This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft File: F2clVphEFbeOnRVGF4TIxOaR0BA.mft (raw, json) Hash identifier: ykaaCFu4w0Knv2ChnajWZHaUbPTHxMIvW2GyFY/5qU0= Subject key identifier: 79:8A:78:30:2C:EE:FD:16:81:A0:56:37:3D:5A:EF:6C:A8:1D:18:67 Authority key identifier: 17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10 Certificate issuer: /CN=17672556984415b78e9d15461784c8c4e691d010 Certificate serial: 019B3D59F2186C64AEA52F46B066043115A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft Manifest number: 1620 Signing time: Sat 20 Dec 2025 20:01:03 +0000 Manifest this update: Sat 20 Dec 2025 20:01:03 +0000 Manifest next update: Sun 21 Dec 2025 20:01:03 +0000 Files and hashes: 1: F2clVphEFbeOnRVGF4TIxOaR0BA.crl (hash: euUnIgDXGsV8ZxbxDsY6mp2Uql1Mz1kFKCKrSmGwaiE=) 2: uO9dPxlx5kbryFMIrW1wZfHfrqc.roa (hash: NrkTIYE8RmX0UUZREQe1a/gFtR2Be/h3baezRNBfbZg=) 3: vMfYAVSQ4CaJ9hqOmmUhZmVM_Xc.roa (hash: HKXHwGN9LbH+lPLcsRDtqfOhE6nZDez5q/T7yrcmTHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:f2:18:6c:64:ae:a5:2f:46:b0:66:04:31:15:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17672556984415b78e9d15461784c8c4e691d010 Validity Not Before: Dec 20 20:01:03 2025 GMT Not After : Dec 21 20:01:03 2025 GMT Subject: CN=798a78302ceefd1681a056373d5aef6ca81d1867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:0e:8c:57:fa:bc:5c:ab:d7:aa:17:a2:fd: c4:f9:1a:63:7b:84:2a:0d:e7:45:67:3e:9a:09:59: e3:36:80:21:a4:13:d5:ba:68:cf:7e:5c:66:7e:38: 50:47:eb:41:a1:16:a5:ba:77:ce:42:6d:4b:6a:39: 67:c1:db:fe:ad:d8:95:2e:e9:a8:af:a0:98:b5:80: c6:5c:a3:7b:b5:9b:36:fd:de:3b:10:40:86:33:f9: 81:2f:66:20:fa:d6:aa:1d:ba:ff:79:c9:02:7c:5a: 0b:98:5a:69:9a:fd:b8:8b:33:4b:af:7f:63:b5:f6: 09:fc:4a:b3:31:d6:0b:02:8b:05:3f:c1:ec:34:d7: 6a:c2:52:5a:ee:ae:2d:36:2c:29:c1:a4:9e:40:b4: 5e:3e:9a:95:1f:c8:47:54:80:0d:0f:60:96:e2:f2: d1:01:da:f8:7e:62:b6:07:c3:77:95:1c:1a:3f:98: f9:36:10:c4:59:aa:87:cf:65:cb:5e:a9:c6:15:15: a1:9d:3c:bc:a1:7e:8b:6c:f2:be:62:31:de:88:74: 83:f3:51:60:c8:40:ee:8b:0c:52:fe:12:93:a1:ef: c2:6b:01:b0:b4:87:8c:5e:ee:82:0d:f3:ee:05:67: e4:1b:5b:91:6e:35:dc:c0:f1:8a:e7:15:5b:5b:4e: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8A:78:30:2C:EE:FD:16:81:A0:56:37:3D:5A:EF:6C:A8:1D:18:67 X509v3 Authority Key Identifier: