This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json) Hash identifier: BMAbQPzmzQc4oLiZ0oIHIJMB8Q05xSZY4zH8LbLnrQU= Subject key identifier: FF:C6:28:DC:58:B1:73:96:8D:3A:76:39:CF:F3:46:EA:67:61:DB:57 Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa Certificate serial: 019AF19AF3BFA76C3141A0646CFC08A3455A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: hc95iDLMe6iz72B/jmMVTJoMi43Fp3Qzt3Z3JNTe6pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f3:bf:a7:6c:31:41:a0:64:6c:fc:08:a3:45:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=ffc628dc58b173968d3a7639cff346ea6761db57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8c:f6:91:ff:1b:d9:a5:2f:1f:f6:07:26:14: 1f:52:d6:71:12:84:30:b7:d2:dc:19:86:2c:a8:23: 80:cc:98:fe:0e:8d:96:e1:b6:d2:b1:a0:34:77:70: ac:22:67:50:61:a1:0a:1d:12:4c:c3:e8:56:5b:f6: 20:d4:ab:34:c1:2a:bf:3a:b6:80:fe:64:71:03:61: 61:29:31:0a:6d:98:c7:0f:6f:5e:08:f4:22:54:49: a1:25:d3:88:93:c1:ca:15:6d:80:1c:d1:7d:a7:24: d4:37:1e:5d:db:14:18:f0:49:07:b0:40:30:52:53: b1:8a:b2:53:4c:26:bc:40:3a:3f:d9:53:cb:ce:8e: c8:9c:e7:73:b2:98:bf:bf:35:96:24:34:a8:28:f6: ff:12:60:d4:70:11:bc:aa:02:82:67:1b:b8:19:b0: 2d:58:2f:51:ee:49:ae:df:f8:ad:25:d0:3b:ef:5b: 39:e7:77:ae:45:ba:10:d4:37:48:40:4e:b8:1e:bd: 0f:b0:9b:11:89:4a:37:79:e7:6f:5c:5b:d9:5e:24: b5:d4:68:97:b8:2a:1a:de:cf:e4:9d:2a:5a:d9:73: 7d:49:3f:54:3c:51:c2:3f:f1:6e:63:42:98:33:74: 4b:76:a3:4b:78:4f:61:c9:6f:ca:61:05:ca:fd:38: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C6:28:DC:58:B1:73:96:8D:3A:76:39:CF:F3:46:EA:67:61:DB:57 X509v3 Authority Key Identifier: keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:62:39:c3:50:a1:5a:f5:a0:df:e8:2e:f1:be:67:d8:4c:ec: 76:3e:eb:a7:2e:58:db:92:6e:cd:4c:2f:b7:0f:61:d7:82:c4: b0:3f:c3:a6:82:82:46:4b:27:9d:15:4f:6b:77:cf:01:81:9a: 21:8a:dc:cd:8a:9b:cf:e4:cf:f7:0c:af:0f:d8:b4:b1:7d:93: af:98:98:d6:7a:51:a4:6b:51:a4:df:68:c5:3b:80:4f:ae:15: a9:88:f7:87:84:69:07:15:a9:d4:0b:51:72:33:52:77:f8:8c: 66:8b:af:1c:d7:d9:53:ef:28:06:d7:77:c9:fa:a3:86:cf:9b: ff:67:61:ea:1a:65:80:cc:45:2f:66:6a:91:fa:bd:13:25:3c: d5:28:78:f9:09:86:f0:71:f1:c4:63:30:bf:12:30:1d:3a:3d: db:fc:e9:8d:2d:99:e5:12:b7:eb:da:31:ca:5b:4c:5f:32:7f: 43:f5:d6:60:48:47:4d:af:f7:f0:c0:42:e7:cc:38:b0:67:11: 27:97:05:9b:47:14:01:74:57:45:b4:50:93:88:4d:38:21:a7: 80:93:44:76:cd:b5:92:3c:72:45:ee:e5:e3:6c:82:10:ce:9a: 69:5b:84:7c:67:3f:a5:1a:b6:2b:10:27:3c:1f:c9:73:be:8a: a3:d2:ed:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvO/p2wxQaBkbPwIo0VaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0 ZjYzYWEwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EyhmZmM2MjhkYzU4YjE3Mzk2OGQzYTc2MzljZmYzNDZlYTY3NjFkYjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Iz2kf8b2aUvH/YHJhQfUtZxEoQw t9LcGYYsqCOAzJj+Do2W4bbSsaA0d3CsImdQYaEKHRJMw+hWW/Yg1Ks0wSq/OraA /mRxA2FhKTEKbZjHD29eCPQiVEmhJdOIk8HKFW2AHNF9pyTUNx5d2xQY8EkHsEAw UlOxirJTTCa8QDo/2VPLzo7InOdzspi/vzWWJDSoKPb/EmDUcBG8qgKCZxu4GbAt WC9R7kmu3/itJdA771s553euRboQ1DdIQE64Hr0PsJsRiUo3eedvXFvZXiS11GiX uCoa3s/knSpa2XN9ST9UPFHCP/FuY0KYM3RLdqNLeE9hyW/KYQXK/Tia6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/GKNxYsXOWjTp2Oc/zRupnYdtXMB8GA1UdIwQY MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1 LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWI5w1Ch WvWg3+gu8b5n2Ezsdj7rpy5Y25JuzUwvtw9h14LEsD/DpoKCRksnnRVPa3fPAYGa IYrczYqbz+TP9wyvD9i0sX2Tr5iY1npRpGtRpN9oxTuAT64VqYj3h4RpBxWp1AtR cjNSd/iMZouvHNfZU+8oBtd3yfqjhs+b/2dh6hplgMxFL2Zqkfq9EyU81Sh4+QmG 8HHxxGMwvxIwHTo92/zpjS2Z5RK369oxyltMXzJ/Q/XWYEhHTa/38MBC58w4sGcR J5cFm0cUAXRXRbRQk4hNOCGngJNEds21kjxyRe7l42yCEM6aaVuEfGc/pRq2KxAn PB/Jc76Ko9Lt7w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:03 2025 by rpki-client