This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft File: FReBYmtMfEio3NUUxqdUn_tPY6o.mft (raw, json) Hash identifier: Ul6ipyxgQHKqQzQYcWetNLU9SwEvEhBjWGmN9BwXf3I= Subject key identifier: 19:58:F8:F0:06:1E:EA:DD:04:90:EF:FB:4D:E9:E5:A9:81:A6:F6:AA Authority key identifier: 15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA Certificate issuer: /CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa Certificate serial: 019B2B8A9E7313620BB7D4264771DE26196A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 09:01:03 +0000 Manifest this update: Wed 17 Dec 2025 09:01:03 +0000 Manifest next update: Thu 18 Dec 2025 09:01:03 +0000 Files and hashes: 1: FReBYmtMfEio3NUUxqdUn_tPY6o.crl (hash: wbCo1v3MxxdfBRJ3bukC0Ukprl7AJVTZNogcQa1LHG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:9e:73:13:62:0b:b7:d4:26:47:71:de:26:19:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151781626b4c7c48a8dcd514c6a7549ffb4f63aa Validity Not Before: Dec 17 09:01:03 2025 GMT Not After : Dec 18 09:01:03 2025 GMT Subject: CN=1958f8f0061eeadd0490effb4de9e5a981a6f6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9f:5f:ff:99:db:3d:e6:51:2c:1c:a8:ea:55: 24:6a:40:34:a8:54:4c:f4:bc:f2:6c:17:6a:d0:d9: 31:0d:99:b5:8c:be:97:5b:f7:03:3e:3a:c3:88:7b: b5:35:a4:5f:4d:e8:08:7e:98:ea:d5:36:fe:33:e0: bd:d5:a3:8f:88:27:29:63:4f:0c:89:55:d5:56:0e: 68:8d:4c:bf:70:31:fa:70:60:a9:bb:c3:2c:f4:72: 7a:11:78:d9:6b:13:12:1b:46:9c:a7:cc:41:11:8a: 16:e4:a8:85:68:85:20:85:8d:4d:c5:4e:47:0f:f3: 0b:f2:0d:28:2d:53:4d:0b:3d:bb:9d:98:1b:2e:53: f5:e7:e4:aa:e6:dc:6e:21:e3:e8:e0:2e:d1:3a:f0: 50:39:07:7c:ce:95:ee:d9:8d:0e:13:04:82:f0:aa: 1c:f1:a4:ad:79:97:82:32:b3:9c:41:d6:c6:66:f8: 28:76:2f:27:19:3e:c5:49:83:d4:fa:26:f3:2c:40: 24:d1:bb:9e:f3:4d:86:3b:7d:f8:d0:52:74:09:07: 9e:a3:aa:93:6f:44:c6:6d:2f:9e:18:b0:38:b8:32: 68:e7:4f:3e:cb:34:5a:83:7d:a7:d5:ac:df:1b:35: d8:bd:72:a6:63:72:b1:7f:4e:c2:f1:13:ba:bb:af: a0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:58:F8:F0:06:1E:EA:DD:04:90:EF:FB:4D:E9:E5:A9:81:A6:F6:AA X509v3 Authority Key Identifier: keyid:15:17:81:62:6B:4C:7C:48:A8:DC:D5:14:C6:A7:54:9F:FB:4F:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FReBYmtMfEio3NUUxqdUn_tPY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/bb1853-7b90-4a2d-869d-d152ab828dd5/1/FReBYmtMfEio3NUUxqdUn_tPY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:73:5c:df:9e:2b:c0:b9:97:26:21:d4:e5:f5:d7:e0:eb:18: 