This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json) Hash identifier: xV12m3mbpq5s5DO/5wNrKa0E2ZStPoifNSMrxPUAWVs= Subject key identifier: 96:2D:D8:DE:02:E7:70:A7:74:AE:E8:13:ED:DF:E0:FA:38:D5:F8:01 Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019B4C5F47BD5CD7119E6EFE91CD3F0B7D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft Manifest number: 1794 Signing time: Tue 23 Dec 2025 18:01:11 +0000 Manifest this update: Tue 23 Dec 2025 18:01:11 +0000 Manifest next update: Wed 24 Dec 2025 18:01:11 +0000 Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: Je409WcTmzEQ50Y1Sm9uUHAwa/Q+r3Q7O7ChlegRzS8=) 2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:47:bd:5c:d7:11:9e:6e:fe:91:cd:3f:0b:7d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Dec 23 18:01:11 2025 GMT Not After : Dec 24 18:01:11 2025 GMT Subject: CN=962dd8de02e770a774aee813eddfe0fa38d5f801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:c1:0b:ab:92:6d:8b:c6:56:3c:f6:2d:99: 6a:e3:c0:75:5b:89:28:ad:b7:71:6e:96:16:24:a2: 1a:8f:f3:b2:de:cb:12:60:b5:da:ed:5d:f8:3e:45: a6:1c:23:eb:d2:48:e0:07:6a:f1:ba:3c:5a:21:e5: 21:2e:04:58:b5:c3:7d:02:62:49:98:e3:6a:eb:d9: cf:57:ba:d6:c3:ed:e5:e1:11:16:57:06:5e:a9:29: 7a:68:21:e0:ba:6d:7f:6d:94:18:61:bd:31:af:c4: ef:81:f6:c6:e7:83:a5:f3:98:3c:68:41:2c:cf:01: 70:85:27:71:1d:5a:7f:cb:0d:b9:d9:02:6d:27:f3: 9d:64:67:46:f5:41:af:f6:46:c4:a9:d4:4c:23:d5: c3:7c:1a:73:8b:b0:2d:f1:7e:94:08:91:04:d5:b1: a0:a9:f2:71:96:d6:c2:9c:7c:ca:d4:b2:90:28:8f: 6b:49:3a:fd:69:a9:71:37:9e:a2:ec:d7:c9:68:51: cf:39:9b:bb:a7:34:94:2f:43:63:c4:46:69:1f:dd: 89:20:63:d3:81:1e:57:b9:41:15:7f:b9:e8:e9:8f: 1c:e4:13:b3:bf:a3:0e:56:f0:cb:65:33:81:29:62: 8e:90:4b:ad:0f:78:77:cb:b2:47:41:b1:b5:1c:8a: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:D8:DE:02:E7:70:A7:74:AE:E8:13:ED:DF:E0:FA:38:D5:F8:01 X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:be:5f:c4:bf:ba:61:94:3d:1d:26:99:8a:6b:bc:77:bf:2c: dc:bb:b4:b7:22:04:07:d2:1c:d8:fe:70:da:d5:7a:4d:44:2e: 8b:2c:d8:f1:ad:57:1c:9c:d3:20:7d:f1:58:a5:11:7f:82:72: 69:bf:18:4f:a3:b2:09:05:0e:e7:07:e2:9e:cf:22:bd:00:bd: 0e:9a:0c:d0:97:7c:05:69:20:7f:89:be:b5:bc:aa:af:41:65: b1:a2:85:bd:c2:6a:c7:93:56:c6:c9:67:fe:6e:91:95:ef:33: aa:10:97:06:57:72:3b:16:7b:4f:10:91:62:86:36:16:77:63: c9:5f:7d:1b:02:b7:f4:86:7e:f2:5c:c9:13:ec:09:84:07:69: a5:fe:d6:0c:ad:f4:f7:51:a5:91:5c:0d:c9:5e:d2:64:50:fa: ab:50:df:e6:92:2c:4a:39:cb:0d:a8:e0:60:2c:6f:bf:4b:4d: 82:fa:8b:fb:4b:72:12:23:93:94:d1:28:c9:67:f3:bf:75:f2: 61:b1:6c:21:4b:e2:52:e6:79:2b:57:68:34:01:a6:63:bb:3d: c7:90:f8:4d:58:e1:62:a5:e9:79:53:ee:c6:18:39:8f:09:38: 23:30:7e:88:a3:49:53:7d:f8:60:03:63:16:41:a3:c6:65:16: 65:b9:cf:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX0e9XNcRnm7+kc0/C30tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjUxMjIzMTgwMTExWhcNMjUxMjI0MTgwMTExWjAzMTEwLwYDVQQD Eyg5NjJkZDhkZTAyZTc3MGE3NzRhZWU4MTNlZGRmZTBmYTM4ZDVmODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYrBC6uSbYvGVjz2LZlq48B1W4ko rbdxbpYWJKIaj/Oy3ssSYLXa7V34PkWmHCPr0kjgB2rxujxaIeUhLgRYtcN9AmJJ mONq69nPV7rWw+3l4REWVwZeqSl6aCHgum1/bZQYYb0xr8TvgfbG54Ol85g8aEEs zwFwhSdxHVp/yw252QJtJ/OdZGdG9UGv9kbEqdRMI9XDfBpzi7At8X6UCJEE1bGg qfJxltbCnHzK1LKQKI9rSTr9aalxN56i7NfJaFHPOZu7pzSUL0NjxEZpH92JIGPT gR5XuUEVf7no6Y8c5BOzv6MOVvDLZTOBKWKOkEutD3h3y7JHQbG1HIrD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYt2N4C53CndK7oE+3f4Po41fgBMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdb5fxL+6 YZQ9HSaZimu8d78s3Lu0tyIEB9Ic2P5w2tV6TUQuiyzY8a1XHJzTIH3xWKURf4Jy ab8YT6OyCQUO5wfins8ivQC9DpoM0Jd8BWkgf4m+tbyqr0FlsaKFvcJqx5NWxsln /m6Rle8zqhCXBldyOxZ7TxCRYoY2FndjyV99GwK39IZ+8lzJE+wJhAdppf7WDK30 91GlkVwNyV7SZFD6q1Df5pIsSjnLDajgYCxvv0tNgvqL+0tyEiOTlNEoyWfzv3Xy YbFsIUviUuZ5K1doNAGmY7s9x5D4TVjhYqXpeVPuxhg5jwk4IzB+iKNJU334YANj FkGjxmUWZbnPaw== -----END CERTIFICATE-----Generated at Wed Dec 24 02:55:01 2025 by rpki-client