This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json) Hash identifier: ezc8jpJX1Q6w0l7RAT/UonvjE7n4mjPU2mUhXonOQuY= Subject key identifier: 1B:B0:7C:C8:EC:0C:F8:4E:90:5C:F8:C3:64:58:01:01:03:F0:56:0D Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Certificate serial: 019AF208D8A147CE292CFFDD0F23708729BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: Wrv20LMjPDQfceFSKePVZPA3bKT3ZP5HmWwZQ+2B58A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d8:a1:47:ce:29:2c:ff:dd:0f:23:70:87:29:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=1bb07cc8ec0cf84e905cf8c36458010103f0560d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c4:27:48:5f:cb:e5:63:c0:93:48:cd:f0:f4: 2d:55:63:16:e4:7e:d4:11:b4:57:67:77:50:88:4d: ef:65:c2:84:6d:91:7e:88:a8:72:7b:03:4a:b3:4b: 6d:72:6a:33:bf:fd:2a:69:48:6b:d4:42:50:75:f2: 41:4d:7b:dd:36:8d:c6:6d:0a:1a:b0:19:36:ee:22: 75:18:66:bb:de:3e:cf:0c:8a:6e:65:67:19:7a:91: 1c:c2:97:26:55:0a:2d:2c:61:94:bf:de:dd:39:97: d2:77:f1:fb:56:27:2e:6a:c0:5a:d0:2d:43:93:a3: 05:fd:4e:6a:e2:fb:bc:43:29:be:92:74:17:26:13: b9:72:25:0d:ff:b2:58:df:3a:9b:3d:51:e7:6f:12: 0b:ce:cf:68:0f:ab:9e:bf:b4:9e:05:38:f5:1d:b4: a2:e8:fa:40:fc:8e:52:0d:be:c2:87:d9:bd:0f:d9: 9e:6f:de:e3:a2:c9:c4:c7:d9:c5:69:10:f2:81:f6: 62:92:bc:b9:d0:90:7e:a3:d1:c1:fa:52:4c:ad:7b: 09:66:bb:10:df:78:a8:e3:66:99:1e:c3:0f:c0:d4: 6a:85:71:23:3e:48:d0:17:ff:29:fe:d9:a5:02:94: 52:2e:6e:50:88:aa:ff:5f:e9:27:61:db:1c:3a:4c: a3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B0:7C:C8:EC:0C:F8:4E:90:5C:F8:C3:64:58:01:01:03:F0:56:0D X509v3 Authority Key Identifier: keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e4:b4:42:9f:3e:dd:02:32:db:d6:e7:62:8d:72:e5:8e:b5: 49:23:9d:84:a0:09:37:46:62:24:ac:aa:85:7c:16:69:d0:04: 2d:d8:83:14:4f:3c:28:66:37:b4:c0:89:44:a6:25:07:ca:50: fe:d0:aa:8c:96:aa:77:19:af:43:0c:be:5c:74:0f:cd:72:6a: 7c:7d:bc:69:e3:29:a6:86:08:06:3c:e3:18:05:cf:83:1a:30: bd:85:24:f8:4b:19:78:16:aa:38:1d:e9:54:52:dc:ee:5d:78: 88:7f:e0:ac:cf:23:f5:7d:a9:7b:01:7e:00:af:c0:0f:bc:4f: 1f:34:e6:07:96:90:6d:7c:08:e7:d9:f2:14:d1:b5:63:ce:c2: 31:41:51:61:5c:7b:8a:29:4e:1c:27:f0:24:cb:11:2c:20:5f: 50:ec:4c:29:0e:4c:54:57:28:a5:d5:42:ac:3f:b1:14:26:23: a6:ee:78:a1:34:0c:8f:c4:c3:0b:98:c3:cb:a7:b8:ca:a7:a9: 0f:77:b6:f1:bc:15:53:69:a9:42:71:05:6c:d1:3b:2e:cb:ab: ea:03:c4:d9:98:72:99:2b:00:55:9b:4e:3f:de:03:8a:3c:74: c9:17:9e:e1:97:4c:95:ac:10:96:44:b5:3b:73:bf:33:e8:0d: 4a:b2:46:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNihR84pLP/dDyNwhym9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGJjYWJlYzQzNzlmMmQzYjk0MTg3NDEwZDJlNmUwMzFh NzQxNzEwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EygxYmIwN2NjOGVjMGNmODRlOTA1Y2Y4YzM2NDU4MDEwMTAzZjA1NjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08QnSF/L5WPAk0jN8PQtVWMW5H7U EbRXZ3dQiE3vZcKEbZF+iKhyewNKs0ttcmozv/0qaUhr1EJQdfJBTXvdNo3GbQoa sBk27iJ1GGa73j7PDIpuZWcZepEcwpcmVQotLGGUv97dOZfSd/H7VicuasBa0C1D k6MF/U5q4vu8Qym+knQXJhO5ciUN/7JY3zqbPVHnbxILzs9oD6uev7SeBTj1HbSi 6PpA/I5SDb7Ch9m9D9meb97josnEx9nFaRDygfZikry50JB+o9HB+lJMrXsJZrsQ 33io42aZHsMPwNRqhXEjPkjQF/8p/tmlApRSLm5QiKr/X+knYdscOkyjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuwfMjsDPhOkFz4w2RYAQED8FYNMB8GA1UdIwQY MBaAFH0Lyr7EN58tO5QYdBDS5uAxp0FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjIt OTcxNWNkNjk4ZTMyLzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjItOTcxNWNkNjk4ZTMy LzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueS0Qp8+ 3QIy29bnYo1y5Y61SSOdhKAJN0ZiJKyqhXwWadAELdiDFE88KGY3tMCJRKYlB8pQ /tCqjJaqdxmvQwy+XHQPzXJqfH28aeMppoYIBjzjGAXPgxowvYUk+EsZeBaqOB3p VFLc7l14iH/grM8j9X2pewF+AK/AD7xPHzTmB5aQbXwI59nyFNG1Y87CMUFRYVx7 iilOHCfwJMsRLCBfUOxMKQ5MVFcopdVCrD+xFCYjpu54oTQMj8TDC5jDy6e4yqep D3e28bwVU2mpQnEFbNE7Lsur6gPE2ZhymSsAVZtOP94Dijx0yRee4ZdMlawQlkS1 O3O/M+gNSrJGzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:50 2025 by rpki-client