This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft File: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft (raw, json) Hash identifier: pZCHp0iPVwjKcKtzG5firug67cqvexzEdyuJjiOqhBo= Subject key identifier: F0:53:6D:AC:75:19:D6:7A:3E:34:1F:6F:24:78:4E:BE:0B:78:15:C0 Authority key identifier: 17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA Certificate issuer: /CN=178825286beec912d1988d08d2e277f518f3e4aa Certificate serial: 019AF5AE8A4C8B5E583AD5A0B2988660D35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 22:00:47 +0000 Manifest this update: Sat 06 Dec 2025 22:00:47 +0000 Manifest next update: Sun 07 Dec 2025 22:00:47 +0000 Files and hashes: 1: F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl (hash: VbPmfaNiMi3/pgLQG3vWRJk4JkFdjxJaB1r6HXZ3ip4=) 2: JTEomKX4OOyZxOy0baHsaALemoI.roa (hash: JGEo9LSNLQbTCM9QYbM4j5mLQD81VFGImQN07wE3Oxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:8a:4c:8b:5e:58:3a:d5:a0:b2:98:86:60:d3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=178825286beec912d1988d08d2e277f518f3e4aa Validity Not Before: Dec 6 22:00:47 2025 GMT Not After : Dec 7 22:00:47 2025 GMT Subject: CN=f0536dac7519d67a3e341f6f24784ebe0b7815c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:20:45:52:64:1c:f7:f5:a2:ab:e6:0e:60:87: 7d:06:ce:cd:b6:4e:cb:52:3a:7a:7f:ed:29:0c:9f: 6f:e2:fb:0e:e9:6e:e7:c1:a2:d2:6f:4a:96:6d:e9: 6f:d3:76:09:b0:ac:64:54:01:ae:d4:06:d1:a2:77: 8c:58:fb:13:e0:d9:88:18:40:e1:76:a9:3a:4d:af: 91:90:9c:5e:75:f3:a6:00:a9:0a:55:ca:b7:e6:be: 36:fa:58:e1:cd:6b:39:21:b9:27:ee:c5:a9:00:a4: 02:5c:e8:78:30:c0:71:48:47:8e:3b:92:5f:00:f9: 8c:a1:26:43:79:5b:2d:42:31:ac:56:c4:0e:84:31: 47:ca:f4:a8:fc:b3:07:32:6e:63:1c:0e:ca:04:72: 72:79:fc:77:50:3a:31:96:99:1d:90:54:24:96:9d: a2:9a:dd:d6:8d:27:58:83:9f:da:a8:c6:90:00:cc: ec:56:29:61:79:f4:9a:ab:f8:2e:d5:f8:60:0f:7e: f9:e0:c2:b1:8c:f7:73:15:68:30:3b:44:29:fd:9c: f0:b8:e9:74:7e:b6:35:25:2c:21:36:73:c8:fc:5a: 67:14:61:d4:36:72:1f:d3:db:91:db:a8:3f:3f:29: be:be:ee:e4:f3:ea:b2:d2:e2:39:e5:eb:54:71:13: 48:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:53:6D:AC:75:19:D6:7A:3E:34:1F:6F:24:78:4E:BE:0B:78:15:C0 X509v3 Authority Key Identifier: keyid:17:88:25:28:6B:EE:C9:12:D1:98:8D:08:D2:E2:77:F5:18:F3:E4:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/efbb05-8940-43cf-ad1d-28acc7f3193a/1/F4glKGvuyRLRmI0I0uJ39Rjz5Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:61:d1:42:66:e5:8e:50:f5:5a:6b:37:cf:fd:26:00:8f:c9: 