This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft File: fF39tuHZPAkoI96WvdfIi7w2odE.mft (raw, json) Hash identifier: lB0WMz65io+Ngb8eVNWhCCuRWA0Aauc9sLkBdc27VDY= Subject key identifier: 28:89:AE:09:9E:55:85:A9:64:20:84:DB:BB:86:F1:6F:7F:81:57:9B Authority key identifier: 7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 Certificate issuer: /CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Certificate serial: 019AF465A91C766D50E9697B66F39041EC86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft Manifest number: 1229 Signing time: Sat 06 Dec 2025 16:01:34 +0000 Manifest this update: Sat 06 Dec 2025 16:01:34 +0000 Manifest next update: Sun 07 Dec 2025 16:01:34 +0000 Files and hashes: 1: RZuMdxzgtqeut8ZsWIjCvxcq_HU.roa (hash: k8PO+wAyawu0IdR6r++/H7W0FSIFO01M/1RM3odCP4I=) 2: fF39tuHZPAkoI96WvdfIi7w2odE.crl (hash: H5URj4zdrt9T5UpoS7Kc9HNlRiLT0iWMR/fBwiQGjHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a9:1c:76:6d:50:e9:69:7b:66:f3:90:41:ec:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dfdb6e1d93c092823de96bdd7c88bbc36a1d1 Validity Not Before: Dec 6 16:01:34 2025 GMT Not After : Dec 7 16:01:34 2025 GMT Subject: CN=2889ae099e5585a9642084dbbb86f16f7f81579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:23:77:a8:80:6b:2c:39:09:d1:ac:43:5f:d0: 7b:ab:95:f5:6a:d0:15:8f:93:3a:40:b5:52:51:37: 06:65:4b:07:d5:16:e7:fa:c4:cd:e0:c1:3e:66:16: 89:9b:28:18:09:2e:52:45:14:36:c5:2c:f8:9f:76: 06:a2:58:21:bc:d1:19:c3:53:ac:dd:be:10:f8:99: 4e:80:a9:95:e2:f8:24:e8:81:72:7f:7b:e1:40:46: e9:45:70:50:a1:9b:5d:33:fc:51:62:9f:4d:83:73: 7e:19:35:77:e4:58:c2:f9:d3:b3:8b:59:bf:33:5e: f9:7d:9d:1a:b5:06:86:1a:81:13:f7:d9:1d:06:a8: ea:20:70:bc:9f:71:33:e1:7e:19:9e:4c:3a:7d:f0: 39:1c:3a:44:a3:d1:e0:7f:e6:ac:de:33:8d:89:75: 44:b8:b8:fe:ba:a8:5f:61:d4:bb:3c:63:80:2e:6a: 63:53:b9:c6:06:55:4e:2e:62:42:97:e2:44:f9:ce: dd:bd:e0:97:56:82:2d:8e:6a:b6:ff:3f:6f:ac:fc: 63:e7:89:bc:2e:0b:45:91:77:94:07:66:32:f7:40: 73:b7:3b:aa:e7:89:c7:04:2f:44:8d:bb:06:e4:cc: 3f:40:a8:ca:d7:13:82:77:02:2f:7c:f8:bc:15:07: ea:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:89:AE:09:9E:55:85:A9:64:20:84:DB:BB:86:F1:6F:7F:81:57:9B X509v3 Authority Key Identifier: keyid:7C:5D:FD:B6:E1:D9:3C:09:28:23:DE:96:BD:D7:C8:8B:BC:36:A1:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF39tuHZPAkoI96WvdfIi7w2odE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c82215-e939-485d-82d7-d188c8085305/1/fF39tuHZPAkoI96WvdfIi7w2odE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c6:33:34:21:ac:e4:70:cb:10:e0:f5:b8:a7:87:37:0c:de: