This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json) Hash identifier: 7TUcpFBW1PYD07Kh9rt6tSUfzxeYnVWmfFKkgQXEp6E= Subject key identifier: 44:2B:A9:2B:F0:5D:EA:0B:51:02:0E:09:02:31:EB:BC:87:D6:04:7C Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d Certificate serial: 019AF23F9E53DA7B30E408F636F0819225E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft Manifest number: 09C8 Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: /qzLdOsBU21jQDAaVkx4tf2vLV87YLelWocFbRkNfCw=) 2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9e:53:da:7b:30:e4:08:f6:36:f0:81:92:25:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=442ba92bf05dea0b51020e090231ebbc87d6047c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:3f:59:cb:f1:39:c6:8e:0c:f5:33:97:22: 82:8b:d2:3c:72:0f:76:6c:0f:22:42:4a:df:5c:ea: dc:71:d0:04:fd:8a:fc:28:d4:21:45:14:97:b1:fb: 06:a6:c8:f7:a1:77:3f:da:99:2c:3e:06:57:74:0a: 0e:54:df:0c:26:03:d1:74:0a:85:98:76:78:e5:5f: fb:9c:df:1e:fc:4b:80:2e:ea:f8:9c:3c:74:c4:db: 52:17:de:56:bc:20:b0:9a:1a:9d:74:41:e8:69:58: d7:6b:a4:9f:da:8a:90:67:22:13:bb:93:43:21:08: 2d:ac:bb:3b:25:24:49:df:74:e0:8d:7f:e5:c2:68: 01:4a:39:64:a3:b1:1d:47:09:bc:93:ee:a0:f9:cb: 27:5b:92:7c:5b:eb:87:61:2a:19:41:b6:ca:00:3b: 21:04:f1:72:85:58:4d:08:7e:19:9e:7c:13:09:b8: e6:86:22:fd:89:0d:07:36:35:90:bb:77:73:0c:21: 38:a5:f6:5a:cf:9d:bb:da:40:b9:e0:6b:02:6a:e1: a7:6f:7f:73:2d:78:f3:8b:ee:b8:a3:cf:cf:45:79: df:2d:0b:95:d2:12:57:82:89:38:94:1b:3e:a3:8a: aa:bc:ff:31:60:d8:d8:94:0e:3e:6b:c7:5f:72:c7: 14:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2B:A9:2B:F0:5D:EA:0B:51:02:0E:09:02:31:EB:BC:87:D6:04:7C X509v3 Authority Key Identifier: keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:88:b5:d6:0a:16:af:79:95:fd:93:18:06:ca:82:ad:f2:67: 32:6d:05:4d:e3:73:08:44:2d:28:13:43:d5:0f:a1:05:53:d0: 05:a4:1b:c0:c9:72:11:f7:d7:86:8e:79:ef:13:77:8a:55:26: 43:7b:75:f3:97:1f:fe:b9:d2:e8:4d:bf:12:5a:bc:fe:66:c4: 9e:1f:20:f0:87:bf:3a:bf:24:75:d8:c9:dc:1d:02:01:80:e3: 44:56:e3:5f:43:9d:28:1f:ef:07:2c:49:8d:d6:38:b5:0e:3f: 32:26:c6:70:10:63:91:d8:f8:12:df:ab:ea:7b:89:d0:fc:f5: 80:64:d6:fd:9e:30:fa:ba:9e:13:c2:f8:17:a6:51:37:32:3d: 98:96:26:78:0f:e8:b7:5d:65:42:30:94:31:34:9d:e9:2c:fa: 82:c7:49:75:c9:a0:8d:ff:8f:60:4d:89:c3:e8:02:38:a7:e1: 6c:9c:df:ae:12:a6:22:f8:21:80:9b:17:0f:9c:a9:37:08:ed: da:ff:b8:49:31:2c:b0:dd:c0:97:0d:6e:df:63:46:35:14:b8: 67:20:42:bc:cf:80:c4:97:fe:17:8e:4c:4c:71:91:8f:9c:71: de:15:32:a8:66:f6:73:74:8c:3a:69:af:db:88:0e:d0:69:6d: 5e:55:68:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP55T2nsw5Aj2NvCBkiXjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0 MzU5NWQwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD Eyg0NDJiYTkyYmYwNWRlYTBiNTEwMjBlMDkwMjMxZWJiYzg3ZDYwNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07g/WcvxOcaODPUzlyKCi9I8cg92 bA8iQkrfXOrccdAE/Yr8KNQhRRSXsfsGpsj3oXc/2pksPgZXdAoOVN8MJgPRdAqF mHZ45V/7nN8e/EuALur4nDx0xNtSF95WvCCwmhqddEHoaVjXa6Sf2oqQZyITu5ND IQgtrLs7JSRJ33TgjX/lwmgBSjlko7EdRwm8k+6g+csnW5J8W+uHYSoZQbbKADsh BPFyhVhNCH4ZnnwTCbjmhiL9iQ0HNjWQu3dzDCE4pfZaz5272kC54GsCauGnb39z LXjzi+64o8/PRXnfLQuV0hJXgok4lBs+o4qqvP8xYNjYlA4+a8dfcscUzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQrqSvwXeoLUQIOCQIx67yH1gR8MB8GA1UdIwQY MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt YTc1ZjNkZjQ2YWYxLzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcoi11goW r3mV/ZMYBsqCrfJnMm0FTeNzCEQtKBND1Q+hBVPQBaQbwMlyEffXho557xN3ilUm Q3t185cf/rnS6E2/Elq8/mbEnh8g8Ie/Or8kddjJ3B0CAYDjRFbjX0OdKB/vByxJ jdY4tQ4/MibGcBBjkdj4Et+r6nuJ0Pz1gGTW/Z4w+rqeE8L4F6ZRNzI9mJYmeA/o t11lQjCUMTSd6Sz6gsdJdcmgjf+PYE2Jw+gCOKfhbJzfrhKmIvghgJsXD5ypNwjt 2v+4STEssN3Alw1u32NGNRS4ZyBCvM+AxJf+F45MTHGRj5xx3hUyqGb2c3SMOmmv 24gO0GltXlVojA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:08 2025 by rpki-client