This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft File: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft (raw, json) Hash identifier: 8+8ySmPISIQzz8d2zvBYiBe6EGhGbDMHG1trPCesHq0= Subject key identifier: F8:FC:F1:52:1D:08:CD:EE:FB:66:84:88:26:D7:69:1F:90:6F:55:F9 Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Certificate serial: 019AF277000D231C13300A75DF5FDDAFB112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 07:01:16 +0000 Manifest this update: Sat 06 Dec 2025 07:01:16 +0000 Manifest next update: Sun 07 Dec 2025 07:01:16 +0000 Files and hashes: 1: 0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl (hash: XI5g3BZME6xEew2imeh8nspFrnINSm+F7nfAHtyjPuM=) 2: aLQQDXXyyFCFCxYHC8_say5CLUI.roa (hash: zI2tGfqAmXq7ygJfVvFOBT2dePoqj3hccAoRf3t6VUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:00:0d:23:1c:13:30:0a:75:df:5f:dd:af:b1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2 Validity Not Before: Dec 6 07:01:16 2025 GMT Not After : Dec 7 07:01:16 2025 GMT Subject: CN=f8fcf1521d08cdeefb66848826d7691f906f55f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0e:31:7b:6a:60:57:eb:a3:8a:53:71:d1:7e: cb:1a:a2:78:8b:fe:c8:ac:43:00:25:75:1f:0e:be: a1:24:80:52:6a:ab:03:22:04:c7:6e:23:ec:0b:0f: eb:d0:13:06:cf:56:c0:5b:8c:7a:0a:2f:f4:7f:30: 9c:8d:1f:27:5e:b5:2e:eb:a8:84:da:ea:3a:d0:7f: 16:21:7d:c4:72:c3:6c:98:90:31:68:01:2d:4e:7e: f6:14:67:98:fd:10:2c:fc:a4:76:69:52:99:4d:95: 89:f4:f4:45:0d:2f:cb:14:1e:f8:f1:73:8d:36:45: ac:ef:d0:51:dd:fd:8b:db:b5:ca:f9:e3:74:0e:1d: 69:ec:5d:fc:2b:d9:6f:d4:a6:ff:73:5a:b9:2b:fc: 35:73:92:d0:79:8c:65:96:88:f4:af:01:6f:a6:9f: db:a4:f2:01:25:51:68:b8:32:6e:b7:a3:be:ca:99: 1e:0c:c2:03:99:2c:b1:55:6b:40:97:e3:3a:ec:ed: 4a:1c:7e:d7:2d:fd:95:9a:08:9f:46:bf:84:e9:6e: 78:b1:78:2c:9b:57:62:4e:71:3f:8f:71:f3:cf:63: 87:f9:28:fa:7b:bd:e8:cb:03:76:8b:71:f7:fb:71: 44:e2:52:d6:52:1b:c8:36:cd:93:ca:a7:10:57:34: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:F1:52:1D:08:CD:EE:FB:66:84:88:26:D7:69:1F:90:6F:55:F9 X509v3 Authority Key Identifier: keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3d:a3:df:e4:82:f2:16:f3:6d:c8:b1:a8:5e:f7:5c:8e:70: 0d:21:10:75:9e:71:33:a4:b9:a0:27:de:37:cf:00:2b:94:95: 20:b3:a6:a9:61:41:d3:48:0a:61:22:69:2c:44:1b:4e:79:5f: 14:a0:6e:b2:fc:f8:8f:dc:73:f5:fb:33:62:14:36:35:34:ec: 0c:9f:5b:77:db:a4:fc:6e:67:9f:84:52:a5:c1:c3:e5:d4:06: 96:d4:03:6f:79:40:f8:03:05:f3:44:81:96:6d:86:93:fe:84: 8e:ac:b4:f0:75:e7:5a:cc:d0:7c:d1:c0:32:5e:1f:b4:82:b1: c4:9f:64:4f:5c:81:65:02:27:39:28:98:b9:b2:4b:39:7a:df: 85:e3:45:a8:e7:b6:b5:f3:1c:b9:4b:ec:53:a6:07:76:06:a6: 09:a1:17:35:35:02:04:3b:45:d7:ef:2e:45:3f:ff:05:24:c1: 03:60:84:55:d1:ee:01:5b:57:36:bd:ea:63:53:bd:ef:b1:1c: f4:1d:22:31:2b:39:5f:d5:39:49:a4:b9:20:10:6e:11:de:73: e0:be:ac:48:ae:1b:07:91:7b:be:d2:d8:26:99:41:35:38:b7: ed:fb:2f:d0:03:eb:d5:2b:90:a4:65:02:94:b3:41:e7:ab:28: a7:2f:bc:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwANIxwTMAp131/dr7ESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNmQ0Yzc1Y2ViZTg5NjE0Y2YyZTdlMmU2MTRjMDM2ZjZm NTNlZTIwHhcNMjUxMjA2MDcwMTE2WhcNMjUxMjA3MDcwMTE2WjAzMTEwLwYDVQQD EyhmOGZjZjE1MjFkMDhjZGVlZmI2Njg0ODgyNmQ3NjkxZjkwNmY1NWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg4xe2pgV+ujilNx0X7LGqJ4i/7I rEMAJXUfDr6hJIBSaqsDIgTHbiPsCw/r0BMGz1bAW4x6Ci/0fzCcjR8nXrUu66iE 2uo60H8WIX3EcsNsmJAxaAEtTn72FGeY/RAs/KR2aVKZTZWJ9PRFDS/LFB748XON NkWs79BR3f2L27XK+eN0Dh1p7F38K9lv1Kb/c1q5K/w1c5LQeYxlloj0rwFvpp/b pPIBJVFouDJut6O+ypkeDMIDmSyxVWtAl+M67O1KHH7XLf2VmgifRr+E6W54sXgs m1diTnE/j3Hzz2OH+Sj6e73oywN2i3H3+3FE4lLWUhvINs2TyqcQVzScnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj88VIdCM3u+2aEiCbXaR+Qb1X5MB8GA1UdIwQY MBaAFNJtTHXOvolhTPLn4uYUwDb29T7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUt ODg5MzhiZDUzYzE2LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xYWEwYTMtZmNhYi00ODFlLTg2ZjUtODg5MzhiZDUzYzE2 LzEvMG0xTWRjNi1pV0ZNOHVmaTVoVEFOdmIxUHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoT2j3+SC 8hbzbcixqF73XI5wDSEQdZ5xM6S5oCfeN88AK5SVILOmqWFB00gKYSJpLEQbTnlf FKBusvz4j9xz9fszYhQ2NTTsDJ9bd9uk/G5nn4RSpcHD5dQGltQDb3lA+AMF80SB lm2Gk/6Ejqy08HXnWszQfNHAMl4ftIKxxJ9kT1yBZQInOSiYubJLOXrfheNFqOe2 tfMcuUvsU6YHdgamCaEXNTUCBDtF1+8uRT//BSTBA2CEVdHuAVtXNr3qY1O977Ec 9B0iMSs5X9U5SaS5IBBuEd5z4L6sSK4bB5F7vtLYJplBNTi37fsv0APr1SuQpGUC lLNB56sopy+8gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:27 2025 by rpki-client