This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft File: F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft (raw, json) Hash identifier: rhJtnEs3yFM5k0TMnTsjkiCWjSM9RGBZKCgfp2+D8ZY= Subject key identifier: F0:C1:A0:7D:7C:86:0A:13:D7:FD:42:39:35:F6:3E:92:94:7B:A1:98 Authority key identifier: 17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48 Certificate issuer: /CN=17bcef9fa1f3b13842133aad4f7b401edc98e048 Certificate serial: 019AF208E51A4AAA16E45AACC768C3BD9BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft Manifest number: 0A30 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl (hash: KTJWuTlp8JaM8lZV6kckT2eQ4TdEp0QyaAR9CEU1gLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e5:1a:4a:aa:16:e4:5a:ac:c7:68:c3:bd:9b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bcef9fa1f3b13842133aad4f7b401edc98e048 Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=f0c1a07d7c860a13d7fd423935f63e92947ba198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:65:2c:c4:f2:33:d5:9d:6b:4d:ea:0b:f4: 77:b0:b7:d4:e5:9e:e6:f3:6f:90:52:dc:83:b0:f8: 8b:9f:90:9d:95:31:70:fe:5e:65:f6:62:0b:8a:87: bc:a2:66:41:3f:a0:b8:67:99:10:07:15:ef:4e:74: 1c:4c:58:86:98:a8:29:8d:12:41:ec:fd:dc:db:7e: 60:68:28:a4:89:c0:68:fc:b5:87:0f:6a:15:db:8a: 6c:6f:f1:3f:de:33:09:4c:5f:b1:25:4f:c7:af:15: 24:d2:f3:b1:9f:ec:7d:58:27:be:cf:cf:60:0a:1f: 38:68:8c:0c:00:6d:32:29:80:93:b4:aa:bf:99:50: 80:40:a5:a1:73:61:e0:2b:40:13:40:46:8d:e3:19: 10:1d:0b:e1:a5:79:4b:d9:65:5a:40:ab:97:88:39: 9f:6f:5a:58:0c:d3:15:7c:6c:14:fb:14:c3:b8:3c: ba:af:ec:05:1c:bd:3c:1a:04:31:8a:c1:7e:bc:96: 82:f7:54:ee:79:48:ce:f7:1a:6c:83:43:ca:56:d6: 41:2a:0d:e4:6d:24:66:99:42:99:25:bc:5e:72:a2: 73:32:5b:60:a0:8d:6e:72:1b:41:16:c0:af:af:85: 6c:76:38:5a:0c:4d:28:af:e5:61:6e:96:11:99:2d: 74:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:A0:7D:7C:86:0A:13:D7:FD:42:39:35:F6:3E:92:94:7B:A1:98 X509v3 Authority Key Identifier: keyid:17:BC:EF:9F:A1:F3:B1:38:42:13:3A:AD:4F:7B:40:1E:DC:98:E0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7zvn6HzsThCEzqtT3tAHtyY4Eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b3d8c4-37fb-40e8-82de-f8419fe5872b/1/F7zvn6HzsThCEzqtT3tAHtyY4Eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2d:e1:60:38:50:34:87:cb:bd:9a:78:61:51:c5:51:ce:4c: 47:42:6b:6a:58:e6:4c:d3:fe:b7:5e:7a:04:84:a9:9a:09:10: d9:5a:ff:53:bc:e8:61:6f:94:f1:c5:d5:8e:45:a7:92:1b:9b: 6c:7a:d3:39:70:98:e1:d6:98:c7:ad:d6:1c:9f:78:3c:5d:0f: be:24:de:11:8d:66:25:a1:4a:d3:99:40:a7:7f:22:bf:a6:4b: 2b:09:b0:39:a5:a5:46:1a:ba:df:0f:8e:1d:b3:00:51:99:5a: 6e:b6:9f:41:91:d0:10:d8:a0:20:f9:c6:b5:87:22:52:8c:eb: 24:08:c3:d8:c4:07:70:3a:dd:cd:cd:b5:5e:5c:7f:f6:88:fc: b9:31:a1:ae:44:37:dd:72:6c:7c:e9:8c:cd:40:f8:4e:d8:66: 44:e0:e4:46:41:da:65:b7:c3:0c:51:4f:3a:ff:df:51:e7:a9: c6:9c:b0:07:b8:76:e6:ba:f8:98:fc:59:4f:d6:b2:63:b7:28: 53:7a:9d:7c:82:ac:02:08:c0:2f:c7:34:42:63:00:cd:bd:30: 64:91:ed:19:67:61:31:61:f3:9a:04:c9:80:9f:11:a5:f6:1f: 4a:4b:71:5f:64:10:65:57:d0:5e:c0:b5:64:c3:52:fe:d3:52: 6c:eb:63:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOUaSqoW5Fqsx2jDvZvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmNlZjlmYTFmM2IxMzg0MjEzM2FhZDRmN2I0MDFlZGM5 OGUwNDgwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhmMGMxYTA3ZDdjODYwYTEzZDdmZDQyMzkzNWY2M2U5Mjk0N2JhMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk5lLMTyM9Wda03qC/R3sLfU5Z7m 82+QUtyDsPiLn5CdlTFw/l5l9mILioe8omZBP6C4Z5kQBxXvTnQcTFiGmKgpjRJB 7P3c235gaCikicBo/LWHD2oV24psb/E/3jMJTF+xJU/HrxUk0vOxn+x9WCe+z89g Ch84aIwMAG0yKYCTtKq/mVCAQKWhc2HgK0ATQEaN4xkQHQvhpXlL2WVaQKuXiDmf b1pYDNMVfGwU+xTDuDy6r+wFHL08GgQxisF+vJaC91TueUjO9xpsg0PKVtZBKg3k bSRmmUKZJbxecqJzMltgoI1uchtBFsCvr4VsdjhaDE0or+VhbpYRmS10DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDBoH18hgoT1/1COTX2PpKUe6GYMB8GA1UdIwQY MBaAFBe875+h87E4QhM6rU97QB7cmOBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUt Zjg0MTlmZTU4NzJiLzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iM2Q4YzQtMzdmYi00MGU4LTgyZGUtZjg0MTlmZTU4NzJi LzEvRjd6dm42SHpzVGhDRXpxdFQzdEFIdHlZNEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi3hYDhQ NIfLvZp4YVHFUc5MR0JraljmTNP+t156BISpmgkQ2Vr/U7zoYW+U8cXVjkWnkhub bHrTOXCY4daYx63WHJ94PF0PviTeEY1mJaFK05lAp38iv6ZLKwmwOaWlRhq63w+O HbMAUZlabrafQZHQENigIPnGtYciUozrJAjD2MQHcDrdzc21Xlx/9oj8uTGhrkQ3 3XJsfOmMzUD4TthmRODkRkHaZbfDDFFPOv/fUeepxpywB7h25rr4mPxZT9ayY7co U3qdfIKsAgjAL8c0QmMAzb0wZJHtGWdhMWHzmgTJgJ8RpfYfSktxX2QQZVfQXsC1 ZMNS/tNSbOtj4w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:35:24 2025 by rpki-client