This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json) Hash identifier: CM7S650p4n4AesIYV2+2cj7RpmnSb2IX6Fna0FrSCBo= Subject key identifier: F1:94:A2:E1:B5:CF:AF:8E:E3:E2:1F:37:9A:90:47:45:E8:70:6A:3D Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Certificate serial: 019AF23FD46CC96C700C792460D63BCC963C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft Manifest number: 14DA Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: Tjey3X4Pv7bjoO+A1pZNHX1yJ+l5ryhqIRQ3IbROzrM=) 2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d4:6c:c9:6c:70:0c:79:24:60:d6:3b:cc:96:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479 Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=f194a2e1b5cfaf8ee3e21f379a904745e8706a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:11:36:f4:f9:a4:57:1e:14:23:3d:ce:d7:1e: ea:13:44:ef:99:07:95:23:46:9d:cd:39:0e:3d:47: 9f:7b:1c:fe:ca:8a:69:97:02:ee:4d:0a:d8:2f:95: d7:8f:6f:ef:3e:0e:55:1d:6b:8c:6d:79:85:af:29: b8:f3:f6:4a:0c:79:93:0a:27:01:70:63:1b:b8:20: 4f:e5:de:94:68:a7:83:b7:76:52:63:e6:db:59:88: 88:74:7b:c0:36:59:a1:af:4c:b1:d4:98:a8:fe:a9: 87:97:ad:6f:49:93:36:97:6f:14:c0:08:a1:de:fb: 80:27:00:12:16:69:85:ad:c6:16:b6:c1:8f:14:f7: 10:d5:36:97:e3:43:f1:c3:45:a8:91:55:97:1f:f9: 16:60:ba:5e:68:d6:fa:15:c9:ac:2b:9b:db:a3:c6: 89:5c:f2:52:d0:ff:f0:47:e3:56:57:68:2a:1e:ff: 53:9b:20:c2:8a:3c:c1:5a:3a:05:16:4c:d4:c8:12: 6c:7d:87:aa:3b:ae:b6:57:f5:52:07:9b:22:4e:7c: d1:e8:75:cf:70:c3:30:d1:cf:dd:fd:ee:ec:f8:cf: ac:f8:a1:97:3e:0a:e8:a1:30:b9:7f:c2:ef:3b:93: 20:b6:2b:f2:29:44:22:b4:e0:ca:6d:ba:fe:ba:fc: 86:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:94:A2:E1:B5:CF:AF:8E:E3:E2:1F:37:9A:90:47:45:E8:70:6A:3D X509v3 Authority Key Identifier: keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b0:cb:6d:36:fe:1e:4b:95:bd:50:1a:7b:13:0e:61:1a:41: ab:c8:7b:80:4a:c4:10:6f:39:6a:81:8a:ef:75:bb:61:b4:20: 31:fc:30:79:c2:94:88:73:02:32:13:43:71:de:f5:5a:97:ce: 56:4c:0d:d7:f4:e5:97:e9:8c:ff:8f:eb:fe:c5:dc:dd:1a:d6: 0d:d9:ba:cf:38:aa:a7:3f:dd:c7:58:e2:2d:23:4c:f7:f9:83: 07:4b:57:fc:fb:15:1c:4b:54:44:51:44:99:b7:ab:5c:99:ce: 00:fb:12:3c:60:ab:98:2c:7a:e7:23:f3:1e:15:45:47:fc:ee: ff:d0:34:d2:a3:4b:cf:dc:07:47:78:fc:89:f5:82:2b:82:80: 31:66:76:c2:b2:68:45:90:f8:f9:24:84:b4:a9:95:23:05:52: 4a:82:7e:0e:bf:ab:ff:68:02:60:3d:c8:da:5f:c7:84:2c:b0: cf:c2:47:d6:48:2c:aa:d7:45:3c:10:4f:69:af:7e:2a:fe:2d: f1:79:3b:04:ec:97:9e:bf:2d:02:ca:e3:1f:21:ce:30:8e:d2: 69:6c:30:57:b3:45:71:1d:57:7e:e1:5d:99:3e:3a:2e:5b:2a: 89:2e:e9:14:a8:1c:cd:63:5e:84:15:34:d6:c5:0a:99:dd:5d: e6:c2:47:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9RsyWxwDHkkYNY7zJY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNThiYzA4NjQxMmY0ZDJjNTRmYTA3MDJkOTJjZTI1NDk2 Y2U0NzkwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD EyhmMTk0YTJlMWI1Y2ZhZjhlZTNlMjFmMzc5YTkwNDc0NWU4NzA2YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBE29PmkVx4UIz3O1x7qE0TvmQeV I0adzTkOPUefexz+yopplwLuTQrYL5XXj2/vPg5VHWuMbXmFrym48/ZKDHmTCicB cGMbuCBP5d6UaKeDt3ZSY+bbWYiIdHvANlmhr0yx1Jio/qmHl61vSZM2l28UwAih 3vuAJwASFmmFrcYWtsGPFPcQ1TaX40Pxw0WokVWXH/kWYLpeaNb6FcmsK5vbo8aJ XPJS0P/wR+NWV2gqHv9TmyDCijzBWjoFFkzUyBJsfYeqO662V/VSB5siTnzR6HXP cMMw0c/d/e7s+M+s+KGXPgrooTC5f8LvO5MgtivyKUQitODKbbr+uvyGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGUouG1z6+O4+IfN5qQR0XocGo9MB8GA1UdIwQY MBaAFH9YvAhkEvTSxU+gcC2SziVJbOR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjkt NTAxMGQwNWY5OWE4LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy81MzA5MzMtNTkxNS00ZmYyLWIxZjktNTAxMGQwNWY5OWE4 LzEvZjFpOENHUVM5TkxGVDZCd0xaTE9KVWxzNUhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7DLbTb+ HkuVvVAaexMOYRpBq8h7gErEEG85aoGK73W7YbQgMfwwecKUiHMCMhNDcd71WpfO VkwN1/Tll+mM/4/r/sXc3RrWDdm6zziqpz/dx1jiLSNM9/mDB0tX/PsVHEtURFFE mberXJnOAPsSPGCrmCx65yPzHhVFR/zu/9A00qNLz9wHR3j8ifWCK4KAMWZ2wrJo RZD4+SSEtKmVIwVSSoJ+Dr+r/2gCYD3I2l/HhCywz8JH1kgsqtdFPBBPaa9+Kv4t 8Xk7BOyXnr8tAsrjHyHOMI7SaWwwV7NFcR1XfuFdmT46LlsqiS7pFKgczWNehBU0 1sUKmd1d5sJHAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:21 2025 by rpki-client