d4:e8:a3:b9:d3:f6:5f:d7:fc:b0:e0:f2:da:5c:d7:90:f9:f0: b0:ed:77:2b:95:fd:df:34:ae:db:34:77:aa:51:e1:7a:89:63: ba:63:f9:6f:51:e1:9c:89:a8:71:c7:06:c8:bb:4c:08:ca:c2: cb:50:16:5f:d3:00:ce:ca:85:62:0b:50:3e:ad:b8:c1:aa:a3: 62:1e:9a:58:14:a3:af:e1:16:8d:c2:65:8c:ff:b4:6c:e5:13: 5b:c8:4a:1e:b0:90:56:3d:a8:c6:d7:a9:9b:a7:c8:e0:99:90: a7:ec:6c:dc:8c:00:4a:64:78:02:0e:17:34:60:2f:27:1a:7e: 51:34:4e:a0:21:a4:e7:cf:1a:9d:d6:18:4a:ba:ba:66:a2:70: 91:4c:3d:f6:3d:6c:1c:3b:c7:7c:a8:97:65:9f:50:68:17:4a: 01:e3:f5:f0:f8:03:68:bc:d3:f1:9f:d2:35:fe:d3:15:22:42: 4f:34:e1:ff:37:2b:97:70:2c:6b:a9:d7:f3:38:52:2e:e7:2b: e7:92:f6:e9:29:56:d9:fc:2b:36:f4:06:3d:c4:92:1f:b1:f1: 72:1a:c4:27:28:38:5f:a4:b9:df:4f:33:52:ca:2f:01:22:4b: f4:82:8c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Zakcdm1Q6Wl7ZvOQQeyGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRmZGI2ZTFkOTNjMDkyODIzZGU5NmJkZDdjODhiYmMz NmExZDEwHhcNMjUxMjA2MTYwMTM0WhcNMjUxMjA3MTYwMTM0WjAzMTEwLwYDVQQD EygyODg5YWUwOTllNTU4NWE5NjQyMDg0ZGJiYjg2ZjE2ZjdmODE1NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiN3qIBrLDkJ0axDX9B7q5X1atAV j5M6QLVSUTcGZUsH1Rbn+sTN4ME+ZhaJmygYCS5SRRQ2xSz4n3YGolghvNEZw1Os 3b4Q+JlOgKmV4vgk6IFyf3vhQEbpRXBQoZtdM/xRYp9Ng3N+GTV35FjC+dOzi1m/ M175fZ0atQaGGoET99kdBqjqIHC8n3Ez4X4Znkw6ffA5HDpEo9Hgf+as3jONiXVE uLj+uqhfYdS7PGOALmpjU7nGBlVOLmJCl+JE+c7dveCXVoItjmq2/z9vrPxj54m8 LgtFkXeUB2Yy90Bztzuq54nHBC9EjbsG5Mw/QKjK1xOCdwIvfPi8FQfqawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiJrgmeVYWpZCCE27uG8W9/gVebMB8GA1UdIwQY MBaAFHxd/bbh2TwJKCPelr3XyIu8NqHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDct ZDE4OGM4MDg1MzA1LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9jODIyMTUtZTkzOS00ODVkLTgyZDctZDE4OGM4MDg1MzA1 LzEvZkYzOXR1SFpQQWtvSTk2V3ZkZklpN3cyb2RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssYzNCGs 5HDLEOD1uKeHNwze1OijudP2X9f8sODy2lzXkPnwsO13K5X93zSu2zR3qlHheolj umP5b1HhnImocccGyLtMCMrCy1AWX9MAzsqFYgtQPq24waqjYh6aWBSjr+EWjcJl jP+0bOUTW8hKHrCQVj2oxtepm6fI4JmQp+xs3IwASmR4Ag4XNGAvJxp+UTROoCGk 588andYYSrq6ZqJwkUw99j1sHDvHfKiXZZ9QaBdKAeP18PgDaLzT8Z/SNf7TFSJC TzTh/zcrl3Asa6nX8zhSLucr55L26SlW2fwrNvQGPcSSH7HxchrEJyg4X6S5308z UsovASJL9IKMQg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:30 2025 by rpki-client