This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft File: F1oeMrvmeal2_GGmA-3NalQHK48.mft (raw, json) Hash identifier: BxEvyvuH7JdIqP5HxTrpvNJxS5hZvy3vKm4uR0MwGTo= Subject key identifier: 40:2B:15:EB:1B:DD:59:EB:91:9A:F2:A7:0A:EC:11:56:7F:D6:09:E1 Authority key identifier: 17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F Certificate issuer: /CN=175a1e32bbe679a976fc61a603edcd6a54072b8f Certificate serial: 019AF1D1C6BE7D8607F49A65CCD6299EA348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft Manifest number: 062C Signing time: Sat 06 Dec 2025 04:00:48 +0000 Manifest this update: Sat 06 Dec 2025 04:00:48 +0000 Manifest next update: Sun 07 Dec 2025 04:00:48 +0000 Files and hashes: 1: F1oeMrvmeal2_GGmA-3NalQHK48.crl (hash: 2dv8P/g4hN4RR+oZc8n7ZFJITIVXC00eW8FbjxlbLxw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c6:be:7d:86:07:f4:9a:65:cc:d6:29:9e:a3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=175a1e32bbe679a976fc61a603edcd6a54072b8f Validity Not Before: Dec 6 04:00:48 2025 GMT Not After : Dec 7 04:00:48 2025 GMT Subject: CN=402b15eb1bdd59eb919af2a70aec11567fd609e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:28:6a:6c:40:47:44:81:fc:2b:fa:de:0d: 9c:37:ba:ab:9f:3b:ff:38:88:76:e5:f5:36:b3:fb: e4:e2:73:8a:74:4f:7e:2a:d4:90:b6:3b:1e:a0:f5: 7e:84:b1:69:5f:13:3a:96:fe:53:bc:b0:84:a7:97: ad:0a:ad:2f:a2:32:cd:68:0c:ef:92:58:ec:0b:b8: 5f:f9:7d:38:b5:48:53:f3:56:b6:e5:3a:01:fb:c3: 8c:8b:0a:ac:bf:15:e8:e3:be:d3:df:16:92:26:89: 4f:61:32:1d:f8:7a:7b:4e:8a:53:bd:db:0e:1a:23: 78:e0:a9:45:d0:ae:d2:7a:6d:7f:d8:b1:3c:29:7c: 9e:ed:a0:a4:90:23:a5:f2:90:19:1d:08:9c:27:98: f3:19:70:1c:c8:23:d8:ea:8b:77:06:ab:e6:fa:3d: d8:10:dc:18:10:f7:4c:d6:9f:88:5b:f0:00:4f:9b: 57:7b:81:3d:57:dc:48:8b:24:cd:3c:f0:04:bd:88: 77:de:a3:2b:cc:79:08:85:be:2e:4f:5b:34:1d:5f: a7:33:a6:62:63:4b:5d:c6:6b:13:aa:a5:de:de:88: 42:02:83:d5:8a:91:54:73:b0:9b:09:f0:3c:7a:e7: b2:83:47:11:33:a1:5a:53:ab:e0:d4:86:6b:fe:15: d2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:2B:15:EB:1B:DD:59:EB:91:9A:F2:A7:0A:EC:11:56:7F:D6:09:E1 X509v3 Authority Key Identifier: keyid:17:5A:1E:32:BB:E6:79:A9:76:FC:61:A6:03:ED:CD:6A:54:07:2B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1oeMrvmeal2_GGmA-3NalQHK48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dbd01a-754b-4f6e-8f91-4f90ab6c262c/1/F1oeMrvmeal2_GGmA-3NalQHK48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:81:0d:ce:d0:01:f1:27:b1:47:cc:7b:d5:50:87:f2:0b:5a: 