This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft File: F-6GQi--PqSClo1Du-gwphS8MFg.mft (raw, json) Hash identifier: X/ca09SLeJcxARHCeC3ySyy3q9doJZqucrtUycoGyqc= Subject key identifier: 3B:D7:A0:E6:6D:BB:5A:69:92:0A:6C:62:17:56:97:E4:18:BB:62:F8 Authority key identifier: 17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58 Certificate issuer: /CN=17ee86422fbe3ea482968d43bbe830a614bc3058 Certificate serial: 019AF0F5DBEEF9D319F9A6A35C70B56D0887 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft Manifest number: 0122 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: F-6GQi--PqSClo1Du-gwphS8MFg.crl (hash: qub+b94GVN7Dhgch+SShzej36LAGANMYUPp46T03NnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:db:ee:f9:d3:19:f9:a6:a3:5c:70:b5:6d:08:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ee86422fbe3ea482968d43bbe830a614bc3058 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=3bd7a0e66dbb5a69920a6c62175697e418bb62f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:b8:ab:42:03:90:c8:2b:43:57:8c:5d:a4:9e: d8:c1:cb:bf:fc:64:a2:28:7f:71:ca:26:dc:07:0e: 99:5e:39:c8:71:a7:46:5c:a4:24:37:e1:9b:5f:68: b6:d4:e1:53:92:35:81:7d:dd:c3:20:30:40:09:8e: b2:db:b9:05:07:b7:9c:7c:bf:fe:2e:69:a4:03:bf: ac:69:b4:28:bf:2c:94:08:23:49:c3:bb:5c:69:22: e0:5b:f8:11:10:2d:7a:2b:30:a9:2e:24:1a:9f:90: dd:fd:72:a8:b4:4d:8c:c4:2b:69:d3:68:7d:ad:3e: ce:1d:0d:98:a7:bb:0c:5d:08:b1:7b:cc:be:2d:47: a3:78:c4:55:79:bf:7d:d1:e5:0b:9e:b8:46:fa:59: 3b:5a:6d:30:15:6c:29:70:68:4b:39:42:71:45:92: 64:b1:51:b8:cb:64:ac:b7:87:56:9b:4e:35:f5:f5: b1:b7:20:1e:d8:52:6f:b3:90:1e:b4:48:d1:01:e6: 9b:e4:0d:0f:d5:c7:83:c6:b2:1b:46:e9:bb:fe:d7: ae:b1:df:58:ce:e2:c3:a4:bc:ae:f3:e2:b3:e9:30: 27:4f:fb:c0:f3:bb:70:89:bc:e4:93:07:1b:ed:0d: 25:f8:c4:51:56:c4:c2:24:d9:7f:0c:1f:d3:57:c3: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:D7:A0:E6:6D:BB:5A:69:92:0A:6C:62:17:56:97:E4:18:BB:62:F8 X509v3 Authority Key Identifier: keyid:17:EE:86:42:2F:BE:3E:A4:82:96:8D:43:BB:E8:30:A6:14:BC:30:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-6GQi--PqSClo1Du-gwphS8MFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0458ee-fa55-47a6-9464-20e337436abe/1/F-6GQi--PqSClo1Du-gwphS8MFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bc:c4:7a:3a:40:cd:d2:94:25:4b:5d:de:85:b7:d5:33:ef: 06:86:f9:80:5d:de:b4:44:f5:c2:26:56:c6:b1:a1:98:d9:66: b8:c7:f3:51:c5:76:84:7d:0c:f6:f4:01:91:c2:c9:ad:42:bb: 9d:8c:82:94:d5:6d:1e:cc:42:5c:79:95:62:bf:9b:6a:f6:e3: 2a:59:dd:3c:99:80:e0:01:5c:bc:bf:b9:b7:93:3a:eb:e4:67: d1:43:87:1c:42:33:70:42:c8:d6:c7:eb:bb:f4:13:96:94:d9: f7:65:ba:bd:2b:9b:2f:89:dd:ef:02:ad:5a:f8:60:0e:70:31: 23:02:78:27:77:21:95:f4:4e:10:f8:81:22:60:84:9f:d7:39: af:7b:5a:e3:99:35:ca:85:5f:3d:a6:61:96:97:9b:a7:2e:83: da:43:de:f8:68:72:ed:d4:ec:b7:19:48:25:39:da:aa:6f:fa: 81:53:6a:7c:5f:37:2a:74:c9:5b:d5:dc:48:ad:75:38:31:26: 93:07:1f:d6:33:99:c0:16:97:05:bc:1e:6f:40:eb:07:c4:c7: 77:18:e6:5c:78:b2:83:13:dd:a9:e8:a1:f9:45:b6:db:52:f3: 9e:e8:9c:a2:95:2f:20:e2:bb:1d:f3:51:18:e8:9e:fd:ef:87: bf:a4:cd:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dvu+dMZ+aajXHC1bQiHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZWU4NjQyMmZiZTNlYTQ4Mjk2OGQ0M2JiZTgzMGE2MTRi YzMwNTgwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EygzYmQ3YTBlNjZkYmI1YTY5OTIwYTZjNjIxNzU2OTdlNDE4YmI2MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57irQgOQyCtDV4xdpJ7Ywcu//GSi KH9xyibcBw6ZXjnIcadGXKQkN+GbX2i21OFTkjWBfd3DIDBACY6y27kFB7ecfL/+ LmmkA7+sabQovyyUCCNJw7tcaSLgW/gREC16KzCpLiQan5Dd/XKotE2MxCtp02h9 rT7OHQ2Yp7sMXQixe8y+LUejeMRVeb990eULnrhG+lk7Wm0wFWwpcGhLOUJxRZJk sVG4y2Sst4dWm0419fWxtyAe2FJvs5AetEjRAeab5A0P1ceDxrIbRum7/teusd9Y zuLDpLyu8+Kz6TAnT/vA87twibzkkwcb7Q0l+MRRVsTCJNl/DB/TV8PA0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvXoOZtu1ppkgpsYhdWl+QYu2L4MB8GA1UdIwQY MBaAFBfuhkIvvj6kgpaNQ7voMKYUvDBYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8wNDU4ZWUtZmE1NS00N2E2LTk0NjQt MjBlMzM3NDM2YWJlLzEvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8wNDU4ZWUtZmE1NS00N2E2LTk0NjQtMjBlMzM3NDM2YWJl LzEvRi02R1FpLS1QcVNDbG8xRHUtZ3dwaFM4TUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrzEejpA zdKUJUtd3oW31TPvBob5gF3etET1wiZWxrGhmNlmuMfzUcV2hH0M9vQBkcLJrUK7 nYyClNVtHsxCXHmVYr+bavbjKlndPJmA4AFcvL+5t5M66+Rn0UOHHEIzcELI1sfr u/QTlpTZ92W6vSubL4nd7wKtWvhgDnAxIwJ4J3chlfROEPiBImCEn9c5r3ta45k1 yoVfPaZhlpebpy6D2kPe+Ghy7dTstxlIJTnaqm/6gVNqfF83KnTJW9XcSK11ODEm kwcf1jOZwBaXBbweb0DrB8THdxjmXHiygxPdqeih+UW221LznuicopUvIOK7HfNR GOie/e+Hv6TNbA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:40 2025 by rpki-client