This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json) Hash identifier: 9iLvsCEGRAOftXvxf4u6SZivc39EzxMFF/phMdW9lGU= Subject key identifier: 15:BF:BF:5A:3B:D6:66:40:8C:18:95:90:39:7A:D1:E2:72:05:31:A6 Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424 Certificate serial: 019AF0885B973D6007CCF000515071244F65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft Manifest number: 14B6 Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: I6dIAD+YKR9pmf29iTwEYwLG+ld5aWvQW3o2t7lBWN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5b:97:3d:60:07:cc:f0:00:51:50:71:24:4f:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424 Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=15bfbf5a3bd666408c189590397ad1e2720531a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:27:86:21:db:12:6b:9f:8b:46:2d:71:ad:25: 0a:1d:52:c8:c4:28:78:67:d2:c0:d8:09:3f:8a:b7: 4a:91:f3:16:6d:a2:b7:f2:54:71:a3:7d:8c:1e:3f: 04:67:9d:4e:5a:bb:d1:1a:74:cb:2a:85:61:d9:f1: d3:25:96:68:8f:03:49:e7:6c:37:72:48:bf:63:0c: a7:36:7a:eb:17:95:80:a2:4a:f9:87:a1:c1:f3:74: 95:8a:da:34:1c:1d:9a:5d:05:ac:f0:1b:06:36:08: 34:ac:88:44:d9:33:19:b5:e1:b8:24:48:83:87:76: 8f:30:10:fd:57:b6:5a:86:a9:1d:4b:c1:d2:27:ff: e7:fd:cc:e9:a1:2a:4d:a9:bc:16:9e:9e:e5:04:14: 5a:16:2a:c7:4a:cb:59:2b:7d:99:cc:2b:b4:6e:98: 72:3b:e6:45:86:4e:cc:ed:7c:6b:4c:d1:18:8b:a9: 5a:c4:1c:f4:51:a6:aa:d4:98:8d:65:b9:be:d0:86: fd:0b:b3:4f:45:f4:86:78:44:d7:f0:6f:40:21:ed: 15:93:c5:78:e4:9b:5b:db:b6:0a:fa:1e:9f:97:b3: cb:88:1f:c6:f0:4a:a3:0f:a9:b5:3a:ac:8e:67:ca: 49:35:7e:50:da:aa:b2:4f:42:c2:5c:ce:25:79:b3: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BF:BF:5A:3B:D6:66:40:8C:18:95:90:39:7A:D1:E2:72:05:31:A6 X509v3 Authority Key Identifier: keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:49:fc:6d:8d:69:21:3e:52:bb:81:da:ea:df:79:0f:9d:9f: 3f:c8:88:f8:79:9b:5f:fa:59:65:55:86:5b:63:2c:d4:1e:91: 20:b8:c9:a8:79:7f:52:83:f1:10:9d:3c:b8:c4:23:48:08:30: a7:6a:d9:65:ab:45:10:0e:f0:87:d3:d7:f5:43:2e:07:a9:50: 72:06:4b:22:24:4c:59:07:e8:34:41:53:81:29:4d:4a:34:8d: ec:d9:41:29:42:1c:d1:77:8c:b3:5d:4c:11:4b:91:68:b7:a1: 7d:8e:9f:d1:39:51:d3:bb:dd:c4:ce:e2:ad:a9:9e:57:cb:14: 3f:79:71:0c:18:8c:f6:d4:b5:fc:b3:bd:15:7b:21:b6:ac:4b: 15:e5:a3:ba:74:a1:41:c3:f0:9a:dd:33:02:28:62:6e:9d:15: b0:eb:d8:59:b7:0c:1e:4a:9a:d6:a2:88:8d:e1:92:8e:22:ed: 5c:db:59:cd:22:88:b3:1d:8a:1d:ad:02:dc:c6:c4:94:70:d0: 58:aa:66:b7:a9:7e:95:e7:5c:ad:3e:b8:b7:ec:27:f1:1e:83: 93:6f:86:5f:55:15:0a:a6:d8:ec:3f:1a:2e:18:09:74:77:fe: 10:5e:b9:b8:f2:53:90:af:ba:31:e6:36:2e:f7:fa:47:bb:7b: 66:43:1c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFuXPWAHzPAAUVBxJE9lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3 Mjg0MjQwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD EygxNWJmYmY1YTNiZDY2NjQwOGMxODk1OTAzOTdhZDFlMjcyMDUzMWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkieGIdsSa5+LRi1xrSUKHVLIxCh4 Z9LA2Ak/irdKkfMWbaK38lRxo32MHj8EZ51OWrvRGnTLKoVh2fHTJZZojwNJ52w3 cki/YwynNnrrF5WAokr5h6HB83SVito0HB2aXQWs8BsGNgg0rIhE2TMZteG4JEiD h3aPMBD9V7ZahqkdS8HSJ//n/czpoSpNqbwWnp7lBBRaFirHSstZK32ZzCu0bphy O+ZFhk7M7XxrTNEYi6laxBz0Uaaq1JiNZbm+0Ib9C7NPRfSGeETX8G9AIe0Vk8V4 5Jtb27YK+h6fl7PLiB/G8EqjD6m1OqyOZ8pJNX5Q2qqyT0LCXM4lebM+1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBW/v1o71mZAjBiVkDl60eJyBTGmMB8GA1UdIwQY MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0n8bY1p IT5Su4Ha6t95D52fP8iI+HmbX/pZZVWGW2Ms1B6RILjJqHl/UoPxEJ08uMQjSAgw p2rZZatFEA7wh9PX9UMuB6lQcgZLIiRMWQfoNEFTgSlNSjSN7NlBKUIc0XeMs11M EUuRaLehfY6f0TlR07vdxM7irameV8sUP3lxDBiM9tS1/LO9FXshtqxLFeWjunSh QcPwmt0zAihibp0VsOvYWbcMHkqa1qKIjeGSjiLtXNtZzSKIsx2KHa0C3MbElHDQ WKpmt6l+ledcrT64t+wn8R6Dk2+GX1UVCqbY7D8aLhgJdHf+EF65uPJTkK+6MeY2 Lvf6R7t7ZkMcfA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:08 2025 by rpki-client