This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft File: m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json) Hash identifier: +/gZessj8Ocgh5ze5fJ89GU2h8uwIr0e9Jh1RQALVmc= Subject key identifier: 42:1F:18:06:CB:A7:70:BD:23:B8:4B:89:28:F5:1C:49:E2:BC:87:8E Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C Certificate issuer: /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c Certificate serial: 019AF19B9670557E9B3EE5C0CCA78343975E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft Manifest number: 15E2 Signing time: Sat 06 Dec 2025 03:01:36 +0000 Manifest this update: Sat 06 Dec 2025 03:01:36 +0000 Manifest next update: Sun 07 Dec 2025 03:01:36 +0000 Files and hashes: 1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: 2gOLwSyEy0BqPuYWg3qxyTVf/JRYkH5ptmCDFmwHvWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:96:70:55:7e:9b:3e:e5:c0:cc:a7:83:43:97:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c Validity Not Before: Dec 6 03:01:36 2025 GMT Not After : Dec 7 03:01:36 2025 GMT Subject: CN=421f1806cba770bd23b84b8928f51c49e2bc878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:94:5d:a9:4f:aa:a5:2d:78:9f:d8:96:b3:36: 29:89:5b:ed:15:2f:1e:03:12:31:3e:d9:5e:cc:29: 01:c8:f7:9e:b2:f9:27:e3:cb:81:ec:38:a3:df:b9: 16:c2:0a:47:6b:b7:99:30:b1:78:42:2d:9d:f6:30: da:2a:68:2d:5b:4d:e6:f1:80:1d:eb:cb:89:04:b4: 6e:63:f2:f4:ca:d5:d9:ce:64:86:16:90:5c:ce:f1: 4b:7b:a2:5b:6c:4b:b8:51:6b:16:78:27:c0:ff:cb: 1d:1f:42:27:29:11:49:d3:48:ff:f9:76:2d:eb:3a: b7:d4:af:f7:0c:37:39:fe:65:3c:23:1b:44:9a:89: b9:71:86:3b:54:1e:63:cb:39:ca:ee:2c:5d:1c:38: 4e:0c:7f:ce:79:07:57:30:ac:f1:92:82:ab:76:54: 10:5e:a9:d9:bf:67:b9:5d:b1:cf:c8:fd:b1:9d:6e: dc:bb:ef:dc:32:29:f9:66:a7:8d:95:4e:e6:77:1f: de:c8:eb:90:e3:61:39:d0:36:6f:bb:c5:d0:2c:b4: c6:c9:1c:e1:2d:b4:4e:9a:d5:82:f4:b6:a7:7d:3b: 36:6b:3c:16:47:fb:20:d8:ba:5e:ae:1e:17:be:ba: 3f:d8:09:dc:67:e8:b3:d2:ab:f1:a3:d2:b5:3a:b5: 9f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1F:18:06:CB:A7:70:BD:23:B8:4B:89:28:F5:1C:49:E2:BC:87:8E X509v3 Authority Key Identifier: keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:20:e6:25:0b:16:6d:62:cb:a7:71:38:bc:6c:4c:f4:f5:d9: bd:a4:af:08:4e:b7:7a:38:3a:90:f9:45:a0:9a:66:d6:64:0c: fb:ed:af:06:b9:42:b6:bb:47:62:00:b0:f5:b4:a6:c5:c5:58: e8:33:7f:d1:10:13:4b:18:e9:9e:e9:9d:24:12:d0:e4:70:94: a7:4b:58:04:57:f7:99:62:c4:f4:a6:a2:80:fc:3d:cc:84:92: 78:a0:04:9d:15:b9:01:51:93:12:3d:a6:6a:e3:09:c0:b0:be: 4c:8f:e9:94:a0:18:3f:34:02:ed:c2:06:95:09:68:c6:67:0a: e2:82:d9:44:3c:94:8c:62:94:21:ce:c7:69:5e:73:e9:78:04: 17:70:03:d9:4e:21:ac:47:f5:81:52:9a:9d:1d:3c:d5:c7:b5: 4d:9e:40:4f:e7:f9:b1:c4:11:88:74:79:98:ea:5c:f9:13:07: 27:d1:96:c0:d5:f7:1d:f4:f8:6e:67:0c:00:3c:f0:80:7b:55: ed:4a:a1:60:54:11:0c:a0:69:54:8f:59:37:4a:d2:e6:4e:dd: 49:14:b0:9e:72:98:6e:dd:3c:d8:bf:54:37:f3:b2:59:70:f5: 21:ff:4e:19:53:59:9b:ff:e9:53:21:3d:24:10:df:34:87:55: 5c:ae:ca:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5ZwVX6bPuXAzKeDQ5deMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZTE2Zjk5YzRlMzVmM2FlZGQ4MWIzNzkzOWRlOGMzYzRl OTFjMWMwHhcNMjUxMjA2MDMwMTM2WhcNMjUxMjA3MDMwMTM2WjAzMTEwLwYDVQQD Eyg0MjFmMTgwNmNiYTc3MGJkMjNiODRiODkyOGY1MWM0OWUyYmM4NzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZRdqU+qpS14n9iWszYpiVvtFS8e AxIxPtlezCkByPeesvkn48uB7Dij37kWwgpHa7eZMLF4Qi2d9jDaKmgtW03m8YAd 68uJBLRuY/L0ytXZzmSGFpBczvFLe6JbbEu4UWsWeCfA/8sdH0InKRFJ00j/+XYt 6zq31K/3DDc5/mU8IxtEmom5cYY7VB5jyznK7ixdHDhODH/OeQdXMKzxkoKrdlQQ XqnZv2e5XbHPyP2xnW7cu+/cMin5ZqeNlU7mdx/eyOuQ42E50DZvu8XQLLTGyRzh LbROmtWC9LanfTs2azwWR/sg2Lperh4Xvro/2AncZ+iz0qvxo9K1OrWfgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIfGAbLp3C9I7hLiSj1HEnivIeOMB8GA1UdIwQY MBaAFJvhb5nE41867dgbN5Od6MPE6RwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5Nzct MWJhODMwYTdjYzVjLzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS82YTA1M2UtNWMzZi00MzdiLTg5NzctMWJhODMwYTdjYzVj LzEvbS1Gdm1jVGpYenJ0MkJzM2s1M293OFRwSEJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyDmJQsW bWLLp3E4vGxM9PXZvaSvCE63ejg6kPlFoJpm1mQM++2vBrlCtrtHYgCw9bSmxcVY 6DN/0RATSxjpnumdJBLQ5HCUp0tYBFf3mWLE9KaigPw9zISSeKAEnRW5AVGTEj2m auMJwLC+TI/plKAYPzQC7cIGlQloxmcK4oLZRDyUjGKUIc7HaV5z6XgEF3AD2U4h rEf1gVKanR081ce1TZ5AT+f5scQRiHR5mOpc+RMHJ9GWwNX3HfT4bmcMADzwgHtV 7UqhYFQRDKBpVI9ZN0rS5k7dSRSwnnKYbt082L9UN/OyWXD1If9OGVNZm//pUyE9 JBDfNIdVXK7Kog== -----END CERTIFICATE-----Generated at Sat Dec 6 10:21:13 2025 by rpki-client