This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft File: F263G9VVdvRXY7retnbtWZkNOWo.mft (raw, json) Hash identifier: HV1Kx6ZEO3UzywW4UTV+btrt0AKeJqGOXr/i63j6/+w= Subject key identifier: A1:E9:EF:97:83:4B:E4:FF:EE:8A:93:88:46:32:69:F5:75:B4:4B:21 Authority key identifier: 17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A Certificate issuer: /CN=176eb71bd55576f45763badeb676ed59990d396a Certificate serial: 019B3C7F076ABBD916527727C951824840B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft Manifest number: 0E98 Signing time: Sat 20 Dec 2025 16:01:56 +0000 Manifest this update: Sat 20 Dec 2025 16:01:56 +0000 Manifest next update: Sun 21 Dec 2025 16:01:56 +0000 Files and hashes: 1: F263G9VVdvRXY7retnbtWZkNOWo.crl (hash: 0diy8o3Gw7Z2vMXuSAWzGb3D7kxNfqIJEW27nmoJG4U=) 2: kQBDlI9AJTPDOANcbfub1qPVjs0.roa (hash: ws3dJ8ac8FYqQSPBpJu2ZxPrhp444gx9gUkFmi10lLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:07:6a:bb:d9:16:52:77:27:c9:51:82:48:40:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=176eb71bd55576f45763badeb676ed59990d396a Validity Not Before: Dec 20 16:01:56 2025 GMT Not After : Dec 21 16:01:56 2025 GMT Subject: CN=a1e9ef97834be4ffee8a9388463269f575b44b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:24:90:5f:26:46:d2:b6:c6:8e:6e:08:51:19: 41:39:51:2e:9e:6f:ce:85:8d:c4:0c:d0:3d:09:8c: d1:0f:6d:9d:c4:d0:09:b5:80:95:9b:99:e6:4d:1a: f8:b4:48:8b:3b:66:eb:19:ec:38:e3:28:12:66:f1: ee:1a:ec:6f:1a:0f:f3:2c:aa:ba:50:6c:80:a8:cc: 87:2d:24:b4:97:c1:80:1b:1d:54:8b:61:27:ce:3e: f7:8e:5d:22:58:15:ad:0c:2b:9d:f5:04:60:86:bb: 20:41:9b:83:e3:e9:52:8f:0f:34:a5:f3:88:4f:9f: ce:42:a6:86:c8:03:f0:36:46:2c:f4:cb:ef:1d:17: 17:89:8b:1f:72:52:28:a6:b4:5d:89:05:8e:6c:fc: 1c:30:fc:c3:cf:a1:cb:37:fe:bd:c4:97:60:e1:ce: b2:a0:c9:f0:b3:4b:b7:1b:24:92:98:82:5c:ce:ea: 1d:5e:4f:97:a0:9f:10:14:1e:87:5b:e3:56:f8:d1: 97:c3:50:f1:51:2d:10:7b:7d:1d:70:ce:9a:0c:35: c0:6d:22:bf:b9:c1:d2:60:53:90:1e:1e:39:e5:63: 85:2c:12:70:60:96:73:35:ad:b1:76:9b:ee:75:0b: bc:bd:df:8f:ec:40:9b:01:a6:e8:81:80:ef:5e:1f: 02:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E9:EF:97:83:4B:E4:FF:EE:8A:93:88:46:32:69:F5:75:B4:4B:21 X509v3 Authority Key Identifier: keyid:17:6E:B7:1B:D5:55:76:F4:57:63:BA:DE:B6:76:ED:59:99:0D:39:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F263G9VVdvRXY7retnbtWZkNOWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/35f9c4-7b96-4fcb-bca2-9dd3d21907a3/1/F263G9VVdvRXY7retnbtWZkNOWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:11:e7:fe:10:17:60:d0:30:06:25:74:c2:7e:21:aa:c0:a4: 