This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json) Hash identifier: EAc3vks+DgZZXUkc5fR7JISzyt9PW7/OBd18512mvJo= Subject key identifier: F9:EA:06:C2:FF:60:25:4E:A1:09:BE:9E:80:3A:15:7F:D5:76:CE:67 Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Certificate serial: 019B3D2386B4C6FD7CE6B3CD8D7C4E51502D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft Manifest number: 0E95 Signing time: Sat 20 Dec 2025 19:01:36 +0000 Manifest this update: Sat 20 Dec 2025 19:01:36 +0000 Manifest next update: Sun 21 Dec 2025 19:01:36 +0000 Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: RecOkiGRrD2uCVSXpjRJ06Ks727UCYn9uXm2ldgsZCE=) 2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:86:b4:c6:fd:7c:e6:b3:cd:8d:7c:4e:51:50:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Validity Not Before: Dec 20 19:01:36 2025 GMT Not After : Dec 21 19:01:36 2025 GMT Subject: CN=f9ea06c2ff60254ea109be9e803a157fd576ce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:08:09:3a:19:9a:b4:d3:18:3b:f5:2b:c4: 46:93:7d:fb:12:26:54:75:4a:1f:e9:fe:21:c6:b9: 1d:e5:22:95:e1:93:c1:e8:b5:d8:2b:2a:15:30:7b: 89:7f:61:a0:17:d9:de:7d:c2:f4:f5:dd:6c:03:13: bc:b4:6f:ce:b0:88:2a:22:a3:69:a1:e2:be:5b:4c: 18:66:cb:52:65:1d:41:42:38:d3:78:26:5a:99:76: 31:57:33:c7:4e:65:b6:33:c5:de:18:ba:6d:23:28: ce:87:b5:16:ea:1e:f9:86:bb:f3:80:4b:f3:c2:a7: 42:37:f2:42:87:5d:22:6c:15:85:5f:ec:ee:bf:85: ef:bb:a0:ff:09:12:24:b6:b8:93:c2:fe:d7:bd:ac: 3d:e4:d9:2c:3e:22:01:fd:6f:32:00:78:4a:1d:6b: 35:c8:db:f6:2d:31:e5:c7:74:1d:74:ea:df:a6:17: 17:69:6d:cc:98:8f:bc:29:23:02:78:fa:96:8c:ef: 95:97:c5:4c:5b:f6:2b:b2:ea:8d:3e:de:18:f4:93: 7a:b9:13:7c:ad:12:c0:4b:f8:d2:33:d1:e1:24:68: 57:26:d8:3c:15:20:83:50:59:9a:6a:be:5b:6a:0e: 94:26:e6:31:fc:da:50:f4:b3:29:de:0f:e7:64:5e: b1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:EA:06:C2:FF:60:25:4E:A1:09:BE:9E:80:3A:15:7F:D5:76:CE:67 X509v3 Authority Key Identifier: keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8c:8d:2b:c0:2f:6a:42:ff:c5:80:68:f3:e1:83:f9:f1:29: c7:5c:0d:19:8e:34:7e:45:26:cf:92:a4:1b:b9:3e:ef:77:1c: 2c:3d:28:29:2d:cd:5f:70:43:6f:01:a1:7e:fb:6b:13:a8:b2: 23:85:8a:96:bd:84:ae:e4:43:b4:ee:ff:2d:03:37:54:bd:93: 90:08:21:34:39:92:c6:87:3d:17:59:d3:c3:bb:f1:6f:cd:e8: 33:5f:50:16:bb:a1:35:24:8c:62:cd:61:f1:c2:85:5c:f1:d8: c9:7d:16:f6:af:78:c1:2d:26:60:41:3a:20:0a:11:f7:f8:39: 22:cb:ea:0d:c5:4b:29:26:13:d9:71:4c:f4:0c:3c:fa:ac:87: 05:d2:b3:d4:62:82:dc:17:09:df:61:7e:73:41:36:d3:7d:03: 4b:3a:3f:c2:a9:ba:49:bd:e6:49:96:9d:b5:8a:cc:06:79:2d: f4:9b:63:59:53:2c:d1:e9:8e:ea:fc:ae:e9:99:f7:1c:58:df: b9:68:b2:b0:d8:f0:a0:a1:f8:2d:19:58:c6:a5:e5:26:64:17: 29:1e:85:91:3d:f9:81:70:ee:d7:2f:38:df:62:db:b2:cf:75: f6:0f:32:e1:55:1c:29:13:c8:28:ec:e1:ec:f6:27:93:fd:ab: eb:69:df:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I4a0xv185rPNjXxOUVAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli MDM0MjkwHhcNMjUxMjIwMTkwMTM2WhcNMjUxMjIxMTkwMTM2WjAzMTEwLwYDVQQD EyhmOWVhMDZjMmZmNjAyNTRlYTEwOWJlOWU4MDNhMTU3ZmQ1NzZjZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/AICToZmrTTGDv1K8RGk337EiZU dUof6f4hxrkd5SKV4ZPB6LXYKyoVMHuJf2GgF9nefcL09d1sAxO8tG/OsIgqIqNp oeK+W0wYZstSZR1BQjjTeCZamXYxVzPHTmW2M8XeGLptIyjOh7UW6h75hrvzgEvz wqdCN/JCh10ibBWFX+zuv4Xvu6D/CRIktriTwv7Xvaw95NksPiIB/W8yAHhKHWs1 yNv2LTHlx3QddOrfphcXaW3MmI+8KSMCePqWjO+Vl8VMW/YrsuqNPt4Y9JN6uRN8 rRLAS/jSM9HhJGhXJtg8FSCDUFmaar5bag6UJuYx/NpQ9LMp3g/nZF6xaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnqBsL/YCVOoQm+noA6FX/Vds5nMB8GA1UdIwQY MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3 LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4yNK8Av akL/xYBo8+GD+fEpx1wNGY40fkUmz5KkG7k+73ccLD0oKS3NX3BDbwGhfvtrE6iy I4WKlr2EruRDtO7/LQM3VL2TkAghNDmSxoc9F1nTw7vxb83oM19QFruhNSSMYs1h 8cKFXPHYyX0W9q94wS0mYEE6IAoR9/g5IsvqDcVLKSYT2XFM9Aw8+qyHBdKz1GKC 3BcJ32F+c0E2030DSzo/wqm6Sb3mSZadtYrMBnkt9JtjWVMs0emO6vyu6Zn3HFjf uWiysNjwoKH4LRlYxqXlJmQXKR6FkT35gXDu1y8432Lbss919g8y4VUcKRPIKOzh 7PYnk/2r62nf7Q== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:39 2025 by rpki-client