This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json) Hash identifier: F04QDp/G16akIVmtj3GMs+YcDC4Tbt4Njk9A3c3nZhM= Subject key identifier: 54:D5:41:8D:12:29:EB:7E:7D:52:45:9B:5E:69:1F:F9:A3:2E:E2:AC Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f Certificate serial: 019AF31D9BBF9D25C121013C42997DF184E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:03:15 +0000 Manifest this update: Sat 06 Dec 2025 10:03:15 +0000 Manifest next update: Sun 07 Dec 2025 10:03:15 +0000 Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: jpX1LrfT5WstqGL5755OyyNMisxY7WhSfi73trvgCvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:9b:bf:9d:25:c1:21:01:3c:42:99:7d:f1:84:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f Validity Not Before: Dec 6 10:03:15 2025 GMT Not After : Dec 7 10:03:15 2025 GMT Subject: CN=54d5418d1229eb7e7d52459b5e691ff9a32ee2ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9e:28:8e:bb:d4:d8:53:f2:05:ff:34:20:52: 7a:ea:ae:1b:00:f7:e9:f2:f3:6b:b8:31:6c:73:e3: f5:23:52:8f:02:e4:32:97:fd:b6:28:f3:ab:07:09: 1d:00:3c:a9:08:9b:05:59:52:84:a2:ea:7a:ad:19: a0:4e:8a:e3:21:9c:35:f5:8b:5d:47:52:75:10:02: f0:0c:3f:7e:5f:37:3a:c8:aa:76:91:6f:d9:e2:e8: 79:f8:80:74:81:04:23:82:e4:5f:a5:fe:cb:45:6a: f3:d8:d1:db:43:c9:52:26:49:8d:bd:3a:07:42:3c: c5:cf:4b:4e:89:76:fd:6a:77:d5:56:ca:b7:d5:3d: 0c:5b:66:fd:6f:ac:eb:bb:60:2c:ba:75:4d:b0:d6: 4d:a7:62:da:83:f3:4f:28:8c:7b:c1:a1:58:31:34: 9d:9a:fa:b5:32:6b:b9:da:19:76:1d:84:fc:14:58: c4:b9:60:52:09:e9:a0:77:9f:69:41:b6:2f:e8:cd: 6e:73:61:a7:e9:22:71:f2:cd:ed:de:52:7e:e3:cf: 17:be:ba:17:c7:40:58:04:3d:c2:ec:96:6e:c3:dc: e4:6d:7d:1b:86:a4:b3:65:f0:cd:69:24:4d:5c:a4: 6c:d5:8c:57:f4:8e:a7:95:0c:25:8b:46:12:1e:ef: c5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D5:41:8D:12:29:EB:7E:7D:52:45:9B:5E:69:1F:F9:A3:2E:E2:AC X509v3 Authority Key Identifier: keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:81:32:ee:92:fd:44:68:49:44:53:3e:c3:12:7b:23:8c:53: 83:74:40:82:a0:1d:e3:b8:41:a5:e2:dc:4a:83:ff:ef:39:cd: f6:58:07:e9:fa:29:f3:d4:06:d4:28:e0:24:2f:93:02:76:8d: bf:42:60:35:c4:d0:34:76:ce:92:84:e8:9d:bc:64:c3:c5:68: 07:3e:04:70:e9:a0:0a:28:60:99:c7:f0:3e:ca:51:91:06:02: 13:45:8b:e8:7e:1f:56:44:f7:20:92:09:50:86:e0:e0:f9:5c: 1e:03:25:8c:0a:13:fb:8f:48:e0:61:54:13:41:95:c6:fc:2c: 89:9b:e4:26:6e:f3:62:19:a3:63:da:95:dc:d5:28:60:ac:d4: 50:43:14:7f:e0:ca:4a:9c:f9:8a:42:e7:fc:8f:7b:bf:13:19: c1:73:5f:7a:35:f1:b3:14:07:d8:cc:4b:8b:58:4c:ea:1c:38: 1f:1d:79:2f:7b:ee:32:ce:c6:a6:42:9b:67:1e:a1:89:ca:05: a9:fd:18:91:1e:5c:38:f3:30:1d:fd:2c:5c:fd:57:98:bc:03: aa:23:9e:c0:b4:0d:61:67:a1:9e:99:81:97:dc:28:40:1a:cc: 89:59:b7:31:4f:0a:79:3b:ea:e3:6e:0c:49:7d:41:20:fd:71: c8:a0:c6:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHZu/nSXBIQE8Qpl98YTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz NTZmOWYwHhcNMjUxMjA2MTAwMzE1WhcNMjUxMjA3MTAwMzE1WjAzMTEwLwYDVQQD Eyg1NGQ1NDE4ZDEyMjllYjdlN2Q1MjQ1OWI1ZTY5MWZmOWEzMmVlMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA354ojrvU2FPyBf80IFJ66q4bAPfp 8vNruDFsc+P1I1KPAuQyl/22KPOrBwkdADypCJsFWVKEoup6rRmgTorjIZw19Ytd R1J1EALwDD9+Xzc6yKp2kW/Z4uh5+IB0gQQjguRfpf7LRWrz2NHbQ8lSJkmNvToH QjzFz0tOiXb9anfVVsq31T0MW2b9b6zru2AsunVNsNZNp2Lag/NPKIx7waFYMTSd mvq1Mmu52hl2HYT8FFjEuWBSCemgd59pQbYv6M1uc2Gn6SJx8s3t3lJ+488XvroX x0BYBD3C7JZuw9zkbX0bhqSzZfDNaSRNXKRs1YxX9I6nlQwli0YSHu/FsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTVQY0SKet+fVJFm15pH/mjLuKsMB8GA1UdIwQY MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoEy7pL9 RGhJRFM+wxJ7I4xTg3RAgqAd47hBpeLcSoP/7znN9lgH6fop89QG1CjgJC+TAnaN v0JgNcTQNHbOkoTonbxkw8VoBz4EcOmgCihgmcfwPspRkQYCE0WL6H4fVkT3IJIJ UIbg4PlcHgMljAoT+49I4GFUE0GVxvwsiZvkJm7zYhmjY9qV3NUoYKzUUEMUf+DK Spz5ikLn/I97vxMZwXNfejXxsxQH2MxLi1hM6hw4Hx15L3vuMs7GpkKbZx6hicoF qf0YkR5cOPMwHf0sXP1XmLwDqiOewLQNYWehnpmBl9woQBrMiVm3MU8KeTvq424M SX1BIP1xyKDGKA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:12 2025 by rpki-client