This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json) Hash identifier: IstbHAQ+sl4WBvRzFiLUOV0DWkTB0Z/7YKCP6CP1MwY= Subject key identifier: A9:3B:CB:70:B1:48:38:78:A8:AC:8D:33:AA:EC:37:6B:61:0E:FA:7C Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Certificate serial: 019AF31B8B1772ACF412C88FE3FD71F93226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft Manifest number: 0594 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: qNCqnMRjnrIWw71HYFVBP3u9nVdIuhBEBzlFUVQi07I=) 2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8b:17:72:ac:f4:12:c8:8f:e3:fd:71:f9:32:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=a93bcb70b1483878a8ac8d33aaec376b610efa7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1e:dc:f7:90:4a:19:3b:16:f2:a8:59:ef:19: 4c:55:cf:5d:99:fe:5f:59:e7:95:65:11:c6:d6:64: 38:cc:a8:61:6e:af:e6:6f:c6:0a:af:2f:88:08:cb: 74:03:ac:d4:94:40:6c:16:9b:ce:29:e9:21:f1:97: 36:c2:f9:25:de:e6:fa:2c:a1:f0:35:24:f3:21:f2: 87:1d:ad:c5:41:d8:c9:2d:d0:d4:ee:e9:27:ae:d0: bc:91:3f:07:78:a1:1c:43:03:ae:8f:51:39:54:9f: c5:21:a9:bc:84:e9:dc:94:1f:f4:85:e0:e3:1d:35: 04:71:56:f7:09:b1:25:38:79:f8:79:b8:8e:e7:40: 51:58:cc:ad:9a:74:36:44:f8:e2:bb:e4:84:0e:da: eb:33:5a:c1:76:57:46:32:82:ed:d3:15:1b:ed:1e: 73:4a:e7:3e:f1:6a:c5:c7:df:c7:cf:af:3d:5b:3b: 76:f9:69:18:5b:fa:7a:37:64:bc:7f:91:26:64:e3: 5e:79:25:99:6a:e1:7f:cc:c6:68:af:99:22:cb:a1: 08:f5:14:a2:1f:4e:fc:f8:20:ba:e4:0f:4e:58:9e: 25:12:07:58:b4:c6:be:12:55:92:8d:9f:69:91:06: 63:3b:69:08:24:2e:08:2d:9f:7d:3e:ea:90:a8:fb: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3B:CB:70:B1:48:38:78:A8:AC:8D:33:AA:EC:37:6B:61:0E:FA:7C X509v3 Authority Key Identifier: keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:77:41:4d:1f:42:c5:54:5a:ef:2d:0b:83:12:53:bf:6f:05: 61:55:6a:18:78:26:49:b6:1d:41:b5:4e:85:5f:16:6b:bd:93: 0a:71:c4:7f:3f:61:fe:77:b8:12:1f:11:54:3c:2b:c3:21:79: 31:48:70:b0:70:41:23:05:b8:e2:67:94:c7:c8:52:b1:95:d3: 43:b2:a0:be:61:e3:90:d4:aa:f4:fc:80:d9:9c:18:41:51:37: 30:72:8b:97:74:4a:86:23:38:57:3a:48:22:0e:b3:72:3a:a2: 23:ab:7a:a8:2d:2d:8a:e2:70:e1:bf:13:d0:71:6c:40:78:2c: 7c:b6:fc:0c:9f:7a:b3:70:01:26:32:f7:43:f5:0b:e7:d0:0b: bd:54:2f:79:d1:1b:a7:af:75:1f:49:45:0e:e8:e8:a1:a0:d9: 2d:cd:1f:3d:3f:d1:56:ab:28:9a:19:de:3f:b3:17:d3:aa:f6: 2e:53:a3:04:e7:66:cd:7f:40:cb:46:ca:cd:9c:ba:0b:ee:af: 50:c7:a4:92:02:34:29:2f:ac:97:21:59:cc:f3:6b:25:d1:49: aa:60:f4:12:ef:7b:3d:b5:c4:1e:aa:d1:21:52:23:85:bc:0a: ea:39:c6:24:8d:53:04:6d:21:df:0a:f0:6a:c2:68:bb:d8:28: 08:e2:b2:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4sXcqz0EsiP4/1x+TImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl MTE5ZjkwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EyhhOTNiY2I3MGIxNDgzODc4YThhYzhkMzNhYWVjMzc2YjYxMGVmYTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmB7c95BKGTsW8qhZ7xlMVc9dmf5f WeeVZRHG1mQ4zKhhbq/mb8YKry+ICMt0A6zUlEBsFpvOKekh8Zc2wvkl3ub6LKHw NSTzIfKHHa3FQdjJLdDU7uknrtC8kT8HeKEcQwOuj1E5VJ/FIam8hOnclB/0heDj HTUEcVb3CbElOHn4ebiO50BRWMytmnQ2RPjiu+SEDtrrM1rBdldGMoLt0xUb7R5z Suc+8WrFx9/Hz689Wzt2+WkYW/p6N2S8f5EmZONeeSWZauF/zMZor5kiy6EI9RSi H078+CC65A9OWJ4lEgdYtMa+ElWSjZ9pkQZjO2kIJC4ILZ99PuqQqPu8sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKk7y3CxSDh4qKyNM6rsN2thDvp8MB8GA1UdIwQY MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3 LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn3dBTR9C xVRa7y0LgxJTv28FYVVqGHgmSbYdQbVOhV8Wa72TCnHEfz9h/ne4Eh8RVDwrwyF5 MUhwsHBBIwW44meUx8hSsZXTQ7KgvmHjkNSq9PyA2ZwYQVE3MHKLl3RKhiM4VzpI Ig6zcjqiI6t6qC0tiuJw4b8T0HFsQHgsfLb8DJ96s3ABJjL3Q/UL59ALvVQvedEb p691H0lFDujooaDZLc0fPT/RVqsomhneP7MX06r2LlOjBOdmzX9Ay0bKzZy6C+6v UMekkgI0KS+slyFZzPNrJdFJqmD0Eu97PbXEHqrRIVIjhbwK6jnGJI1TBG0h3wrw asJou9goCOKyzg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:26:26 2025 by rpki-client