This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json) Hash identifier: mnK5QG35jp53vynQ3187MCkstA5CIYXbq4UsMDgD6yU= Subject key identifier: 6C:F9:2A:00:61:EF:69:5F:C0:C2:79:A5:6F:7B:F8:3C:54:ED:FF:FF Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019AF12EA4EE9521FA4550B047ADAA1ED666 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:02:37 +0000 Manifest this update: Sat 06 Dec 2025 01:02:37 +0000 Manifest next update: Sun 07 Dec 2025 01:02:37 +0000 Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=) 2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: FGrF0vpbCcIPadlOSYEpqvign4ZWcTHyIiMzkIUQOUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a4:ee:95:21:fa:45:50:b0:47:ad:aa:1e:d6:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Dec 6 01:02:37 2025 GMT Not After : Dec 7 01:02:37 2025 GMT Subject: CN=6cf92a0061ef695fc0c279a56f7bf83c54edffff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:bf:2f:cf:fc:2a:ae:8c:03:7e:dd:1a:26: 69:aa:63:44:4f:7d:1b:1e:23:a3:fa:8b:4a:30:4d: 53:93:6d:38:73:c2:b8:a4:43:d9:5b:f6:b5:4f:31: 16:be:eb:0d:ab:4a:a2:71:b5:57:a1:21:68:28:05: bd:8d:3a:d0:02:7d:32:9f:16:a7:a4:aa:19:67:f7: 9a:b6:17:35:c7:5a:6c:1e:11:46:8b:c7:fc:23:e1: d7:75:51:c4:26:8f:fb:c7:d3:f9:98:b6:57:d2:ea: 83:38:a8:81:7e:2a:38:ea:1a:7a:7b:25:a3:34:38: f5:d9:10:23:a0:dd:39:f7:3c:ea:0a:2a:e7:a7:7f: b0:bf:1e:6f:df:ca:40:da:bb:01:d6:1c:57:50:45: 06:8e:f3:26:85:18:5e:36:1b:3a:12:00:6c:44:a8: 6c:ec:b4:c8:14:e5:c6:82:c6:e5:56:dc:18:c1:ff: b6:d9:62:15:c2:21:b5:38:de:f3:13:a1:bc:73:c9: 81:34:78:c2:c0:7a:fd:a6:77:4e:0a:e0:ad:c7:32: 7c:cb:ca:27:3b:45:a0:8e:f6:2d:19:d8:f7:7b:07: 9b:d1:86:c1:30:4e:f0:3a:2e:8f:96:f1:a1:aa:1b: f8:84:5b:44:7f:ff:89:66:33:aa:7e:15:d2:4b:c2: 3f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:2A:00:61:EF:69:5F:C0:C2:79:A5:6F:7B:F8:3C:54:ED:FF:FF X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:26:5c:02:62:fd:44:da:4c:4d:5e:d4:c8:7e:07:dd:eb:60: 72:33:d1:ce:a7:b7:cc:ed:13:a6:a9:10:b7:2b:13:d1:e7:f3: fc:84:41:d2:6a:b0:05:d0:92:62:a7:fb:4e:fa:16:43:3d:01: 6f:5f:ad:fa:6c:db:b1:07:ac:7b:38:7c:46:25:23:f7:d9:ec: 91:30:55:80:72:a2:23:eb:54:9f:00:99:03:75:8d:5a:83:20: f3:02:39:3c:47:fb:e2:23:26:d7:06:f5:85:e8:ba:d5:e0:67: 00:34:96:7f:73:10:e8:55:79:da:fc:1a:73:26:87:39:cd:08: 3f:7c:1c:ca:80:ee:51:73:6a:ba:bc:2e:4e:d0:b9:fa:a3:79: 5b:9c:55:e3:10:fc:98:d4:b1:cb:9e:7c:af:4c:c8:4e:36:d9: bc:cc:72:0f:44:7b:6d:36:82:a3:04:35:ee:ff:b8:fb:e3:f5: 04:9e:d5:70:f2:23:09:aa:c0:85:d8:da:65:24:bf:42:56:11: 7b:77:43:92:7c:9e:3b:c6:3c:46:45:4f:8a:7f:b7:4f:e9:94: 07:91:a2:26:eb:5a:a0:f8:db:5f:a8:63:2a:95:df:75:45:1d: a1:dd:00:36:74:05:2d:f4:cd:b3:72:46:25:be:79:b3:ae:fa: 11:62:9e:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqTulSH6RVCwR62qHtZmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjUxMjA2MDEwMjM3WhcNMjUxMjA3MDEwMjM3WjAzMTEwLwYDVQQD Eyg2Y2Y5MmEwMDYxZWY2OTVmYzBjMjc5YTU2ZjdiZjgzYzU0ZWRmZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWm/L8/8Kq6MA37dGiZpqmNET30b HiOj+otKME1Tk204c8K4pEPZW/a1TzEWvusNq0qicbVXoSFoKAW9jTrQAn0ynxan pKoZZ/eathc1x1psHhFGi8f8I+HXdVHEJo/7x9P5mLZX0uqDOKiBfio46hp6eyWj NDj12RAjoN059zzqCirnp3+wvx5v38pA2rsB1hxXUEUGjvMmhRheNhs6EgBsRKhs 7LTIFOXGgsblVtwYwf+22WIVwiG1ON7zE6G8c8mBNHjCwHr9pndOCuCtxzJ8y8on O0WgjvYtGdj3eweb0YbBME7wOi6PlvGhqhv4hFtEf/+JZjOqfhXSS8I/bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz5KgBh72lfwMJ5pW97+DxU7f//MB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriZcAmL9 RNpMTV7UyH4H3etgcjPRzqe3zO0TpqkQtysT0efz/IRB0mqwBdCSYqf7TvoWQz0B b1+t+mzbsQesezh8RiUj99nskTBVgHKiI+tUnwCZA3WNWoMg8wI5PEf74iMm1wb1 hei61eBnADSWf3MQ6FV52vwacyaHOc0IP3wcyoDuUXNqurwuTtC5+qN5W5xV4xD8 mNSxy558r0zITjbZvMxyD0R7bTaCowQ17v+4++P1BJ7VcPIjCarAhdjaZSS/QlYR e3dDknyeO8Y8RkVPin+3T+mUB5GiJutaoPjbX6hjKpXfdUUdod0ANnQFLfTNs3JG Jb55s676EWKe6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:27 2025 by rpki-client