This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft File: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json) Hash identifier: dleRs2AgsxBY/JJdGhOFRUo5iG+gOLft6LjBqiefE8U= Subject key identifier: 04:81:79:4D:15:F1:63:F7:DB:05:8C:23:6B:87:0C:54:D6:A8:0B:1F Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 Certificate issuer: /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Certificate serial: 019B40C89FFE3FD4FB35128C8E522013E7A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft Manifest number: 0A04 Signing time: Sun 21 Dec 2025 12:00:48 +0000 Manifest this update: Sun 21 Dec 2025 12:00:48 +0000 Manifest next update: Mon 22 Dec 2025 12:00:48 +0000 Files and hashes: 1: 6nsqKOpq5i7jyqObkwahl2KnBOE.roa (hash: nmfKFa4ZtcKyaT+5uc3ZueRsJc4oH7PPPfEcOlbfYZ4=) 2: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: YPjKk2c0VVgUsgqtqVpd5TKojK45XCfrMHpK9AIx0So=) 3: Yj9PA6aeUtKYWCCoUG8L0f7j_qw.roa (hash: 0+mZF7z1M4OKvtgh5d9B1G6Igb7jbzUV0Z2SYrMCHRs=) 4: kk1C5U0B-HdKeXhcCeQ-8nE85UA.roa (hash: 7VOTUurZCEd1fY/Owp1HWKN7p5rc+6dbyjJFc9pRgek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:9f:fe:3f:d4:fb:35:12:8c:8e:52:20:13:e7:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21 Validity Not Before: Dec 21 12:00:48 2025 GMT Not After : Dec 22 12:00:48 2025 GMT Subject: CN=0481794d15f163f7db058c236b870c54d6a80b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:2b:31:4a:4a:b5:7a:ea:e2:b9:85:da:17: 35:c3:96:ab:1b:1e:e0:99:80:87:4c:ab:8d:39:6d: af:44:10:ec:b2:ed:b7:2c:d8:d4:a8:b3:9d:ec:90: 62:64:8f:40:00:d1:02:6e:33:81:93:3b:4f:62:82: ea:94:b5:88:9a:ea:c3:25:62:60:7c:2a:c5:ca:f1: 6b:0d:4f:e2:9b:e2:62:e6:38:17:34:2a:03:d0:fd: 39:ee:85:d6:8c:d0:ac:2e:d7:80:09:49:0a:b4:34: a9:2b:19:e2:d0:fe:3c:39:a2:ac:75:00:de:dd:59: 0c:80:f8:71:f9:e6:a3:39:07:3f:7f:ac:bd:ae:16: c8:39:25:a1:34:85:cc:f9:2a:d9:db:f0:59:0f:dd: 14:06:97:8e:75:8b:41:cd:f0:c3:70:c1:f3:d4:72: 3d:8e:5f:02:ae:54:b9:85:a6:bb:44:f4:32:f1:96: 0d:bc:b5:2c:fa:d2:24:e1:14:28:9a:46:28:29:3b: 76:cc:9d:78:0c:f7:92:8d:a2:07:09:57:a2:a0:9f: dd:e5:94:80:31:80:26:18:7f:33:89:e1:a6:a5:88: a5:6e:07:a7:20:a4:e7:15:d2:10:84:75:55:d8:c3: 2d:ff:39:38:1f:49:85:64:f2:71:51:31:a6:6d:5b: 18:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:81:79:4D:15:F1:63:F7:DB:05:8C:23:6B:87:0C:54:D6:A8:0B:1F X509v3 Authority Key Identifier: keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cd:7f:85:54:0a:6c:38:10:38:d9:91:09:e2:43:4d:fb:af: 8c:27:be:37:a4:57:d2:f3:e8:95:f4:0c:da:20:3b:78:39:b8: 21:45:fb:5b:3b:17:28:19:9f:6f:4a:e0:58:de:59:98:ab:d8: 68:90:ba:e1:60:54:00:43:2a:3a:13:a4:cb:d8:20:9a:ac:47: d1:5f:8a:f7:e2:a7:dc:3f:06:bf:5f:0e:c7:c0:25:53:6d:28: a9:a5:ac:7f:0b:e5:de:c5:6d:5b:50:82:ad:44:e4:cb:55:c3: 4b:5f:13:41:57:c0:e8:76:6b:8c:26:70:3b:15:17:1a:24:d3: 03:5a:17:19:be:6a:6a:2e:c8:5f:89:59:53:c4:16:86:9a:71: 9c:f4:50:7b:ca:6e:96:d2:b5:e8:60:6b:bc:cf:f3:a5:d1:ce: e4:4c:f1:9a:35:09:2d:e6:f0:c3:3a:e2:79:2d:55:9d:a4:59: 5d:41:9b:6c:0e:f6:16:78:c8:53:67:e2:89:7f:69:ca:6d:1b: ab:cf:81:9f:36:6f:16:47:29:dd:73:50:41:aa:34:23:47:59: b3:05:86:28:61:0a:14:a4:35:a2:32:bf:6f:c8:31:e8:89:d2: 34:e4:0f:ab:91:7e:c6:21:72:b0:69:5e:ce:e8:ed:72:51:2b: f0:22:26:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyJ/+P9T7NRKMjlIgE+ehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YmJkNjAzNzRiYzIzZWQwN2QwMWMyNGU3Y2ZkOTE3OGI4 ZmVkMjEwHhcNMjUxMjIxMTIwMDQ4WhcNMjUxMjIyMTIwMDQ4WjAzMTEwLwYDVQQD EygwNDgxNzk0ZDE1ZjE2M2Y3ZGIwNThjMjM2Yjg3MGM1NGQ2YTgwYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArE4rMUpKtXrq4rmF2hc1w5arGx7g mYCHTKuNOW2vRBDssu23LNjUqLOd7JBiZI9AANECbjOBkztPYoLqlLWImurDJWJg fCrFyvFrDU/im+Ji5jgXNCoD0P057oXWjNCsLteACUkKtDSpKxni0P48OaKsdQDe 3VkMgPhx+eajOQc/f6y9rhbIOSWhNIXM+SrZ2/BZD90UBpeOdYtBzfDDcMHz1HI9 jl8CrlS5haa7RPQy8ZYNvLUs+tIk4RQomkYoKTt2zJ14DPeSjaIHCVeioJ/d5ZSA MYAmGH8zieGmpYilbgenIKTnFdIQhHVV2MMt/zk4H0mFZPJxUTGmbVsY/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASBeU0V8WP32wWMI2uHDFTWqAsfMB8GA1UdIwQY MBaAFBe71gN0vCPtB9AcJOfP2ReLj+0hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYt Y2RmODk2ODM1NDBlLzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy81YjczZDctZjFmNS00ZThmLWE0YjYtY2RmODk2ODM1NDBl LzEvRjd2V0EzUzhJLTBIMEJ3azU4X1pGNHVQN1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWs1/hVQK bDgQONmRCeJDTfuvjCe+N6RX0vPolfQM2iA7eDm4IUX7WzsXKBmfb0rgWN5ZmKvY aJC64WBUAEMqOhOky9ggmqxH0V+K9+Kn3D8Gv18Ox8AlU20oqaWsfwvl3sVtW1CC rUTky1XDS18TQVfA6HZrjCZwOxUXGiTTA1oXGb5qai7IX4lZU8QWhppxnPRQe8pu ltK16GBrvM/zpdHO5EzxmjUJLebwwzrieS1VnaRZXUGbbA72FnjIU2fiiX9pym0b q8+BnzZvFkcp3XNQQao0I0dZswWGKGEKFKQ1ojK/b8gx6InSNOQPq5F+xiFysGle zujtclEr8CImfA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:13:43 2025 by rpki-client