dec 6 21:00:50 2025 GMT Not After : Dec 7 21:00:50 2025 GMT Subject: CN=879d2c64134297a755b98609ca9408e59aa1915c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b2:60:81:aa:d9:84:dc:73:7f:49:c7:0a:06: 51:5a:ef:10:98:10:d7:3a:db:d5:58:f6:cf:71:ee: 05:5c:52:49:8a:8e:6c:ff:0e:ed:aa:42:28:db:2c: ce:e4:4f:09:fd:24:9d:a9:f4:e0:58:51:34:9c:8a: 7f:f3:5c:a8:bb:ee:12:6f:cf:13:43:37:d7:1d:72: 5e:c0:5c:a5:58:d4:45:a9:fd:19:68:37:03:05:f9: 16:6c:c9:aa:35:7d:7f:7d:5b:58:5c:ef:8b:d2:4d: 5c:24:7b:d2:84:18:eb:b5:ca:86:17:69:db:2e:9e: ff:42:67:1b:4d:f9:1d:15:8e:3d:32:25:ed:4f:8a: 9d:df:2f:e1:16:19:d8:43:93:9d:5d:84:5d:cd:a1: c5:4a:37:32:2a:ba:62:a0:3a:84:88:e4:d3:c4:17: 7c:c7:38:c5:63:77:a4:55:bf:b9:5a:5a:02:bd:e7: cd:6b:97:62:b4:06:8e:49:55:88:be:36:e6:8b:9b: 14:cf:2e:d7:6e:79:1a:27:0b:2b:4d:77:44:4b:97: c0:f2:09:da:99:db:06:97:61:b4:3f:df:ad:8b:8b: 1e:37:85:f3:99:63:71:5b:c1:ce:b8:ea:a4:b8:d0: d3:fe:a2:23:49:60:83:e7:95:82:44:3f:a6:19:90: c3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:9D:2C:64:13:42:97:A7:55:B9:86:09:CA:94:08:E5:9A:A1:91:5C X509v3 Authority Key Identifier: keyid:17:8D:81:21:EF:70:4D:7A:97:70:C3:EC:E1:E2:05:61:47:90:AC:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F42BIe9wTXqXcMPs4eIFYUeQrDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/414d9d-b303-4058-993b-9002fad9ea1e/1/F42BIe9wTXqXcMPs4eIFYUeQrDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:bc:7d:83:a9:05:bd:bd:bb:a5:69:b4:15:e0:30:ee:92:6f: 90:ef:68:d1:d7:a1:f7:9f:22:8e:1e:5c:26:69:3b:9a:c8:db: a1:28:c5:dc:a2:47:ca:02:56:0d:dc:9d:b7:65:71:e9:2a:c0: 43:97:8a:38:3e:a0:a0:ba:d5:94:83:e1:ae:99:cf:1d:a6:2d: c6:9d:b7:c1:6c:5d:a5:9d:06:8f:aa:b3:23:e4:51:2e:53:b7: 48:2d:97:0a:3d:e8:dd:a3:9a:d2:00:2b:58:a8:91:cd:82:b8: c5:e6:82:72:20:58:5c:9c:ae:44:f1:41:62:a7:1d:c0:81:6e: 1f:ba:4c:f3:e7:f9:31:aa:40:44:95:32:27:14:90:29:d9:38: 10:60:50:b3:d4:4e:37:ce:e7:fc:ee:05:2a:c6:b3:a5:4c:8a: 85:7e:a0:13:34:4e:b1:e8:e6:0c:da:63:af:e7:0a:9e:b5:f0: 24:63:71:59:00:11:1e:2e:d7:26:fc:5a:2d:25:01:61:53:9c: 52:e1:ce:d0:80:d8:8d:b1:c9:06:77:ce:a7:6b:59:ef:87:0c: 8c:1c:75:60:ce:2a:36:37:e4:98:1c:d1:9c:6f:d8:c1:b9:26: 23:d8:39:d8:58:79:fc:71:51:ac:ca:73:6d:0a:a8:60:57:be: 23:2f:01:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d6dc5I9QGX2AWCvdygjNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OGQ4MTIxZWY3MDRkN2E5NzcwYzNlY2UxZTIwNTYxNDc5 MGFjMzkwHhcNMjUxMjA2MjEwMDUwWhcNMjUxMjA3MjEwMDUwWjAzMTEwLwYDVQQD Eyg4NzlkMmM2NDEzNDI5N2E3NTViOTg2MDljYTk0MDhlNTlhYTE5MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLJggarZhNxzf0nHCgZRWu8QmBDX OtvVWPbPce4FXFJJio5s/w7tqkIo2yzO5E8J/SSdqfTgWFE0nIp/81you+4Sb88T QzfXHXJewFylWNRFqf0ZaDcDBfkWbMmqNX1/fVtYXO+L0k1cJHvShBjrtcqGF2nb Lp7/QmcbTfkdFY49MiXtT4qd3y/hFhnYQ5OdXYRdzaHFSjcyKrpioDqEiOTTxBd8 xzjFY3ekVb+5WloCvefNa5ditAaOSVWIvjbmi5sUzy7XbnkaJwsrTXdES5fA8gna mdsGl2G0P9+ti4seN4XzmWNxW8HOuOqkuNDT/qIjSWCD55WCRD+mGZDD+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIedLGQTQpenVbmGCcqUCOWaoZFcMB8GA1UdIwQY MBaAFBeNgSHvcE16l3DD7OHiBWFHkKw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2It OTAwMmZhZDllYTFlLzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80MTRkOWQtYjMwMy00MDU4LTk5M2ItOTAwMmZhZDllYTFl LzEvRjQyQkllOXdUWHFYY01QczRlSUZZVWVRckRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASLx9g6kF vb27pWm0FeAw7pJvkO9o0deh958ijh5cJmk7msjboSjF3KJHygJWDdydt2Vx6SrA Q5eKOD6goLrVlIPhrpnPHaYtxp23wWxdpZ0Gj6qzI+RRLlO3SC2XCj3o3aOa0gAr WKiRzYK4xeaCciBYXJyuRPFBYqcdwIFuH7pM8+f5MapARJUyJxSQKdk4EGBQs9RO N87n/O4FKsazpUyKhX6gEzROsejmDNpjr+cKnrXwJGNxWQARHi7XJvxaLSUBYVOc UuHO0IDYjbHJBnfOp2tZ74cMjBx1YM4qNjfkmBzRnG/YwbkmI9g52Fh5/HFRrMpz bQqoYFe+Iy8Bag== -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:51 2025 by rpki-client