This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft File: F19uHruDGTXIQiyXK8qy5W0dnjY.mft (raw, json) Hash identifier: Vcfjd0R6BIUZ2sx7TAIn1as1vrL4ggRroR8nq75LSPg= Subject key identifier: 48:5D:D0:5B:01:5B:A0:01:4B:0E:E3:84:B9:38:1C:AC:17:F7:A6:0A Authority key identifier: 17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 Certificate issuer: /CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Certificate serial: 019B6B44BE84435AD2BDDBBD7B9605BAFA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 18:00:25 +0000 Manifest this update: Mon 29 Dec 2025 18:00:25 +0000 Manifest next update: Tue 30 Dec 2025 18:00:25 +0000 Files and hashes: 1: F19uHruDGTXIQiyXK8qy5W0dnjY.crl (hash: jcCxmlTDEVbcedluXbJDipEOaJomP1Y8FhDvx3Gv1mQ=) 2: _66GUATo4F62e-zSRdrY5Scw7vI.roa (hash: fGRThmRK99/VwtLpaDe06S96FPLhmaswQib9OqrGAEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:be:84:43:5a:d2:bd:db:bd:7b:96:05:ba:fa:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175f6e1ebb831935c8422c972bcab2e56d1d9e36 Validity Not Before: Dec 29 18:00:25 2025 GMT Not After : Dec 30 18:00:25 2025 GMT Subject: CN=485dd05b015ba0014b0ee384b9381cac17f7a60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d2:57:22:af:45:ea:66:9c:ff:00:b0:72:9e: fa:0b:cf:a4:6c:4a:88:ec:c1:bb:d2:52:a1:43:77: 3c:f2:ee:ba:59:89:6d:74:77:c0:b4:a5:8d:a3:cf: 1f:90:2d:b0:33:f9:b4:cf:0b:7f:5b:d6:4d:09:cc: 16:b1:c4:4b:b5:6f:f3:3e:dd:af:8a:c8:3e:fb:80: 73:d2:89:53:2b:69:ef:26:f2:a6:0f:3d:27:5e:17: f7:5e:6e:b3:9d:ec:03:8d:b8:c3:1c:a7:b7:e1:d6: 5d:30:7c:61:f7:b2:39:4c:4f:fd:e7:22:01:fa:98: df:c2:66:8d:68:bf:b2:df:fe:f5:42:61:9f:a9:9f: b8:0c:1d:f4:21:98:bd:bd:1b:ea:08:53:9c:f1:67: ed:27:7f:9b:93:42:26:60:64:ab:76:16:5a:7c:00: b6:63:78:a0:33:ed:e2:bc:d9:18:38:63:ec:f5:f2: 4b:6e:c3:b9:56:2c:95:8e:cb:82:85:de:42:02:61: 89:84:6f:e6:ba:21:16:6d:46:7e:17:61:53:ff:8c: 70:b1:e6:a9:6b:0e:44:6a:1b:9e:02:3a:6c:f3:38: b6:64:3e:d0:c5:bc:a3:1b:72:bb:fa:09:20:01:4f: 9e:04:fa:f5:a1:9a:aa:e5:15:85:35:6f:46:22:09: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5D:D0:5B:01:5B:A0:01:4B:0E:E3:84:B9:38:1C:AC:17:F7:A6:0A X509v3 Authority Key Identifier: keyid:17:5F:6E:1E:BB:83:19:35:C8:42:2C:97:2B:CA:B2:E5:6D:1D:9E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F19uHruDGTXIQiyXK8qy5W0dnjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/09db86-676d-4f9e-a2b4-0285c15fc51e/1/F19uHruDGTXIQiyXK8qy5W0dnjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:67:3a:3e:a5:21:c0:1f:84:46:94:2c:74:b9:5c:4c:b4:6d: 