This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json) Hash identifier: GNoh50eJAVAFyevSSPYep+qJLE0jhjjqDRXshWh1Lf8= Subject key identifier: 2F:A7:36:AC:0D:A7:90:A8:FB:96:DF:DD:4A:2A:1C:9F:AD:1B:05:71 Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab Certificate serial: 019AF276B3FE84DEAD5DE0999043D5C43920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft Manifest number: 0187 Signing time: Sat 06 Dec 2025 07:00:56 +0000 Manifest this update: Sat 06 Dec 2025 07:00:56 +0000 Manifest next update: Sun 07 Dec 2025 07:00:56 +0000 Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: mNX6pYM4eNW14+FAqO6/nRdUg/n3ZIUw4D21XmOpvbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b3:fe:84:de:ad:5d:e0:99:90:43:d5:c4:39:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab Validity Not Before: Dec 6 07:00:56 2025 GMT Not After : Dec 7 07:00:56 2025 GMT Subject: CN=2fa736ac0da790a8fb96dfdd4a2a1c9fad1b0571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:b2:43:38:47:6a:9a:90:da:76:41:64:a1: 29:9b:a8:b4:8a:0a:dc:1c:b9:f5:2f:69:ca:a8:2b: 1d:ba:f5:8f:9d:07:19:87:87:6b:73:c3:e2:36:15: 7b:48:da:28:10:8c:ba:b3:af:2f:f2:a2:84:a7:a3: 47:2a:b4:2e:8f:2f:f3:3d:2b:29:f9:db:2c:ba:b0: c8:92:00:dd:ed:54:db:8a:f1:52:ff:49:de:c4:22: e8:e3:12:4a:c6:49:71:ac:04:75:72:ab:08:f5:f7: ab:f8:ae:7c:24:bb:27:55:c9:ce:e6:0f:6c:5d:e0: a1:2d:4b:81:50:15:8f:4d:69:1d:ac:73:6b:20:1d: 7b:2b:ec:90:37:7f:14:fe:dc:09:b7:ec:95:03:71: ec:1e:48:9c:af:70:ce:3e:02:7b:4c:1f:dc:48:53: 17:00:8f:70:cb:e4:c2:ea:d4:ea:bc:1c:39:f0:db: 1e:92:3f:68:f7:ae:31:d8:b5:ef:4f:3a:f6:39:14: c2:4e:42:85:86:7d:c1:a2:5d:6a:8e:7a:8a:ac:ff: e9:8e:c0:4d:fa:29:66:7c:72:27:7f:9c:c6:f9:5f: 6d:83:d6:40:fb:38:34:94:d5:59:6b:29:47:23:b9: 9f:3d:f8:0e:1c:3f:07:80:79:99:7c:97:f0:ed:5c: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A7:36:AC:0D:A7:90:A8:FB:96:DF:DD:4A:2A:1C:9F:AD:1B:05:71 X509v3 Authority Key Identifier: keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f6:a0:17:ba:b6:26:d2:29:bd:45:d9:c1:d4:99:39:c2:63: ff:be:95:b0:69:de:82:07:4b:da:ef:d7:a3:46:4f:07:63:b1: d0:28:96:8b:6d:39:66:4c:9d:c9:8d:4d:32:2d:db:9e:a0:49: d4:75:f6:87:5c:bc:76:86:16:d8:3c:36:b7:53:3a:84:f0:4b: df:a8:81:1f:14:b7:ff:29:0d:15:e4:8a:7b:96:64:a9:25:96: 38:bc:e8:d5:bb:c6:45:79:f0:8e:1e:87:16:e2:d0:13:6d:61: 1b:43:41:fd:65:8a:b6:eb:ea:be:d8:e7:55:d6:a0:cf:71:07: 38:83:74:48:2e:26:d8:b5:20:cd:39:0c:1e:cb:22:a7:57:65: 61:3e:e1:d4:8c:0d:dd:d3:e0:d5:26:dc:88:3e:9d:70:0e:12: 8d:0f:e5:e9:43:ff:e0:ec:69:4f:8e:65:ba:d5:46:23:39:3d: f1:dd:c2:c6:4f:a1:a9:a9:a8:78:35:e2:d9:6c:38:d5:b8:a9: c6:dc:5a:e4:3b:78:8e:58:aa:32:9a:b5:07:a3:9d:ec:bf:b0: a7:a5:ba:d5:e3:c5:98:75:62:c8:94:cc:7c:83:45:4f:cf:2b: 43:af:01:fd:f5:80:38:97:a5:cc:57:aa:6c:27:25:bb:b5:32: 2f:2c:a2:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrP+hN6tXeCZkEPVxDkgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOGIyMTgzNTg5ODNhN2Q3YTI1MzhhOWRhOWJhMWYzNDk0 ZDcxYWIwHhcNMjUxMjA2MDcwMDU2WhcNMjUxMjA3MDcwMDU2WjAzMTEwLwYDVQQD EygyZmE3MzZhYzBkYTc5MGE4ZmI5NmRmZGQ0YTJhMWM5ZmFkMWIwNTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvOyQzhHapqQ2nZBZKEpm6i0igrc HLn1L2nKqCsduvWPnQcZh4drc8PiNhV7SNooEIy6s68v8qKEp6NHKrQujy/zPSsp +dssurDIkgDd7VTbivFS/0nexCLo4xJKxklxrAR1cqsI9fer+K58JLsnVcnO5g9s XeChLUuBUBWPTWkdrHNrIB17K+yQN38U/twJt+yVA3HsHkicr3DOPgJ7TB/cSFMX AI9wy+TC6tTqvBw58Nsekj9o964x2LXvTzr2ORTCTkKFhn3Bol1qjnqKrP/pjsBN +ilmfHInf5zG+V9tg9ZA+zg0lNVZaylHI7mfPfgOHD8HgHmZfJfw7VwTlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+nNqwNp5Co+5bf3UoqHJ+tGwVxMB8GA1UdIwQY MBaAFH+LIYNYmDp9eiU4qdqbofNJTXGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYt OThkYmI2NDAyY2RkLzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYtOThkYmI2NDAyY2Rk LzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfagF7q2 JtIpvUXZwdSZOcJj/76VsGneggdL2u/Xo0ZPB2Ox0CiWi205ZkydyY1NMi3bnqBJ 1HX2h1y8doYW2Dw2t1M6hPBL36iBHxS3/ykNFeSKe5ZkqSWWOLzo1bvGRXnwjh6H FuLQE21hG0NB/WWKtuvqvtjnVdagz3EHOIN0SC4m2LUgzTkMHssip1dlYT7h1IwN 3dPg1SbciD6dcA4SjQ/l6UP/4OxpT45lutVGIzk98d3Cxk+hqamoeDXi2Ww41bip xtxa5Dt4jliqMpq1B6Od7L+wp6W61ePFmHViyJTMfINFT88rQ68B/fWAOJelzFeq bCclu7UyLyyiMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:35 2025 by rpki-client