This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft File: F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json) Hash identifier: SuvZhiKHsRSoYGMMaLVou89Yhvo6iOWSEIBRkFCyLuo= Subject key identifier: 45:D4:2B:0E:22:62:D4:BB:06:90:24:40:0A:B6:64:66:AD:D0:E2:93 Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 Certificate issuer: /CN=1763214280055a47deb554fe9cb28dc0c1792302 Certificate serial: 019B6B7BBB33E38AE30162E2B72448A7D399 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft Manifest number: 0E33 Signing time: Mon 29 Dec 2025 19:00:29 +0000 Manifest this update: Mon 29 Dec 2025 19:00:29 +0000 Manifest next update: Tue 30 Dec 2025 19:00:29 +0000 Files and hashes: 1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: O9ZDMQPbmlsRD+BzmfbqqmL9GioQMPR00RMqWYctq3k=) 2: hVP7z7lmWoj5TlYxPEh7DnVK9VA.roa (hash: pMZmMKo2i/xc9OMa6Id6srmN8nXi279oYUGsaAWOPus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:7b:bb:33:e3:8a:e3:01:62:e2:b7:24:48:a7:d3:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302 Validity Not Before: Dec 29 19:00:29 2025 GMT Not After : Dec 30 19:00:29 2025 GMT Subject: CN=45d42b0e2262d4bb069024400ab66466add0e293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:24:16:d2:ef:a3:10:18:7c:c9:c5:ab:91:e6: 01:43:d4:99:4d:b5:41:43:83:ec:73:4c:d3:4d:56: f4:04:c5:e0:4f:68:fb:02:06:5c:66:ab:78:f6:93: b3:16:9e:e4:33:35:0c:dd:d1:f6:82:a9:ed:55:ea: 75:91:58:31:65:d1:f3:10:0c:52:01:46:0d:42:91: da:3a:eb:b1:34:63:18:0c:94:6a:19:13:52:87:5e: f1:d2:40:6a:9b:cc:0e:5f:4a:56:6b:fc:2f:99:7a: ac:e5:c2:c0:75:6e:a8:24:b9:f3:96:9c:0d:d4:36: f9:76:d1:d8:6d:66:04:41:9e:6a:60:87:e0:f1:2f: ba:64:ec:3a:e5:42:8d:59:b3:80:30:45:85:3b:0c: 6e:f1:ee:32:8a:3d:97:e6:0a:91:f1:b7:76:40:24: bd:18:ad:5c:25:fe:fb:98:71:91:3c:d7:e8:c2:a1: e3:ed:7e:87:6d:86:c5:aa:9d:ed:b3:22:a9:ce:b4: 82:da:70:27:25:38:1c:67:fe:27:49:4a:44:6c:ba: 6a:9c:16:2d:d9:d4:86:91:00:08:9b:58:e9:7f:b4: e7:07:83:00:b7:43:f0:f1:07:06:96:cc:45:26:4e: 38:7f:48:92:c3:b6:64:a6:20:6e:cc:ae:57:7f:73: c0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D4:2B:0E:22:62:D4:BB:06:90:24:40:0A:B6:64:66:AD:D0:E2:93 X509v3 Authority Key Identifier: keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:af:f9:ab:3b:a4:ed:b6:23:0a:3f:ac:03:9d:ea:8b:b4:7b: 84:13:d5:d4:05:17:c7:5f:8d:c3:cd:41:8c:dd:ca:7e:5e:7c: 19:e5:b2:f8:57:a4:a8:3d:80:3d:02:fa:f1:5a:ce:ab:06:c3: d1:8f:6c:15:1d:da:7f:6f:c6:26:ab:22:10:1d:2f:24:13:51: 90:62:86:bf:a8:9b:75:1c:bf:7c:76:9b:75:c8:43:5c:01:06: 90:0f:07:f0:37:0b:b8:65:b1:33:1e:9d:7d:30:92:11:a3:a0: 57:b7:86:62:73:3d:10:62:a9:23:94:e4:3d:f4:5e:93:36:63: 3f:82:4d:28:3d:71:2b:7e:0e:d6:63:cd:a5:f1:1f:f9:9a:fd: 30:64:8a:18:d3:f4:46:49:03:90:f8:0d:6c:71:92:12:9d:10: 11:73:7d:a1:58:a0:1a:2e:59:8a:ed:48:f2:6b:9d:f7:c5:04: 7c:19:7a:ba:41:4c:16:fe:6d:95:bf:5e:38:ac:98:04:d6:ed: 72:79:c1:be:f9:e4:90:2a:5b:f0:4f:f4:58:14:14:58:b7:f4: cf:31:ce:a1:49:3c:86:a5:88:1f:97:9f:32:8a:d5:8e:55:01: 99:da:ec:bb:c5:75:2d:32:44:0e:b5:a9:d0:5b:8a:20:4e:77: d4:cb:d4:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtre7sz44rjAWLityRIp9OZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjMyMTQyODAwNTVhNDdkZWI1NTRmZTljYjI4ZGMwYzE3 OTIzMDIwHhcNMjUxMjI5MTkwMDI5WhcNMjUxMjMwMTkwMDI5WjAzMTEwLwYDVQQD Eyg0NWQ0MmIwZTIyNjJkNGJiMDY5MDI0NDAwYWI2NjQ2NmFkZDBlMjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiQW0u+jEBh8ycWrkeYBQ9SZTbVB Q4Psc0zTTVb0BMXgT2j7AgZcZqt49pOzFp7kMzUM3dH2gqntVep1kVgxZdHzEAxS AUYNQpHaOuuxNGMYDJRqGRNSh17x0kBqm8wOX0pWa/wvmXqs5cLAdW6oJLnzlpwN 1Db5dtHYbWYEQZ5qYIfg8S+6ZOw65UKNWbOAMEWFOwxu8e4yij2X5gqR8bd2QCS9 GK1cJf77mHGRPNfowqHj7X6HbYbFqp3tsyKpzrSC2nAnJTgcZ/4nSUpEbLpqnBYt 2dSGkQAIm1jpf7TnB4MAt0Pw8QcGlsxFJk44f0iSw7ZkpiBuzK5Xf3PAmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXUKw4iYtS7BpAkQAq2ZGat0OKTMB8GA1UdIwQY MBaAFBdjIUKABVpH3rVU/pyyjcDBeSMCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEt Nzk2Nzk2MmU3Yzc1LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9jZmJjZmEtODhkYS00ODhlLWFjZTEtNzk2Nzk2MmU3Yzc1 LzEvRjJNaFFvQUZXa2ZldFZULW5MS053TUY1SXdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkK/5qzuk 7bYjCj+sA53qi7R7hBPV1AUXx1+Nw81BjN3Kfl58GeWy+FekqD2APQL68VrOqwbD 0Y9sFR3af2/GJqsiEB0vJBNRkGKGv6ibdRy/fHabdchDXAEGkA8H8DcLuGWxMx6d fTCSEaOgV7eGYnM9EGKpI5TkPfRekzZjP4JNKD1xK34O1mPNpfEf+Zr9MGSKGNP0 RkkDkPgNbHGSEp0QEXN9oVigGi5Ziu1I8mud98UEfBl6ukFMFv5tlb9eOKyYBNbt cnnBvvnkkCpb8E/0WBQUWLf0zzHOoUk8hqWIH5efMorVjlUBmdrsu8V1LTJEDrWp 0FuKIE531MvUOQ== -----END CERTIFICATE-----Generated at Tue Dec 30 00:19:45 2025 by rpki-client