This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json) Hash identifier: +1sFcrrgof2QeaOMij8YQpztCCDKG1vdbze/hjjSTj0= Subject key identifier: B4:93:E1:70:A3:B3:30:A0:86:59:06:83:81:1F:F3:90:26:80:19:60 Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Certificate serial: 019AF19B0A06B13B1C96242D5D59C51392F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft Manifest number: 04A2 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: du8c78rB2BJ9skOAozXQOSvnBww3H5IELXU/qo+gVqQ=) 2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0a:06:b1:3b:1c:96:24:2d:5d:59:c5:13:92:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=b493e170a3b330a086590683811ff39026801960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:15:98:c1:90:2e:56:6b:53:c1:4e:01:d2:1e: 8b:65:c8:ac:9d:51:5c:f6:35:9c:3c:5e:78:ce:69: a8:4a:45:da:71:95:d5:f8:21:1e:40:c7:52:1a:5e: 02:32:8e:5e:60:d2:d4:13:73:a9:5c:2c:49:5e:d7: bb:7c:2a:f4:2c:3b:4f:10:96:62:10:54:b3:20:ce: 87:63:32:c8:4a:c1:5d:50:ae:df:9e:af:e3:53:62: 76:03:f6:e6:1a:2a:f8:82:c1:35:07:b2:a1:ce:bc: f6:18:b3:f6:7e:8f:16:85:dd:73:46:fa:c5:27:c6: 1c:2c:ad:5d:c3:d8:6e:da:89:19:93:6d:be:a5:a1: 60:70:c7:41:03:b1:ec:50:8a:73:93:f1:a5:f8:6e: ff:c7:1d:dd:3c:52:d3:d2:b6:ba:b6:81:4a:26:cc: 91:1d:44:a0:fe:5f:1c:1e:7b:26:53:2e:a6:1f:cb: 9f:6f:e9:91:2b:41:9f:21:23:11:08:98:e3:58:3c: 34:75:31:07:8b:ed:c8:0d:16:b6:e1:6d:61:4b:b7: 77:f3:9c:9d:b6:ce:1c:a4:da:12:bf:79:b4:ae:f6: 05:ac:f4:a0:37:90:cc:14:2c:ba:15:e6:77:16:90: 65:67:9a:64:77:23:11:42:e3:e6:3f:5d:e8:cf:c1: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:93:E1:70:A3:B3:30:A0:86:59:06:83:81:1F:F3:90:26:80:19:60 X509v3 Authority Key Identifier: keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:2b:f8:bf:40:40:17:10:3a:8e:1b:8a:54:5c:6a:f9:94:fb: 71:0a:e4:8b:42:ad:59:2a:39:d9:e7:22:27:a2:28:b3:bf:59: b4:c9:72:5b:ac:ac:2a:fe:62:3a:f1:42:ef:1a:c8:97:9e:f8: a6:75:47:43:f8:52:93:37:a0:d2:e7:83:20:6b:df:21:6a:31: 30:74:6d:19:72:08:99:d4:12:9e:37:c3:a1:97:3b:3d:09:0f: f9:05:bc:4e:26:39:fc:4c:52:e8:39:72:4d:9f:f2:1d:84:5a: 1a:e5:14:59:73:5a:17:44:28:b1:02:50:4a:fa:d6:e3:a9:66: 6e:22:18:12:9c:e1:ab:d0:19:5a:af:04:88:2a:0f:52:41:e6: fb:23:00:52:cf:27:0c:6d:ce:cb:6f:9b:ce:83:f6:80:f6:46: c9:86:e3:7c:c6:9a:79:2a:6f:10:cf:10:02:23:2a:b7:f4:f5: ce:45:65:b5:3a:b3:a5:42:93:39:d2:f4:9c:17:4e:9f:86:d3: 50:bd:e5:27:07:c7:c3:f3:41:f5:28:20:f9:92:95:99:b0:22: 66:93:7a:94:75:18:eb:6f:c3:cf:52:00:2b:0c:15:7d:70:7c: 5b:49:fa:7d:81:9a:30:d8:b8:27:5d:45:6f:c3:c0:34:5c:81: 45:ae:21:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwoGsTscliQtXVnFE5LyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3 N2Y2NWMwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EyhiNDkzZTE3MGEzYjMzMGEwODY1OTA2ODM4MTFmZjM5MDI2ODAxOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhWYwZAuVmtTwU4B0h6LZcisnVFc 9jWcPF54zmmoSkXacZXV+CEeQMdSGl4CMo5eYNLUE3OpXCxJXte7fCr0LDtPEJZi EFSzIM6HYzLISsFdUK7fnq/jU2J2A/bmGir4gsE1B7Khzrz2GLP2fo8Whd1zRvrF J8YcLK1dw9hu2okZk22+paFgcMdBA7HsUIpzk/Gl+G7/xx3dPFLT0ra6toFKJsyR HUSg/l8cHnsmUy6mH8ufb+mRK0GfISMRCJjjWDw0dTEHi+3IDRa24W1hS7d385yd ts4cpNoSv3m0rvYFrPSgN5DMFCy6FeZ3FpBlZ5pkdyMRQuPmP13oz8FLIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLST4XCjszCghlkGg4Ef85AmgBlgMB8GA1UdIwQY MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCv4v0BA FxA6jhuKVFxq+ZT7cQrki0KtWSo52eciJ6Ios79ZtMlyW6ysKv5iOvFC7xrIl574 pnVHQ/hSkzeg0ueDIGvfIWoxMHRtGXIImdQSnjfDoZc7PQkP+QW8TiY5/ExS6Dly TZ/yHYRaGuUUWXNaF0QosQJQSvrW46lmbiIYEpzhq9AZWq8EiCoPUkHm+yMAUs8n DG3Oy2+bzoP2gPZGyYbjfMaaeSpvEM8QAiMqt/T1zkVltTqzpUKTOdL0nBdOn4bT UL3lJwfHw/NB9Sgg+ZKVmbAiZpN6lHUY62/Dz1IAKwwVfXB8W0n6fYGaMNi4J11F b8PANFyBRa4h2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:57 2025 by rpki-client