This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft File: F2w05a5wFsNgXTJpVkrpaFRDWV0.mft (raw, json) Hash identifier: AFqKKv8+4v4ZV1QgOR6Ucva0l/9l36T2SogWE7d0lDQ= Subject key identifier: 64:C7:98:46:94:58:4E:09:58:50:3C:28:04:02:82:B8:74:8E:8E:3F Authority key identifier: 17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D Certificate issuer: /CN=176c34e5ae7016c3605d3269564ae9685443595d Certificate serial: 019B3D90AA597A440BB8CA769541CA0D61F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft Manifest number: 09EF Signing time: Sat 20 Dec 2025 21:00:49 +0000 Manifest this update: Sat 20 Dec 2025 21:00:49 +0000 Manifest next update: Sun 21 Dec 2025 21:00:49 +0000 Files and hashes: 1: F2w05a5wFsNgXTJpVkrpaFRDWV0.crl (hash: p/kXM2avZffs05sD+UzwBRhkbvPQvyFVL6nEzsMJktE=) 2: wlY-QtAkBrD3gjKIpeQoXPyzFOM.roa (hash: zJBXQ4JCSb3Ylp4EVKprUMeUDS30W25c/gEiCbzENgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:aa:59:7a:44:0b:b8:ca:76:95:41:ca:0d:61:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=176c34e5ae7016c3605d3269564ae9685443595d Validity Not Before: Dec 20 21:00:49 2025 GMT Not After : Dec 21 21:00:49 2025 GMT Subject: CN=64c7984694584e0958503c28040282b8748e8e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9b:1a:82:db:b9:b5:6d:8e:86:95:58:58:44: e4:84:28:2d:a2:0b:44:16:9a:bf:32:e1:92:bb:dd: ed:2e:8d:4e:b2:4b:04:68:1b:0a:33:88:22:27:7a: b7:86:c8:88:ef:00:f8:f1:8c:0a:36:4a:dc:48:86: f5:4a:55:ba:d8:37:42:8c:0a:1e:e0:26:ea:ec:87: 1f:9d:a5:de:df:14:9a:b3:c9:6b:44:16:f1:a7:9a: a8:57:ac:8f:b1:08:9e:d8:a6:eb:c6:83:f0:21:f4: c3:c8:5e:43:48:80:c6:81:9f:43:5c:c0:14:d4:0b: 94:6a:de:c0:2d:22:c1:d0:8a:c9:b9:d9:6e:94:e6: a7:ae:09:f0:1b:cf:6b:55:4b:bd:ec:9d:0a:a4:d2: 3c:3d:86:fc:6b:3e:4e:ce:18:6f:ea:1d:e5:42:00: 71:d6:50:80:c7:77:f4:ac:67:4b:4c:c8:9a:9b:53: 01:fd:3c:51:e1:f1:d2:c0:8b:43:99:21:9d:9c:a7: 8a:d0:51:e3:b6:da:57:cb:7f:d9:c7:a7:b3:4c:47: ba:ac:84:73:34:9e:f1:e0:bd:17:4b:7a:5b:cd:7c: 06:87:0a:c8:22:96:a0:0f:0a:01:c1:24:4f:4b:96: bb:f0:82:00:30:2a:93:16:22:da:8b:de:66:ed:22: 3e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C7:98:46:94:58:4E:09:58:50:3C:28:04:02:82:B8:74:8E:8E:3F X509v3 Authority Key Identifier: keyid:17:6C:34:E5:AE:70:16:C3:60:5D:32:69:56:4A:E9:68:54:43:59:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2w05a5wFsNgXTJpVkrpaFRDWV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6426a5-6b14-4911-88e1-a75f3df46af1/1/F2w05a5wFsNgXTJpVkrpaFRDWV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:0f:e4:af:7d:86:a7:eb:f2:d5:53:6a:c4:ff:d0:f1:2f:ae: 