This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json) Hash identifier: oqOkwtFN9J+oiO9UIEEGWe3miXHqH6ttbgFnn4NTCI8= Subject key identifier: B3:3F:FA:74:22:7E:87:21:A2:98:72:3C:B5:91:9D:D1:0B:CE:2F:43 Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Certificate serial: 019B3F48CFD1248E6FFF35DC06C14525B2BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft Manifest number: 1797 Signing time: Sun 21 Dec 2025 05:01:34 +0000 Manifest this update: Sun 21 Dec 2025 05:01:34 +0000 Manifest next update: Mon 22 Dec 2025 05:01:34 +0000 Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: 0LYF2pAibXdc3DV8lttOPDuXA+QeGdGnJK9pJ/xdisA=) 2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:cf:d1:24:8e:6f:ff:35:dc:06:c1:45:25:b2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5 Validity Not Before: Dec 21 05:01:34 2025 GMT Not After : Dec 22 05:01:34 2025 GMT Subject: CN=b33ffa74227e8721a298723cb5919dd10bce2f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:81:03:52:bb:66:cf:33:c3:00:cc:60:4e:cc: 46:12:8d:d2:60:cf:b4:c5:e1:44:04:2d:d2:c7:6d: 82:e2:49:e4:c1:d2:73:ac:a7:a4:7d:bc:86:9a:d5: c1:b5:94:23:f2:a6:63:e7:99:22:a3:52:14:c7:5e: 6a:5b:e7:5b:c6:6f:60:88:96:43:7b:28:28:2c:86: 2a:85:00:0f:5c:ef:25:c5:c4:7f:d1:d6:d6:8f:f0: f3:d7:c7:1a:33:29:2d:23:88:6f:ea:07:91:3e:b7: 97:af:42:65:65:27:08:5a:09:91:af:0e:d2:07:ba: 72:84:23:eb:07:41:f1:72:42:00:72:81:e6:c6:91: 17:b1:07:1e:72:e4:ad:31:de:dc:43:65:87:94:e2: 14:ec:ee:b9:c1:64:72:fd:b1:5c:a8:69:d8:c6:98: e2:98:04:20:6d:28:36:54:d6:bd:d0:0a:38:ef:c7: 27:73:43:af:b9:1e:03:bf:db:c5:b3:2c:e4:26:e0: d9:8d:c0:0e:be:05:03:9b:25:c6:92:10:4a:df:53: 88:30:37:a3:ba:1a:98:cb:c2:a5:e5:21:40:96:db: 90:e1:e9:6a:cf:4a:1e:c8:03:ed:58:65:5a:86:85: e3:46:e9:72:c5:bc:41:8a:3d:ca:cd:17:40:09:17: 7d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3F:FA:74:22:7E:87:21:A2:98:72:3C:B5:91:9D:D1:0B:CE:2F:43 X509v3 Authority Key Identifier: keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:28:5f:36:c7:ce:e8:90:8a:f2:9f:75:76:80:02:83:a0:29: 00:64:a1:ac:ea:7e:d5:b0:3e:6b:03:07:d8:a2:63:21:65:52: 04:d7:8f:c9:83:33:ac:93:5e:0d:05:4e:a7:3c:72:08:5c:e6: 24:1c:95:3a:ed:05:f4:b6:27:a7:80:6d:c0:5f:df:d2:5c:dc: 0c:aa:f0:38:01:c8:2b:99:db:18:a6:db:42:92:a0:89:62:e1: 83:4b:b0:36:c1:9b:6f:78:b4:87:8b:d0:ec:49:a9:4c:1f:dc: 4f:2f:89:10:37:97:24:bb:ab:3f:35:db:04:81:84:00:ae:ae: 42:f2:df:be:25:ea:04:7b:17:fc:05:cb:90:e8:02:f0:a0:44: ba:d3:48:7a:ce:25:86:85:5c:79:6d:20:85:c1:c4:3b:5f:68: c0:b2:18:6a:c9:4b:af:f7:32:2d:cf:99:9e:4c:76:7e:df:91: 25:4b:66:28:a7:fe:d7:5d:3d:27:88:57:03:4a:79:80:1d:7c: f3:56:36:da:5a:33:d1:a6:3d:89:7c:bd:a1:bb:36:54:ba:90: ea:61:d9:7f:69:f8:39:04:d8:6b:63:a6:dc:79:99:25:da:f2: 4b:52:e5:d8:35:9a:17:17:09:08:8a:52:c5:97:27:f9:9e:85: 88:96:5c:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SM/RJI5v/zXcBsFFJbK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTk0MzY4NjkwODljZDljN2U2ZDAyMDI4ZjI0YTJmZTQ5 Yjg2ZDUwHhcNMjUxMjIxMDUwMTM0WhcNMjUxMjIyMDUwMTM0WjAzMTEwLwYDVQQD EyhiMzNmZmE3NDIyN2U4NzIxYTI5ODcyM2NiNTkxOWRkMTBiY2UyZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4EDUrtmzzPDAMxgTsxGEo3SYM+0 xeFEBC3Sx22C4knkwdJzrKekfbyGmtXBtZQj8qZj55kio1IUx15qW+dbxm9giJZD eygoLIYqhQAPXO8lxcR/0dbWj/Dz18caMyktI4hv6geRPreXr0JlZScIWgmRrw7S B7pyhCPrB0HxckIAcoHmxpEXsQcecuStMd7cQ2WHlOIU7O65wWRy/bFcqGnYxpji mAQgbSg2VNa90Ao478cnc0OvuR4Dv9vFsyzkJuDZjcAOvgUDmyXGkhBK31OIMDej uhqYy8Kl5SFAltuQ4elqz0oeyAPtWGVahoXjRulyxbxBij3KzRdACRd9RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLM/+nQifochophyPLWRndELzi9DMB8GA1UdIwQY MBaAFBdZQ2hpCJzZx+bQICjySi/km4bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMt ZmVmNDFkZDg3NmMwLzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83MjQ3ZDItMGEyOC00ZTRhLWFhMGMtZmVmNDFkZDg3NmMw LzEvRjFsRGFHa0luTm5INXRBZ0tQSktMLVNiaHRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApihfNsfO 6JCK8p91doACg6ApAGShrOp+1bA+awMH2KJjIWVSBNePyYMzrJNeDQVOpzxyCFzm JByVOu0F9LYnp4BtwF/f0lzcDKrwOAHIK5nbGKbbQpKgiWLhg0uwNsGbb3i0h4vQ 7EmpTB/cTy+JEDeXJLurPzXbBIGEAK6uQvLfviXqBHsX/AXLkOgC8KBEutNIes4l hoVceW0ghcHEO19owLIYaslLr/cyLc+Znkx2ft+RJUtmKKf+1109J4hXA0p5gB18 81Y22loz0aY9iXy9obs2VLqQ6mHZf2n4OQTYa2Om3HmZJdryS1Ll2DWaFxcJCIpS xZcn+Z6FiJZcDg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:32:31 2025 by rpki-client