This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft File: frHgvC-KBA2BVYCM9LKcVM2tlEI.mft (raw, json) Hash identifier: D9Uffu0fycMTyVSd4IGIQG8e6ymbol313b+4rIfQ0nY= Subject key identifier: 21:BE:70:C0:2E:0B:46:06:42:EE:01:90:70:F1:43:B7:A7:D6:B6:EF Authority key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42 Certificate issuer: /CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442 Certificate serial: 019AF1648EF9A8A07CF489DC2195810D4A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft Manifest number: C3 Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: frHgvC-KBA2BVYCM9LKcVM2tlEI.crl (hash: yhD/MnpM08wi7yuJzRijK3Q9BXcsHBCFD9zUEQwz0F8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8e:f9:a8:a0:7c:f4:89:dc:21:95:81:0d:4a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442 Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=21be70c02e0b460642ee019070f143b7a7d6b6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:34:eb:22:47:d6:98:16:e8:81:a6:27:53: 9c:e2:1e:a8:c3:a4:b9:d7:bc:43:6b:82:5e:4a:47: fc:58:4a:c9:9d:e2:6d:10:7e:db:3d:e3:b3:f3:42: b3:83:4c:42:12:4e:e9:99:b9:79:9f:eb:4d:0c:38: c6:84:12:57:92:07:f4:82:40:90:0e:4c:bc:d1:d7: f5:bd:e5:5e:88:53:fc:c0:04:61:0a:20:ef:2e:e6: c0:c4:72:de:ac:18:c3:ea:99:e9:bf:17:cf:ee:b6: a5:97:1b:3a:a5:9c:c0:be:17:7f:e0:e7:4f:20:1a: 86:e4:10:93:fb:96:38:df:65:a9:9e:72:b5:b4:1d: 4d:4b:01:2f:96:f7:50:74:ff:24:14:a4:e0:c1:5f: 10:73:aa:4a:ae:f5:a2:f3:66:24:3d:b6:5d:e0:b4: 1f:b9:7f:a3:40:2d:5b:84:5a:98:9a:fa:e9:cf:24: 76:d6:0d:42:c0:28:17:e5:9e:09:db:2b:23:ef:9d: 27:1a:7f:e1:02:10:31:73:81:59:6a:6c:85:de:b6: 7f:59:9c:5d:8b:a0:68:c2:ce:5b:dd:9a:df:97:1b: d3:85:0b:26:ba:df:5c:31:22:fb:b0:ea:62:a0:72: d6:15:32:5c:65:d8:81:44:e2:3b:2a:aa:be:e2:66: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BE:70:C0:2E:0B:46:06:42:EE:01:90:70:F1:43:B7:A7:D6:B6:EF X509v3 Authority Key Identifier: keyid:7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:4d:8b:55:16:7e:22:93:e7:ab:98:7a:be:bd:39:15:86:05: df:a8:06:d2:54:96:51:7e:ca:ce:7e:e5:21:c9:c8:fa:f7:14: 14:1c:c7:2b:6d:7c:a0:81:ce:85:13:6c:69:71:10:70:dc:08: 8e:ea:f6:7c:cf:f5:f2:68:45:34:29:54:28:48:86:40:a7:2a: 26:fc:29:db:f8:b2:89:87:fd:4f:9e:17:45:47:a7:52:a9:81: 27:9d:73:eb:62:95:fa:6d:1d:d7:94:74:f2:e0:1b:a7:54:86: 12:23:09:78:1e:3a:c3:74:49:e4:e8:78:db:37:db:e1:1c:d1: ac:68:7e:04:a6:d8:14:35:ec:30:0d:b0:4f:31:32:fa:ed:58: ab:71:9b:67:38:4d:00:68:a2:ed:4a:e9:07:fb:43:8c:fc:64: d7:22:27:33:04:20:93:43:f2:4e:99:1a:0d:d3:7d:a6:fd:8e: b6:ac:57:26:45:15:95:11:23:2d:88:09:9a:e4:1e:d1:35:fb: 33:31:c7:71:f6:b9:41:c7:05:80:dd:6a:56:bd:e0:f6:c5:f4: b6:36:de:1a:13:4d:e0:3d:2c:8f:bf:85:7d:a3:9d:48:96:8d: 98:de:56:9f:42:df:24:ca:d1:df:e4:11:6a:69:52:b0:06:8c: 69:66:fe:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZI75qKB89IncIZWBDUpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjFlMGJjMmY4YTA0MGQ4MTU1ODA4Y2Y0YjI5YzU0Y2Rh ZDk0NDIwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD EygyMWJlNzBjMDJlMGI0NjA2NDJlZTAxOTA3MGYxNDNiN2E3ZDZiNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA406yJH1pgW6IGmJ1Oc4h6ow6S5 17xDa4JeSkf8WErJneJtEH7bPeOz80Kzg0xCEk7pmbl5n+tNDDjGhBJXkgf0gkCQ Dky80df1veVeiFP8wARhCiDvLubAxHLerBjD6pnpvxfP7rallxs6pZzAvhd/4OdP IBqG5BCT+5Y432WpnnK1tB1NSwEvlvdQdP8kFKTgwV8Qc6pKrvWi82YkPbZd4LQf uX+jQC1bhFqYmvrpzyR21g1CwCgX5Z4J2ysj750nGn/hAhAxc4FZamyF3rZ/WZxd i6Bows5b3ZrflxvThQsmut9cMSL7sOpioHLWFTJcZdiBROI7Kqq+4mbD6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCG+cMAuC0YGQu4BkHDxQ7en1rbvMB8GA1UdIwQY MBaAFH6x4LwvigQNgVWAjPSynFTNrZRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83NTE3MjQtZGE4My00Mjk1LWE1NDgt YTg5ZWQyYWVjYjUxLzEvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83NTE3MjQtZGE4My00Mjk1LWE1NDgtYTg5ZWQyYWVjYjUx LzEvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIk2LVRZ+ IpPnq5h6vr05FYYF36gG0lSWUX7Kzn7lIcnI+vcUFBzHK218oIHOhRNsaXEQcNwI jur2fM/18mhFNClUKEiGQKcqJvwp2/iyiYf9T54XRUenUqmBJ51z62KV+m0d15R0 8uAbp1SGEiMJeB46w3RJ5Oh42zfb4RzRrGh+BKbYFDXsMA2wTzEy+u1Yq3GbZzhN AGii7UrpB/tDjPxk1yInMwQgk0PyTpkaDdN9pv2OtqxXJkUVlREjLYgJmuQe0TX7 MzHHcfa5QccFgN1qVr3g9sX0tjbeGhNN4D0sj7+FfaOdSJaNmN5Wn0LfJMrR3+QR amlSsAaMaWb+gg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:31 2025 by rpki-client