This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft File: F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json) Hash identifier: 7MN3gyviu1sSvMDJPwcmIcV7g7g4asS+WzHtrELduC4= Subject key identifier: 65:8E:67:5D:BA:CF:F0:4A:46:C8:A5:0F:5E:FA:E0:0B:E7:5A:1A:BC Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 Certificate issuer: /CN=175a7290ec298c1b64d986306f1b24d3d3366986 Certificate serial: 019B3C1092ADF46B3AA4FF1BC00753B9347E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft Manifest number: 2F Signing time: Sat 20 Dec 2025 14:01:17 +0000 Manifest this update: Sat 20 Dec 2025 14:01:17 +0000 Manifest next update: Sun 21 Dec 2025 14:01:17 +0000 Files and hashes: 1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: aMan3DEax8GZVLKy86MJjWiguA6qnMd9QfH8a5w4jpQ=) 2: wCBr-k0AtLk5d98BUTSeDnbaCIw.roa (hash: 36nmnwOgMPCPBCUdTafpIUXfmFJpoky9F6FQl9mvwM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:92:ad:f4:6b:3a:a4:ff:1b:c0:07:53:b9:34:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986 Validity Not Before: Dec 20 14:01:17 2025 GMT Not After : Dec 21 14:01:17 2025 GMT Subject: CN=658e675dbacff04a46c8a50f5efae00be75a1abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:38:34:0b:1f:07:9d:5f:42:56:b1:31:bc:9a: ca:9c:12:eb:c9:12:7d:44:50:00:25:e7:2e:d1:c8: ec:00:14:84:8d:15:da:62:9c:1a:44:44:ef:ca:67: c8:df:6b:f8:e2:55:b1:e4:3a:09:79:57:f5:cb:cd: ac:46:84:03:de:6c:db:21:56:b6:15:b3:e1:55:a4: dc:12:51:07:15:92:8a:41:4a:b8:be:74:26:de:17: 6a:06:96:07:d3:a8:d8:06:fa:b5:ab:3f:5a:b0:77: 3d:cb:5d:27:d5:d5:1d:f1:29:98:f0:b5:08:d3:01: ed:82:6b:dd:96:51:35:d6:b1:fc:51:77:d2:11:66: 1f:4f:39:6b:1b:c2:90:eb:09:3d:37:b2:98:9a:71: c4:71:14:cd:ed:3b:e4:78:31:d2:63:57:8c:49:a3: 66:99:ae:42:f5:6e:70:6f:16:6b:3a:78:d5:50:b1: 89:83:ff:f9:75:b7:8f:0f:a3:77:ce:a7:b5:c7:6b: 98:c9:83:23:38:d5:34:56:f2:8a:15:86:2f:e5:f6: e4:4c:01:f0:7c:64:ec:32:69:de:e0:c9:e8:4e:d1: 7e:94:59:63:8d:47:6a:5a:72:31:3f:fb:a4:03:bc: 89:5d:4d:e9:d7:10:6d:bb:2c:6d:74:7f:ee:f1:78: e6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:8E:67:5D:BA:CF:F0:4A:46:C8:A5:0F:5E:FA:E0:0B:E7:5A:1A:BC X509v3 Authority Key Identifier: keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:6f:81:21:1d:b3:f8:f1:ab:1e:df:ca:fa:cc:97:97:ae: e2:0a:53:77:3d:49:7f:7b:ee:c1:64:8c:3b:c1:c6:cb:5c:5d: 10:bc:d5:75:bd:67:64:a1:08:8a:70:5e:69:44:a3:2a:de:7d: bd:b4:dc:bb:9e:6e:34:52:0b:2d:f7:c8:45:67:8f:a3:00:63: 0b:ff:0f:05:76:76:d7:6f:bf:fc:be:46:97:33:a0:d9:ef:e5: dc:51:4c:d7:7c:8a:59:2e:52:ed:de:e1:2c:a0:2f:e4:90:75: d2:4e:a7:7d:fb:d5:7d:8c:05:8d:6d:96:92:bc:00:31:d4:ac: dd:a2:7a:8b:d9:0b:4b:da:76:a9:fb:e2:29:91:a7:bf:68:e2: 33:f4:8b:52:02:4a:59:aa:de:2b:27:7a:6f:89:64:77:07:a0: f7:9a:63:2c:05:1b:a8:bb:6c:43:63:d7:73:e2:30:4d:dd:a1: 82:0e:f2:ca:f3:8c:9d:fa:61:78:a0:34:86:bf:a3:44:2a:3e: 18:db:b2:20:a2:45:60:c0:60:c1:79:ee:6c:7a:de:1f:fb:9a: 02:42:4a:ae:b2:a6:69:e3:29:16:62:12:ef:6b:04:dd:02:ea: 25:aa:40:c0:62:f5:b4:33:23:79:4b:28:75:ae:a5:55:6a:1f: 99:02:22:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EJKt9Gs6pP8bwAdTuTR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz NjY5ODYwHhcNMjUxMjIwMTQwMTE3WhcNMjUxMjIxMTQwMTE3WjAzMTEwLwYDVQQD Eyg2NThlNjc1ZGJhY2ZmMDRhNDZjOGE1MGY1ZWZhZTAwYmU3NWExYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tg0Cx8HnV9CVrExvJrKnBLryRJ9 RFAAJecu0cjsABSEjRXaYpwaRETvymfI32v44lWx5DoJeVf1y82sRoQD3mzbIVa2 FbPhVaTcElEHFZKKQUq4vnQm3hdqBpYH06jYBvq1qz9asHc9y10n1dUd8SmY8LUI 0wHtgmvdllE11rH8UXfSEWYfTzlrG8KQ6wk9N7KYmnHEcRTN7TvkeDHSY1eMSaNm ma5C9W5wbxZrOnjVULGJg//5dbePD6N3zqe1x2uYyYMjONU0VvKKFYYv5fbkTAHw fGTsMmne4MnoTtF+lFljjUdqWnIxP/ukA7yJXU3p1xBtuyxtdH/u8XjmDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWOZ126z/BKRsilD1764AvnWhq8MB8GA1UdIwQY MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYupvgSEd s/jxqx7fyvrMl5eu4gpTdz1Jf3vuwWSMO8HGy1xdELzVdb1nZKEIinBeaUSjKt59 vbTcu55uNFILLffIRWePowBjC/8PBXZ212+//L5GlzOg2e/l3FFM13yKWS5S7d7h LKAv5JB10k6nffvVfYwFjW2WkrwAMdSs3aJ6i9kLS9p2qfviKZGnv2jiM/SLUgJK WareKyd6b4lkdweg95pjLAUbqLtsQ2PXc+IwTd2hgg7yyvOMnfpheKA0hr+jRCo+ GNuyIKJFYMBgwXnubHreH/uaAkJKrrKmaeMpFmIS72sE3QLqJapAwGL1tDMjeUso da6lVWofmQIi5Q== -----END CERTIFICATE-----Generated at Sat Dec 20 21:26:48 2025 by rpki-client