04:8f:dc:fd:a0:1b:ab:0e:df:29:dc:a6:19:71:07:2e:ea:50: f8:5e:03:0b:fa:24:62:4c:96:d0:74:6d:6e:11:dc:b8:3f:f7: c1:6d:c1:3f:c6:f9:ff:48:a9:93:d4:a9:0b:ce:44:db:6d:3a: af:a3:e2:3f:4b:64:94:d6:0f:c8:4f:28:0b:c9:78:95:82:d0: 1e:36:74:b2:38:80:e7:d8:bb:ba:76:62:13:18:03:a1:8d:47: 19:27:e6:ea:6a:3f:9d:14:06:fb:fb:33:ee:9f:4d:12:1f:ae: 8f:55:c5:a3:99:04:d6:82:7a:94:7e:74:48:07:0d:90:9c:d7: 9e:16:83:47:8c:c2:5b:61:a2:55:a8:83:63:6d:85:4e:a0:df: a3:5b:c6:7f:1f:73:c0:28:86:49:7a:1e:10:46:6b:0a:17:dd: c8:ec:cb:d8:49:1a:36:fd:4b:32:9b:f8:0c:80:d3:a4:8c:e8: dd:d2:74:b9:fa:f7:2b:ee:34:cd:10:6f:19:a7:67:85:23:d1: 38:59:bd:ee:1e:40:de:64:4c:c4:26:c4:b6:55:9d:f2:35:7f: 63:ed:f2:1a:cf:f9:84:5e:5b:79:82:50:a8:33:53:aa:0b:72: aa:7b:70:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKpZekQLuMp2lUHKDWHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NmMzNGU1YWU3MDE2YzM2MDVkMzI2OTU2NGFlOTY4NTQ0 MzU5NWQwHhcNMjUxMjIwMjEwMDQ5WhcNMjUxMjIxMjEwMDQ5WjAzMTEwLwYDVQQD Eyg2NGM3OTg0Njk0NTg0ZTA5NTg1MDNjMjgwNDAyODJiODc0OGU4ZTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Jsagtu5tW2OhpVYWETkhCgtogtE Fpq/MuGSu93tLo1OsksEaBsKM4giJ3q3hsiI7wD48YwKNkrcSIb1SlW62DdCjAoe 4Cbq7IcfnaXe3xSas8lrRBbxp5qoV6yPsQie2KbrxoPwIfTDyF5DSIDGgZ9DXMAU 1AuUat7ALSLB0IrJudlulOanrgnwG89rVUu97J0KpNI8PYb8az5Ozhhv6h3lQgBx 1lCAx3f0rGdLTMiam1MB/TxR4fHSwItDmSGdnKeK0FHjttpXy3/Zx6ezTEe6rIRz NJ7x4L0XS3pbzXwGhwrIIpagDwoBwSRPS5a78IIAMCqTFiLai95m7SI+dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTHmEaUWE4JWFA8KAQCgrh0jo4/MB8GA1UdIwQY MBaAFBdsNOWucBbDYF0yaVZK6WhUQ1ldMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEt YTc1ZjNkZjQ2YWYxLzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82NDI2YTUtNmIxNC00OTExLTg4ZTEtYTc1ZjNkZjQ2YWYx LzEvRjJ3MDVhNXdGc05nWFRKcFZrcnBhRlJEV1YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Q/kr32G p+vy1VNqxP/Q8S+uBI/c/aAbqw7fKdymGXEHLupQ+F4DC/okYkyW0HRtbhHcuD/3 wW3BP8b5/0ipk9SpC85E2206r6PiP0tklNYPyE8oC8l4lYLQHjZ0sjiA59i7unZi ExgDoY1HGSfm6mo/nRQG+/sz7p9NEh+uj1XFo5kE1oJ6lH50SAcNkJzXnhaDR4zC W2GiVaiDY22FTqDfo1vGfx9zwCiGSXoeEEZrChfdyOzL2EkaNv1LMpv4DIDTpIzo 3dJ0ufr3K+40zRBvGadnhSPROFm97h5A3mRMxCbEtlWd8jV/Y+3yGs/5hF5beYJQ qDNTqgtyqntwZA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:41:50 2025 by rpki-client