This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json) Hash identifier: YB9QzPz9eaFX296kS74YtTUbO5HKmGV54QfOPoI0Kds= Subject key identifier: 39:76:22:23:63:20:BE:A3:C9:97:E7:BB:A7:66:CD:1B:B0:90:09:37 Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Certificate serial: 019B7110AB66BDB9BBF55585B1B8C46C16A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft Manifest number: 06F3 Signing time: Tue 30 Dec 2025 21:01:16 +0000 Manifest this update: Tue 30 Dec 2025 21:01:16 +0000 Manifest next update: Wed 31 Dec 2025 21:01:16 +0000 Files and hashes: 1: PEg5N3hiRtOVV8rz1xnm1FLpzfA.asa (hash: /eJ9DZOYmS6hBGU+9TUQE3rgjFypqVE71n2H5f3gxU8=) 2: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: zP4c5n2u8zUACAjjtNrSVggYWkWA1pxTOIK++0AE7c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:ab:66:bd:b9:bb:f5:55:85:b1:b8:c4:6c:16:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Validity Not Before: Dec 30 21:01:16 2025 GMT Not After : Dec 31 21:01:16 2025 GMT Subject: CN=397622236320bea3c997e7bba766cd1bb0900937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:49:dd:1c:64:7d:f9:c0:fe:82:0a:05:b4: c9:65:f1:af:96:89:10:66:18:0e:35:08:f2:96:45: de:e8:ae:e1:73:6e:8a:98:b2:a3:e8:20:f5:81:aa: c4:98:93:7c:fe:e3:25:15:5f:4f:fe:9e:2f:a8:5a: 8b:c6:29:60:2f:52:5f:af:f5:9e:f0:1c:6e:46:2e: c5:69:d4:6d:41:32:48:0d:01:af:77:3f:6a:6e:3d: 53:1d:cb:ca:ea:b2:7e:28:ef:7c:e7:33:9d:42:7e: c7:e2:b3:12:a1:24:6f:31:6c:82:ba:36:e2:9f:89: c2:5b:5a:70:ae:59:90:8d:cb:b7:74:de:e2:62:3b: 08:6c:9f:ed:05:4c:1e:7a:1e:b9:48:61:d0:b3:1d: 36:24:92:6d:07:9c:38:ba:aa:57:f0:2e:19:e8:42: ba:b1:f6:7e:fe:96:e1:eb:31:2b:d4:f0:cd:3d:8b: d1:d4:dc:e0:3e:64:57:00:83:65:c2:89:82:a2:04: f1:b6:17:d2:20:76:79:bf:16:d4:71:1d:5f:14:1a: 85:6e:2c:01:ae:50:ad:b5:dd:65:b1:0b:10:6e:6d: b9:0a:ec:fc:13:43:85:9f:d5:dc:33:28:19:86:42: f5:9f:1d:e1:19:3b:d9:1c:cd:20:41:c7:b6:3f:fe: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:76:22:23:63:20:BE:A3:C9:97:E7:BB:A7:66:CD:1B:B0:90:09:37 X509v3 Authority Key Identifier: keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:23:75:13:4c:71:7a:f3:e5:4f:72:23:79:be:38:11:b2:90: 7c:39:67:d9:8b:d5:1e:6d:03:84:e4:1e:28:da:5a:25:fe:59: 91:84:51:c8:07:b8:c2:71:8b:c6:72:b2:a0:62:55:98:0d:af: 92:d1:49:2a:5a:ab:8d:26:5c:58:b3:44:aa:d0:31:51:20:d9: dd:74:29:02:aa:4e:d1:00:39:90:fa:a0:ab:b0:22:f6:73:94: e2:60:5e:70:53:e5:ac:e6:05:63:2c:99:04:a2:3e:a1:02:92: 3c:2f:a0:44:1c:68:8a:9f:f9:12:3e:e0:63:d4:be:2c:4b:f7: ca:3e:b7:f7:54:03:cd:46:f7:f1:5b:2a:29:c7:4b:9a:94:6f: b2:ea:b5:b7:40:7b:7f:cb:46:52:45:43:48:fb:f1:35:6d:39: 4a:b9:cf:23:cb:83:02:a5:25:4c:04:81:a6:9b:89:7f:a5:fb: 3a:b1:ea:f6:f3:6e:e7:62:b4:51:99:45:6c:26:9e:0d:df:1c: b3:07:a8:1f:cb:fa:e5:54:78:e0:bc:ea:bf:ca:b9:0e:89:0f: 0d:bf:68:9f:3f:c4:8c:2c:21:93:fb:01:c2:22:22:59:19:93: 1b:79:2e:67:2a:c6:86:ad:e1:84:50:e1:31:ed:09:6a:4a:c6: c0:a6:3d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEKtmvbm79VWFsbjEbBanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGFlNTdlZTZlMGE5YzUxMDFmYzE0YTg3YTUzMzQxNTBi YmFiNDYwHhcNMjUxMjMwMjEwMTE2WhcNMjUxMjMxMjEwMTE2WjAzMTEwLwYDVQQD EygzOTc2MjIyMzYzMjBiZWEzYzk5N2U3YmJhNzY2Y2QxYmIwOTAwOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogVJ3RxkffnA/oIKBbTJZfGvlokQ ZhgONQjylkXe6K7hc26KmLKj6CD1garEmJN8/uMlFV9P/p4vqFqLxilgL1Jfr/We 8BxuRi7FadRtQTJIDQGvdz9qbj1THcvK6rJ+KO985zOdQn7H4rMSoSRvMWyCujbi n4nCW1pwrlmQjcu3dN7iYjsIbJ/tBUweeh65SGHQsx02JJJtB5w4uqpX8C4Z6EK6 sfZ+/pbh6zEr1PDNPYvR1NzgPmRXAINlwomCogTxthfSIHZ5vxbUcR1fFBqFbiwB rlCttd1lsQsQbm25Cuz8E0OFn9XcMygZhkL1nx3hGTvZHM0gQce2P/62xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl2IiNjIL6jyZfnu6dmzRuwkAk3MB8GA1UdIwQY MBaAFH9K5X7m4KnFEB/BSoelM0FQu6tGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0Njgt NWI1ZDk4ZjUzNjFlLzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0NjgtNWI1ZDk4ZjUzNjFl LzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSN1E0xx evPlT3Ijeb44EbKQfDln2YvVHm0DhOQeKNpaJf5ZkYRRyAe4wnGLxnKyoGJVmA2v ktFJKlqrjSZcWLNEqtAxUSDZ3XQpAqpO0QA5kPqgq7Ai9nOU4mBecFPlrOYFYyyZ BKI+oQKSPC+gRBxoip/5Ej7gY9S+LEv3yj6391QDzUb38VsqKcdLmpRvsuq1t0B7 f8tGUkVDSPvxNW05SrnPI8uDAqUlTASBppuJf6X7OrHq9vNu52K0UZlFbCaeDd8c sweoH8v65VR44Lzqv8q5DokPDb9onz/EjCwhk/sBwiIiWRmTG3kuZyrGhq3hhFDh Me0JakrGwKY9qg== -----END CERTIFICATE-----Generated at Wed Dec 31 03:42:38 2025 by rpki-client