This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft File: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft (raw, json) Hash identifier: sP8SurJ0IvKX7+kNkkxC2ycaesF603NrQplpwVtv6Lg= Subject key identifier: 82:D3:71:8F:00:3F:7C:6D:B8:20:29:58:1A:A6:CC:D6:56:ED:A2:BA Authority key identifier: AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 Certificate issuer: /CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Certificate serial: 019AF12E58D0F823BAEB546D3A9CC2E6FECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft Manifest number: 14EC Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: Nco7jM6fCKkEkhm4JQ4zIvrvqCo.roa (hash: BIdys9GlZzlGys/T7bq6Tcptb5M/oc7ReQGRtjoEJCs=) 2: TSnW5LPn5ivCEhZ09WlDUHGtTTs.roa (hash: G+x6DV9h2vgaW8F6rPRXljn5SD+izN1YCHl7dux4srI=) 3: rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl (hash: KLIfMOUcuZuq6AMSR03Yu77Iae8TVfOQnoCN8ZBua4I=) 4: saUKT6D6bfZZPO38YMOF0mTQhqs.roa (hash: yp3Hci3AL4Pw4TRERBpmO5GUDFOXjceWniFUMKPDbyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:58:d0:f8:23:ba:eb:54:6d:3a:9c:c2:e6:fe:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac5fc6c6aea3f0e4edf7ccb92e6eb2377a7479a5 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=82d3718f003f7c6db82029581aa6ccd656eda2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6a:a1:4f:5b:1c:90:6d:24:6b:46:10:06:a7: 5c:86:56:34:c6:6c:34:21:ec:e9:bf:c8:11:34:86: a0:d3:59:0b:d7:75:85:1f:ac:98:59:df:7d:5f:71: b5:e7:b3:cf:12:dc:06:bb:c1:b9:ae:2f:df:96:75: fc:25:60:7e:cb:2d:00:da:31:20:4c:4c:6d:3d:d8: c5:43:17:db:73:14:d0:b8:6b:89:14:00:79:a1:b1: e7:27:6a:29:44:1a:e6:69:6d:4e:2c:62:8a:87:c0: c8:d5:42:8f:34:7f:02:80:0f:0d:13:5c:61:8d:2f: a8:93:86:94:c7:7b:91:28:31:2c:0b:d2:dc:87:ea: 62:30:cd:92:c5:1f:e6:c5:e4:44:ae:3a:d7:00:67: ef:2e:a6:39:2a:b8:8b:be:96:ce:10:be:0d:44:30: 8f:23:17:b4:4d:84:e9:77:ba:e6:49:14:09:cd:de: e3:58:92:f3:dd:01:fd:4a:b5:8c:17:cb:2a:83:f2: ef:49:69:87:39:55:da:a6:cc:be:a4:7d:99:d4:39: 74:bf:4b:fb:5c:36:9d:de:9f:cf:3d:69:f9:88:45: 1f:cd:a7:4e:63:70:e2:6b:57:69:c3:3e:8f:09:fd: e0:fe:d1:06:89:b3:5a:d2:34:ab:ac:d9:40:25:c0: 85:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D3:71:8F:00:3F:7C:6D:B8:20:29:58:1A:A6:CC:D6:56:ED:A2:BA X509v3 Authority Key Identifier: keyid:AC:5F:C6:C6:AE:A3:F0:E4:ED:F7:CC:B9:2E:6E:B2:37:7A:74:79:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0827e0-3331-40b4-99b2-9a137092cdd0/1/rF_Gxq6j8OTt98y5Lm6yN3p0eaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:69:f8:01:6f:63:10:f2:4b:8d:58:38:68:ed:e1:59:bc:c1: c0:21:26:b8:5a:b0:95:e3:b3:71:90:00:56:a8:5b:d8:9b:44: 40:cd:21:bf:fd:f2:ab:31:bf:ea:63:be:a8:77:e6:7d:2b:f0: 7c:ca:ae:aa:ca:35:17:99:5f:46:97:a4:2b:fc:73:0a:2d:1f: a1:ae:34:9a:16:85:53:ed:1f:c6:7d:1c:fd:c8:60:1e:ef:31: 11:ca:19:16:6b:31:3a:d5:81:ec:f5:ba:df:f0:e2:a4:16:ce: 74:e3:e9:38:de:1e:54:da:bc:c2:e6:94:62:50:92:10:5b:55: c4:92:64:7b:33:7a:5f:32:39:97:56:de:b8:59:5f:bf:ee:51: 13:dc:a6:2b:1b:27:1e:95:85:a6:47:21:4d:90:db:1a:72:2f: 8c:3c:cc:ab:57:f0:b7:fb:88:7b:29:30:9f:ac:8c:c1:ce:83: 89:72:7d:26:ba:ab:d2:2d:8b:8d:58:16:7e:33:9c:1a:34:77: 98:a5:93:1a:11:38:97:55:62:f1:71:fb:f9:c5:3f:60:96:46: bd:fb:46:4f:8b:76:5f:33:9b:62:d1:58:2e:87:ec:b4:dc:9e: 80:95:12:55:3f:70:8d:cc:d6:eb:82:3c:35:02:2d:49:fb:68: 1a:59:70:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLljQ+CO661RtOpzC5v7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNWZjNmM2YWVhM2YwZTRlZGY3Y2NiOTJlNmViMjM3N2E3 NDc5YTUwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD Eyg4MmQzNzE4ZjAwM2Y3YzZkYjgyMDI5NTgxYWE2Y2NkNjU2ZWRhMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2qhT1sckG0ka0YQBqdchlY0xmw0 Iezpv8gRNIag01kL13WFH6yYWd99X3G157PPEtwGu8G5ri/flnX8JWB+yy0A2jEg TExtPdjFQxfbcxTQuGuJFAB5obHnJ2opRBrmaW1OLGKKh8DI1UKPNH8CgA8NE1xh jS+ok4aUx3uRKDEsC9Lch+piMM2SxR/mxeRErjrXAGfvLqY5KriLvpbOEL4NRDCP Ixe0TYTpd7rmSRQJzd7jWJLz3QH9SrWMF8sqg/LvSWmHOVXapsy+pH2Z1Dl0v0v7 XDad3p/PPWn5iEUfzadOY3Dia1dpwz6PCf3g/tEGibNa0jSrrNlAJcCFUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILTcY8AP3xtuCApWBqmzNZW7aK6MB8GA1UdIwQY MBaAFKxfxsauo/Dk7ffMuS5usjd6dHmlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjIt OWExMzcwOTJjZGQwLzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODI3ZTAtMzMzMS00MGI0LTk5YjItOWExMzcwOTJjZGQw LzEvckZfR3hxNmo4T1R0OTh5NUxtNnlOM3AwZWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWn4AW9j EPJLjVg4aO3hWbzBwCEmuFqwleOzcZAAVqhb2JtEQM0hv/3yqzG/6mO+qHfmfSvw fMquqso1F5lfRpekK/xzCi0foa40mhaFU+0fxn0c/chgHu8xEcoZFmsxOtWB7PW6 3/DipBbOdOPpON4eVNq8wuaUYlCSEFtVxJJkezN6XzI5l1beuFlfv+5RE9ymKxsn HpWFpkchTZDbGnIvjDzMq1fwt/uIeykwn6yMwc6DiXJ9Jrqr0i2LjVgWfjOcGjR3 mKWTGhE4l1Vi8XH7+cU/YJZGvftGT4t2XzObYtFYLofstNyegJUSVT9wjczW64I8 NQItSftoGllw1w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:31 2025 by rpki-client