This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft File: F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json) Hash identifier: V8J1TfwdqnQV+8WuULMOcE7A3LokbW16zPekOv+i6VM= Subject key identifier: D3:07:7F:DB:66:2D:83:36:47:93:84:C2:35:22:87:DD:D1:8A:E6:BD Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF Certificate issuer: /CN=175a20608ace11e7511c8669560636730a9e2abf Certificate serial: 019B54BD2879A229059BAEF126ED32863B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft Manifest number: 0650 Signing time: Thu 25 Dec 2025 09:00:41 +0000 Manifest this update: Thu 25 Dec 2025 09:00:41 +0000 Manifest next update: Fri 26 Dec 2025 09:00:41 +0000 Files and hashes: 1: 2U-2Eym6KYW6qLxuFsjcorsxKnc.roa (hash: KrlvkjS9SKD/PHB33xX+CX5Zyn9t48T8ugGL2ErULzA=) 2: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: 9hDcd9UhzWPDUMozDwUo089rBJef4zXhEVZL0Tod4Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:bd:28:79:a2:29:05:9b:ae:f1:26:ed:32:86:3b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf Validity Not Before: Dec 25 09:00:41 2025 GMT Not After : Dec 26 09:00:41 2025 GMT Subject: CN=d3077fdb662d8336479384c2352287ddd18ae6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1d:d9:6d:77:49:84:22:87:2f:19:ff:54:25: 8f:8b:bf:5c:a0:8e:26:2d:26:74:9e:cb:1a:7b:ed: 22:66:54:90:77:aa:0c:19:3b:ab:66:eb:c7:e9:37: bb:76:e5:27:32:12:a3:3a:69:1d:c4:32:ce:f2:61: 21:7b:cc:f1:9f:7b:ac:1f:88:69:68:51:06:12:e6: 04:63:87:4d:36:8f:82:e5:9a:4a:fa:0b:9f:ca:3b: fc:46:98:9a:f5:46:64:5f:aa:53:0b:df:62:ca:44: b6:86:9c:b2:e8:fa:29:20:ae:c7:79:ce:98:24:f5: 63:4e:20:ad:01:7e:e1:be:1c:67:b8:e8:8e:de:47: 73:57:c1:5f:45:d6:0a:69:c3:72:df:bd:70:7a:68: fe:3e:28:cd:52:49:da:fb:bb:7c:81:18:3f:bd:e1: 82:25:a2:d6:67:86:d0:e0:5a:53:c6:a4:73:d7:48: e2:39:bd:af:b1:ff:0e:2a:0d:d4:2c:05:cf:10:fb: 31:1d:94:25:21:43:8d:87:1d:27:5e:72:ab:e0:e7: a8:d9:f3:14:17:0a:46:94:5f:d6:36:56:ad:7b:57: 41:24:78:5a:bc:17:76:e0:1c:ab:53:2a:62:15:56: d1:60:65:bf:88:c9:74:91:ab:25:95:73:8c:8f:26: 08:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:07:7F:DB:66:2D:83:36:47:93:84:C2:35:22:87:DD:D1:8A:E6:BD X509v3 Authority Key Identifier: keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ec:c8:4f:f0:e2:b5:63:fe:8a:88:cb:15:04:9b:5c:e3:09: 15:6e:9a:89:63:1c:3a:ea:74:3c:10:a8:de:0e:ec:e8:9b:d6: e9:5f:7b:85:20:a3:54:62:5f:38:b1:82:ea:3b:46:bf:9a:84: d7:65:4b:a1:97:36:31:c5:cc:ed:19:f2:2c:b9:74:cf:ff:f0: be:c2:45:26:a0:5f:da:bc:98:1a:61:42:af:4b:d4:aa:18:64: 15:f1:9e:e7:80:6b:ed:d9:72:f3:f1:c4:cb:35:78:72:35:c1: 63:a3:a2:c3:f1:02:34:d2:35:ba:88:07:c6:28:6b:1c:39:25: ba:b1:45:5b:6b:a9:7e:12:ed:85:58:e7:9d:fc:74:51:f1:ca: ea:c2:6d:a9:e9:db:de:ba:14:9d:eb:b3:a7:e1:b1:bb:2c:9d: 5a:ae:26:06:99:1d:d8:b0:d6:b8:73:af:45:5b:40:46:66:21: cf:9b:33:58:fb:f8:12:72:f3:00:3d:11:12:01:28:41:79:d0: 7e:7e:f0:0d:2d:8b:30:b0:bb:c0:c3:11:a9:5a:99:b8:e3:ca: b0:b7:73:df:30:27:f3:c5:ad:80:16:62:b3:60:41:3e:dc:37: 7f:19:af:3b:fb:66:64:b7:d6:d8:c7:38:a2:fa:7e:50:c5:b6: b5:cc:02:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUvSh5oikFm67xJu0yhjs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWEyMDYwOGFjZTExZTc1MTFjODY2OTU2MDYzNjczMGE5 ZTJhYmYwHhcNMjUxMjI1MDkwMDQxWhcNMjUxMjI2MDkwMDQxWjAzMTEwLwYDVQQD EyhkMzA3N2ZkYjY2MmQ4MzM2NDc5Mzg0YzIzNTIyODdkZGQxOGFlNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x3ZbXdJhCKHLxn/VCWPi79coI4m LSZ0nssae+0iZlSQd6oMGTurZuvH6Te7duUnMhKjOmkdxDLO8mEhe8zxn3usH4hp aFEGEuYEY4dNNo+C5ZpK+gufyjv8Rpia9UZkX6pTC99iykS2hpyy6PopIK7Hec6Y JPVjTiCtAX7hvhxnuOiO3kdzV8FfRdYKacNy371wemj+PijNUkna+7t8gRg/veGC JaLWZ4bQ4FpTxqRz10jiOb2vsf8OKg3ULAXPEPsxHZQlIUONhx0nXnKr4Oeo2fMU FwpGlF/WNlate1dBJHhavBd24ByrUypiFVbRYGW/iMl0kasllXOMjyYIeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMHf9tmLYM2R5OEwjUih93Riua9MB8GA1UdIwQY MBaAFBdaIGCKzhHnURyGaVYGNnMKniq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEt YTYwNWNhZDU1MDg2LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy83ZTlhMTgtMDYyOS00MWViLWE2ODEtYTYwNWNhZDU1MDg2 LzEvRjFvZ1lJck9FZWRSSElacFZnWTJjd3FlS3I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+zIT/Di tWP+iojLFQSbXOMJFW6aiWMcOup0PBCo3g7s6JvW6V97hSCjVGJfOLGC6jtGv5qE 12VLoZc2McXM7RnyLLl0z//wvsJFJqBf2ryYGmFCr0vUqhhkFfGe54Br7dly8/HE yzV4cjXBY6Oiw/ECNNI1uogHxihrHDklurFFW2upfhLthVjnnfx0UfHK6sJtqenb 3roUneuzp+GxuyydWq4mBpkd2LDWuHOvRVtARmYhz5szWPv4EnLzAD0REgEoQXnQ fn7wDS2LMLC7wMMRqVqZuOPKsLdz3zAn88WtgBZis2BBPtw3fxmvO/tmZLfW2Mc4 ovp+UMW2tcwCfQ== -----END CERTIFICATE-----Generated at Thu Dec 25 15:42:08 2025 by rpki-client