This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft File: F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft (raw, json) Hash identifier: wa3bolOj64ZrLE0IajN8wXT0o1qN/MDvBUefZ+Tc9gE= Subject key identifier: F4:8A:A3:0A:13:9F:E8:6F:EB:0E:42:D5:60:25:05:64:BD:BF:41:64 Authority key identifier: 17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52 Certificate issuer: /CN=177005177526d668e844b2a7a5a59ac64a495652 Certificate serial: 019B4392B743A69E774CEE3EC7E2E58F333E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft Manifest number: 06E7 Signing time: Mon 22 Dec 2025 01:00:47 +0000 Manifest this update: Mon 22 Dec 2025 01:00:47 +0000 Manifest next update: Tue 23 Dec 2025 01:00:47 +0000 Files and hashes: 1: F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl (hash: LG1RtUR3/+fEyx3N7obDJOkzkD15Z0i6L9UM/uBlDR0=) 2: mF32KrmR7qkPWXVgQfXewbxtOHE.roa (hash: iXEGOcbHzPC+9l+k6XZzUAzgZY6fYnZW9+XlT/82/iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:b7:43:a6:9e:77:4c:ee:3e:c7:e2:e5:8f:33:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=177005177526d668e844b2a7a5a59ac64a495652 Validity Not Before: Dec 22 01:00:47 2025 GMT Not After : Dec 23 01:00:47 2025 GMT Subject: CN=f48aa30a139fe86feb0e42d560250564bdbf4164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:cd:8e:3f:df:af:b8:37:fd:16:00:64:fe: 5d:6f:04:d2:f4:81:da:7c:08:68:4c:25:45:d6:de: d4:8c:11:4d:b4:0c:6b:0e:24:fb:cb:0d:6a:ff:ca: 2d:cf:d2:c5:c0:a4:f9:02:47:91:a8:c1:4e:53:d8: ef:66:bd:cd:8d:ae:2e:b8:f9:4c:70:13:2a:ef:bf: 88:65:2f:f2:6d:5d:72:dc:84:11:70:ce:e4:fd:a5: c0:c4:9d:bc:00:ad:1f:88:fc:16:14:b4:53:75:59: fc:5d:c2:07:f9:f1:92:e0:78:6a:8b:74:61:e9:b2: 4a:8a:0a:0f:bb:ee:bb:44:8d:f4:10:af:fd:e9:32: 67:92:83:72:be:ab:87:7d:9c:fc:db:ff:72:b4:f4: d9:af:bd:59:88:7d:72:23:4d:f9:04:52:c8:2b:7f: 6f:b6:66:a5:83:38:06:20:c6:36:7a:9a:98:1d:f7: 7b:d6:83:56:96:1a:b2:3d:cb:87:f3:40:7a:d6:f1: cd:66:bd:e9:c9:a0:ce:90:4e:bb:b8:a3:ae:ca:97: ad:d1:58:34:e7:bd:86:92:76:2b:f5:08:f4:71:25: ee:ef:f3:28:99:98:b0:91:ab:5a:56:f8:57:37:4a: b9:30:62:7d:93:1e:3d:e1:d0:65:be:eb:ec:29:8a: e1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:8A:A3:0A:13:9F:E8:6F:EB:0E:42:D5:60:25:05:64:BD:BF:41:64 X509v3 Authority Key Identifier: