This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft File: F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft (raw, json) Hash identifier: F9H3c1+Of/ocZs1/lmBILqpmlmb2MjHSZXT7fryDtqg= Subject key identifier: CD:A9:7C:EB:77:91:31:89:68:35:BD:6A:42:98:B5:25:0C:99:F0:5E Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc Certificate serial: 019B3A8FD4466C5B1E473B37E39F61E41EC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft Manifest number: 118A Signing time: Sat 20 Dec 2025 07:01:02 +0000 Manifest this update: Sat 20 Dec 2025 07:01:02 +0000 Manifest next update: Sun 21 Dec 2025 07:01:02 +0000 Files and hashes: 1: A-cG9_VLTkbphCfs69AUhiirqHg.roa (hash: t1BknoTJdcFpSWtNoZoHuIOq9kUcPBsqmM7WgqQbhUw=) 2: F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl (hash: leBOIQWiVrBqQEAtTaeyjAgDvvYRVMnAbJHQG0I2mYM=) 3: jeCOpRVOfzPdKHCJg5VaAG2ZU-0.roa (hash: gfvmY5Jw7/jL3ve93eYFDmKDfaFU9R+FgRyjOHRXXxo=) 4: nzFdzlxDGl-0gzUpnpUFUkIIuzM.roa (hash: PxAEcSL4+pjTKWciNNPj/S1u+RcprIkbVvq5ujpcIuY=) 5: wNwz-CEyZ2UgBaszV0ucixDH2J8.roa (hash: 7MrpT4CLu6mRCHE7ngg+YWwTFHL1zoVwcmT3KvmQWLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:d4:46:6c:5b:1e:47:3b:37:e3:9f:61:e4:1e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc Validity Not Before: Dec 20 07:01:02 2025 GMT Not After : Dec 21 07:01:02 2025 GMT Subject: CN=cda97ceb779131896835bd6a4298b5250c99f05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:55:81:c3:29:29:c8:c6:79:ef:69:bc:ba:bc: 2c:84:e5:8f:d6:93:32:e0:52:b2:0a:64:1c:91:7e: 55:43:72:91:d0:91:5c:e2:de:a3:98:ac:69:4f:42: 2a:6f:59:f4:68:b2:27:83:b4:45:88:bf:98:7d:f0: 14:f6:64:dc:2a:43:7f:ff:5a:30:ea:3a:4a:ba:ed: 55:2b:9b:31:91:01:59:dd:76:2a:9d:3e:33:17:8f: 44:0d:7c:80:1b:c0:a2:87:24:06:d7:08:dc:46:83: 0f:b3:d2:b9:a2:51:5e:ae:6e:00:da:fe:a3:c4:5d: 55:26:71:df:70:2f:0c:db:07:59:8e:64:12:59:35: ef:8d:2b:ca:e7:61:0d:b5:93:d1:28:3b:51:e1:79: 87:0c:83:5d:3e:3f:9a:71:00:e4:a6:93:4e:7a:58: eb:e1:34:02:9f:87:2f:60:9b:fc:f8:f7:4f:dd:a6: fa:45:46:d9:3d:08:f4:b6:fc:c7:92:f6:0d:a0:7a: 0e:7f:df:b9:79:4e:65:35:c7:2e:db:37:4e:46:99: 35:64:44:6a:d1:61:5e:90:24:14:6f:d1:1b:bd:ed: f7:e0:0e:03:d7:b4:43:2f:01:bc:22:04:05:c1:33: 1a:19:77:73:47:e5:65:2f:00:5f:f9:a2:c0:0e:8e: 13:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:7C:EB:77:91:31:89:68:35:BD:6A:42:98:B5:25:0C:99:F0:5E X509v3 Authority Key Identifier: keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3b:91:09:fe:c8:4c:12:ec:41:8d:0b:33:e0:6b:64:3b:1a: 63:a8:15:36:ba:0d:8a:b5:6b:2d:f0:9a:5b:fd:cd:28:3f:52: 70:30:1e:fc:07:f6:f8:f6:68:f0:f1:ab:41:86:34:49:72:a8: 06:76:3f:f4:d6:93:13:d3:cd:9d:7a:61:b0:0f:76:37:4f:d4: 3b:92:c8:69:d4:59:15:4a:fa:3f:b9:b6:2e:74:12:b6:97:70: 70:39:70:b1:09:66:39:00:14:dd:73:4f:49:97:b6:c7:0b:9c: d0:e5:1e:9f:f4:10:b2:00:29:8e:69:81:a0:52:8c:a0:fb:99: 6d:63:2f:af:53:3b:73:1a:94:ae:2a:a1:bd:23:96:0d:0d:21: aa:d6:c1:b7:20:31:81:22:d5:64:27:93:f1:99:db:38:fa:42: 2f:76:d0:a7:99:ca:ca:f8:d8:91:fd:de:f7:e5:ff:e2:9e:59: bb:19:92:c2:39:14:4e:87:97:5a:34:c1:10:69:9e:1b:ab:d0: 74:13:51:46:13:14:ab:7b:29:c7:8b:8c:d5:65:45:e1:31:90: 00:0b:61:a2:35:78:24:71:1b:b6:99:ea:31:bc:fd:9b:0b:88: 67:2a:16:d3:8b:bb:75:cf:4b:ce:8d:55:cb:13:b8:dc:6a:2b: af:df:31:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j9RGbFseRzs3459h5B7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3 ODdmYmMwHhcNMjUxMjIwMDcwMTAyWhcNMjUxMjIxMDcwMTAyWjAzMTEwLwYDVQQD EyhjZGE5N2NlYjc3OTEzMTg5NjgzNWJkNmE0Mjk4YjUyNTBjOTlmMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFWBwykpyMZ572m8urwshOWP1pMy 4FKyCmQckX5VQ3KR0JFc4t6jmKxpT0Iqb1n0aLIng7RFiL+YffAU9mTcKkN//1ow 6jpKuu1VK5sxkQFZ3XYqnT4zF49EDXyAG8CihyQG1wjcRoMPs9K5olFerm4A2v6j xF1VJnHfcC8M2wdZjmQSWTXvjSvK52ENtZPRKDtR4XmHDINdPj+acQDkppNOeljr 4TQCn4cvYJv8+PdP3ab6RUbZPQj0tvzHkvYNoHoOf9+5eU5lNccu2zdORpk1ZERq 0WFekCQUb9Ebve334A4D17RDLwG8IgQFwTMaGXdzR+VlLwBf+aLADo4T7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2pfOt3kTGJaDW9akKYtSUMmfBeMB8GA1UdIwQY MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt OTQxY2M2YTdiYWQ5LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5 LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzuRCf7I TBLsQY0LM+BrZDsaY6gVNroNirVrLfCaW/3NKD9ScDAe/Af2+PZo8PGrQYY0SXKo BnY/9NaTE9PNnXphsA92N0/UO5LIadRZFUr6P7m2LnQStpdwcDlwsQlmOQAU3XNP SZe2xwuc0OUen/QQsgApjmmBoFKMoPuZbWMvr1M7cxqUriqhvSOWDQ0hqtbBtyAx gSLVZCeT8ZnbOPpCL3bQp5nKyvjYkf3e9+X/4p5ZuxmSwjkUToeXWjTBEGmeG6vQ dBNRRhMUq3spx4uM1WVF4TGQAAthojV4JHEbtpnqMbz9mwuIZyoW04u7dc9Lzo1V yxO43Gorr98xaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:04:16 2025 by rpki-client