This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft File: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json) Hash identifier: WZpx0RF7QASNwICn/QBuD1hC1u34IzU6O/s9x1kkxuk= Subject key identifier: 4D:41:63:EE:46:74:E6:5A:58:91:CE:81:E1:A1:F6:21:AA:8A:34:96 Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Certificate serial: 019AF19BB299CB97DD3C7865C9DEA0B0E206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft Manifest number: 09DB Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=) 2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: ngbHRS1QYvMGK4GuBNVXa0bQ/h0LlBBAI3vsK5qWBQ8=) 3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=) 4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b2:99:cb:97:dd:3c:78:65:c9:de:a0:b0:e2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=4d4163ee4674e65a5891ce81e1a1f621aa8a3496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ab:11:8d:d3:ef:18:fe:31:f3:2c:59:6e:95: 4c:c3:27:18:57:73:ed:ca:7d:10:b6:99:58:fb:4d: 74:06:07:33:ab:71:ac:07:a4:e7:d6:4e:5f:ab:dc: 78:0e:de:67:41:01:df:46:86:5e:a5:8b:6c:84:ec: 36:25:d2:37:5c:f2:5e:93:4a:7e:db:d4:4e:78:18: 4f:8d:f1:9b:17:22:53:53:86:98:15:ff:0b:8e:e5: 41:65:0c:6c:68:de:17:96:26:5d:be:f1:63:4d:00: f8:bd:c6:f0:8b:36:1b:9c:65:d0:c3:42:21:c3:19: c0:24:3a:a1:97:50:e4:c4:67:5d:b8:ac:3e:48:d4: ac:a7:1e:21:98:48:88:52:45:70:a1:c8:98:f1:01: d3:7e:ea:15:21:6b:56:74:16:b5:2b:b6:12:88:e3: 44:75:68:f0:45:06:45:8f:4c:c2:fb:12:ac:92:3a: 90:1c:61:d7:e5:52:22:e8:e8:5c:a8:14:28:01:4d: ce:9f:14:af:46:c2:e3:14:de:9a:71:a1:28:6c:7d: 5e:5d:b6:ed:dc:d0:55:ca:84:0d:e0:4c:55:cc:2d: c7:ca:5c:c2:fa:df:c0:96:1b:c4:9e:34:30:e4:f2: 9e:66:d1:af:d1:17:44:ef:9b:f5:72:67:db:fb:39: 36:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:41:63:EE:46:74:E6:5A:58:91:CE:81:E1:A1:F6:21:AA:8A:34:96 X509v3 Authority Key Identifier: keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c7:e9:d5:1a:c6:29:ba:f7:c5:5c:48:a0:34:e5:0c:7c:80: 6b:bb:73:0d:35:0f:98:68:10:24:7c:0e:6a:c9:07:b4:65:1c: 51:d8:55:16:70:29:34:29:fb:a4:9a:5f:42:db:0a:5c:fc:39: 50:cc:75:ab:1c:a6:1f:04:a8:a1:4e:1d:cc:25:61:ab:09:24: 9c:5b:69:37:e7:92:01:86:19:bd:b8:d8:c2:bc:39:0e:fe:af: 56:69:86:8b:8c:12:fe:55:b2:f7:90:9e:15:51:f2:aa:4a:73: 99:49:e3:68:0f:d7:45:a3:51:3d:2d:94:0b:a4:a5:c4:3e:25: b4:49:33:87:95:fc:9b:78:83:a9:38:f2:a6:66:b1:1e:e3:ef: 53:fc:b7:8c:53:21:6e:c1:de:b0:2d:46:3b:05:51:4f:21:0c: 4d:3c:06:a6:05:4c:a6:32:c5:2c:ce:3e:dc:30:f3:ea:88:f1: bc:2b:c9:99:2c:5d:69:d4:fa:8e:20:d6:13:f3:7d:f9:54:46: 8d:77:85:f1:0a:01:9c:05:82:06:fe:8f:6e:f0:19:ab:ea:44: b7:82:67:fa:08:9d:7d:bd:58:07:36:55:a8:65:52:64:4c:ac: 98:ac:e2:c4:4e:9a:da:98:c8:f3:13:61:13:7a:1c:97:94:15: 58:2a:3d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7KZy5fdPHhlyd6gsOIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4 ZmVkMjEwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg0ZDQxNjNlZTQ2NzRlNjVhNTg5MWNlODFlMWExZjYyMWFhOGEzNDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6sRjdPvGP4x8yxZbpVMwycYV3Pt yn0QtplY+010Bgczq3GsB6Tn1k5fq9x4Dt5nQQHfRoZepYtshOw2JdI3XPJek0p+ 29ROeBhPjfGbFyJTU4aYFf8LjuVBZQxsaN4XliZdvvFjTQD4vcbwizYbnGXQw0Ih wxnAJDqhl1DkxGdduKw+SNSspx4hmEiIUkVwociY8QHTfuoVIWtWdBa1K7YSiONE dWjwRQZFj0zC+xKskjqQHGHX5VIi6OhcqBQoAU3OnxSvRsLjFN6acaEobH1eXbbt 3NBVyoQN4ExVzC3HylzC+t/AlhvEnjQw5PKeZtGv0RdE75v1cmfb+zk24QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1BY+5GdOZaWJHOgeGh9iGqijSWMB8GA1UdIwQY MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt Y2RmODk2ODM1NDBlLzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMfp1RrG Kbr3xVxIoDTlDHyAa7tzDTUPmGgQJHwOaskHtGUcUdhVFnApNCn7pJpfQtsKXPw5 UMx1qxymHwSooU4dzCVhqwkknFtpN+eSAYYZvbjYwrw5Dv6vVmmGi4wS/lWy95Ce FVHyqkpzmUnjaA/XRaNRPS2UC6SlxD4ltEkzh5X8m3iDqTjypmaxHuPvU/y3jFMh bsHesC1GOwVRTyEMTTwGpgVMpjLFLM4+3DDz6ojxvCvJmSxdadT6jiDWE/N9+VRG jXeF8QoBnAWCBv6PbvAZq+pEt4Jn+gidfb1YBzZVqGVSZEysmKzixE6a2pjI8xNh E3ocl5QVWCo9RA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:36 2025 by rpki-client