This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json) Hash identifier: gJokv9wsDk9dSHyZbBr5XexPYS3tba0DbOaJv4pjvv8= Subject key identifier: 28:D3:4D:54:29:A5:EC:1A:F5:54:50:CB:17:6F:09:79:0B:FB:78:96 Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019B4438CAD81B27EC9F535F6304407513C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft Manifest number: 171C Signing time: Mon 22 Dec 2025 04:02:11 +0000 Manifest this update: Mon 22 Dec 2025 04:02:11 +0000 Manifest next update: Tue 23 Dec 2025 04:02:11 +0000 Files and hashes: 1: T65vqqQCj0Js7DJ85sBppVKxPcU.roa (hash: FL22UNhyCGLfnbVMSxPZxrBCfuIiaLb00z7Ca3ye/lo=) 2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: kkV13FMgIV2bnHcyDf/gpvCWvPkDsuO09abZvshc0fU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:ca:d8:1b:27:ec:9f:53:5f:63:04:40:75:13:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Dec 22 04:02:11 2025 GMT Not After : Dec 23 04:02:11 2025 GMT Subject: CN=28d34d5429a5ec1af55450cb176f09790bfb7896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:06:0b:65:e8:13:3f:3d:26:e9:49:39:f7: 18:b0:f0:a1:5d:e0:f5:a1:f2:d5:e6:35:8a:41:14: ec:b0:aa:ca:eb:ea:d0:9e:36:9b:5e:7c:1a:35:89: a5:00:16:ef:89:f9:a3:65:b8:d5:f1:ed:27:72:75: b0:76:23:25:36:32:dc:90:01:27:02:12:fd:72:be: 4a:06:fa:c3:23:f2:3f:e1:e5:3f:39:2e:b1:4d:85: 13:b5:ad:6a:ee:0e:54:fa:a2:23:ae:0e:6f:58:6a: 6d:2e:0b:14:d0:ed:9c:1a:9b:13:01:0b:d0:a5:80: 3c:a6:b3:c2:68:26:29:eb:97:d6:67:42:59:63:98: 24:1e:9f:7e:3b:1d:7f:61:23:1a:26:32:4c:79:d6: 66:1b:12:48:df:43:65:d9:5c:67:6f:2a:65:4e:85: e4:66:7a:a7:de:e2:df:40:b1:6b:12:00:9f:73:29: 7a:e4:6a:08:5b:00:83:6f:bb:4c:db:12:5a:a1:55: 86:bf:49:49:b7:5a:75:bb:e7:df:e7:5b:33:07:6c: 3f:92:44:ac:f7:27:94:56:47:ab:90:25:ff:86:27: 6e:59:4d:2e:cc:d0:89:56:06:51:0e:53:64:bf:b6: 28:80:dc:02:5e:3c:8b:fc:5b:d9:63:b0:d3:75:2c: ba:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:D3:4D:54:29:A5:EC:1A:F5:54:50:CB:17:6F:09:79:0B:FB:78:96 X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:a8:23:e2:d4:e1:e5:95:a9:f1:3b:d8:76:2a:14:84:64:9c: fd:21:f6:c8:f1:6d:06:44:63:77:32:f9:0f:11:61:24:12:77: 26:b9:ac:79:79:be:37:06:62:82:3e:88:ad:8e:c2:26:46:e3: 66:85:ce:b7:1d:eb:c3:19:c6:f7:c4:7d:d1:49:93:52:61:f2: bc:c7:aa:2e:8f:9b:b7:51:38:1d:ad:6c:6b:b8:f2:22:05:81: 05:c8:69:34:3a:1b:11:ee:be:3e:1f:66:2a:dc:b4:7a:fd:26: b8:87:2a:ad:c2:7b:db:6c:c0:aa:f5:04:f8:49:56:1c:be:1c: 73:8c:ec:35:18:2b:e3:40:52:b0:a5:1b:95:d1:1b:a3:07:2f: ea:ef:e5:73:1b:f5:67:ae:2f:0d:c3:9c:c6:0a:e1:e8:ac:bc: d7:56:80:d6:89:12:4b:5c:ed:f9:82:24:6f:aa:2f:32:d2:5d: 60:2f:74:61:82:8e:21:0c:2b:de:a3:28:60:c0:5a:7e:a1:54: 52:11:7d:00:bb:ee:c5:8b:73:47:ac:ae:b2:90:bf:16:a6:39: cf:7a:ff:50:d9:0f:0b:90:92:4b:fe:18:5d:b7:66:c8:f8:20: 88:0c:77:34:41:3d:f6:82:a6:e4:3e:5a:eb:28:ae:c6:47:2d: a7:28:da:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOMrYGyfsn1NfYwRAdRPJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjUxMjIyMDQwMjExWhcNMjUxMjIzMDQwMjExWjAzMTEwLwYDVQQD EygyOGQzNGQ1NDI5YTVlYzFhZjU1NDUwY2IxNzZmMDk3OTBiZmI3ODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukAGC2XoEz89JulJOfcYsPChXeD1 ofLV5jWKQRTssKrK6+rQnjabXnwaNYmlABbvifmjZbjV8e0ncnWwdiMlNjLckAEn AhL9cr5KBvrDI/I/4eU/OS6xTYUTta1q7g5U+qIjrg5vWGptLgsU0O2cGpsTAQvQ pYA8prPCaCYp65fWZ0JZY5gkHp9+Ox1/YSMaJjJMedZmGxJI30Nl2VxnbyplToXk Znqn3uLfQLFrEgCfcyl65GoIWwCDb7tM2xJaoVWGv0lJt1p1u+ff51szB2w/kkSs 9yeUVkerkCX/hiduWU0uzNCJVgZRDlNkv7YogNwCXjyL/FvZY7DTdSy65wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjTTVQppewa9VRQyxdvCXkL+3iWMB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKKgj4tTh 5ZWp8TvYdioUhGSc/SH2yPFtBkRjdzL5DxFhJBJ3JrmseXm+NwZigj6IrY7CJkbj ZoXOtx3rwxnG98R90UmTUmHyvMeqLo+bt1E4Ha1sa7jyIgWBBchpNDobEe6+Ph9m Kty0ev0muIcqrcJ722zAqvUE+ElWHL4cc4zsNRgr40BSsKUbldEbowcv6u/lcxv1 Z64vDcOcxgrh6Ky811aA1okSS1zt+YIkb6ovMtJdYC90YYKOIQwr3qMoYMBafqFU UhF9ALvuxYtzR6yuspC/FqY5z3r/UNkPC5CSS/4YXbdmyPggiAx3NEE99oKm5D5a 6yiuxkctpyjaQA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:30 2025 by rpki-client