7d:e6:b4:75:87:02:6e:9f:ad:9d:14:76:c0:d7:8a:85:a7:89: 4f:99:8b:45:e2:fd:61:dd:45:5c:0a:50:fb:24:8f:c7:02:7e: 9e:9b:ae:47:7e:0a:c4:cd:39:13:3e:34:11:1f:b9:0d:0e:a8: b5:d6:d3:9f:d3:a3:5b:48:7a:41:03:dd:c9:e3:54:9b:8c:1e: 4a:d1:7e:ae:14:16:77:6d:7f:77:d2:d0:28:3c:c0:e1:6e:6e: af:1e:94:ba:ad:91:3c:b7:f7:64:c5:f0:6f:ef:27:19:5d:0a: 51:87:db:c6:92:06:b9:f8:3d:b4:e5:20:75:80:21:a1:46:4f: c7:b8:39:8a:10:40:68:a4:62:6a:08:5b:28:5b:4b:eb:bd:39: c1:94:41:09:e2:0c:43:fd:e2:7e:52:0b:5f:bb:cb:18:44:20: 38:e2:28:2f:4e:cd:d2:94:ec:22:51:ba:2b:b1:5f:d3:e2:a1: 72:c6:e3:45:d0:59:9c:fd:20:4a:51:54:0e:61:9b:aa:58:6a: 64:c7:94:b2:b3:92:0b:16:36:32:46:7d:78:ec:4c:8f:55:7c: ce:a0:5e:cd:e2:e3:9c:b1:29:c3:a5:6b:54:f9:a5:36:f7:78: 4f:77:d4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ropMi15YOtWgspiGYNNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ODgyNTI4NmJlZWM5MTJkMTk4OGQwOGQyZTI3N2Y1MThm M2U0YWEwHhcNMjUxMjA2MjIwMDQ3WhcNMjUxMjA3MjIwMDQ3WjAzMTEwLwYDVQQD EyhmMDUzNmRhYzc1MTlkNjdhM2UzNDFmNmYyNDc4NGViZTBiNzgxNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iBFUmQc9/Wiq+YOYId9Bs7Ntk7L Ujp6f+0pDJ9v4vsO6W7nwaLSb0qWbelv03YJsKxkVAGu1AbRoneMWPsT4NmIGEDh dqk6Ta+RkJxedfOmAKkKVcq35r42+ljhzWs5Ibkn7sWpAKQCXOh4MMBxSEeOO5Jf APmMoSZDeVstQjGsVsQOhDFHyvSo/LMHMm5jHA7KBHJyefx3UDoxlpkdkFQklp2i mt3WjSdYg5/aqMaQAMzsVilhefSaq/gu1fhgD3754MKxjPdzFWgwO0Qp/ZzwuOl0 frY1JSwhNnPI/FpnFGHUNnIf09uR26g/Pym+vu7k8+qy0uI55etUcRNIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBTbax1GdZ6PjQfbyR4Tr4LeBXAMB8GA1UdIwQY MBaAFBeIJShr7skS0ZiNCNLid/UY8+SqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQt MjhhY2M3ZjMxOTNhLzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lZmJiMDUtODk0MC00M2NmLWFkMWQtMjhhY2M3ZjMxOTNh LzEvRjRnbEtHdnV5UkxSbUkwSTB1SjM5Ump6NUtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2HRQmbl jlD1Wms3z/0mAI/Jfea0dYcCbp+tnRR2wNeKhaeJT5mLReL9Yd1FXApQ+ySPxwJ+ npuuR34KxM05Ez40ER+5DQ6otdbTn9OjW0h6QQPdyeNUm4weStF+rhQWd21/d9LQ KDzA4W5urx6Uuq2RPLf3ZMXwb+8nGV0KUYfbxpIGufg9tOUgdYAhoUZPx7g5ihBA aKRiaghbKFtL6705wZRBCeIMQ/3iflILX7vLGEQgOOIoL07N0pTsIlG6K7Ff0+Kh csbjRdBZnP0gSlFUDmGbqlhqZMeUsrOSCxY2MkZ9eOxMj1V8zqBezeLjnLEpw6Vr VPmlNvd4T3fUPA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:25:03 2025 by rpki-client