This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json) Hash identifier: Q0xGbDrMCz/TIdGy1aXwkfrHMvgfbFaVazj9XIWi4vg= Subject key identifier: 41:B4:57:FA:0F:B3:EA:2D:B1:A3:BA:EE:41:2E:8F:42:8F:97:BF:E6 Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Certificate serial: 019B3EDAFAFFD151FDE4E0AA6EA5CE17AE90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 03:01:36 +0000 Manifest this update: Sun 21 Dec 2025 03:01:36 +0000 Manifest next update: Mon 22 Dec 2025 03:01:36 +0000 Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: 1kDeBh5MzCWnDiKVyM/D+Knb+DsagFJ0dI9tC891tzw=) 2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:fa:ff:d1:51:fd:e4:e0:aa:6e:a5:ce:17:ae:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13 Validity Not Before: Dec 21 03:01:36 2025 GMT Not After : Dec 22 03:01:36 2025 GMT Subject: CN=41b457fa0fb3ea2db1a3baee412e8f428f97bfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:58:a9:27:a1:87:6c:f2:d8:ca:e4:e0:8a:53: 14:b2:48:c2:f8:b4:a6:42:85:bb:cf:a6:f3:67:c9: 7b:b8:0b:37:f5:5f:85:c4:42:66:88:f4:03:71:f8: 97:59:db:10:95:18:3e:c8:e6:9e:fc:50:22:60:6d: 9e:09:08:60:f8:2d:ea:a2:ac:4d:70:31:ab:b3:16: c0:0e:52:0f:16:69:4b:22:c8:25:30:74:eb:41:f5: 07:f2:a4:a0:f3:0f:29:f5:d9:32:11:14:a5:c3:13: 11:58:96:96:29:1f:13:61:e1:da:e9:59:f7:ad:63: c3:9e:e3:51:27:3b:14:85:98:de:ec:ff:7f:87:62: 0f:90:ac:af:d9:b5:c5:f3:73:b9:86:0e:c8:30:13: ae:7d:d8:3b:9a:65:de:40:8c:87:84:bc:47:65:d1: 97:44:87:8b:c2:22:f3:a2:89:5f:3d:3b:16:a3:f5: 04:6a:34:d2:c8:86:dd:d5:11:56:4d:88:13:1d:3d: 08:b9:1e:d9:4d:5e:87:55:40:8e:48:d8:0c:b6:a8: ca:22:a2:99:d3:9e:da:ca:66:82:94:5d:a3:0f:b3: 42:91:c1:6d:72:af:e4:6a:ae:19:c4:87:ca:98:ba: 2a:bb:be:73:d0:97:a1:e4:59:a1:51:6f:66:26:14: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B4:57:FA:0F:B3:EA:2D:B1:A3:BA:EE:41:2E:8F:42:8F:97:BF:E6 X509v3 Authority Key Identifier: keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:33:8d:ae:3d:99:24:8a:fd:a2:33:3c:6d:f6:b2:2f:3b:9a: 23:cd:39:6a:a8:39:ac:85:4c:9e:5d:97:71:56:cc:70:65:85: 66:e0:7a:61:17:ca:f1:96:fd:d8:e3:6e:c2:e1:88:39:ae:9d: 89:c1:6b:40:1d:28:19:17:1b:2b:85:2f:b4:27:dd:8f:d5:1f: 91:ea:14:3d:91:47:10:9e:ff:8d:e3:7a:09:65:8d:5f:bc:0d: 64:af:59:c3:17:01:e7:22:75:65:34:a5:10:39:39:67:43:30: ee:74:56:af:ec:f1:be:96:8a:65:20:96:67:70:d8:30:62:6f: c4:f5:3c:42:0b:42:10:ed:f3:20:30:77:0f:a6:d3:d7:7c:b3: 67:a1:35:f8:b1:13:40:bb:44:04:5d:67:41:6d:1f:55:5c:74: df:38:01:b0:68:75:86:c5:55:05:40:bf:86:10:ca:4c:86:be: 86:87:27:7e:20:fa:0f:24:e5:7d:db:8d:60:26:a6:cd:8a:e5: 72:0f:44:7c:b9:52:65:8a:a2:96:b1:9c:77:e1:02:ca:5b:86: 78:d4:23:30:b3:01:35:d1:62:d7:c2:cb:9d:51:e3:27:bc:ba: 0e:56:82:a3:fe:33:a3:1a:c0:01:7a:6d:9f:81:a4:41:d3:6c: d8:88:0a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2vr/0VH95OCqbqXOF66QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1 N2ZkMTMwHhcNMjUxMjIxMDMwMTM2WhcNMjUxMjIyMDMwMTM2WjAzMTEwLwYDVQQD Eyg0MWI0NTdmYTBmYjNlYTJkYjFhM2JhZWU0MTJlOGY0MjhmOTdiZmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlipJ6GHbPLYyuTgilMUskjC+LSm QoW7z6bzZ8l7uAs39V+FxEJmiPQDcfiXWdsQlRg+yOae/FAiYG2eCQhg+C3qoqxN cDGrsxbADlIPFmlLIsglMHTrQfUH8qSg8w8p9dkyERSlwxMRWJaWKR8TYeHa6Vn3 rWPDnuNRJzsUhZje7P9/h2IPkKyv2bXF83O5hg7IMBOufdg7mmXeQIyHhLxHZdGX RIeLwiLzoolfPTsWo/UEajTSyIbd1RFWTYgTHT0IuR7ZTV6HVUCOSNgMtqjKIqKZ 057aymaClF2jD7NCkcFtcq/kaq4ZxIfKmLoqu75z0Jeh5FmhUW9mJhTKAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEG0V/oPs+otsaO67kEuj0KPl7/mMB8GA1UdIwQY MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3 LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANzONrj2Z JIr9ojM8bfayLzuaI805aqg5rIVMnl2XcVbMcGWFZuB6YRfK8Zb92ONuwuGIOa6d icFrQB0oGRcbK4UvtCfdj9UfkeoUPZFHEJ7/jeN6CWWNX7wNZK9ZwxcB5yJ1ZTSl EDk5Z0Mw7nRWr+zxvpaKZSCWZ3DYMGJvxPU8QgtCEO3zIDB3D6bT13yzZ6E1+LET QLtEBF1nQW0fVVx03zgBsGh1hsVVBUC/hhDKTIa+hocnfiD6DyTlfduNYCamzYrl cg9EfLlSZYqilrGcd+ECyluGeNQjMLMBNdFi18LLnVHjJ7y6DlaCo/4zoxrAAXpt n4GkQdNs2IgKrQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:04 2025 by rpki-client