This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json) Hash identifier: OzFPbHOWvSCvGAJbiqi9CZ4J7OQsU/9/kyWXouyaijU= Subject key identifier: A0:A1:D5:87:B7:ED:F7:FF:BB:05:B4:A4:FF:6F:B0:E5:D8:24:93:5F Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a Certificate serial: 019AF12CD0FF83EE63F75C0DE2A71FCAD034 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft Manifest number: 0E71 Signing time: Sat 06 Dec 2025 01:00:37 +0000 Manifest this update: Sat 06 Dec 2025 01:00:37 +0000 Manifest next update: Sun 07 Dec 2025 01:00:37 +0000 Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: 4gGosjy/rFS1U2JWtb0ZrPEYU38b0MCzlWr5c+grcH0=) 2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:d0:ff:83:ee:63:f7:5c:0d:e2:a7:1f:ca:d0:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a Validity Not Before: Dec 6 01:00:37 2025 GMT Not After : Dec 7 01:00:37 2025 GMT Subject: CN=a0a1d587b7edf7ffbb05b4a4ff6fb0e5d824935f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8e:80:97:ca:76:43:62:52:d4:1b:99:70:43: 1f:e1:89:cc:d6:72:b1:05:30:9c:0f:04:bf:0e:62: 7d:5f:9c:61:85:ce:48:f6:6f:7f:67:09:3f:5f:38: 05:24:6a:ba:23:9d:ec:8e:d0:9c:c9:d8:c3:44:54: 24:3b:40:62:34:f5:f5:4e:ef:be:ea:0e:9d:b7:22: dc:bf:11:f0:a1:2c:6e:d7:f9:6a:26:f0:8d:58:80: 8e:6a:af:6e:2b:e6:5c:37:1a:c1:51:81:6e:fb:7f: ba:60:9f:b2:e1:b5:9b:88:9c:f8:bb:8b:45:69:8e: 1b:da:88:99:97:18:30:ab:5e:68:b4:74:a0:e1:73: 64:11:a1:82:5e:fc:ed:3b:42:69:54:a9:50:a2:71: 40:f1:c0:0b:07:7a:a8:db:fa:e0:7b:78:36:ae:03: 4c:d5:f4:14:8e:f5:b7:c1:82:00:07:70:ad:b0:a1: 7f:c6:44:4b:b4:1a:8a:aa:b6:6e:c5:53:4f:d1:e3: 94:49:f2:7d:ee:c3:18:62:3c:39:79:7e:c6:73:cb: db:46:f7:24:aa:11:65:d8:91:b8:cb:51:fd:d8:a7: 28:12:3e:85:d4:e9:9b:be:1c:2b:c7:5b:65:d2:d4: c4:29:f8:49:b6:67:11:28:a6:33:1a:e2:f9:01:cb: 90:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A1:D5:87:B7:ED:F7:FF:BB:05:B4:A4:FF:6F:B0:E5:D8:24:93:5F X509v3 Authority Key Identifier: keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1f:83:33:a6:ec:e0:56:1b:73:73:42:fb:d4:9f:81:c4:f7: d7:88:b1:26:73:3e:88:c3:9f:bd:11:72:8f:ea:ab:bd:69:bc: b8:19:08:5e:e5:f0:f6:50:a0:55:b7:f6:e5:03:4a:c9:cc:6e: 7e:be:fd:04:d2:81:58:ee:f7:32:86:d0:cb:18:56:c6:db:29: eb:ce:a0:ef:ee:fa:2d:1d:ea:88:80:11:72:76:a1:3e:3e:43: c7:ff:c3:1c:46:26:e1:7e:f2:4f:e5:43:d7:4c:02:d6:12:ed: ae:ff:e6:6c:91:2e:2d:73:76:37:51:f6:fc:01:42:8d:2c:52: f1:4e:71:39:94:d0:f8:4c:55:bc:2a:9e:d3:24:dc:9e:26:fc: 64:7c:0f:71:2f:60:62:80:24:98:1f:c9:18:02:fa:a2:ae:34: 8d:2a:31:f4:ce:90:84:35:ab:1d:cb:cc:37:c5:b1:a6:8c:9b: 45:6a:72:eb:5f:f7:f4:2c:1f:94:21:c5:52:fa:d9:4f:d5:98: 8d:65:3a:a6:74:d2:45:93:c6:d8:df:0c:b4:de:6f:6e:35:ab: bd:4e:ed:72:2f:a7:c7:45:18:fb:ee:b1:7e:90:0c:25:70:19: 11:78:39:de:52:36:46:5a:b5:48:c7:0e:d7:45:40:2a:0c:14: 0d:f5:b0:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLND/g+5j91wN4qcfytA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw ZDM5NmEwHhcNMjUxMjA2MDEwMDM3WhcNMjUxMjA3MDEwMDM3WjAzMTEwLwYDVQQD EyhhMGExZDU4N2I3ZWRmN2ZmYmIwNWI0YTRmZjZmYjBlNWQ4MjQ5MzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy46Al8p2Q2JS1BuZcEMf4YnM1nKx BTCcDwS/DmJ9X5xhhc5I9m9/Zwk/XzgFJGq6I53sjtCcydjDRFQkO0BiNPX1Tu++ 6g6dtyLcvxHwoSxu1/lqJvCNWICOaq9uK+ZcNxrBUYFu+3+6YJ+y4bWbiJz4u4tF aY4b2oiZlxgwq15otHSg4XNkEaGCXvztO0JpVKlQonFA8cALB3qo2/rge3g2rgNM 1fQUjvW3wYIAB3CtsKF/xkRLtBqKqrZuxVNP0eOUSfJ97sMYYjw5eX7Gc8vbRvck qhFl2JG4y1H92KcoEj6F1Ombvhwrx1tl0tTEKfhJtmcRKKYzGuL5AcuQBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCh1Ye37ff/uwW0pP9vsOXYJJNfMB8GA1UdIwQY MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh+DM6bs 4FYbc3NC+9SfgcT314ixJnM+iMOfvRFyj+qrvWm8uBkIXuXw9lCgVbf25QNKycxu fr79BNKBWO73MobQyxhWxtsp686g7+76LR3qiIARcnahPj5Dx//DHEYm4X7yT+VD 10wC1hLtrv/mbJEuLXN2N1H2/AFCjSxS8U5xOZTQ+ExVvCqe0yTcnib8ZHwPcS9g YoAkmB/JGAL6oq40jSox9M6QhDWrHcvMN8WxpoybRWpy61/39CwflCHFUvrZT9WY jWU6pnTSRZPG2N8MtN5vbjWrvU7tci+nx0UY++6xfpAMJXAZEXg53lI2Rlq1SMcO 10VAKgwUDfWwjA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:12 2025 by rpki-client