This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft File: F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json) Hash identifier: 4a1cvnK3r9ahLTRernfBcOPiamH/sCNFtOXDPf4U9wI= Subject key identifier: CE:78:09:16:B7:3A:21:AD:9A:42:1E:10:F8:C2:AB:81:5B:1C:14:EE Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d Certificate serial: 019B330D47F26C54F761A2DF4EA803B12CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 20:01:06 +0000 Manifest this update: Thu 18 Dec 2025 20:01:06 +0000 Manifest next update: Fri 19 Dec 2025 20:01:06 +0000 Files and hashes: 1: 2zPO2m1PUGY-iLAYnC4rJmYASPE.roa (hash: Rs7PMbEzIpZxq7FwWF4kt1+4OAfZU7egEzwfwjyWknc=) 2: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: NmtelVAIPn1NcQDwQlkolI90uvYc4tioa0U1SLzb5ak=) 3: sL81ThqOdiuggWYnv3U7dVFV4tQ.roa (hash: 9lHlaxhYv60ZuaT3Wq1aBGjk7nIJ6koMpcmTPm5Lg44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:47:f2:6c:54:f7:61:a2:df:4e:a8:03:b1:2c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d Validity Not Before: Dec 18 20:01:06 2025 GMT Not After : Dec 19 20:01:06 2025 GMT Subject: CN=ce780916b73a21ad9a421e10f8c2ab815b1c14ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:2a:ac:ee:3e:8f:f5:56:f3:77:6a:34:48: b8:ef:83:27:1c:a4:01:88:b9:5b:ae:84:2b:64:2f: 4b:78:ab:57:36:d0:f5:88:6b:50:72:3c:e1:19:a9: 2f:48:ff:39:5e:6e:57:92:03:e5:7f:55:e4:39:5e: c4:95:83:9d:92:b7:bc:09:d6:12:dc:41:a6:43:da: fb:f3:9f:c1:46:29:8a:2a:d9:81:46:d8:f9:1e:a7: 3b:54:2c:92:c7:f1:d9:e6:bf:d0:10:6b:e4:fe:d8: 57:8d:74:84:37:9b:d8:81:ce:e5:f0:75:de:79:cc: 2b:7d:79:a0:97:6a:55:60:8f:a9:ff:63:be:cb:8e: 61:f7:3b:4d:02:31:73:bd:a2:a6:0d:ab:53:75:ac: 37:24:f5:84:c0:25:08:00:97:6b:36:9b:67:c3:64: 2f:c2:ae:e1:f6:71:b0:d2:4e:14:66:98:8c:9c:00: 85:43:c0:d9:46:79:1b:2f:22:a5:08:f2:51:f7:13: 52:24:6f:6e:36:c9:24:bb:05:6d:63:b5:a9:b3:dd: 5c:29:dc:59:da:df:ec:aa:a9:8b:56:01:8b:25:e1: 57:09:97:7e:44:46:aa:66:0b:df:79:c4:cd:7b:73: ad:5b:61:9c:37:2e:ca:7e:11:74:08:27:61:51:f7: 23:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:78:09:16:B7:3A:21:AD:9A:42:1E:10:F8:C2:AB:81:5B:1C:14:EE X509v3 Authority Key Identifier: keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:4a:e3:69:12:1c:ab:90:cd:a6:4c:cb:3b:df:b1:d1:19:11: 31:32:eb:2b:22:db:ce:da:d2:d7:76:f1:17:48:09:4b:73:45: b0:25:ad:10:0c:3f:f7:94:52:9a:54:09:c1:38:5e:f5:56:08: 5b:f9:d3:d4:67:0d:91:18:97:86:af:49:25:f1:27:d2:f9:59: 71:2f:f9:0e:24:fe:33:17:be:13:88:3d:3b:88:c7:ba:5a:8d: a0:b2:6f:db:c9:b7:62:1c:24:74:8c:a4:ef:f5:58:56:a0:76: 05:c3:15:d0:0e:b9:c0:99:72:84:b8:fa:b8:2d:21:b2:66:6e: c7:37:08:13:8d:aa:b9:04:3d:a5:f8:ca:52:e4:8f:04:d4:1d: 46:5a:85:51:d5:0f:07:5a:55:54:26:52:72:0a:88:f9:51:a2: 3d:79:98:14:e9:f3:4c:f6:27:39:15:82:43:00:e5:cf:ca:8a: b9:f3:71:6a:23:d5:5e:d9:7b:6a:e0:32:3b:5b:cc:5c:4c:74: 40:61:a4:02:df:40:2f:52:cf:85:df:e9:98:23:d6:fe:8c:49: dc:9a:26:c5:b9:70:68:cd:41:07:b2:1b:85:5e:41:20:ca:65: 4d:96:11:c7:af:2d:6f:ce:41:84:7b:fc:a7:7f:a2:94:0e:69: db:bc:1d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDUfybFT3YaLfTqgDsSz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjhiZWI1NTVkYWZhODJjM2Q2YWEzMzY5MDlhZTVhZGUz NWE4M2QwHhcNMjUxMjE4MjAwMTA2WhcNMjUxMjE5MjAwMTA2WjAzMTEwLwYDVQQD EyhjZTc4MDkxNmI3M2EyMWFkOWE0MjFlMTBmOGMyYWI4MTViMWMxNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQqrO4+j/VW83dqNEi474MnHKQB iLlbroQrZC9LeKtXNtD1iGtQcjzhGakvSP85Xm5XkgPlf1XkOV7ElYOdkre8CdYS 3EGmQ9r785/BRimKKtmBRtj5Hqc7VCySx/HZ5r/QEGvk/thXjXSEN5vYgc7l8HXe ecwrfXmgl2pVYI+p/2O+y45h9ztNAjFzvaKmDatTdaw3JPWEwCUIAJdrNptnw2Qv wq7h9nGw0k4UZpiMnACFQ8DZRnkbLyKlCPJR9xNSJG9uNskkuwVtY7Wps91cKdxZ 2t/sqqmLVgGLJeFXCZd+REaqZgvfecTNe3OtW2GcNy7KfhF0CCdhUfcjzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM54CRa3OiGtmkIeEPjCq4FbHBTuMB8GA1UdIwQY MBaAFBe4vrVV2vqCw9aqM2kJrlreNag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAt N2UyNDI2NzRkZWZjLzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAtN2UyNDI2NzRkZWZj LzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkrjaRIc q5DNpkzLO9+x0RkRMTLrKyLbztrS13bxF0gJS3NFsCWtEAw/95RSmlQJwThe9VYI W/nT1GcNkRiXhq9JJfEn0vlZcS/5DiT+Mxe+E4g9O4jHulqNoLJv28m3YhwkdIyk 7/VYVqB2BcMV0A65wJlyhLj6uC0hsmZuxzcIE42quQQ9pfjKUuSPBNQdRlqFUdUP B1pVVCZScgqI+VGiPXmYFOnzTPYnORWCQwDlz8qKufNxaiPVXtl7auAyO1vMXEx0 QGGkAt9AL1LPhd/pmCPW/oxJ3JomxblwaM1BB7IbhV5BIMplTZYRx68tb85BhHv8 p3+ilA5p27wdXw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:32:47 2025 by rpki-client