This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft File: F564e9wyeT2_7RhKb_vBTtFdMqQ.mft (raw, json) Hash identifier: PRWG8cv0s6oElu8WwNQx0SskbMqdh4uSx2zG9hQlPV0= Subject key identifier: 90:92:D7:AE:BE:D9:44:71:FB:BA:20:AD:42:C0:9D:67:37:49:E2:9D Authority key identifier: 17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4 Certificate issuer: /CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4 Certificate serial: 019B3155660554987547AECA9880B6195EF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft Manifest number: 04A2 Signing time: Thu 18 Dec 2025 12:00:38 +0000 Manifest this update: Thu 18 Dec 2025 12:00:38 +0000 Manifest next update: Fri 19 Dec 2025 12:00:38 +0000 Files and hashes: 1: F564e9wyeT2_7RhKb_vBTtFdMqQ.crl (hash: 39GVnVN5s43kQFVM0Pj/V6aqCGbMOuLR5DTA4W9L31A=) 2: YYdbZAN7pN6TVTepPYBGugFjphQ.roa (hash: NsxHuGOHh0xg9XbBNwi/wuinAUzVezbbbYAR6J2U768=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:55:66:05:54:98:75:47:ae:ca:98:80:b6:19:5e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179eb87bdc32793dbfed184a6ffbc14ed15d32a4 Validity Not Before: Dec 18 12:00:38 2025 GMT Not After : Dec 19 12:00:38 2025 GMT Subject: CN=9092d7aebed94471fbba20ad42c09d673749e29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:5d:9d:61:c9:e7:74:10:a2:bb:5b:3e:ff:43: 10:1d:eb:e9:b3:2d:5b:00:e8:2c:ff:3a:30:6d:6a: 47:23:88:4c:d6:bd:6d:91:1f:69:68:f2:89:3a:d9: 89:b0:e0:3c:71:09:0c:9b:82:81:a8:f8:f8:ec:d7: 1a:78:33:ab:48:b8:bc:a0:27:a2:14:c1:4e:0e:73: 46:89:e6:aa:d5:80:b0:82:b7:cc:6f:f8:2c:c2:67: 57:b0:44:61:61:a9:21:f9:70:6f:05:14:ac:8e:60: 89:f4:f7:46:75:da:8a:e5:3d:e8:77:76:aa:0f:60: 90:77:92:93:c4:23:39:8b:46:ee:08:05:07:1c:7b: f3:50:42:2e:5d:a0:ab:c9:57:87:4d:10:4c:5d:4a: 72:40:43:d2:3b:57:94:23:f7:37:6c:2c:5f:0d:82: 5d:34:ce:01:5e:ac:8f:fe:ab:8b:4d:af:3d:54:f1: e2:a1:77:51:15:38:78:f4:69:7c:a5:69:66:5d:5b: aa:93:5c:b0:c3:cb:ac:fd:21:ac:a7:9b:a1:40:59: b6:d5:65:d1:50:1c:31:c4:d2:91:cc:35:00:a5:0c: da:f8:23:b2:e7:27:fe:ee:11:9c:dd:63:17:9c:36: ee:10:0e:a3:e0:95:20:67:c8:1e:81:ac:a8:01:f3: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:92:D7:AE:BE:D9:44:71:FB:BA:20:AD:42:C0:9D:67:37:49:E2:9D X509v3 Authority Key Identifier: keyid:17:9E:B8:7B:DC:32:79:3D:BF:ED:18:4A:6F:FB:C1:4E:D1:5D:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F564e9wyeT2_7RhKb_vBTtFdMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/8c0aa8-ad94-47a5-8eee-ef1591afaa86/1/F564e9wyeT2_7RhKb_vBTtFdMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:c1:8c:19:0b:52:a4:54:8c:62:1a:14:1d:11:9d:28:6b:2f: 