This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json) Hash identifier: gbrPUkqeAANkbI8JJ8UwfVsZKFiYxAdleiaFFIvMj+Q= Subject key identifier: 1C:96:1E:15:C3:74:15:F5:AA:FF:60:19:18:E5:F0:12:10:10:B5:17 Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Certificate serial: 019B31C371C2A1346858B621C93534E91A06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft Manifest number: 1712 Signing time: Thu 18 Dec 2025 14:00:50 +0000 Manifest this update: Thu 18 Dec 2025 14:00:50 +0000 Manifest next update: Fri 19 Dec 2025 14:00:50 +0000 Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: ER8gFpW8K1M5llpvazKpPsLgFZUAqcFcamTvcIm12v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:71:c2:a1:34:68:58:b6:21:c9:35:34:e9:1a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Validity Not Before: Dec 18 14:00:50 2025 GMT Not After : Dec 19 14:00:50 2025 GMT Subject: CN=1c961e15c37415f5aaff601918e5f0121010b517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:93:8d:4f:b5:a9:a7:a9:89:aa:1c:86:e7: e8:7f:7a:b3:bf:3a:01:f1:1a:9c:50:62:b7:0e:82: 32:a4:76:b2:f3:1d:05:88:c8:0c:94:01:01:db:0e: 74:bd:40:03:af:5d:16:24:58:d9:a4:35:9e:ba:4a: 77:ed:c9:58:cc:ed:e1:cd:4e:f3:5f:45:9d:d8:d6: 3e:d5:f2:4b:24:ed:11:c4:a1:e0:a3:c3:fe:f4:27: e6:5a:d7:c5:81:76:53:26:ea:63:52:b2:06:44:9c: 95:66:e2:38:b4:8e:34:77:67:0a:6e:01:ca:e2:28: 66:f6:4f:be:65:56:e9:08:09:3e:d7:5e:8d:d3:18: 68:26:02:0a:8b:48:9e:86:8b:6a:cc:04:8e:c0:e8: 39:b5:3c:99:57:75:03:d5:90:c4:19:61:37:4e:d8: d6:40:6d:ca:7b:a5:44:87:af:b9:69:dd:d6:f9:b4: b8:af:de:be:31:91:fe:76:11:71:ed:fa:1f:de:9b: df:69:94:b1:39:9e:1a:19:98:77:cc:8b:e2:91:1f: 4c:3e:60:0d:44:79:4a:fe:2b:3c:86:56:15:80:70: e4:54:8d:73:1a:d6:dc:7b:30:82:c2:27:d0:d1:1e: 0f:74:21:cb:72:10:29:74:c1:8f:dd:46:11:c1:5a: 9a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:96:1E:15:C3:74:15:F5:AA:FF:60:19:18:E5:F0:12:10:10:B5:17 X509v3 Authority Key Identifier: keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0f:09:43:04:92:15:5e:f2:99:58:93:98:24:ba:66:22:d1: 76:ba:48:15:d2:7f:3c:ea:6d:0e:c2:55:60:33:8e:38:f9:01: 86:86:05:14:8d:bb:50:fe:3e:93:74:d6:59:49:47:47:96:3d: 41:62:8c:1c:44:8f:43:df:20:a0:d5:62:7e:fd:5f:b0:ed:18: 1a:e6:9d:e7:91:71:37:af:25:b0:45:c4:f6:f3:65:f5:fe:3e: cd:3c:e3:fb:d7:4f:12:db:be:dd:54:16:77:dd:7a:3f:f2:9b: 63:e7:13:43:d2:0b:25:fa:09:50:e1:3b:fc:5f:aa:29:5d:4d: b0:ec:d3:d8:41:ac:68:13:4d:87:b0:7c:15:b3:c0:c9:10:c8: 97:f4:4e:67:7e:b9:55:52:6f:ec:22:9d:b9:22:9d:48:35:ae: 7e:b0:ac:45:ba:9c:21:78:0e:d0:51:7f:14:44:5e:13:b8:ba: ad:2c:7a:0b:90:a1:02:18:b5:91:01:2c:e2:b0:d4:d7:10:03: e2:97:73:2a:ab:83:d2:e8:c2:bf:01:25:63:28:51:7e:3b:a8: c1:69:cc:31:03:3c:e9:7d:0a:c2:71:4e:d4:87:ea:1a:a9:54: 42:bf:91:61:eb:1a:fd:b5:68:0e:a4:9b:ae:2d:03:d3:29:b0: 10:95:23:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw3HCoTRoWLYhyTU06RoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGJjYWJlYzQzNzlmMmQzYjk0MTg3NDEwZDJlNmUwMzFh NzQxNzEwHhcNMjUxMjE4MTQwMDUwWhcNMjUxMjE5MTQwMDUwWjAzMTEwLwYDVQQD EygxYzk2MWUxNWMzNzQxNWY1YWFmZjYwMTkxOGU1ZjAxMjEwMTBiNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+OTjU+1qaepiaochufof3qzvzoB 8RqcUGK3DoIypHay8x0FiMgMlAEB2w50vUADr10WJFjZpDWeukp37clYzO3hzU7z X0Wd2NY+1fJLJO0RxKHgo8P+9CfmWtfFgXZTJupjUrIGRJyVZuI4tI40d2cKbgHK 4ihm9k++ZVbpCAk+116N0xhoJgIKi0iehotqzASOwOg5tTyZV3UD1ZDEGWE3TtjW QG3Ke6VEh6+5ad3W+bS4r96+MZH+dhFx7fof3pvfaZSxOZ4aGZh3zIvikR9MPmAN RHlK/is8hlYVgHDkVI1zGtbcezCCwifQ0R4PdCHLchApdMGP3UYRwVqaIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByWHhXDdBX1qv9gGRjl8BIQELUXMB8GA1UdIwQY MBaAFH0Lyr7EN58tO5QYdBDS5uAxp0FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjIt OTcxNWNkNjk4ZTMyLzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjItOTcxNWNkNjk4ZTMy LzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvg8JQwSS FV7ymViTmCS6ZiLRdrpIFdJ/POptDsJVYDOOOPkBhoYFFI27UP4+k3TWWUlHR5Y9 QWKMHESPQ98goNVifv1fsO0YGuad55FxN68lsEXE9vNl9f4+zTzj+9dPEtu+3VQW d916P/KbY+cTQ9ILJfoJUOE7/F+qKV1NsOzT2EGsaBNNh7B8FbPAyRDIl/ROZ365 VVJv7CKduSKdSDWufrCsRbqcIXgO0FF/FEReE7i6rSx6C5ChAhi1kQEs4rDU1xAD 4pdzKquD0ujCvwElYyhRfjuowWnMMQM86X0KwnFO1IfqGqlUQr+RYesa/bVoDqSb ri0D0ymwEJUjHA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:17:35 2025 by rpki-client