This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft File: F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json) Hash identifier: 4IAxwGLE6uPJNgnIqGqpR7nLKi24B6sgyLSnEhdFLb0= Subject key identifier: 24:88:41:BF:98:AC:FF:1B:41:46:25:CE:A7:C9:15:FB:95:AB:87:7B Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 Certificate issuer: /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Certificate serial: 019B3BA2A08BC800B354ECC66B8447441B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft Manifest number: 0FE5 Signing time: Sat 20 Dec 2025 12:01:12 +0000 Manifest this update: Sat 20 Dec 2025 12:01:12 +0000 Manifest next update: Sun 21 Dec 2025 12:01:12 +0000 Files and hashes: 1: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: 8Vx36ooIXYYmqqR8/p74AlwR8gx2WRQ413UnEZynY/c=) 2: sUbLpeFS3XLLLQIvzdPabGUHzHo.roa (hash: 3V72mhpNF2hyMt7Kyc3iG5tEZ6zvkVberiaxQXV1Hcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a0:8b:c8:00:b3:54:ec:c6:6b:84:47:44:1b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98 Validity Not Before: Dec 20 12:01:12 2025 GMT Not After : Dec 21 12:01:12 2025 GMT Subject: CN=248841bf98acff1b414625cea7c915fb95ab877b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1b:84:39:d2:fc:8b:4a:db:17:0a:9b:c9:f9: 7f:3a:33:07:94:9a:5f:bd:10:7f:5b:ad:44:e8:58: d4:fa:4e:e7:e3:da:7e:91:6f:f7:e4:ea:2a:8c:c8: 45:05:38:13:eb:a1:d9:af:76:38:7c:ef:77:a2:47: b0:82:02:b3:ab:a9:9b:22:19:c0:34:c7:5d:c9:a7: 6e:cc:4b:12:7c:db:02:98:8d:ca:92:68:f8:0e:9f: 21:cb:14:2b:f1:4d:64:82:70:98:76:49:fd:26:0f: ba:79:88:4e:8d:5d:f5:88:12:c7:08:ba:eb:00:52: 80:9d:6f:a2:0b:6c:dc:bd:45:f7:16:9f:8c:e7:11: c9:ed:5a:60:b6:3b:01:4b:08:40:25:2a:bf:cc:3d: 5d:18:81:d3:ac:36:43:4f:dc:c7:ea:37:d7:1d:ec: e3:e9:b4:33:bf:49:1f:5f:5c:4b:76:9a:fe:b4:bd: 38:86:50:0c:6c:23:03:f6:d0:00:bd:b1:fa:6e:c6: 07:25:40:41:38:63:aa:25:e7:b5:bd:70:b4:df:d8: e2:9c:46:a3:af:1c:18:f4:24:53:b5:ba:19:5a:68: 7c:05:c2:1f:cf:f7:17:94:bb:2f:a7:fd:19:3c:5d: db:d0:68:d2:d5:dd:93:19:1c:e2:ce:30:af:99:1e: ca:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:41:BF:98:AC:FF:1B:41:46:25:CE:A7:C9:15:FB:95:AB:87:7B X509v3 Authority Key Identifier: keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:81:a8:d8:98:21:d3:e9:b1:45:f5:8e:7f:4b:09:b6:fc:d4: 7d:d4:52:80:39:fe:c0:fb:32:8d:6d:09:f0:64:2e:1a:3f:1f: a1:dc:10:cf:44:5c:fe:4c:2f:a9:76:92:c0:df:a1:44:39:cb: d2:9c:55:ee:e3:f4:0f:2e:48:3a:2b:10:fb:36:8c:53:85:aa: e0:91:02:d6:db:ca:3d:af:dd:f8:13:d0:9f:64:5e:2b:d9:64: 4e:fc:18:d0:03:5e:d0:cf:d5:dd:d0:c6:5e:57:b6:5f:e8:55: d1:6b:0f:fa:fa:69:c8:9d:da:6d:66:d1:c7:4a:dc:fd:be:20: 26:e6:5c:a0:0e:db:83:f3:58:79:07:e4:c6:55:17:34:66:bc: e5:fb:21:80:b5:65:d8:96:79:78:64:b5:8c:a8:31:e8:cb:e2: 8a:a9:fc:66:13:2a:98:5e:7e:51:77:a8:0f:0a:53:62:46:83: a5:69:d4:5b:49:17:d2:59:4f:3c:6a:13:5b:c6:ad:39:39:e9: 23:6c:fd:9a:8f:9b:5e:7a:62:ff:eb:56:41:79:fc:1c:7c:9f: 85:28:6e:15:1c:74:45:72:63:60:20:75:ee:9e:f5:8a:a4:5a: 65:77:77:12:94:bf:fd:77:eb:78:ca:43:cf:c3:ef:9a:5f:fd: 28:1e:df:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqCLyACzVOzGa4RHRBs6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NzliOTVkOGE1OGZjY2E2YTgxMmU3NzdlN2VmNjk0NTNm OGFjOTgwHhcNMjUxMjIwMTIwMTEyWhcNMjUxMjIxMTIwMTEyWjAzMTEwLwYDVQQD EygyNDg4NDFiZjk4YWNmZjFiNDE0NjI1Y2VhN2M5MTVmYjk1YWI4NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRuEOdL8i0rbFwqbyfl/OjMHlJpf vRB/W61E6FjU+k7n49p+kW/35OoqjMhFBTgT66HZr3Y4fO93okewggKzq6mbIhnA NMddyaduzEsSfNsCmI3Kkmj4Dp8hyxQr8U1kgnCYdkn9Jg+6eYhOjV31iBLHCLrr AFKAnW+iC2zcvUX3Fp+M5xHJ7VpgtjsBSwhAJSq/zD1dGIHTrDZDT9zH6jfXHezj 6bQzv0kfX1xLdpr+tL04hlAMbCMD9tAAvbH6bsYHJUBBOGOqJee1vXC039jinEaj rxwY9CRTtboZWmh8BcIfz/cXlLsvp/0ZPF3b0GjS1d2TGRzizjCvmR7KBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSIQb+YrP8bQUYlzqfJFfuVq4d7MB8GA1UdIwQY MBaAFBd5uV2KWPzKaoEud35+9pRT+KyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYt NDA3ZTNmZTYzOTQ1LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9iM2MwNjUtZWQxYy00NTg1LTk5YTYtNDA3ZTNmZTYzOTQ1 LzEvRjNtNVhZcFlfTXBxZ1M1M2ZuNzJsRlA0ckpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIGo2Jgh 0+mxRfWOf0sJtvzUfdRSgDn+wPsyjW0J8GQuGj8fodwQz0Rc/kwvqXaSwN+hRDnL 0pxV7uP0Dy5IOisQ+zaMU4Wq4JEC1tvKPa/d+BPQn2ReK9lkTvwY0ANe0M/V3dDG Xle2X+hV0WsP+vppyJ3abWbRx0rc/b4gJuZcoA7bg/NYeQfkxlUXNGa85fshgLVl 2JZ5eGS1jKgx6Mviiqn8ZhMqmF5+UXeoDwpTYkaDpWnUW0kX0llPPGoTW8atOTnp I2z9mo+bXnpi/+tWQXn8HHyfhShuFRx0RXJjYCB17p71iqRaZXd3EpS//XfreMpD z8Pvml/9KB7fOQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:56:41 2025 by rpki-client