This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft File: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json) Hash identifier: RSNN7aaZs6G/VjoJq9NmQC3ytRUNEOGBG8TG7tn4Z1s= Subject key identifier: E1:BA:55:4B:1B:9B:22:9B:2C:8D:55:15:6C:80:1D:BA:D3:36:25:9F Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A Certificate issuer: /CN=17972d43835cd6a66e54e5a5856ce57de282d43a Certificate serial: 019B40FF9DEDFE9F90487F25AF82391FC8A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft Manifest number: 0E84 Signing time: Sun 21 Dec 2025 13:00:52 +0000 Manifest this update: Sun 21 Dec 2025 13:00:52 +0000 Manifest next update: Mon 22 Dec 2025 13:00:52 +0000 Files and hashes: 1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: aGF+U6lidv4WLY0ezQrA3edHEoQ99kyP4+ymoCvRCRw=) 2: nD9K7BuoobBm0UoH5h6nnInzZ5M.roa (hash: n+EpS4FTLeyovvcIgss8uVwl4+ZqeSqmuV4HpNA3yWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:9d:ed:fe:9f:90:48:7f:25:af:82:39:1f:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a Validity Not Before: Dec 21 13:00:52 2025 GMT Not After : Dec 22 13:00:52 2025 GMT Subject: CN=e1ba554b1b9b229b2c8d55156c801dbad336259f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:60:d0:d3:14:a6:a1:15:6c:57:3a:40:43:b3: 31:30:e4:93:24:51:25:c4:fa:1e:a6:34:12:78:12: 33:82:b2:fb:7e:09:2e:ff:43:0b:dc:62:7f:73:82: 44:c4:77:f5:9b:08:44:64:a8:75:65:2f:3a:8d:d3: 6c:97:25:09:97:74:ff:8f:47:14:5c:ac:10:f5:ed: 76:2c:e9:40:fc:4b:e6:dd:07:54:0c:97:19:54:c8: 3a:c8:9e:ba:63:fb:ba:71:56:4a:dd:d9:0e:33:ac: e0:eb:78:da:30:96:35:8b:ee:da:98:1a:9d:c9:fb: 67:a5:59:f1:66:cf:ea:59:78:d6:aa:f7:21:b6:59: e0:76:62:89:9f:84:fe:8e:bd:ec:16:c6:ba:96:a2: a2:30:ea:e5:9d:0c:1f:55:eb:32:14:be:61:cf:e7: 7f:f1:4e:8e:88:e9:63:45:11:ec:6d:ab:7d:5c:0b: 15:01:1a:77:ef:d6:68:e1:73:d4:55:b7:8e:e8:db: 72:36:7a:62:6e:7b:e8:fd:93:33:1c:99:4b:be:fa: 19:d7:fe:ac:88:a3:a2:35:28:38:60:e8:c5:1e:55: 3c:d6:4f:5f:ef:ae:87:f1:4d:bc:a8:e3:f4:4c:5c: 2e:a1:e5:2f:44:ef:87:f8:79:c2:ba:91:f6:ae:66: ea:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BA:55:4B:1B:9B:22:9B:2C:8D:55:15:6C:80:1D:BA:D3:36:25:9F X509v3 Authority Key Identifier: keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:01:10:bd:30:f8:e0:ae:ea:04:e0:e8:c6:b4:ba:e8:3d:92: da:27:a0:4c:09:cd:ec:95:cd:7c:4b:82:18:e8:76:b6:3a:03: 2b:75:1b:33:9f:40:97:55:dc:81:76:ed:74:4a:4b:cb:8a:74: 56:d9:92:e0:0a:1c:f9:42:da:0a:f4:3a:03:b1:88:61:fa:a5: 9c:5b:7c:42:52:51:9c:cc:6e:05:ac:de:a9:e5:a5:01:25:75: 3e:08:d8:b4:7b:2c:41:d1:58:93:8f:76:d9:e7:0a:a1:7c:de: 6d:fc:0b:dd:33:fe:3d:0c:61:92:17:67:41:5e:94:87:32:44: 43:51:4c:59:5d:63:72:a0:4d:9e:47:3e:6d:64:d3:31:75:b4: e0:a3:19:64:34:b4:06:52:09:50:03:0c:d8:17:78:fe:55:6e: c2:24:df:86:97:7b:73:a1:df:ff:eb:84:84:24:3e:63:84:9e: 2d:03:21:46:a0:7b:4e:42:2a:f0:d7:e2:5a:c6:8f:a5:58:73: d4:59:b3:0e:41:0e:91:7b:2b:de:24:8e:b8:51:9a:08:ca:3e: fd:5a:40:ef:2d:53:90:2f:3c:5b:33:e0:08:9f:4d:9f:90:10: 81:64:a3:30:4c:50:88:1d:83:37:f7:d7:50:84:6e:61:28:7a: d4:7f:7f:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/53t/p+QSH8lr4I5H8igMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4 MmQ0M2EwHhcNMjUxMjIxMTMwMDUyWhcNMjUxMjIyMTMwMDUyWjAzMTEwLwYDVQQD EyhlMWJhNTU0YjFiOWIyMjliMmM4ZDU1MTU2YzgwMWRiYWQzMzYyNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mDQ0xSmoRVsVzpAQ7MxMOSTJFEl xPoepjQSeBIzgrL7fgku/0ML3GJ/c4JExHf1mwhEZKh1ZS86jdNslyUJl3T/j0cU XKwQ9e12LOlA/Evm3QdUDJcZVMg6yJ66Y/u6cVZK3dkOM6zg63jaMJY1i+7amBqd yftnpVnxZs/qWXjWqvchtlngdmKJn4T+jr3sFsa6lqKiMOrlnQwfVesyFL5hz+d/ 8U6OiOljRRHsbat9XAsVARp379Zo4XPUVbeO6NtyNnpibnvo/ZMzHJlLvvoZ1/6s iKOiNSg4YOjFHlU81k9f766H8U28qOP0TFwuoeUvRO+H+HnCupH2rmbqVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOG6VUsbmyKbLI1VFWyAHbrTNiWfMB8GA1UdIwQY MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4 LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQEQvTD4 4K7qBODoxrS66D2S2iegTAnN7JXNfEuCGOh2tjoDK3UbM59Al1XcgXbtdEpLy4p0 VtmS4Aoc+ULaCvQ6A7GIYfqlnFt8QlJRnMxuBazeqeWlASV1PgjYtHssQdFYk492 2ecKoXzebfwL3TP+PQxhkhdnQV6UhzJEQ1FMWV1jcqBNnkc+bWTTMXW04KMZZDS0 BlIJUAMM2Bd4/lVuwiTfhpd7c6Hf/+uEhCQ+Y4SeLQMhRqB7TkIq8NfiWsaPpVhz 1FmzDkEOkXsr3iSOuFGaCMo+/VpA7y1TkC88WzPgCJ9Nn5AQgWSjMExQiB2DN/fX UIRuYSh61H9/jg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:18:22 2025 by rpki-client