This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft File: Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft (raw, json) Hash identifier: BaFDc1+h7adVBVgs0/6rXjYVxtd5ObSLb09fAIqF7wI= Subject key identifier: E7:00:9D:9A:03:14:B6:74:DC:1D:6E:4A:80:A4:BE:ED:9F:97:CC:D9 Authority key identifier: 16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56 Certificate issuer: /CN=1686f7be9ba171c32746ab4ed20be882bd304356 Certificate serial: 019AF42E48E37F288EFCFB0B9433DB7E8227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft Manifest number: 04F2 Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl (hash: 0PXuh+RQx22EwJAbTw0L7HhrZFSs1sR1tBae8+4Kikg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:48:e3:7f:28:8e:fc:fb:0b:94:33:db:7e:82:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1686f7be9ba171c32746ab4ed20be882bd304356 Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=e7009d9a0314b674dc1d6e4a80a4beed9f97ccd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:2c:0c:d2:cc:d9:50:ad:4a:97:83:15:58: 6f:ed:b0:4c:08:10:57:3b:33:f7:2d:db:dd:80:77: bf:08:e9:61:22:a2:0c:90:d8:18:08:03:db:6c:f8: d1:6c:ad:0a:de:25:78:76:a9:55:6f:87:cc:3f:aa: de:84:96:a9:1f:7b:43:37:37:b5:36:19:0c:af:af: 5c:6a:0e:e6:03:78:62:a0:13:2d:e8:11:06:24:60: 6f:68:54:db:b6:7b:4e:4f:5e:cc:a1:66:f4:a9:63: 47:51:0c:6c:62:97:34:cc:01:f4:42:bf:66:1e:33: 7c:9d:f7:24:99:dc:f6:bf:bf:b2:48:c2:20:93:3d: 33:32:8e:6b:6e:ef:15:85:e2:cd:24:7e:cf:97:d1: 65:0d:50:80:b5:d0:9b:23:83:f1:0f:8f:f4:15:a4: e7:f4:1b:5c:c6:6c:28:04:bd:5f:c7:c8:92:e7:58: 9f:5c:95:92:08:e7:3b:ef:0e:04:ab:43:30:8b:e6: 0b:69:be:d2:50:f1:0d:da:7f:c3:61:43:06:b1:70: 8e:a6:bf:d1:a4:d1:3d:1a:0f:7b:ea:2f:98:e5:dc: 6c:37:aa:4e:03:f5:a2:16:fb:7e:cc:fd:7d:03:68: 2f:86:55:0a:e5:fe:5f:4d:01:66:e7:a5:f7:3e:56: c7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:00:9D:9A:03:14:B6:74:DC:1D:6E:4A:80:A4:BE:ED:9F:97:CC:D9 X509v3 Authority Key Identifier: keyid:16:86:F7:BE:9B:A1:71:C3:27:46:AB:4E:D2:0B:E8:82:BD:30:43:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fob3vpuhccMnRqtO0gvogr0wQ1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7ca808-c795-40ef-8a49-74a98cb66fff/1/Fob3vpuhccMnRqtO0gvogr0wQ1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ed:a9:3b:96:95:5d:73:2b:e4:24:66:a8:14:50:75:f3:86: f5:8a:92:72:3b:53:45:c4:61:f0:05:06:8b:61:bf:1b:04:3c: 97:01:bf:db:32:05:02:76:61:cd:80:e3:b6:e7:64:ed:61:9e: c4:81:66:86:1b:14:66:4b:c2:ab:88:7e:cd:34:ca:46:0d:1c: db:b8:5e:2a:62:83:91:88:ee:0a:04:89:52:8f:df:1b:7c:e6: 8f:43:08:51:57:4d:20:b5:da:9f:ac:61:8c:45:be:b2:69:6b: 04:8b:d8:30:73:b3:6d:1e:f9:6e:0f:f2:21:17:14:f2:c2:f3: 97:51:a3:a6:07:93:83:5d:72:eb:a7:17:19:99:63:49:e0:24: bc:75:b8:15:ea:b6:4d:c8:1c:9f:01:b4:3c:34:7f:88:68:f3: 48:67:9d:8c:44:2d:5f:c5:14:6b:13:25:81:7b:7f:eb:77:72: 43:c9:98:c8:a3:fc:cc:22:2b:ed:5d:d5:06:93:1f:49:18:0f: 88:ef:71:28:0b:eb:1c:5c:9a:79:90:03:23:a1:92:38:3a:4c: c6:da:70:d9:e5:81:48:98:60:bc:df:2a:b1:5f:1a:2a:fe:27: 7d:b7:39:20:b9:74:84:15:c1:77:4d:2f:c2:2c:d3:dd:58:29: 4f:73:c1:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkjjfyiO/PsLlDPbfoInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODZmN2JlOWJhMTcxYzMyNzQ2YWI0ZWQyMGJlODgyYmQz MDQzNTYwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD EyhlNzAwOWQ5YTAzMTRiNjc0ZGMxZDZlNGE4MGE0YmVlZDlmOTdjY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rosDNLM2VCtSpeDFVhv7bBMCBBX OzP3LdvdgHe/COlhIqIMkNgYCAPbbPjRbK0K3iV4dqlVb4fMP6rehJapH3tDNze1 NhkMr69cag7mA3hioBMt6BEGJGBvaFTbtntOT17MoWb0qWNHUQxsYpc0zAH0Qr9m HjN8nfckmdz2v7+ySMIgkz0zMo5rbu8VheLNJH7Pl9FlDVCAtdCbI4PxD4/0FaTn 9BtcxmwoBL1fx8iS51ifXJWSCOc77w4Eq0Mwi+YLab7SUPEN2n/DYUMGsXCOpr/R pNE9Gg976i+Y5dxsN6pOA/WiFvt+zP19A2gvhlUK5f5fTQFm56X3PlbHoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcAnZoDFLZ03B1uSoCkvu2fl8zZMB8GA1UdIwQY MBaAFBaG976boXHDJ0arTtIL6IK9MENWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9iM3ZwdWhjY01uUnF0TzBndm9ncjB3UTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83Y2E4MDgtYzc5NS00MGVmLThhNDkt NzRhOThjYjY2ZmZmLzEvRm9iM3ZwdWhjY01uUnF0TzBndm9ncjB3UTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83Y2E4MDgtYzc5NS00MGVmLThhNDktNzRhOThjYjY2ZmZm LzEvRm9iM3ZwdWhjY01uUnF0TzBndm9ncjB3UTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlu2pO5aV XXMr5CRmqBRQdfOG9YqScjtTRcRh8AUGi2G/GwQ8lwG/2zIFAnZhzYDjtudk7WGe xIFmhhsUZkvCq4h+zTTKRg0c27heKmKDkYjuCgSJUo/fG3zmj0MIUVdNILXan6xh jEW+smlrBIvYMHOzbR75bg/yIRcU8sLzl1GjpgeTg11y66cXGZljSeAkvHW4Feq2 TcgcnwG0PDR/iGjzSGedjEQtX8UUaxMlgXt/63dyQ8mYyKP8zCIr7V3VBpMfSRgP iO9xKAvrHFyaeZADI6GSODpMxtpw2eWBSJhgvN8qsV8aKv4nfbc5ILl0hBXBd00v wizT3VgpT3PBoA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:37:19 2025 by rpki-client