keyid:17:67:25:56:98:44:15:B7:8E:9D:15:46:17:84:C8:C4:E6:91:D0:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2clVphEFbeOnRVGF4TIxOaR0BA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1887fa-43cc-4499-ab74-e28832323f6d/1/F2clVphEFbeOnRVGF4TIxOaR0BA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e5:1b:89:8a:4a:d8:60:fd:14:1a:2c:2f:34:06:19:8b:42: 5b:17:9b:8c:5e:b4:44:ca:74:2c:f2:9f:3d:0a:29:19:2a:a1: 87:47:12:fe:7f:d1:48:d4:31:e5:d0:b1:60:b6:d8:a9:e0:e5: 92:73:ca:01:2c:3f:6f:eb:8c:3e:65:0d:b9:5c:cc:75:2b:bf: 00:22:dc:fa:43:8f:62:fc:2a:62:36:7b:26:72:de:16:ad:5b: ad:61:c1:b3:81:5d:79:e4:2a:27:aa:ed:e3:c5:39:33:3b:29: ae:7c:2d:80:be:c5:73:de:07:52:a2:ce:4e:33:c8:fa:b3:98: 74:14:7f:70:e2:b5:f5:f4:2b:cf:6c:89:65:c8:b6:2e:cc:82: 42:22:a4:2f:d3:ae:e8:0b:f5:a5:a7:96:27:e0:ff:40:b4:fb: 0f:4d:fc:93:82:53:5a:4c:7c:65:61:7f:75:53:fe:d7:9c:53: 7b:ad:10:e7:24:6f:ef:64:50:55:11:0a:ec:04:00:ca:3d:db: 53:4c:1a:63:18:a3:3e:93:07:dc:b3:e9:d3:99:46:80:5c:1f: ea:61:6a:a7:0d:5d:c6:6f:ae:52:42:7a:dd:5c:74:c3:45:55: a4:19:eb:74:45:ec:4f:70:ce:e6:ff:42:a2:c1:28:59:c5:23: 3d:44:7c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WfIYbGSupS9GsGYEMRWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjcyNTU2OTg0NDE1Yjc4ZTlkMTU0NjE3ODRjOGM0ZTY5 MWQwMTAwHhcNMjUxMjIwMjAwMTAzWhcNMjUxMjIxMjAwMTAzWjAzMTEwLwYDVQQD Eyg3OThhNzgzMDJjZWVmZDE2ODFhMDU2MzczZDVhZWY2Y2E4MWQxODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6kOjFf6vFyr16oXov3E+Rpje4Qq DedFZz6aCVnjNoAhpBPVumjPflxmfjhQR+tBoRalunfOQm1Lajlnwdv+rdiVLumo r6CYtYDGXKN7tZs2/d47EECGM/mBL2Yg+taqHbr/eckCfFoLmFppmv24izNLr39j tfYJ/EqzMdYLAosFP8HsNNdqwlJa7q4tNiwpwaSeQLRePpqVH8hHVIAND2CW4vLR Adr4fmK2B8N3lRwaP5j5NhDEWaqHz2XLXqnGFRWhnTy8oX6LbPK+YjHeiHSD81Fg yEDuiwxS/hKToe/CawGwtIeMXu6CDfPuBWfkG1uRbjXcwPGK5xVbW05q7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmKeDAs7v0WgaBWNz1a72yoHRhnMB8GA1UdIwQY MBaAFBdnJVaYRBW3jp0VRheEyMTmkdAQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQt ZTI4ODMyMzIzZjZkLzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8xODg3ZmEtNDNjYy00NDk5LWFiNzQtZTI4ODMyMzIzZjZk LzEvRjJjbFZwaEVGYmVPblJWR0Y0VEl4T2FSMEJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneUbiYpK 2GD9FBosLzQGGYtCWxebjF60RMp0LPKfPQopGSqhh0cS/n/RSNQx5dCxYLbYqeDl knPKASw/b+uMPmUNuVzMdSu/ACLc+kOPYvwqYjZ7JnLeFq1brWHBs4FdeeQqJ6rt 48U5MzsprnwtgL7Fc94HUqLOTjPI+rOYdBR/cOK19fQrz2yJZci2LsyCQiKkL9Ou 6Av1paeWJ+D/QLT7D038k4JTWkx8ZWF/dVP+15xTe60Q5yRv72RQVREK7AQAyj3b U0waYxijPpMH3LPp05lGgFwf6mFqpw1dxm+uUkJ63Vx0w0VVpBnrdEXsT3DO5v9C osEoWcUjPUR84w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:43 2025 by rpki-client