This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft File: F9LMnguBhrYLJwMTzZaCECLQS5U.mft (raw, json) Hash identifier: pxaX/xHSe1XwoKQ3d3b1Mc/hHSGFaAwTpSFbXDmlBQg= Subject key identifier: F4:B9:DB:FD:3D:24:19:50:56:37:78:D8:A6:81:01:97:FD:66:7A:7C Authority key identifier: 17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 Certificate issuer: /CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Certificate serial: 019B4C5F598B40868C182BE5C0490F37D752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft Manifest number: 06A6 Signing time: Tue 23 Dec 2025 18:01:15 +0000 Manifest this update: Tue 23 Dec 2025 18:01:15 +0000 Manifest next update: Wed 24 Dec 2025 18:01:15 +0000 Files and hashes: 1: F9LMnguBhrYLJwMTzZaCECLQS5U.crl (hash: WUZe2CGymZ46wex2IsV4L9Q7FXlXoW2ws4PI6y5IiZc=) 2: uXgPf_GHZXRnXeYChGwQ6YgTY0A.roa (hash: O3rlazvN4WdAuuqeK4Ye7g2IFvV+XXKOscOrXA6JGjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:59:8b:40:86:8c:18:2b:e5:c0:49:0f:37:d7:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d2cc9e0b8186b60b270313cd96821022d04b95 Validity Not Before: Dec 23 18:01:15 2025 GMT Not After : Dec 24 18:01:15 2025 GMT Subject: CN=f4b9dbfd3d241950563778d8a6810197fd667a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:12:b4:2e:be:b7:b3:5a:4f:e8:91:be:90:5f: fe:79:7e:9d:7b:2c:d8:25:07:66:0d:fa:d6:5e:d9: fd:fe:f8:d1:09:64:6e:46:a2:42:dd:df:69:2e:70: b4:e3:4e:0d:9b:e4:45:2b:20:72:15:b6:9b:97:26: bf:b1:21:2b:5e:5c:0e:47:53:6e:05:c1:d1:cf:a3: 85:6a:90:fe:2a:d6:44:8e:3d:92:7f:19:f1:04:28: fb:e1:aa:a0:3a:e4:73:0b:d4:7c:1d:e6:35:e1:39: 5f:ab:dd:9f:f8:23:89:ca:f6:c3:88:0e:4b:b5:9c: 2c:d3:fa:9f:a6:dc:15:a7:7a:56:b8:f6:45:bf:05: d1:48:f4:50:38:fc:2f:ee:57:72:94:a3:a6:50:0d: 54:3c:9e:2d:c7:8a:f4:0f:93:89:00:a7:91:7f:83: 79:7b:b2:ce:9e:d3:45:9d:d1:14:3f:94:f8:77:3f: b1:65:50:96:63:5e:64:f7:8c:eb:46:07:a4:61:37: 3a:15:cb:8b:76:fc:53:fc:58:7f:8c:da:40:ea:72: 24:af:de:8e:d8:a8:79:83:d0:7e:d6:4c:13:b5:22: bb:96:ac:ac:70:3f:40:be:e7:ca:c8:8b:95:27:b3: 13:41:91:4e:47:2b:c3:ce:4c:1e:bd:8d:d8:b7:17: 57:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B9:DB:FD:3D:24:19:50:56:37:78:D8:A6:81:01:97:FD:66:7A:7C X509v3 Authority Key Identifier: keyid:17:D2:CC:9E:0B:81:86:B6:0B:27:03:13:CD:96:82:10:22:D0:4B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9LMnguBhrYLJwMTzZaCECLQS5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/0d38f9-e0c1-46cc-9a22-dfbb6ec3430e/1/F9LMnguBhrYLJwMTzZaCECLQS5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7b:48:fb:3e:66:e7:5a:c0:8c:a5:b9:1d:10:76:76:4b:20: 