35:d3:5e:c2:68:2a:28:e1:5d:50:a0:ff:e9:42:26:39:ae:09: 6e:f7:53:73:55:43:c2:a9:49:2b:cc:42:08:a7:29:71:95:66: 7e:07:1d:b4:53:da:0e:d5:cf:84:91:e2:e5:0f:bf:a5:b7:70: cc:12:02:01:11:d9:8b:5f:f1:71:01:73:19:4f:96:23:1a:03: 61:b6:3f:43:7a:7d:11:76:12:b7:4e:85:55:de:69:b7:44:c1: 3b:e7:68:8d:82:bc:a0:24:6e:d9:f4:b0:fc:5d:23:1c:47:44: cd:b4:2e:06:a5:c2:aa:07:d8:2d:53:52:c6:dd:e1:8c:c2:52: 9f:99:f9:ce:ec:1a:02:e9:e1:72:e9:f2:c9:a2:5b:4e:d4:7a: 9e:ac:eb:4c:dd:05:d5:ac:d0:32:44:97:b4:54:93:b7:8c:9b: 69:50:8d:74:c7:52:8c:15:31:67:69:3d:3d:a2:62:a4:7c:95: 91:e7:76:f6:35:2f:f6:33:75:a6:d0:0a:fa:66:4d:7b:e2:69: 6f:b3:91:bd:8f:8d:e3:76:fe:49:56:0e:e6:70:3e:43:fd:a8: e7:d1:eb:55:ee:8f:ce:41:fb:24:f6:7a:45:80:73:6b:69:2b: a5:58:ee:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ca+fYYH9JplzNYpnqNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NWExZTMyYmJlNjc5YTk3NmZjNjFhNjAzZWRjZDZhNTQw NzJiOGYwHhcNMjUxMjA2MDQwMDQ4WhcNMjUxMjA3MDQwMDQ4WjAzMTEwLwYDVQQD Eyg0MDJiMTVlYjFiZGQ1OWViOTE5YWYyYTcwYWVjMTE1NjdmZDYwOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwooamxAR0SB/Cv63g2cN7qrnzv/ OIh25fU2s/vk4nOKdE9+KtSQtjseoPV+hLFpXxM6lv5TvLCEp5etCq0vojLNaAzv kljsC7hf+X04tUhT81a25ToB+8OMiwqsvxXo477T3xaSJolPYTId+Hp7TopTvdsO GiN44KlF0K7Sem1/2LE8KXye7aCkkCOl8pAZHQicJ5jzGXAcyCPY6ot3Bqvm+j3Y ENwYEPdM1p+IW/AAT5tXe4E9V9xIiyTNPPAEvYh33qMrzHkIhb4uT1s0HV+nM6Zi Y0tdxmsTqqXe3ohCAoPVipFUc7CbCfA8eueyg0cRM6FaU6vg1IZr/hXSNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEArFesb3VnrkZrypwrsEVZ/1gnhMB8GA1UdIwQY MBaAFBdaHjK75nmpdvxhpgPtzWpUByuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEt NGY5MGFiNmMyNjJjLzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9kYmQwMWEtNzU0Yi00ZjZlLThmOTEtNGY5MGFiNmMyNjJj LzEvRjFvZU1ydm1lYWwyX0dHbUEtM05hbFFISzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4ENztAB 8SexR8x71VCH8gtaNdNewmgqKOFdUKD/6UImOa4JbvdTc1VDwqlJK8xCCKcpcZVm fgcdtFPaDtXPhJHi5Q+/pbdwzBICARHZi1/xcQFzGU+WIxoDYbY/Q3p9EXYSt06F Vd5pt0TBO+dojYK8oCRu2fSw/F0jHEdEzbQuBqXCqgfYLVNSxt3hjMJSn5n5zuwa AunhcunyyaJbTtR6nqzrTN0F1azQMkSXtFSTt4ybaVCNdMdSjBUxZ2k9PaJipHyV ked29jUv9jN1ptAK+mZNe+Jpb7ORvY+N43b+SVYO5nA+Q/2o59HrVe6PzkH7JPZ6 RYBza2krpVjuDA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:15:48 2025 by rpki-client