This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft File: f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json) Hash identifier: knnf/MpazZsPbGb068wSqyB+NjfGE3fMZkQUSuB6r/M= Subject key identifier: 43:6F:BE:DB:34:4D:57:78:FD:B1:82:10:17:6F:4E:FD:04:A6:BF:7A Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Certificate serial: 019B44A5F8EB74ACA885E6201D94572AC3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft Manifest number: 17A1 Signing time: Mon 22 Dec 2025 06:01:26 +0000 Manifest this update: Mon 22 Dec 2025 06:01:26 +0000 Manifest next update: Tue 23 Dec 2025 06:01:26 +0000 Files and hashes: 1: BxL_klgWwjdTzU-YHnpZdiQv8ro.roa (hash: tk2wGej5IrtzW95WdrtoXzZ9Z9AtMFL8/c/Zb2mjax4=) 2: GKu-p3Q8C03WVkqTxeqIm4KQHug.roa (hash: 5kTKiqqZ4O9hXOBIdFP3srftx/gxN3ZsqUi1asP5Tl4=) 3: eoD1wEJHLtPytux_2izY3N84WK0.roa (hash: JpmlQ8BeWdKkWA7+xPyhsWmh4I0l0qsO/IK1kw61GVo=) 4: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: /F7hmoi/vaLkH2UI5Fz8RuMG234EP7wAqvNWuoA4ETU=) 5: jCogikP25zW8XDbjaGJp-8DJciE.roa (hash: uxIaj61u2xybHKQFuc4fFPvOnzNBMkarPjLP7RV8T50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 06:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a5:f8:eb:74:ac:a8:85:e6:20:1d:94:57:2a:c3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b Validity Not Before: Dec 22 06:01:26 2025 GMT Not After : Dec 23 06:01:26 2025 GMT Subject: CN=436fbedb344d5778fdb18210176f4efd04a6bf7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:87:8f:5c:68:a3:7c:e8:31:2f:2e:64:34: af:3e:22:ec:04:dd:1e:2d:b7:73:5a:7f:17:bf:6b: 63:23:6b:74:3b:5c:31:bf:d4:b9:fc:47:e8:8d:b7: 6b:89:54:98:cd:a2:9d:f4:3f:0d:96:88:a6:e6:ba: 0b:98:bc:22:ad:6c:b0:10:41:48:79:64:86:fc:1d: 68:e9:3c:95:eb:df:a5:ba:5c:70:ab:88:ef:d9:e4: f8:95:51:1e:12:b3:05:d2:85:48:60:c7:0d:6e:58: 94:2c:ff:3b:7f:f9:3f:fd:35:24:f0:d2:05:f5:56: c5:c1:9b:3f:eb:68:b1:4e:7e:94:6f:80:d2:84:30: f2:73:63:6c:bb:0b:91:7a:52:08:03:42:45:5f:ae: ef:b0:ad:51:6b:80:e3:2a:8a:9e:ac:c5:28:15:59: 39:ef:76:b9:03:ef:da:7a:31:5a:22:fc:83:41:21: c2:8e:4e:92:37:56:5a:63:a9:15:06:be:c5:bc:d7: bd:ad:ac:0d:73:0c:da:50:f0:86:d3:9c:0d:ca:f1: 3b:11:43:d6:1a:57:1e:88:41:cd:9e:c1:60:e6:74: e4:78:f8:46:a6:0e:80:ef:5e:be:74:85:8f:5e:ba: 0a:84:19:3e:95:99:e5:56:21:57:42:96:e0:29:17: 10:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:BE:DB:34:4D:57:78:FD:B1:82:10:17:6F:4E:FD:04:A6:BF:7A X509v3 Authority Key Identifier: keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:88:f6:c4:f9:46:cb:83:41:76:cc:10:fe:20:bf:21:5a:b9: df:be:25:85:7b:ab:aa:7f:a1:b1:8a:f8:c0:d0:bf:15:12:a0: 33:e3:81:03:72:13:e7:19:94:5e:30:10:6c:b0:7c:0c:dd:6a: ab:8d:b7:15:c7:85:a3:02:02:d1:89:a0:df:2b:b5:80:2c:cd: 62:17:0d:7c:e1:b5:19:8a:22:48:e0:db:fd:88:bb:c4:38:42: 58:23:0b:c5:7e:f2:b0:19:ea:3b:c3:10:fd:29:d1:6e:1d:ad: 30:77:6e:e1:75:08:51:fe:71:cd:6c:29:61:0a:44:ed:4a:44: b1:c6:60:f9:17:27:40:12:22:e2:c7:81:16:60:30:8c:dc:b5: 79:e1:97:8e:83:47:b0:60:d1:91:7f:8a:61:a6:7f:5e:36:5c: d7:ce:64:f8:dd:d1:da:a8:2e:a0:3d:1e:1a:18:e7:e1:fe:7f: 75:50:0c:a5:e2:fc:78:91:b2:a4:ef:16:c7:5a:9b:8d:1e:11: 7a:fb:70:da:a5:0f:d3:cd:08:ad:5d:15:d9:4f:42:3b:aa:43: 00:0e:df:45:13:b5:c4:34:39:90:2e:3b:68:f6:37:8e:fa:97: 1b:63:cc:1a:84:22:d1:78:9b:2f:c7:12:1f:dc:72:54:54:06: ad:19:4e:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEpfjrdKyoheYgHZRXKsPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk OWYwMWIwHhcNMjUxMjIyMDYwMTI2WhcNMjUxMjIzMDYwMTI2WjAzMTEwLwYDVQQD Eyg0MzZmYmVkYjM0NGQ1Nzc4ZmRiMTgyMTAxNzZmNGVmZDA0YTZiZjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu+Hj1xoo3zoMS8uZDSvPiLsBN0e LbdzWn8Xv2tjI2t0O1wxv9S5/EfojbdriVSYzaKd9D8Nloim5roLmLwirWywEEFI eWSG/B1o6TyV69+lulxwq4jv2eT4lVEeErMF0oVIYMcNbliULP87f/k//TUk8NIF 9VbFwZs/62ixTn6Ub4DShDDyc2NsuwuRelIIA0JFX67vsK1Ra4DjKoqerMUoFVk5 73a5A+/aejFaIvyDQSHCjk6SN1ZaY6kVBr7FvNe9rawNcwzaUPCG05wNyvE7EUPW GlceiEHNnsFg5nTkePhGpg6A716+dIWPXroKhBk+lZnlViFXQpbgKRcQ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENvvts0TVd4/bGCEBdvTv0Epr96MB8GA1UdIwQY MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt ZjBhNjI0ZDQwOTEyLzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARoj2xPlG y4NBdswQ/iC/IVq5374lhXurqn+hsYr4wNC/FRKgM+OBA3IT5xmUXjAQbLB8DN1q q423FceFowIC0Ymg3yu1gCzNYhcNfOG1GYoiSODb/Yi7xDhCWCMLxX7ysBnqO8MQ /SnRbh2tMHdu4XUIUf5xzWwpYQpE7UpEscZg+RcnQBIi4seBFmAwjNy1eeGXjoNH sGDRkX+KYaZ/XjZc185k+N3R2qguoD0eGhjn4f5/dVAMpeL8eJGypO8Wx1qbjR4R evtw2qUP080IrV0V2U9CO6pDAA7fRRO1xDQ5kC47aPY3jvqXG2PMGoQi0XibL8cS H9xyVFQGrRlOsQ== -----END CERTIFICATE-----Generated at Mon Dec 22 09:46:01 2025 by rpki-client