This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft File: f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft (raw, json) Hash identifier: xMFPnBUryBrkD2KxTazoPSiWM5goh2qOMqQlnP3KBsI= Subject key identifier: 94:DF:EA:61:84:1F:BB:99:25:4E:67:4A:D7:3D:CD:64:B7:3B:9F:EB Authority key identifier: 7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 Certificate issuer: /CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Certificate serial: 019AF5E611DD2EA141A060637AFFBCBE7E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft Manifest number: 06B2 Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sun 07 Dec 2025 23:01:26 +0000 Files and hashes: 1: f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl (hash: w8XfIKqA436bKTvRXATCa0iykOHrFdGzUb0m9lZHHgg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:11:dd:2e:a1:41:a0:60:63:7a:ff:bc:be:7e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f4ae57ee6e0a9c5101fc14a87a5334150bbab46 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 7 23:01:26 2025 GMT Subject: CN=94dfea61841fbb99254e674ad73dcd64b73b9feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:0e:f6:f0:e8:e3:64:66:fb:0c:28:f6:56: a0:79:79:45:1d:9f:a4:23:9d:9b:c9:43:02:09:c1: 29:dd:74:38:3a:97:bf:79:e7:8c:0f:1b:0f:14:4f: bf:b5:fa:9c:bf:8e:b9:aa:9b:a4:07:3a:c8:47:7b: fb:a6:7c:8b:8c:7d:08:aa:e5:a9:cd:a2:73:f0:6a: d2:17:96:5a:b7:cb:29:1f:3b:c0:11:2d:88:4d:a1: 43:1b:c3:c7:23:a8:0b:ed:45:76:91:a6:20:20:23: 21:b8:6f:6e:5a:e1:bb:63:a3:a3:2c:31:92:c9:89: 3a:46:f5:ab:49:dc:40:b0:3f:7f:b6:0c:34:86:04: 8a:fb:75:a2:1a:b6:97:47:bc:17:c8:54:b5:a4:6e: 0c:90:90:67:6b:fe:fc:c9:06:a6:79:9d:8a:cd:82: 37:04:be:20:7c:ef:d2:b9:2c:e2:a2:69:cd:7c:ff: 04:50:06:87:ec:1b:6c:8c:70:53:c6:a4:a4:c0:d3: fc:8f:3f:6e:79:e5:47:b2:4b:10:39:94:88:06:1a: da:0d:ad:a7:b5:0d:28:5c:80:93:90:f4:f2:be:2e: 43:30:b9:3b:08:b7:23:7a:df:d1:d0:92:49:b2:62: 24:d0:a6:ec:ab:25:88:50:85:95:b9:38:1a:26:86: 2f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DF:EA:61:84:1F:BB:99:25:4E:67:4A:D7:3D:CD:64:B7:3B:9F:EB X509v3 Authority Key Identifier: keyid:7F:4A:E5:7E:E6:E0:A9:C5:10:1F:C1:4A:87:A5:33:41:50:BB:AB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0rlfubgqcUQH8FKh6UzQVC7q0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/11fa44-8879-4d19-b468-5b5d98f5361e/1/f0rlfubgqcUQH8FKh6UzQVC7q0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:41:87:22:42:76:99:c8:41:6a:94:54:69:9a:ca:17:dd:0c: 03:7f:7e:53:3d:6d:25:98:50:67:09:25:af:3d:1f:23:f9:61: 4f:07:c5:5d:9a:3a:07:18:ea:68:cd:09:2d:10:3d:9f:1c:bc: 57:84:a7:58:bd:a1:75:20:5a:cc:13:20:c2:85:2e:44:4b:75: f1:0a:30:6a:eb:d3:7e:b6:2d:c6:17:70:82:35:bd:23:86:38: df:7c:15:78:a4:dd:0a:55:28:a2:f2:52:fc:de:53:3e:49:b2: ab:89:d7:13:aa:80:72:59:c1:c6:f6:ec:69:4a:f4:1b:59:8e: 30:c8:d5:51:40:3a:5f:43:8e:82:ed:98:92:5f:23:a3:42:d7: 2a:5f:c8:ae:98:c3:21:c5:86:aa:61:e3:ea:ef:74:c9:52:01: 91:c1:fc:4e:2d:cb:cb:0c:1b:26:c2:af:68:19:0f:a7:4b:f9: 5b:54:f5:6a:fd:86:25:1f:45:01:5d:28:6a:90:a6:f2:d7:a9: e5:0c:02:4c:2a:73:20:42:d8:86:dd:3b:47:8e:cb:c3:d5:61: d2:23:b7:a0:80:ee:f3:66:3d:71:94:cc:e9:cd:c8:20:36:b1: b6:40:e1:36:7e:a9:d0:0d:a6:b3:9e:15:63:a9:fb:ee:3c:c8: a9:b1:aa:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hHdLqFBoGBjev+8vn4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNGFlNTdlZTZlMGE5YzUxMDFmYzE0YTg3YTUzMzQxNTBi YmFiNDYwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjA3MjMwMTI2WjAzMTEwLwYDVQQD Eyg5NGRmZWE2MTg0MWZiYjk5MjU0ZTY3NGFkNzNkY2Q2NGI3M2I5ZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxz8O9vDo42Rm+wwo9lageXlFHZ+k I52byUMCCcEp3XQ4Ope/eeeMDxsPFE+/tfqcv465qpukBzrIR3v7pnyLjH0IquWp zaJz8GrSF5Zat8spHzvAES2ITaFDG8PHI6gL7UV2kaYgICMhuG9uWuG7Y6OjLDGS yYk6RvWrSdxAsD9/tgw0hgSK+3WiGraXR7wXyFS1pG4MkJBna/78yQameZ2KzYI3 BL4gfO/SuSziomnNfP8EUAaH7BtsjHBTxqSkwNP8jz9ueeVHsksQOZSIBhraDa2n tQ0oXICTkPTyvi5DMLk7CLcjet/R0JJJsmIk0KbsqyWIUIWVuTgaJoYvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTf6mGEH7uZJU5nStc9zWS3O5/rMB8GA1UdIwQY MBaAFH9K5X7m4KnFEB/BSoelM0FQu6tGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0Njgt NWI1ZDk4ZjUzNjFlLzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8xMWZhNDQtODg3OS00ZDE5LWI0NjgtNWI1ZDk4ZjUzNjFl LzEvZjBybGZ1YmdxY1VRSDhGS2g2VXpRVkM3cTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckGHIkJ2 mchBapRUaZrKF90MA39+Uz1tJZhQZwklrz0fI/lhTwfFXZo6BxjqaM0JLRA9nxy8 V4SnWL2hdSBazBMgwoUuREt18QowauvTfrYtxhdwgjW9I4Y433wVeKTdClUoovJS /N5TPkmyq4nXE6qAclnBxvbsaUr0G1mOMMjVUUA6X0OOgu2Ykl8jo0LXKl/IrpjD IcWGqmHj6u90yVIBkcH8Ti3LywwbJsKvaBkPp0v5W1T1av2GJR9FAV0oapCm8tep 5QwCTCpzIELYht07R47Lw9Vh0iO3oIDu82Y9cZTM6c3IIDaxtkDhNn6p0A2ms54V Y6n77jzIqbGqnA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:35 2025 by rpki-client