This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json) Hash identifier: HWF1mt2GLbmZwSQFHsepaFnKnGYqV66+cv85r1VcxQQ= Subject key identifier: 21:CC:D9:91:39:C5:9C:99:E6:55:D6:5E:43:A1:9C:AF:AE:C6:E3:F5 Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9 Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9 Certificate serial: 019B4E4D7A3B7A22135F6CEF6699EC607804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft Manifest number: 0C1F Signing time: Wed 24 Dec 2025 03:00:59 +0000 Manifest this update: Wed 24 Dec 2025 03:00:59 +0000 Manifest next update: Thu 25 Dec 2025 03:00:59 +0000 Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: pGPkQAl1EJUN7+7szrJbeKp8y9O+CxqGF/azCkV5HBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:7a:3b:7a:22:13:5f:6c:ef:66:99:ec:60:78:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9 Validity Not Before: Dec 24 03:00:59 2025 GMT Not After : Dec 25 03:00:59 2025 GMT Subject: CN=21ccd99139c59c99e655d65e43a19cafaec6e3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:04:09:c0:79:26:5c:f6:31:d6:16:a7:2a:5e: e9:2e:d9:aa:43:02:01:13:66:0e:19:50:71:48:05: 42:bc:62:98:ee:cf:44:6e:0d:fc:61:56:75:94:30: a4:b1:74:65:71:10:65:1a:69:f8:d9:bf:fa:d9:4c: 31:e8:0f:86:a5:a9:53:93:91:d0:e6:07:18:77:2d: 20:77:55:6a:a3:dd:8b:fb:bd:38:4d:89:1d:92:57: b2:ba:d9:55:8b:b6:aa:2c:12:07:bc:30:09:56:c4: 43:67:ab:95:5e:be:24:03:54:09:33:34:3c:38:8c: cb:cf:a8:40:7f:c6:92:4e:b2:f0:61:57:13:0c:43: 30:27:c2:a0:d3:d1:a8:2a:cd:f7:27:f1:9e:07:69: a0:b9:6f:59:5c:9a:fe:1d:d7:c9:fc:60:d7:9f:44: 8e:d4:cf:7e:ed:37:fa:70:9f:45:81:02:c1:b5:49: 79:df:fb:bb:db:41:81:83:d7:de:6e:ce:93:9d:d8: 3f:3c:17:32:08:e8:d9:49:8f:b8:c3:4b:c5:c6:16: 85:11:18:95:d8:63:39:ee:76:9e:40:6b:1f:b4:e2: 85:7c:52:6a:56:dd:94:0f:63:09:59:3a:de:61:28: b5:be:33:5b:b5:96:8c:ec:12:7b:e0:36:0a:25:8f: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CC:D9:91:39:C5:9C:99:E6:55:D6:5E:43:A1:9C:AF:AE:C6:E3:F5 X509v3 Authority Key Identifier: keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:44:e6:69:6e:ec:42:63:4c:8c:23:73:5f:b9:ac:56:69:a6: 7e:a2:cc:20:fd:f8:42:5c:8c:b1:e7:78:81:55:bf:a3:d8:02: 93:f8:bc:ca:ce:36:49:e9:a5:9e:a7:e8:48:3b:8e:0a:88:09: 8a:b9:d2:e0:fe:b4:82:df:36:1e:65:5d:0e:7c:81:b4:44:23: 29:e2:28:a9:dd:56:52:23:1c:fa:32:f9:35:26:b2:91:47:41: a0:96:30:93:3f:50:32:b7:da:93:8c:83:70:0e:b2:22:87:5c: 56:d2:0b:b8:bb:05:60:ab:13:7c:70:d1:e6:80:2d:ef:df:4e: 00:eb:e2:85:77:1c:98:30:e8:50:b6:44:f2:d7:ef:89:68:b4: 7d:e9:4f:c5:1d:e4:08:8c:85:74:34:0c:77:5f:7b:2e:cc:af: 51:07:fe:ab:2f:fb:9e:f1:67:43:d8:3e:48:64:74:ba:43:29: 9b:c8:40:bd:8e:c5:c6:64:03:10:cb:dd:e3:3f:cb:8b:b8:0d: b3:00:a5:af:f0:87:22:f9:84:42:a4:2b:ac:14:f6:a0:36:c0: d9:79:e5:4f:32:2f:e8:90:8b:b3:2f:be:c7:f4:79:f9:39:57: bf:a5:62:e5:d1:99:d3:b4:33:00:09:09:00:28:24:d7:6c:fc: 11:54:6e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTXo7eiITX2zvZpnsYHgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NGQ1NDViMjkzYzE2ZGNlZmRjNDFkMTU2ZjQ5MTliYjE1 NGMwZDkwHhcNMjUxMjI0MDMwMDU5WhcNMjUxMjI1MDMwMDU5WjAzMTEwLwYDVQQD EygyMWNjZDk5MTM5YzU5Yzk5ZTY1NWQ2NWU0M2ExOWNhZmFlYzZlM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAQJwHkmXPYx1hanKl7pLtmqQwIB E2YOGVBxSAVCvGKY7s9Ebg38YVZ1lDCksXRlcRBlGmn42b/62Uwx6A+GpalTk5HQ 5gcYdy0gd1Vqo92L+704TYkdkleyutlVi7aqLBIHvDAJVsRDZ6uVXr4kA1QJMzQ8 OIzLz6hAf8aSTrLwYVcTDEMwJ8Kg09GoKs33J/GeB2mguW9ZXJr+HdfJ/GDXn0SO 1M9+7Tf6cJ9FgQLBtUl53/u720GBg9febs6Tndg/PBcyCOjZSY+4w0vFxhaFERiV 2GM57naeQGsftOKFfFJqVt2UD2MJWTreYSi1vjNbtZaM7BJ74DYKJY+rPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHM2ZE5xZyZ5lXWXkOhnK+uxuP1MB8GA1UdIwQY MBaAFBdNVFspPBbc79xB0Vb0kZuxVMDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYt ODQ3ZTExNmJjNmViLzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYtODQ3ZTExNmJjNmVi LzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0TmaW7s QmNMjCNzX7msVmmmfqLMIP34QlyMsed4gVW/o9gCk/i8ys42SemlnqfoSDuOCogJ irnS4P60gt82HmVdDnyBtEQjKeIoqd1WUiMc+jL5NSaykUdBoJYwkz9QMrfak4yD cA6yIodcVtILuLsFYKsTfHDR5oAt799OAOvihXccmDDoULZE8tfviWi0felPxR3k CIyFdDQMd197LsyvUQf+qy/7nvFnQ9g+SGR0ukMpm8hAvY7FxmQDEMvd4z/Li7gN swClr/CHIvmEQqQrrBT2oDbA2XnlTzIv6JCLsy++x/R5+TlXv6Vi5dGZ07QzAAkJ ACgk12z8EVRu+A== -----END CERTIFICATE-----Generated at Wed Dec 24 09:14:27 2025 by rpki-client