96:03:71:e1:bb:f5:76:57:98:85:a8:63:7a:76:dd:4b:7a:42: eb:b7:a0:ba:0a:00:13:78:c0:be:5e:94:88:f2:a1:7e:eb:13: aa:9c:e5:ba:00:28:bb:68:02:6e:53:8f:a0:2a:63:f3:be:ea: fd:50:4b:4c:0d:37:bb:8d:1e:86:6d:e1:13:fd:e7:ad:89:72: 0d:a4:94:2a:5d:4e:89:f1:6d:4c:39:3c:4e:9e:55:f9:76:af: 98:0a:82:74:1e:79:96:0b:b4:71:cf:c5:e6:06:ef:24:9c:f5: b4:77:59:b0:52:05:4d:fc:c0:83:d0:e2:02:72:2b:3d:d0:67: ae:d3:fb:a2:2d:66:a8:cb:51:3e:43:bd:8d:88:b1:ce:8a:24: b5:93:61:66:09:70:14:28:bf:c3:18:bc:dc:a6:cb:23:72:dd: 03:c7:b2:63:64:cf:01:9e:2e:b6:2d:35:a0:a2:73:27:92:1c: 90:59:c5:ed:52:49:77:1e:a1:38:72:11:e5:e4:db:c0:2d:91: 2e:7e:b1:2e:8d:ac:c9:e6:7f:67:ca:80:4b:30:a3:63:7b:5e: f8:da:1b:7b:c3:05:5a:d7:25:6d:45:5e:b9:09:17:a9:6e:7b: 02:5f:96:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVWYFVJh1R67KmIC2GV74MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OWViODdiZGMzMjc5M2RiZmVkMTg0YTZmZmJjMTRlZDE1 ZDMyYTQwHhcNMjUxMjE4MTIwMDM4WhcNMjUxMjE5MTIwMDM4WjAzMTEwLwYDVQQD Eyg5MDkyZDdhZWJlZDk0NDcxZmJiYTIwYWQ0MmMwOWQ2NzM3NDllMjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9V2dYcnndBCiu1s+/0MQHevpsy1b AOgs/zowbWpHI4hM1r1tkR9paPKJOtmJsOA8cQkMm4KBqPj47NcaeDOrSLi8oCei FMFODnNGieaq1YCwgrfMb/gswmdXsERhYakh+XBvBRSsjmCJ9PdGddqK5T3od3aq D2CQd5KTxCM5i0buCAUHHHvzUEIuXaCryVeHTRBMXUpyQEPSO1eUI/c3bCxfDYJd NM4BXqyP/quLTa89VPHioXdRFTh49Gl8pWlmXVuqk1yww8us/SGsp5uhQFm21WXR UBwxxNKRzDUApQza+COy5yf+7hGc3WMXnDbuEA6j4JUgZ8gegayoAfPsDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCS166+2URx+7ogrULAnWc3SeKdMB8GA1UdIwQY MBaAFBeeuHvcMnk9v+0YSm/7wU7RXTKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUt ZWYxNTkxYWZhYTg2LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS84YzBhYTgtYWQ5NC00N2E1LThlZWUtZWYxNTkxYWZhYTg2 LzEvRjU2NGU5d3llVDJfN1JoS2JfdkJUdEZkTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhcGMGQtS pFSMYhoUHRGdKGsvlgNx4bv1dleYhahjenbdS3pC67egugoAE3jAvl6UiPKhfusT qpzlugAou2gCblOPoCpj877q/VBLTA03u40ehm3hE/3nrYlyDaSUKl1OifFtTDk8 Tp5V+XavmAqCdB55lgu0cc/F5gbvJJz1tHdZsFIFTfzAg9DiAnIrPdBnrtP7oi1m qMtRPkO9jYixzooktZNhZglwFCi/wxi83KbLI3LdA8eyY2TPAZ4uti01oKJzJ5Ic kFnF7VJJdx6hOHIR5eTbwC2RLn6xLo2syeZ/Z8qASzCjY3te+Nobe8MFWtclbUVe uQkXqW57Al+WYA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:47 2025 by rpki-client