This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json) Hash identifier: e182SL3BJbkOZpbpaFKJjojLNxb3W1qP2xTDBYyqmVM= Subject key identifier: 3E:B1:85:30:AB:AA:35:AC:70:7F:D0:6C:CE:99:30:B1:D8:9A:E3:1E Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Certificate serial: 019B3E6D921665D449D8479BAAC04AFEE64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft Manifest number: 0F26 Signing time: Sun 21 Dec 2025 01:02:06 +0000 Manifest this update: Sun 21 Dec 2025 01:02:06 +0000 Manifest next update: Mon 22 Dec 2025 01:02:06 +0000 Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: a969J/FZvmyZxFlTMXHq4m3BBeKn7sxTr1WxryBs3cU=) 2: ldAiZGhEA6PQQSWSUu13vFbKCqU.roa (hash: sA9s3rJXQHu5BKgisYTJyKuldiob4VBrcuXc+pLot6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:92:16:65:d4:49:d8:47:9b:aa:c0:4a:fe:e6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Validity Not Before: Dec 21 01:02:06 2025 GMT Not After : Dec 22 01:02:06 2025 GMT Subject: CN=3eb18530abaa35ac707fd06cce9930b1d89ae31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:c9:67:69:89:db:54:b7:d7:a6:88:d6:f4: ac:5c:a3:44:9b:df:b0:16:6a:49:02:17:6f:8f:b3: 08:1b:ea:97:54:c4:6f:8b:38:c1:39:d9:9a:8e:06: c8:de:88:2c:88:19:c8:51:17:9c:81:ea:7f:7b:1c: b6:7c:f0:a0:86:f4:87:b9:67:5f:26:10:3d:ad:a8: 62:df:2b:41:29:87:01:5b:73:d5:71:c2:16:41:d4: d5:e5:92:da:80:9e:d7:03:a2:d3:5a:b8:ae:fb:aa: 7c:24:6e:68:9a:0f:a8:9b:b0:bf:ba:00:e5:df:ae: e8:bb:01:74:d8:97:71:74:e8:26:e3:fb:b5:4c:c8: b6:f4:50:bf:5c:0c:73:76:2c:6c:96:63:ef:5d:95: 2a:65:b9:ba:e6:42:81:3c:16:1a:82:95:9a:88:24: 33:e7:9f:61:10:52:1c:62:2e:07:19:dc:43:bb:4d: e6:16:ad:3d:52:db:41:47:61:c1:59:df:1a:5b:d0: 48:a5:19:3b:41:0d:cf:ca:ae:cc:6d:6c:b6:bb:af: 88:1f:01:19:dc:a6:8e:1c:87:80:91:1c:b4:62:d7: 4f:7b:fd:90:4b:c6:60:b1:85:52:f5:47:15:fe:0f: 61:e0:f3:04:56:a1:c2:f3:60:60:89:2a:9f:a4:d9: c8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B1:85:30:AB:AA:35:AC:70:7F:D0:6C:CE:99:30:B1:D8:9A:E3:1E X509v3 Authority Key Identifier: keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:22:38:20:dd:e7:13:9b:eb:2f:91:94:09:49:35:bd:25:b2: fd:ba:09:cb:cd:79:ff:9b:e7:d1:92:39:09:45:13:d9:64:5c: 15:91:6f:a1:71:bd:c4:15:df:e9:45:97:98:9c:57:ba:ed:e4: e1:b4:82:1e:8c:0b:c2:62:bd:c8:96:85:2b:e4:63:c5:3b:73: ea:7f:ba:01:ca:d8:66:22:46:e3:a5:26:52:85:57:ca:cc:99: 25:c6:95:1d:cb:c2:4a:7c:e4:11:2e:77:d2:63:48:53:d7:b1: 25:8b:22:ec:73:2a:db:40:f1:ca:58:42:3b:46:52:73:df:69: dd:51:cc:e7:b5:d1:1e:f2:63:e2:ec:8f:80:e4:85:c6:7a:f8: c0:2f:9e:a1:26:af:80:48:bf:90:56:8f:96:2d:49:23:3b:e5: 1c:b7:b8:f5:ee:2a:f1:fb:8a:a3:c8:e8:49:d7:21:3b:c0:30: ea:81:20:17:2e:9b:83:d5:49:c9:0b:56:b9:0f:46:b3:d2:2a: ea:32:20:31:3a:70:f9:c2:85:f3:d3:a7:60:df:6b:1a:11:aa: bd:9c:05:80:9c:ad:77:2f:2c:52:84:64:6b:91:93:c4:6e:35: c7:dc:28:28:86:7b:ee:f3:4f:46:74:3c:a1:36:64:91:14:41: 62:7d:59:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZIWZdRJ2EebqsBK/uZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk MmY4MGIwHhcNMjUxMjIxMDEwMjA2WhcNMjUxMjIyMDEwMjA2WjAzMTEwLwYDVQQD EygzZWIxODUzMGFiYWEzNWFjNzA3ZmQwNmNjZTk5MzBiMWQ4OWFlMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgnJZ2mJ21S316aI1vSsXKNEm9+w FmpJAhdvj7MIG+qXVMRvizjBOdmajgbI3ogsiBnIURecgep/exy2fPCghvSHuWdf JhA9rahi3ytBKYcBW3PVccIWQdTV5ZLagJ7XA6LTWriu+6p8JG5omg+om7C/ugDl 367ouwF02JdxdOgm4/u1TMi29FC/XAxzdixslmPvXZUqZbm65kKBPBYagpWaiCQz 559hEFIcYi4HGdxDu03mFq09UttBR2HBWd8aW9BIpRk7QQ3Pyq7MbWy2u6+IHwEZ 3KaOHIeAkRy0YtdPe/2QS8ZgsYVS9UcV/g9h4PMEVqHC82BgiSqfpNnIgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6xhTCrqjWscH/QbM6ZMLHYmuMeMB8GA1UdIwQY MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliI4IN3n E5vrL5GUCUk1vSWy/boJy815/5vn0ZI5CUUT2WRcFZFvoXG9xBXf6UWXmJxXuu3k 4bSCHowLwmK9yJaFK+RjxTtz6n+6AcrYZiJG46UmUoVXysyZJcaVHcvCSnzkES53 0mNIU9exJYsi7HMq20DxylhCO0ZSc99p3VHM57XRHvJj4uyPgOSFxnr4wC+eoSav gEi/kFaPli1JIzvlHLe49e4q8fuKo8joSdchO8Aw6oEgFy6bg9VJyQtWuQ9Gs9Iq 6jIgMTpw+cKF89OnYN9rGhGqvZwFgJytdy8sUoRka5GTxG41x9woKIZ77vNPRnQ8 oTZkkRRBYn1ZcA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:59:24 2025 by rpki-client