57:06:f5:d5:45:c3:80:2e:1c:64:5e:2a:b7:33:3b:70:cb:0c: 33:ff:40:7e:60:5b:af:6c:dd:54:6f:32:c3:42:96:e4:4d:12: ec:a8:82:4c:0d:26:69:7c:56:ae:56:ee:21:b2:82:00:2d:ea: da:25:b2:48:84:a0:b9:f6:32:69:0e:6c:be:b5:b1:f6:5a:f0: 95:ad:1a:a5:81:a4:e5:f6:39:b5:22:b9:9d:b0:b4:bc:b1:97: f6:d5:ad:0e:f3:7e:e8:17:80:df:7d:5f:65:34:40:1c:d0:c1: ae:6a:d0:1d:60:64:00:45:72:ba:f5:45:01:69:d7:e4:63:8c: 8c:b9:b0:06:5f:3a:5c:54:9f:69:03:ef:1a:c8:fe:18:45:22: 66:1e:fb:72:2d:d2:34:22:be:17:e4:07:26:ac:10:5f:05:cf: fa:79:3e:7a:25:e1:c7:b7:2e:ca:6b:2f:cc:b2:28:6d:37:18: d2:59:cb:a8:9e:cd:a1:36:08:b7:05:2b:f2:6c:c6:cf:76:19: c9:ea:8e:2c:35:96:0c:fd:56:4b:ae:d4:f0:27:6a:9f:0e:38: 3b:8b:90:76:a8:76:e1:39:fa:47:28:f2:cb:09:8c:f5:98:0c: bd:38:3c:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fwdqu9kWUncnyVGCSEC3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NmViNzFiZDU1NTc2ZjQ1NzYzYmFkZWI2NzZlZDU5OTkw ZDM5NmEwHhcNMjUxMjIwMTYwMTU2WhcNMjUxMjIxMTYwMTU2WjAzMTEwLwYDVQQD EyhhMWU5ZWY5NzgzNGJlNGZmZWU4YTkzODg0NjMyNjlmNTc1YjQ0YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SSQXyZG0rbGjm4IURlBOVEunm/O hY3EDNA9CYzRD22dxNAJtYCVm5nmTRr4tEiLO2brGew44ygSZvHuGuxvGg/zLKq6 UGyAqMyHLSS0l8GAGx1Ui2Enzj73jl0iWBWtDCud9QRghrsgQZuD4+lSjw80pfOI T5/OQqaGyAPwNkYs9MvvHRcXiYsfclIoprRdiQWObPwcMPzDz6HLN/69xJdg4c6y oMnws0u3GySSmIJczuodXk+XoJ8QFB6HW+NW+NGXw1DxUS0Qe30dcM6aDDXAbSK/ ucHSYFOQHh455WOFLBJwYJZzNa2xdpvudQu8vd+P7ECbAabogYDvXh8CbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHp75eDS+T/7oqTiEYyafV1tEshMB8GA1UdIwQY MBaAFBdutxvVVXb0V2O63rZ27VmZDTlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTIt OWRkM2QyMTkwN2EzLzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8zNWY5YzQtN2I5Ni00ZmNiLWJjYTItOWRkM2QyMTkwN2Ez LzEvRjI2M0c5VlZkdlJYWTdyZXRuYnRXWmtOT1dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRHn/hAX YNAwBiV0wn4hqsCkVwb11UXDgC4cZF4qtzM7cMsMM/9AfmBbr2zdVG8yw0KW5E0S 7KiCTA0maXxWrlbuIbKCAC3q2iWySISgufYyaQ5svrWx9lrwla0apYGk5fY5tSK5 nbC0vLGX9tWtDvN+6BeA331fZTRAHNDBrmrQHWBkAEVyuvVFAWnX5GOMjLmwBl86 XFSfaQPvGsj+GEUiZh77ci3SNCK+F+QHJqwQXwXP+nk+eiXhx7cuymsvzLIobTcY 0lnLqJ7NoTYItwUr8mzGz3YZyeqOLDWWDP1WS67U8Cdqnw44O4uQdqh24Tn6Ryjy ywmM9ZgMvTg8iA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:49:58 2025 by rpki-client