This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json) Hash identifier: hO2uxyTsdv6D3/8hyJX58QJK+O6ZDD6dTt4Gu3p5AK8= Subject key identifier: FC:87:BC:FD:C5:16:9A:A2:F6:66:32:F7:2C:32:B8:31:60:5B:4E:58 Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019AF19B349CA434A390C0D9228408A4C2AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: WQzlOI5VYNqttlAfKRKsq+3GV9u8z1tkZhWMy5s+BjE=) 2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:34:9c:a4:34:a3:90:c0:d9:22:84:08:a4:c2:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=fc87bcfdc5169aa2f66632f72c32b831605b4e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:0f:56:70:20:c4:19:51:fa:ea:98:ae:8d: d2:1c:e3:8d:46:fb:32:de:7f:88:e0:b5:89:5f:a0: 43:15:f9:a6:e4:4d:61:6a:2d:fa:20:97:e0:77:3d: 0f:70:45:d2:1f:55:4f:9b:a9:a6:9b:31:21:18:02: cb:7b:fa:a3:98:b1:53:14:b3:f3:7b:35:2b:ce:db: dd:41:b8:21:72:ef:82:2f:56:b8:ae:fb:08:42:fc: fd:5a:92:cd:72:94:66:38:e2:b9:f8:0d:6b:18:f9: 44:de:2b:63:58:49:3c:f1:2b:0e:f2:a2:04:5d:e3: 1e:d4:97:27:39:66:ba:bc:2e:60:25:85:90:9a:22: e1:4d:75:40:bb:d2:3d:a6:80:da:b9:87:22:ac:b6: 90:af:a8:14:89:73:b2:1b:34:8c:ab:94:bb:0f:55: 05:fd:52:e2:da:ad:2c:ba:11:e7:11:f4:70:d2:1b: b1:f7:b6:9e:b8:c0:92:db:a0:21:1a:b7:75:fb:d4: 81:7b:b5:29:ba:5c:5a:da:2b:28:5b:79:6c:d8:42: ef:77:c1:70:5b:95:41:22:7c:a5:5c:c5:13:8d:f7: 89:e9:99:19:2a:30:f6:db:b5:6e:fd:1d:09:95:ba: bd:86:12:b7:c0:bd:5e:15:2f:73:9c:de:80:eb:cb: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:87:BC:FD:C5:16:9A:A2:F6:66:32:F7:2C:32:B8:31:60:5B:4E:58 X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:02:e8:83:60:0c:52:d0:cc:2c:a6:60:00:f4:a6:1d:56:77: 29:0b:d8:75:79:4b:a8:28:6c:08:ed:35:19:62:13:3c:51:f8: f9:4a:83:6a:f1:36:a0:df:21:fc:3a:d7:c2:ca:23:bb:6d:e4: 56:58:8b:ae:fb:73:58:e9:31:0a:e7:bc:f4:cf:4c:06:53:c1: ee:61:82:6c:9c:b3:49:c0:62:e4:5f:3b:12:3e:f3:0b:ec:b3: d9:c8:ff:7d:0a:b8:09:bd:35:37:7d:3a:40:82:4a:09:d9:b2: e7:1e:24:43:7d:4e:c5:05:1a:c1:16:b8:8a:4f:61:ca:47:98: fb:7b:76:a2:89:47:b9:3c:68:74:bd:fa:af:a3:5d:6f:04:fa: 98:56:67:2f:2c:5c:00:60:99:02:c6:30:10:20:24:32:e2:ac: 84:7e:b2:16:40:99:c1:81:2e:3f:b2:ef:93:1b:f9:d2:a2:87: 2d:ae:1f:0d:fe:50:ff:f8:7a:a1:e6:cb:7a:7c:4b:54:b4:24: be:7c:a7:c2:4f:33:17:5c:2f:f7:58:49:a0:6d:98:58:a9:d5: 70:a0:94:38:5e:ee:11:cc:be:dc:f0:da:08:45:77:2d:81:37: 3d:d3:71:f8:1c:d3:fc:00:32:6c:55:f2:ed:5d:8e:30:f4:2c: 57:4c:16:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzScpDSjkMDZIoQIpMKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EyhmYzg3YmNmZGM1MTY5YWEyZjY2NjMyZjcyYzMyYjgzMTYwNWI0ZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFYPVnAgxBlR+uqYro3SHOONRvsy 3n+I4LWJX6BDFfmm5E1hai36IJfgdz0PcEXSH1VPm6mmmzEhGALLe/qjmLFTFLPz ezUrztvdQbghcu+CL1a4rvsIQvz9WpLNcpRmOOK5+A1rGPlE3itjWEk88SsO8qIE XeMe1JcnOWa6vC5gJYWQmiLhTXVAu9I9poDauYcirLaQr6gUiXOyGzSMq5S7D1UF /VLi2q0suhHnEfRw0hux97aeuMCS26AhGrd1+9SBe7Upulxa2isoW3ls2ELvd8Fw W5VBInylXMUTjfeJ6ZkZKjD227Vu/R0Jlbq9hhK3wL1eFS9znN6A68t6eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyHvP3FFpqi9mYy9ywyuDFgW05YMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngLog2AM UtDMLKZgAPSmHVZ3KQvYdXlLqChsCO01GWITPFH4+UqDavE2oN8h/DrXwsoju23k VliLrvtzWOkxCue89M9MBlPB7mGCbJyzScBi5F87Ej7zC+yz2cj/fQq4Cb01N306 QIJKCdmy5x4kQ31OxQUawRa4ik9hykeY+3t2oolHuTxodL36r6NdbwT6mFZnLyxc AGCZAsYwECAkMuKshH6yFkCZwYEuP7Lvkxv50qKHLa4fDf5Q//h6oebLenxLVLQk vnynwk8zF1wv91hJoG2YWKnVcKCUOF7uEcy+3PDaCEV3LYE3PdNx+BzT/AAybFXy 7V2OMPQsV0wWYA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:27 2025 by rpki-client