This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft File: f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json) Hash identifier: TyUBB+rDYLaot0nbeNWwTFKUOSw/FArrqy4JERGaCRQ= Subject key identifier: 27:64:AA:AB:A5:FC:FC:62:E6:61:CD:58:70:73:FB:F3:3B:AF:64:B8 Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Certificate serial: 019B35327EAA285FFFF39A62F98DBA6E5F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft Manifest number: 04C5 Signing time: Fri 19 Dec 2025 06:01:00 +0000 Manifest this update: Fri 19 Dec 2025 06:01:00 +0000 Manifest next update: Sat 20 Dec 2025 06:01:00 +0000 Files and hashes: 1: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: jWhf1SeOrgzeTl8ktV2yV0woeUA7RSQUouhOI9RhvTQ=) 2: siHg6lFmHbPgHoNeW2SywiubJmo.roa (hash: kskpJxlnZ+nR3C+TNiBxn+yry8UEOs9uLt7Ezmifj5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7e:aa:28:5f:ff:f3:9a:62:f9:8d:ba:6e:5f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c Validity Not Before: Dec 19 06:01:00 2025 GMT Not After : Dec 20 06:01:00 2025 GMT Subject: CN=2764aaaba5fcfc62e661cd587073fbf33baf64b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:32:f8:4d:22:88:1d:55:01:35:ac:ca:49: 7e:a9:2f:f3:af:21:f1:ee:37:75:28:a8:67:e8:f9: 3e:50:c7:7b:f7:73:45:89:f3:b8:1d:af:a2:32:71: 3d:73:05:f7:c7:03:2a:8f:97:a5:a2:ac:11:fa:f3: 29:8e:6b:5d:80:b8:34:f0:bd:b6:31:d5:4d:bf:d0: 96:73:81:e6:80:c9:91:67:aa:92:ca:22:72:0b:1a: cb:df:68:b1:f5:cf:46:f7:1b:9a:e0:29:83:ca:70: 0b:8e:65:46:79:41:b3:fe:ca:14:c7:b6:d7:0d:a7: 3c:c8:ec:b8:42:8c:91:a7:fb:e7:2a:24:c1:40:ca: f3:24:f5:6e:56:f8:1d:7e:e7:ca:64:4f:a0:0c:f3: ae:aa:a3:f3:28:c7:29:7a:f1:35:85:b8:b0:60:8b: ba:6b:ec:5e:e7:0c:fa:12:d2:3b:6a:70:8f:b0:9c: fe:68:5b:ba:83:b2:96:5a:af:65:ef:35:f3:a1:86: 5c:fc:7d:1c:41:a9:2f:ab:dd:4a:88:85:da:9c:4a: 1a:8b:99:c8:f5:e1:35:68:10:ce:5c:54:cf:8e:e5: 8b:9b:b2:f9:11:6d:87:33:d9:87:95:13:74:9e:7e: 48:fb:d6:c2:a5:ce:57:e2:89:6d:30:ad:e5:2b:24: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:64:AA:AB:A5:FC:FC:62:E6:61:CD:58:70:73:FB:F3:3B:AF:64:B8 X509v3 Authority Key Identifier: keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:42:2c:f0:3a:6a:33:7c:8c:73:bd:e1:5d:bb:b4:27:c8:5d: 7a:87:4d:9d:63:07:78:91:9a:23:a0:0a:7a:bb:89:35:31:b7: ed:4f:2a:53:28:53:cd:f0:e6:ce:72:dd:5a:8a:6a:6f:90:73: 52:76:74:fb:b0:ed:4f:70:2c:57:68:f4:00:f1:a3:36:94:2e: 2c:5d:83:ae:64:16:08:ce:76:a4:91:ef:37:3d:a3:71:6c:04: 6e:3f:df:33:8a:fa:e9:0b:31:19:2b:68:e2:33:12:3b:eb:80: 0a:3e:d1:da:1c:f3:e9:9f:6a:e2:ff:60:88:ff:91:33:c3:56: c7:18:b0:e6:2c:80:1e:a3:fc:2a:69:aa:15:b8:bc:ac:8d:98: f0:9a:3b:56:9f:12:72:15:4f:c0:b1:20:8c:ce:6b:95:03:06: 3d:91:0b:e5:20:67:15:74:b2:53:d4:6e:ce:a2:f9:e9:1b:d3: 12:da:19:cf:8b:cd:a5:77:1a:6d:da:88:df:50:79:b0:fc:f7: f6:fb:e8:a9:a1:9c:d3:6a:9f:48:c2:dd:f5:2b:ff:a4:d6:30: c1:19:05:88:6d:16:c5:ec:39:a7:74:63:eb:97:89:c5:fb:12: 91:62:5d:47:31:89:0d:9b:68:07:db:98:9f:38:f3:8a:3a:ff: df:e9:a5:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mn6qKF//85pi+Y26bl8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3 N2Y2NWMwHhcNMjUxMjE5MDYwMTAwWhcNMjUxMjIwMDYwMTAwWjAzMTEwLwYDVQQD EygyNzY0YWFhYmE1ZmNmYzYyZTY2MWNkNTg3MDczZmJmMzNiYWY2NGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukgy+E0iiB1VATWsykl+qS/zryHx 7jd1KKhn6Pk+UMd793NFifO4Ha+iMnE9cwX3xwMqj5eloqwR+vMpjmtdgLg08L22 MdVNv9CWc4HmgMmRZ6qSyiJyCxrL32ix9c9G9xua4CmDynALjmVGeUGz/soUx7bX Dac8yOy4QoyRp/vnKiTBQMrzJPVuVvgdfufKZE+gDPOuqqPzKMcpevE1hbiwYIu6 a+xe5wz6EtI7anCPsJz+aFu6g7KWWq9l7zXzoYZc/H0cQakvq91KiIXanEoai5nI 9eE1aBDOXFTPjuWLm7L5EW2HM9mHlRN0nn5I+9bCpc5X4oltMK3lKyRirQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdkqqul/Pxi5mHNWHBz+/M7r2S4MB8GA1UdIwQY MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkIs8Dpq M3yMc73hXbu0J8hdeodNnWMHeJGaI6AKeruJNTG37U8qUyhTzfDmznLdWopqb5Bz UnZ0+7DtT3AsV2j0APGjNpQuLF2DrmQWCM52pJHvNz2jcWwEbj/fM4r66QsxGSto 4jMSO+uACj7R2hzz6Z9q4v9giP+RM8NWxxiw5iyAHqP8KmmqFbi8rI2Y8Jo7Vp8S chVPwLEgjM5rlQMGPZEL5SBnFXSyU9RuzqL56RvTEtoZz4vNpXcabdqI31B5sPz3 9vvoqaGc02qfSMLd9Sv/pNYwwRkFiG0Wxew5p3Rj65eJxfsSkWJdRzGJDZtoB9uY nzjzijr/3+mlOQ== -----END CERTIFICATE-----Generated at Fri Dec 19 12:00:21 2025 by rpki-client