This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json) Hash identifier: eIWh5acxiTYQPWrLjfec7fmN/OPB+NI8JaeRL5D0Slk= Subject key identifier: F2:F6:E0:51:44:8A:DB:E7:E0:E9:CD:B3:07:0C:0B:E8:A5:29:4C:D1 Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf Certificate serial: 019B62420562260D5FDC36289BF5462BACA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft Manifest number: 0657 Signing time: Sun 28 Dec 2025 00:00:52 +0000 Manifest this update: Sun 28 Dec 2025 00:00:52 +0000 Manifest next update: Mon 29 Dec 2025 00:00:52 +0000 Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=) 2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: /z+11sLPli3UZQtUKaDZCkxNM8wyjz927hs66nd/pl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:05:62:26:0d:5f:dc:36:28:9b:f5:46:2b:ac:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf Validity Not Before: Dec 28 00:00:52 2025 GMT Not After : Dec 29 00:00:52 2025 GMT Subject: CN=f2f6e051448adbe7e0e9cdb3070c0be8a5294cd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b5:7f:c5:6b:46:d7:e7:7e:73:44:b6:6d:52: eb:06:f8:38:dd:42:e9:fb:c9:df:dd:8e:6c:35:2e: 8f:d1:8d:51:81:5a:e0:ee:00:95:ce:fd:d6:a6:16: e5:47:c0:82:90:0c:5a:56:5f:cf:6b:65:35:30:0e: f8:dd:88:f9:71:df:cf:80:6d:76:2f:67:b2:f6:df: 2b:82:d4:f9:4f:c2:aa:55:3a:e2:b2:c1:50:74:00: a2:a0:eb:fb:f4:6a:a5:3d:5e:3f:b8:e0:a1:1b:ce: d7:c4:e8:65:83:41:63:14:3b:79:68:e0:75:e9:6e: a7:bb:2e:5c:ea:41:e1:45:7c:22:d0:a9:da:44:06: a2:4e:ca:57:d5:eb:1e:7e:21:6f:11:05:39:fe:2c: 93:2a:86:32:be:56:ac:0c:a4:4b:ea:43:5c:c5:47: 2e:8f:8b:db:fd:d7:43:f5:6c:2f:06:a8:bc:09:8e: 23:5f:ca:b5:1a:46:66:03:be:89:9a:59:55:71:3d: ca:56:57:6c:9c:db:80:fd:23:e4:8d:33:3f:a5:ae: fb:a1:04:06:53:59:92:fd:80:44:04:80:5b:db:3e: 8e:d6:39:33:e6:da:b6:a0:e0:ea:81:6a:4f:12:8e: 59:d0:53:b3:3a:7d:ca:e5:3a:a9:25:0d:a0:c2:87: 31:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F6:E0:51:44:8A:DB:E7:E0:E9:CD:B3:07:0C:0B:E8:A5:29:4C:D1 X509v3 Authority Key Identifier: keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:b0:06:31:45:2e:62:2f:78:a6:db:09:50:b4:fa:3b:6d:32: 48:c5:4e:3e:2b:a3:12:8d:19:e4:a1:c5:0c:d0:eb:6b:82:21: ce:ef:e0:25:ac:b0:a3:d0:5a:d5:20:64:65:7f:e5:73:61:98: 71:fb:17:7d:0c:da:a8:98:3f:3c:7a:71:d8:17:65:30:a1:60: 36:21:6d:d3:a4:8c:07:0a:e6:59:06:2b:e2:96:19:bb:4f:1c: e9:3c:f9:14:b9:42:39:05:ce:f8:c5:64:13:c3:bc:47:c1:5f: 03:a7:0b:66:de:c4:05:d9:f7:66:33:26:b2:68:4e:f5:bd:0b: 92:bc:db:e0:93:90:e1:1c:2c:23:4f:a2:ea:62:0e:55:36:cb: 55:50:7a:32:38:7e:de:00:4b:89:8e:70:0f:a3:52:1f:1c:a2: 97:74:bf:67:0a:c7:42:0f:27:3b:20:46:60:d7:01:f6:f0:4c: ce:69:33:10:08:b7:69:d7:90:87:af:4e:b9:ac:fc:68:12:cf: 59:d2:35:db:58:b2:d2:4a:74:c1:4d:04:a2:ba:85:f4:5e:fc: 28:62:1e:2f:2b:2b:52:56:09:e0:4e:fc:a3:29:de:7a:f7:bf: ed:fa:a7:39:07:2d:53:f4:22:7e:9c:c3:56:bf:8e:5b:2f:5e: 35:30:5b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQgViJg1f3DYom/VGK6yiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5 ZTJhYmYwHhcNMjUxMjI4MDAwMDUyWhcNMjUxMjI5MDAwMDUyWjAzMTEwLwYDVQQD EyhmMmY2ZTA1MTQ0OGFkYmU3ZTBlOWNkYjMwNzBjMGJlOGE1Mjk0Y2QxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurV/xWtG1+d+c0S2bVLrBvg43ULp +8nf3Y5sNS6P0Y1RgVrg7gCVzv3WphblR8CCkAxaVl/Pa2U1MA743Yj5cd/PgG12 L2ey9t8rgtT5T8KqVTrissFQdACioOv79GqlPV4/uOChG87XxOhlg0FjFDt5aOB1 6W6nuy5c6kHhRXwi0KnaRAaiTspX1esefiFvEQU5/iyTKoYyvlasDKRL6kNcxUcu j4vb/ddD9WwvBqi8CY4jX8q1GkZmA76JmllVcT3KVldsnNuA/SPkjTM/pa77oQQG U1mS/YBEBIBb2z6O1jkz5tq2oODqgWpPEo5Z0FOzOn3K5TqpJQ2gwocxXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL24FFEitvn4OnNswcMC+ilKUzRMB8GA1UdIwQY MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt YTYwNWNhZDU1MDg2LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2 LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLAGMUUu Yi94ptsJULT6O20ySMVOPiujEo0Z5KHFDNDra4Ihzu/gJaywo9Ba1SBkZX/lc2GY cfsXfQzaqJg/PHpx2BdlMKFgNiFt06SMBwrmWQYr4pYZu08c6Tz5FLlCOQXO+MVk E8O8R8FfA6cLZt7EBdn3ZjMmsmhO9b0Lkrzb4JOQ4RwsI0+i6mIOVTbLVVB6Mjh+ 3gBLiY5wD6NSHxyil3S/ZwrHQg8nOyBGYNcB9vBMzmkzEAi3adeQh69Ouaz8aBLP WdI121iy0kp0wU0EorqF9F78KGIeLysrUlYJ4E78oyneeve/7fqnOQctU/QifpzD Vr+OWy9eNTBbtA== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:46 2025 by rpki-client