99:7a:98:3f:e8:1d:97:75:bf:f8:55:e2:e1:a2:99:f6:2a:7f: 3d:d6:17:3c:d4:d2:fc:6a:6e:2f:e8:bc:76:5a:7e:e2:90:7a: e8:c4:a9:07:f3:9b:32:a0:69:1f:0e:57:03:4d:0a:1a:2f:21: 67:1d:f6:8a:44:c6:91:6e:6d:12:6c:ca:b4:9e:48:c8:ed:f3: 97:c4:89:c6:ab:3b:7b:a4:6a:97:49:1e:27:9b:67:d8:0a:9f: e8:64:8c:a1:7e:36:55:14:1a:43:d1:83:63:37:44:32:05:25: f4:e0:4d:23:09:18:92:d2:14:1b:98:0f:96:81:0f:2f:8e:c2: b6:0e:eb:8c:44:0c:e9:3f:9e:0e:99:21:ab:23:dc:92:d0:4e: 35:cd:e7:47:d6:34:20:0c:0f:2b:76:70:94:da:ee:3b:09:43: 3a:23:39:5d:26:4a:aa:4f:13:2e:74:0c:81:48:bc:3d:98:7c: 85:99:57:b8:9d:3c:27:6d:4b:1b:69:dc:12:d3:ae:23:19:52: 8f:2c:22:d4:49:1c:ea:41:58:07:52:e2:01:f4:91:c0:d8:bd: a3:e7:03:ac:a7:e7:41:6b:fb:18:d6:64:b6:75:08:28:f9:b5: ed:fa:7b:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX1mLQIaMGCvlwEkPN9dSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDJjYzllMGI4MTg2YjYwYjI3MDMxM2NkOTY4MjEwMjJk MDRiOTUwHhcNMjUxMjIzMTgwMTE1WhcNMjUxMjI0MTgwMTE1WjAzMTEwLwYDVQQD EyhmNGI5ZGJmZDNkMjQxOTUwNTYzNzc4ZDhhNjgxMDE5N2ZkNjY3YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hK0Lr63s1pP6JG+kF/+eX6deyzY JQdmDfrWXtn9/vjRCWRuRqJC3d9pLnC0404Nm+RFKyByFbablya/sSErXlwOR1Nu BcHRz6OFapD+KtZEjj2SfxnxBCj74aqgOuRzC9R8HeY14Tlfq92f+COJyvbDiA5L tZws0/qfptwVp3pWuPZFvwXRSPRQOPwv7ldylKOmUA1UPJ4tx4r0D5OJAKeRf4N5 e7LOntNFndEUP5T4dz+xZVCWY15k94zrRgekYTc6FcuLdvxT/Fh/jNpA6nIkr96O 2Kh5g9B+1kwTtSK7lqyscD9AvufKyIuVJ7MTQZFORyvDzkwevY3YtxdX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS52/09JBlQVjd42KaBAZf9Znp8MB8GA1UdIwQY MBaAFBfSzJ4LgYa2CycDE82WghAi0EuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjIt ZGZiYjZlYzM0MzBlLzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wZDM4ZjktZTBjMS00NmNjLTlhMjItZGZiYjZlYzM0MzBl LzEvRjlMTW5ndUJocllMSndNVHpaYUNFQ0xRUzVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXtI+z5m 51rAjKW5HRB2dksgmXqYP+gdl3W/+FXi4aKZ9ip/PdYXPNTS/GpuL+i8dlp+4pB6 6MSpB/ObMqBpHw5XA00KGi8hZx32ikTGkW5tEmzKtJ5IyO3zl8SJxqs7e6Rql0ke J5tn2Aqf6GSMoX42VRQaQ9GDYzdEMgUl9OBNIwkYktIUG5gPloEPL47Ctg7rjEQM 6T+eDpkhqyPcktBONc3nR9Y0IAwPK3ZwlNruOwlDOiM5XSZKqk8TLnQMgUi8PZh8 hZlXuJ08J21LG2ncEtOuIxlSjywi1Ekc6kFYB1LiAfSRwNi9o+cDrKfnQWv7GNZk tnUIKPm17fp7Gg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:32:58 2025 by rpki-client