This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft File: F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json) Hash identifier: nKKODfgX9anqVGTte0v2PVidgRh2wnjXfOy0Ga/Nomo= Subject key identifier: 7A:B3:E3:23:3C:60:49:93:C2:44:3A:41:ED:9B:D3:E2:33:0B:3F:35 Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 Certificate issuer: /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Certificate serial: 019B3D90E0148F44190BD1A249D3922ED938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft Manifest number: 0500 Signing time: Sat 20 Dec 2025 21:01:03 +0000 Manifest this update: Sat 20 Dec 2025 21:01:03 +0000 Manifest next update: Sun 21 Dec 2025 21:01:03 +0000 Files and hashes: 1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: +KfHoljq0+H7ptGe52sLzKG9AH53+iDGtlSahBUH5lU=) 2: zVisEWOE63cgJitrBEvJgl69e3s.roa (hash: XbX4/gD81xbjCKcZpF0h9K2QmjSBOOrAtln50jZvE7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:e0:14:8f:44:19:0b:d1:a2:49:d3:92:2e:d9:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0 Validity Not Before: Dec 20 21:01:03 2025 GMT Not After : Dec 21 21:01:03 2025 GMT Subject: CN=7ab3e3233c604993c2443a41ed9bd3e2330b3f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:f6:93:63:e5:89:8f:1d:ab:a9:f6:6d:62: 94:73:cd:3f:bd:ca:ae:02:f4:bd:9b:fc:c4:e5:6b: d0:7a:7e:5a:34:83:45:39:50:52:62:ae:6e:40:65: 3b:cc:b5:a1:9e:05:93:cf:8b:ec:9e:b2:9f:bb:97: 09:2d:fa:44:ff:86:02:5e:32:47:de:ac:17:4b:22: 2e:10:e5:76:3e:a6:73:f8:e1:0d:90:fa:63:d8:43: f7:a4:3d:1a:e5:60:63:9d:4f:82:70:1c:c5:4c:34: 25:22:7b:a7:7b:5a:fa:c2:bc:8e:5e:ca:d7:05:18: c3:55:14:d4:45:3f:57:86:1b:36:c1:7a:90:68:4e: cf:c1:52:60:06:9f:4d:1d:47:d3:f1:00:ba:80:23: 71:ab:61:07:31:c3:0f:92:9d:e6:e9:93:6e:ae:34: da:f0:92:8a:76:12:b5:65:7f:a8:f6:e7:88:ae:13: 9c:65:de:18:ff:26:0b:35:8f:ae:c7:e8:d6:54:d6: ec:31:f6:d3:df:56:1a:29:38:2e:1a:ef:94:fd:94: 8b:e9:d4:1e:b4:cf:62:37:93:03:f5:55:da:3a:da: c0:7e:f1:ec:22:58:a6:b5:f4:32:b3:3a:2a:2c:6f: 7a:bf:3b:e0:72:68:9f:7c:12:81:71:75:28:36:98: e7:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:B3:E3:23:3C:60:49:93:C2:44:3A:41:ED:9B:D3:E2:33:0B:3F:35 X509v3 Authority Key Identifier: keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8e:54:8a:78:2a:bc:d4:1a:0a:c2:03:ec:9c:d7:21:05:47: 12:f0:44:62:37:77:90:fd:d3:fc:d4:5b:ab:57:a6:eb:54:d2: ce:36:f5:e0:cf:0a:50:dc:2a:88:01:e8:16:03:3e:c8:08:62: 0f:91:ec:a3:05:82:ff:a1:00:57:04:e2:6b:f3:60:58:b4:0f: 0c:09:70:f6:7a:ef:66:e1:b2:25:dd:48:28:4f:07:a3:7f:61: 93:a0:a7:69:9b:d2:a3:74:87:4b:76:13:6b:98:f1:68:c1:44: 06:2c:f4:4d:1d:6d:cd:24:ed:53:ae:48:05:01:ad:17:a1:b2: 14:95:93:86:72:42:d6:ef:98:1b:be:67:09:20:34:d3:0c:1b: cb:cb:06:9e:a0:23:7e:21:f3:d2:9c:bf:8e:aa:20:95:79:e6: 8e:42:9f:25:31:85:6c:30:69:9d:d5:08:64:88:5e:a5:db:b6: 2b:d3:dd:ce:4b:73:14:68:bf:bc:23:9c:f6:e1:a3:f0:74:5f: 2c:30:32:9e:9f:14:db:34:a9:03:08:7f:90:e9:69:38:7c:04: 07:0c:f3:64:6e:84:9d:e5:d0:e1:9e:46:f9:b4:d7:48:2c:d9: ce:3f:6d:de:ce:ee:23:6f:24:ac:09:23:26:4b:bc:eb:9b:88: 7c:f3:f3:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kOAUj0QZC9GiSdOSLtk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTUwMWQ5M2U5YjJiMWE0ZmVkMzA4ZTJhZTQzMWNjMjc3 ZTY5ZTAwHhcNMjUxMjIwMjEwMTAzWhcNMjUxMjIxMjEwMTAzWjAzMTEwLwYDVQQD Eyg3YWIzZTMyMzNjNjA0OTkzYzI0NDNhNDFlZDliZDNlMjMzMGIzZjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21T2k2PliY8dq6n2bWKUc80/vcqu AvS9m/zE5WvQen5aNINFOVBSYq5uQGU7zLWhngWTz4vsnrKfu5cJLfpE/4YCXjJH 3qwXSyIuEOV2PqZz+OENkPpj2EP3pD0a5WBjnU+CcBzFTDQlInune1r6wryOXsrX BRjDVRTURT9Xhhs2wXqQaE7PwVJgBp9NHUfT8QC6gCNxq2EHMcMPkp3m6ZNurjTa 8JKKdhK1ZX+o9ueIrhOcZd4Y/yYLNY+ux+jWVNbsMfbT31YaKTguGu+U/ZSL6dQe tM9iN5MD9VXaOtrAfvHsIlimtfQyszoqLG96vzvgcmiffBKBcXUoNpjndwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqz4yM8YEmTwkQ6Qe2b0+IzCz81MB8GA1UdIwQY MBaAFBdVAdk+mysaT+0wjirkMcwnfmngMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMt MDliOTkwNWQ0MWRiLzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8wNjgxOTEtODc4ZC00MjVjLTg5OTMtMDliOTkwNWQ0MWRi LzEvRjFVQjJUNmJLeHBQN1RDT0t1UXh6Q2QtYWVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcY5Uingq vNQaCsID7JzXIQVHEvBEYjd3kP3T/NRbq1em61TSzjb14M8KUNwqiAHoFgM+yAhi D5HsowWC/6EAVwTia/NgWLQPDAlw9nrvZuGyJd1IKE8Ho39hk6CnaZvSo3SHS3YT a5jxaMFEBiz0TR1tzSTtU65IBQGtF6GyFJWThnJC1u+YG75nCSA00wwby8sGnqAj fiHz0py/jqoglXnmjkKfJTGFbDBpndUIZIhepdu2K9PdzktzFGi/vCOc9uGj8HRf LDAynp8U2zSpAwh/kOlpOHwEBwzzZG6EneXQ4Z5G+bTXSCzZzj9t3s7uI28krAkj Jku865uIfPPzlg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:24:06 2025 by rpki-client