This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json) Hash identifier: LMXqhYFUhunF/LuZwcerqV+H0x06ZxYriEObPmBTBF4= Subject key identifier: 54:A0:B8:E6:F0:36:58:78:D7:0D:34:62:71:6C:03:1F:76:41:7A:DF Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Certificate serial: 019AF19B943CE0D7AFFD6DAC25814943C995 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: +pdVeY04iQfYMm5Y6gEm8MJwkIU5yak44r993j5nH1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:94:3c:e0:d7:af:fd:6d:ac:25:81:49:43:c9:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=54a0b8e6f0365878d70d3462716c031f76417adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:39:66:f3:2f:b0:df:f6:38:d5:de:6a:6a: 84:b5:62:b6:45:50:68:4a:59:70:37:d2:ac:0e:bb: ce:dc:26:b3:fe:cb:8a:a2:57:8d:af:2b:10:fe:2b: 45:50:1a:05:e1:d4:08:7d:44:6f:c5:5d:53:8a:57: 07:12:db:b4:02:fe:13:51:00:57:71:c6:2b:8c:e0: 43:50:f5:44:46:95:3a:ad:10:9b:aa:8c:cb:76:4f: e7:21:7f:8c:b9:35:4d:12:4b:71:e0:a7:ef:e3:96: 55:b4:fa:54:f8:86:0d:db:b5:a6:92:1e:a7:6d:01: a5:ad:50:85:99:e1:e7:80:5f:ec:cc:c8:f5:b8:23: 4f:6f:89:cd:ef:b8:3d:bf:72:82:f1:d3:f4:ce:8a: 50:df:14:4e:f0:5b:02:17:f0:a5:03:29:f0:eb:2c: 9f:61:dd:cc:05:34:f5:cf:a5:55:e9:33:e0:40:67: 81:86:e9:7c:57:b0:96:b1:43:f9:64:cb:c0:5e:65: 1c:80:47:69:5e:6e:60:53:41:e8:10:cd:47:06:54: 19:0d:72:71:e8:52:69:08:a1:d7:30:71:ed:14:51: 1d:60:1a:d4:f5:65:95:8b:62:6e:33:a5:ee:76:64: d0:38:a7:96:07:fb:40:0e:28:60:40:1d:2a:d1:84: 47:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A0:B8:E6:F0:36:58:78:D7:0D:34:62:71:6C:03:1F:76:41:7A:DF X509v3 Authority Key Identifier: keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:67:4f:4c:02:bf:70:a3:e9:f3:07:a1:03:8a:cd:02:d0:00: 06:6a:c3:65:90:c9:10:dc:25:79:ee:93:12:f1:82:c7:94:b5: 44:ef:a7:4d:73:d2:14:55:a5:40:92:f1:19:55:64:9c:cf:85: 89:61:75:cb:fc:2b:7c:3f:fe:e1:2b:5c:56:57:31:50:71:61: f6:fb:4a:d9:04:2a:33:4c:36:fb:8a:15:de:5d:b1:ad:39:2f: 57:c8:9e:6c:93:a9:10:a4:ea:9d:b8:63:03:04:74:89:fe:4f: 2a:15:69:9e:27:f6:b1:a9:cb:33:62:1c:8f:1b:94:10:55:a7: 3f:50:19:4d:ae:3d:e5:d7:a6:d3:fb:ae:9a:a4:55:40:21:1e: da:55:f0:85:cc:59:42:8b:9c:06:ff:d5:7c:17:13:48:8c:7b: 20:97:ae:f9:97:c5:df:26:52:1d:15:c3:3a:43:f2:aa:eb:97: 6d:43:47:56:c9:1d:6c:aa:bb:00:13:33:69:3f:50:1d:6e:8e: ca:5e:77:aa:80:a8:a0:fc:99:40:85:44:a3:5c:d4:11:c1:af: 73:c0:77:47:96:4e:e6:d3:c7:9a:42:42:b6:08:ff:95:85:90: b3:1b:c3:06:cc:57:51:47:31:51:7e:07:cd:d2:00:75:8e:eb: 4a:88:34:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5Q84Nev/W2sJYFJQ8mVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj MTljMGQwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg1NGEwYjhlNmYwMzY1ODc4ZDcwZDM0NjI3MTZjMDMxZjc2NDE3YWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5k5ZvMvsN/2ONXeamqEtWK2RVBo SllwN9KsDrvO3Caz/suKoleNrysQ/itFUBoF4dQIfURvxV1TilcHEtu0Av4TUQBX ccYrjOBDUPVERpU6rRCbqozLdk/nIX+MuTVNEktx4Kfv45ZVtPpU+IYN27Wmkh6n bQGlrVCFmeHngF/szMj1uCNPb4nN77g9v3KC8dP0zopQ3xRO8FsCF/ClAynw6yyf Yd3MBTT1z6VV6TPgQGeBhul8V7CWsUP5ZMvAXmUcgEdpXm5gU0HoEM1HBlQZDXJx 6FJpCKHXMHHtFFEdYBrU9WWVi2JuM6XudmTQOKeWB/tADihgQB0q0YRHEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFSguObwNlh41w00YnFsAx92QXrfMB8GA1UdIwQY MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt OGI4YjJhYzU2YzliLzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWdPTAK/ cKPp8wehA4rNAtAABmrDZZDJENwlee6TEvGCx5S1RO+nTXPSFFWlQJLxGVVknM+F iWF1y/wrfD/+4StcVlcxUHFh9vtK2QQqM0w2+4oV3l2xrTkvV8iebJOpEKTqnbhj AwR0if5PKhVpnif2sanLM2IcjxuUEFWnP1AZTa495dem0/uumqRVQCEe2lXwhcxZ QoucBv/VfBcTSIx7IJeu+ZfF3yZSHRXDOkPyquuXbUNHVskdbKq7ABMzaT9QHW6O yl53qoCooPyZQIVEo1zUEcGvc8B3R5ZO5tPHmkJCtgj/lYWQsxvDBsxXUUcxUX4H zdIAdY7rSog0Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:24 2025 by rpki-client