keyid:17:70:05:17:75:26:D6:68:E8:44:B2:A7:A5:A5:9A:C6:4A:49:56:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3AFF3Um1mjoRLKnpaWaxkpJVlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3af153-ed0d-49c0-99df-0cdefbfc787a/1/F3AFF3Um1mjoRLKnpaWaxkpJVlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d0:4d:ed:25:d3:fd:b7:93:df:cf:6c:54:a7:7d:58:d1:2d: 2e:f5:e0:04:60:67:6c:fa:8a:e5:8c:a1:70:85:aa:34:9f:99: b2:3c:a8:23:4e:bf:4b:36:c8:6b:e7:0e:07:05:7c:f8:eb:32: bd:5f:0e:c4:8e:23:68:ff:03:a3:31:74:e5:8d:04:68:66:8d: eb:e4:60:7e:de:2e:40:14:69:5e:d0:a7:c5:be:d7:7c:5a:be: 04:e7:46:8f:13:ff:fc:bf:ad:1a:4e:48:a4:a7:ad:f1:42:16: 4e:cc:16:9a:10:31:0d:fe:7e:a1:6d:c3:5f:ac:ff:ed:c1:3c: 56:2b:79:2d:72:8c:34:5f:f1:06:98:fb:fd:ec:92:ef:61:55: 94:a0:87:d1:30:93:d1:e3:d6:bc:c8:d4:e1:3b:79:06:f4:00: ef:e4:14:04:90:3e:d6:ae:bd:46:cb:21:3e:54:9a:d4:f5:bf: cb:3c:fe:45:19:fd:65:81:ca:ce:79:84:53:54:4d:11:53:91: bf:a2:fb:f6:ee:5e:a3:f9:2c:de:ad:45:88:12:c1:86:f4:2b: 06:23:76:3a:01:c2:cd:53:6f:98:0a:35:8c:63:8e:72:bb:0c: d1:0f:d2:1a:d4:de:cf:73:d4:81:6f:66:7e:57:94:de:b0:21: b2:df:b2:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkrdDpp53TO4+x+LljzM+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzAwNTE3NzUyNmQ2NjhlODQ0YjJhN2E1YTU5YWM2NGE0 OTU2NTIwHhcNMjUxMjIyMDEwMDQ3WhcNMjUxMjIzMDEwMDQ3WjAzMTEwLwYDVQQD EyhmNDhhYTMwYTEzOWZlODZmZWIwZTQyZDU2MDI1MDU2NGJkYmY0MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl3Njj/fr7g3/RYAZP5dbwTS9IHa fAhoTCVF1t7UjBFNtAxrDiT7yw1q/8otz9LFwKT5AkeRqMFOU9jvZr3Nja4uuPlM cBMq77+IZS/ybV1y3IQRcM7k/aXAxJ28AK0fiPwWFLRTdVn8XcIH+fGS4Hhqi3Rh 6bJKigoPu+67RI30EK/96TJnkoNyvquHfZz82/9ytPTZr71ZiH1yI035BFLIK39v tmalgzgGIMY2epqYHfd71oNWlhqyPcuH80B61vHNZr3pyaDOkE67uKOuypet0Vg0 572GknYr9Qj0cSXu7/MomZiwkataVvhXN0q5MGJ9kx494dBlvuvsKYrh1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSKowoTn+hv6w5C1WAlBWS9v0FkMB8GA1UdIwQY MBaAFBdwBRd1JtZo6ESyp6WlmsZKSVZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYt MGNkZWZiZmM3ODdhLzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYWYxNTMtZWQwZC00OWMwLTk5ZGYtMGNkZWZiZmM3ODdh LzEvRjNBRkYzVW0xbWpvUkxLbnBhV2F4a3BKVmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetBN7SXT /beT389sVKd9WNEtLvXgBGBnbPqK5YyhcIWqNJ+ZsjyoI06/SzbIa+cOBwV8+Osy vV8OxI4jaP8DozF05Y0EaGaN6+Rgft4uQBRpXtCnxb7XfFq+BOdGjxP//L+tGk5I pKet8UIWTswWmhAxDf5+oW3DX6z/7cE8Vit5LXKMNF/xBpj7/eyS72FVlKCH0TCT 0ePWvMjU4Tt5BvQA7+QUBJA+1q69RsshPlSa1PW/yzz+RRn9ZYHKznmEU1RNEVOR v6L79u5eo/ks3q1FiBLBhvQrBiN2OgHCzVNvmAo1jGOOcrsM0Q/SGtTez3PUgW9m fleU3rAhst+yvA== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:19 2025 by rpki-client