38:76:8d:9f:10:34:d2:e1:30:b2:d0:a8:05:29:66:cc:49:96: 2c:a9:c7:a8:b0:d4:cc:c6:a4:66:ee:f6:fe:67:ba:22:3b:5c: 6c:78:ea:37:45:77:21:b5:57:a3:a0:07:ba:da:91:f5:a4:39: 3e:0e:6e:90:6c:2e:7b:6f:ad:02:d8:00:18:c0:44:e3:b3:97: ac:44:fe:54:7b:03:9f:63:d7:05:86:6a:81:b8:03:03:3f:e7: 96:33:38:b6:bb:34:e4:94:64:98:2c:0e:95:a6:5a:56:90:e2: 42:71:46:62:31:47:54:84:22:23:1a:35:32:77:cd:af:eb:cd: 96:67:3c:ff:1b:be:82:a9:18:c5:28:18:3a:97:26:ba:d2:0d: 7c:a6:37:ef:1b:ea:30:51:83:23:d3:ad:be:01:46:12:6d:60: 36:9e:aa:23:22:bb:d3:4d:60:23:74:84:b0:37:a7:3c:41:f6: de:d8:97:39:e2:17:25:81:21:fe:0d:5e:38:a4:06:28:96:c0: 1e:03:43:05:07:b8:fe:9c:3a:b0:71:07:d6:f7:5b:b7:bd:5b: 8e:0b:ef:1e:e4:6d:e0:f7:11:eb:fd:9d:2e:fc:5d:e2:08:e0: b7:4f:fe:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRL6EQ1rSvdu9e5YFuvpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWY2ZTFlYmI4MzE5MzVjODQyMmM5NzJiY2FiMmU1NmQx ZDllMzYwHhcNMjUxMjI5MTgwMDI1WhcNMjUxMjMwMTgwMDI1WjAzMTEwLwYDVQQD Eyg0ODVkZDA1YjAxNWJhMDAxNGIwZWUzODRiOTM4MWNhYzE3ZjdhNjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdJXIq9F6mac/wCwcp76C8+kbEqI 7MG70lKhQ3c88u66WYltdHfAtKWNo88fkC2wM/m0zwt/W9ZNCcwWscRLtW/zPt2v isg++4Bz0olTK2nvJvKmDz0nXhf3Xm6znewDjbjDHKe34dZdMHxh97I5TE/95yIB +pjfwmaNaL+y3/71QmGfqZ+4DB30IZi9vRvqCFOc8WftJ3+bk0ImYGSrdhZafAC2 Y3igM+3ivNkYOGPs9fJLbsO5ViyVjsuChd5CAmGJhG/muiEWbUZ+F2FT/4xwseap aw5EahueAjps8zi2ZD7QxbyjG3K7+gkgAU+eBPr1oZqq5RWFNW9GIgn7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhd0FsBW6ABSw7jhLk4HKwX96YKMB8GA1UdIwQY MBaAFBdfbh67gxk1yEIslyvKsuVtHZ42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQt MDI4NWMxNWZjNTFlLzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wOWRiODYtNjc2ZC00ZjllLWEyYjQtMDI4NWMxNWZjNTFl LzEvRjE5dUhydURHVFhJUWl5WEs4cXk1VzBkbmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGc6PqUh wB+ERpQsdLlcTLRtOHaNnxA00uEwstCoBSlmzEmWLKnHqLDUzMakZu72/me6Ijtc bHjqN0V3IbVXo6AHutqR9aQ5Pg5ukGwue2+tAtgAGMBE47OXrET+VHsDn2PXBYZq gbgDAz/nljM4trs05JRkmCwOlaZaVpDiQnFGYjFHVIQiIxo1MnfNr+vNlmc8/xu+ gqkYxSgYOpcmutINfKY37xvqMFGDI9OtvgFGEm1gNp6qIyK7001gI3SEsDenPEH2 3tiXOeIXJYEh/g1eOKQGKJbAHgNDBQe4/pw6sHEH1vdbt71bjgvvHuRt4PcR6/2d Lvxd4gjgt0/+MQ== -----END CERTIFICATE-----Generated at Mon Dec 29 22:46:59 2025 by rpki-client