87:57:bb:e8:da:42:6c:d2:c6:7f:43:f3:a4:8f:e7:f6:a2:5b: 25:66:cd:1b:e7:76:18:d6:79:d8:91:37:3b:b6:88:59:0c:9c: 0f:39:20:53:c6:92:91:d7:4c:dc:e2:31:38:13:dd:24:39:8b: 54:08:ed:87:58:87:40:aa:c6:52:ac:c5:bc:a7:29:c7:0d:2f: 06:0f:78:f0:d6:30:9d:87:76:71:17:38:b3:46:7b:ca:74:f8: 2e:11:7b:d6:77:c2:89:dd:c7:35:7d:41:35:e8:12:b5:89:bc: 09:1f:c0:de:79:eb:f1:d2:cf:57:35:2e:c2:54:21:87:55:61: e6:1a:4a:4b:b1:2c:0f:2d:f4:72:15:d5:ec:fe:29:5c:48:b4: 47:5f:cf:27:20:95:e8:0c:2d:76:a5:e2:23:d5:92:52:da:e1: d2:7c:bc:a0:ff:d2:a0:21:ae:38:c5:05:d4:04:72:88:a8:44: 17:7e:96:d2:bf:e8:87:7b:ba:00:3a:dc:ae:45:e4:d2:c3:c2: 38:d7:f5:18:73:75:4a:47:8e:b1:d3:fc:34:9c:d5:45:ce:86: ee:66:36:c4:a8:71:81:7d:b9:90:1a:21:6e:75:bd:bd:73:9b: 43:17:f4:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrip5zE2ILt9QmR3HeJhlqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MTc4MTYyNmI0YzdjNDhhOGRjZDUxNGM2YTc1NDlmZmI0 ZjYzYWEwHhcNMjUxMjE3MDkwMTAzWhcNMjUxMjE4MDkwMTAzWjAzMTEwLwYDVQQD EygxOTU4ZjhmMDA2MWVlYWRkMDQ5MGVmZmI0ZGU5ZTVhOTgxYTZmNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyp9f/5nbPeZRLByo6lUkakA0qFRM 9LzybBdq0NkxDZm1jL6XW/cDPjrDiHu1NaRfTegIfpjq1Tb+M+C91aOPiCcpY08M iVXVVg5ojUy/cDH6cGCpu8Ms9HJ6EXjZaxMSG0acp8xBEYoW5KiFaIUghY1NxU5H D/ML8g0oLVNNCz27nZgbLlP15+Sq5txuIePo4C7ROvBQOQd8zpXu2Y0OEwSC8Koc 8aSteZeCMrOcQdbGZvgodi8nGT7FSYPU+ibzLEAk0bue802GO3340FJ0CQeeo6qT b0TGbS+eGLA4uDJo508+yzRag32n1azfGzXYvXKmY3Kxf07C8RO6u6+g6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlY+PAGHurdBJDv+03p5amBpvaqMB8GA1UdIwQY MBaAFBUXgWJrTHxIqNzVFManVJ/7T2OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQt ZDE1MmFiODI4ZGQ1LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iYjE4NTMtN2I5MC00YTJkLTg2OWQtZDE1MmFiODI4ZGQ1 LzEvRlJlQlltdE1mRWlvM05VVXhxZFVuX3RQWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnNc354r wLmXJiHU5fXX4OsYh1e76NpCbNLGf0PzpI/n9qJbJWbNG+d2GNZ52JE3O7aIWQyc DzkgU8aSkddM3OIxOBPdJDmLVAjth1iHQKrGUqzFvKcpxw0vBg948NYwnYd2cRc4 s0Z7ynT4LhF71nfCid3HNX1BNegStYm8CR/A3nnr8dLPVzUuwlQhh1Vh5hpKS7Es Dy30chXV7P4pXEi0R1/PJyCV6AwtdqXiI9WSUtrh0ny8oP/SoCGuOMUF1ARyiKhE F36W0r/oh3u6ADrcrkXk0sPCONf1GHN1SkeOsdP8NJzVRc6G7mY2xKhxgX25kBoh bnW9vXObQxf0EQ== -----END CERTIFICATE-----Generated at Wed Dec 17 17:02:51 2025 by rpki-client