This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft File: F3jPwJo2OnPMjdo2KiyegiPX2tY.mft (raw, json) Hash identifier: A9KZbIC8kFFPBrrLVjeWEuItqwi1v4CE1jP4Aba6J2M= Subject key identifier: A2:A7:E4:49:30:B7:5B:9D:7B:90:0A:75:B8:9A:E4:61:7D:8C:32:D0 Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Certificate serial: 019B63C29687F688274B9B4131EE1BCBAB8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft Manifest number: 1071 Signing time: Sun 28 Dec 2025 07:00:55 +0000 Manifest this update: Sun 28 Dec 2025 07:00:55 +0000 Manifest next update: Mon 29 Dec 2025 07:00:55 +0000 Files and hashes: 1: F3jPwJo2OnPMjdo2KiyegiPX2tY.crl (hash: xs+8VY4cHNeoz5P0/l06qSylXWiD7Y+LV8y7TifSU1I=) 2: M45Q5osiYzOCttb5qUkWO2UNnW8.roa (hash: 7YD67txjderrmSpgg9cu7S2KQewiqgBNt7grVOcHVbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:c2:96:87:f6:88:27:4b:9b:41:31:ee:1b:cb:ab:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6 Validity Not Before: Dec 28 07:00:55 2025 GMT Not After : Dec 29 07:00:55 2025 GMT Subject: CN=a2a7e44930b75b9d7b900a75b89ae4617d8c32d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c5:9a:a9:19:7d:b1:ac:0c:95:87:b3:16:ae: 57:39:a8:d1:16:4b:3a:0f:92:81:7b:6d:b9:2c:f2: 2e:a2:d6:38:19:f9:bb:c8:3a:9e:00:64:f9:be:90: 8e:c8:d6:ba:3f:c0:82:e5:91:60:3f:1c:b5:ed:fe: 2e:4e:8b:2f:fe:02:ac:8e:aa:2d:d1:65:24:4f:7f: 93:17:4f:6b:e1:b5:04:88:1a:5f:18:cd:59:43:33: 30:db:3d:bd:91:ad:d3:45:d4:f8:c7:18:3d:ca:62: 99:6a:04:25:61:79:96:11:9a:74:6e:db:0e:76:d9: d4:e3:2e:44:31:f4:8e:65:aa:b0:ad:b6:a4:86:ef: 90:ef:a4:47:8c:57:50:64:34:e2:c2:e4:39:cf:65: 8c:08:eb:4c:b2:f9:31:1a:a7:f0:65:24:f2:76:26: 05:e1:ce:0b:e8:94:0c:51:dc:38:49:00:82:b2:31: 6e:c4:a9:de:6c:60:43:e6:5f:ae:73:60:56:69:f5: ad:34:cf:72:ef:01:93:c5:de:c0:00:76:aa:c1:64: 95:d1:63:95:56:14:3c:65:c8:3a:f1:d0:f0:c9:77: 10:81:9b:4c:09:1f:71:de:48:bd:89:2d:35:03:32: 65:c9:df:ae:71:38:7c:f3:67:e4:f4:c3:66:a9:ce: c6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:A7:E4:49:30:B7:5B:9D:7B:90:0A:75:B8:9A:E4:61:7D:8C:32:D0 X509v3 Authority Key Identifier: keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:64:64:d4:06:ba:0f:da:e2:be:26:2f:ca:01:8a:3c:3f:13: 0a:d2:59:00:69:97:3c:74:e1:97:84:1e:0a:0a:ce:5d:24:cd: 48:ff:e9:f0:38:67:0b:a7:65:bb:f6:74:13:53:09:0a:9b:16: 71:f8:3f:ab:d5:69:a3:5c:36:a4:cb:53:59:e3:b3:fa:ca:28: 4c:64:69:1c:5a:1e:5e:d7:6f:56:54:c7:f8:81:72:06:ca:d3: 46:8f:2a:21:fe:7c:1f:e2:51:af:a2:f0:57:80:f8:e0:8d:fd: d5:45:a2:c4:30:43:1f:e2:82:c4:f9:a9:42:b8:38:1a:7c:c8: d1:4f:6e:bd:ff:eb:62:e6:32:fe:ff:70:d0:2a:78:e1:64:b8: 5a:4c:fb:51:61:60:a5:b2:05:fe:30:02:0c:91:50:0d:ac:2c: cb:6b:a1:f5:9a:fd:c4:83:da:8f:1e:2a:6d:4c:98:9d:59:e2: 8b:de:13:c8:1c:f4:ea:1c:45:fc:42:6e:5b:95:38:d8:45:d5: 71:2e:b9:08:95:e2:2f:eb:8c:02:42:fd:2d:00:82:1d:bf:d4: 31:bc:7d:7c:d8:83:04:0d:1f:54:cf:66:77:aa:74:26:ea:1a: 8a:59:f3:d8:80:6c:22:02:31:9c:62:63:b9:ed:44:4a:68:61: d4:94:34:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjwpaH9ognS5tBMe4by6uLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzhjZmMwOWEzNjNhNzNjYzhkZGEzNjJhMmM5ZTgyMjNk N2RhZDYwHhcNMjUxMjI4MDcwMDU1WhcNMjUxMjI5MDcwMDU1WjAzMTEwLwYDVQQD EyhhMmE3ZTQ0OTMwYjc1YjlkN2I5MDBhNzViODlhZTQ2MTdkOGMzMmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38WaqRl9sawMlYezFq5XOajRFks6 D5KBe225LPIuotY4Gfm7yDqeAGT5vpCOyNa6P8CC5ZFgPxy17f4uTosv/gKsjqot 0WUkT3+TF09r4bUEiBpfGM1ZQzMw2z29ka3TRdT4xxg9ymKZagQlYXmWEZp0btsO dtnU4y5EMfSOZaqwrbakhu+Q76RHjFdQZDTiwuQ5z2WMCOtMsvkxGqfwZSTydiYF 4c4L6JQMUdw4SQCCsjFuxKnebGBD5l+uc2BWafWtNM9y7wGTxd7AAHaqwWSV0WOV VhQ8Zcg68dDwyXcQgZtMCR9x3ki9iS01AzJlyd+ucTh882fk9MNmqc7GdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKn5Ekwt1ude5AKdbia5GF9jDLQMB8GA1UdIwQY MBaAFBd4z8CaNjpzzI3aNiosnoIj19rWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjIt MDEwY2YyZGQ0MGFmLzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8wOTAxMmYtYjRmNi00ZGY3LWI1NjItMDEwY2YyZGQ0MGFm LzEvRjNqUHdKbzJPblBNamRvMktpeWVnaVBYMnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGRk1Aa6 D9riviYvygGKPD8TCtJZAGmXPHThl4QeCgrOXSTNSP/p8DhnC6dlu/Z0E1MJCpsW cfg/q9Vpo1w2pMtTWeOz+sooTGRpHFoeXtdvVlTH+IFyBsrTRo8qIf58H+JRr6Lw V4D44I391UWixDBDH+KCxPmpQrg4GnzI0U9uvf/rYuYy/v9w0Cp44WS4Wkz7UWFg pbIF/jACDJFQDawsy2uh9Zr9xIPajx4qbUyYnVnii94TyBz06hxF/EJuW5U42EXV cS65CJXiL+uMAkL9LQCCHb/UMbx9fNiDBA0fVM9md6p0Juoailnz2IBsIgIxnGJj ue1ESmhh1JQ0xQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:52:35 2025 by rpki-client