This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json) Hash identifier: 6Qlt74aWWhKoTS8wlFaXs2kEv8Q/crvxaBAR87jp7T8= Subject key identifier: CA:13:49:BC:DB:08:CA:80:A2:D4:D7:1B:51:7C:9C:29:57:0C:12:E3 Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c Certificate serial: 019AF31BA6C306C6DEB012DBE9CA7396ED58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:01:06 +0000 Manifest this update: Sat 06 Dec 2025 10:01:06 +0000 Manifest next update: Sun 07 Dec 2025 10:01:06 +0000 Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: 580VxW6L/cxq5csWeGE4dciChAz7v4o/D/hKWrIeTZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a6:c3:06:c6:de:b0:12:db:e9:ca:73:96:ed:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c Validity Not Before: Dec 6 10:01:06 2025 GMT Not After : Dec 7 10:01:06 2025 GMT Subject: CN=ca1349bcdb08ca80a2d4d71b517c9c29570c12e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:40:4c:3c:81:c8:81:36:e5:8e:5a:49:2e:12: 30:10:49:89:34:d9:07:23:98:25:59:05:fa:a2:bf: 44:6f:a5:2e:4a:4b:a0:d7:27:9d:34:cd:29:91:ae: a0:be:57:b3:fd:ff:63:49:2b:31:7f:55:cd:2a:8a: 8b:81:70:82:e8:44:99:14:1f:70:b1:f1:46:f3:fd: 81:67:d5:34:62:60:4d:85:81:a3:94:da:3b:7d:ee: 57:33:84:0c:13:cd:48:09:dd:9f:72:b5:53:4e:56: f3:56:de:dc:15:ad:20:48:75:78:fe:f1:e8:35:2b: ec:63:a2:5f:2d:c7:e7:37:af:b8:85:05:04:3e:40: aa:55:e4:f7:75:c6:00:a8:ed:74:4f:48:50:aa:5a: 30:52:b8:fb:c6:8a:68:14:ee:e8:80:03:dd:c2:3a: f6:b7:81:b3:f6:38:d2:4a:64:21:cc:9e:de:0c:a4: 55:ad:ac:40:b3:33:30:8b:11:0a:99:09:9a:4e:04: f8:71:3e:7f:81:2f:ec:7e:f3:4f:c8:4d:57:43:74: a1:56:e4:30:18:37:8e:a0:c9:4a:58:89:6b:bb:d7: 82:2e:f4:ff:c2:1b:33:24:53:9c:6d:82:c9:b5:66: 15:02:95:65:b0:08:d9:4f:fc:35:4d:bb:1f:70:ec: c6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:13:49:BC:DB:08:CA:80:A2:D4:D7:1B:51:7C:9C:29:57:0C:12:E3 X509v3 Authority Key Identifier: keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:d9:fb:a3:90:14:18:8c:0b:1b:aa:fa:b3:f1:da:5e:36:d2: ba:9b:b0:6c:b0:92:33:c6:39:de:c3:4b:87:69:8d:b7:8e:15: 6c:ba:ec:2c:e4:79:5c:95:67:b9:be:fd:4d:cb:e6:72:94:96: 2f:2b:cc:4b:e9:b8:99:e0:0f:35:24:09:80:a0:5c:0a:77:98: 45:62:28:c7:c6:39:91:3a:e0:2a:bd:d4:65:85:b4:11:bd:08: 0b:26:b9:87:62:37:b3:50:e9:a5:10:bd:21:63:8e:1e:4b:94: be:c8:be:50:e2:72:2f:c0:35:32:89:ae:c1:b1:61:3a:66:2e: df:a4:6b:d8:6e:da:16:f4:47:2b:82:49:a6:e2:3a:45:7a:3d: a7:25:c9:63:da:2a:8b:72:19:3d:d1:9a:da:90:f5:83:73:77: 1d:20:b4:86:e4:91:32:9e:5c:0b:7d:ab:68:0a:dd:bc:07:fe: 15:2e:5f:22:0a:f1:a3:40:8f:bc:c9:35:04:8b:78:ee:ef:ff: d3:1b:cb:40:13:f1:ff:95:5e:f0:b6:c1:60:cd:a6:84:e9:a0: b8:5a:7f:2b:41:6c:31:d1:50:ef:71:ce:22:01:eb:08:a2:6e: 26:8c:9b:8d:86:5e:cb:b5:82:cc:7d:31:aa:f3:33:a6:6f:f0: c8:c4:ab:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6bDBsbesBLb6cpzlu1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4 NzQ3MWMwHhcNMjUxMjA2MTAwMTA2WhcNMjUxMjA3MTAwMTA2WjAzMTEwLwYDVQQD EyhjYTEzNDliY2RiMDhjYTgwYTJkNGQ3MWI1MTdjOWMyOTU3MGMxMmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0BMPIHIgTbljlpJLhIwEEmJNNkH I5glWQX6or9Eb6UuSkug1yedNM0pka6gvlez/f9jSSsxf1XNKoqLgXCC6ESZFB9w sfFG8/2BZ9U0YmBNhYGjlNo7fe5XM4QME81ICd2fcrVTTlbzVt7cFa0gSHV4/vHo NSvsY6JfLcfnN6+4hQUEPkCqVeT3dcYAqO10T0hQqlowUrj7xopoFO7ogAPdwjr2 t4Gz9jjSSmQhzJ7eDKRVraxAszMwixEKmQmaTgT4cT5/gS/sfvNPyE1XQ3ShVuQw GDeOoMlKWIlru9eCLvT/whszJFOcbYLJtWYVApVlsAjZT/w1TbsfcOzGoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoTSbzbCMqAotTXG1F8nClXDBLjMB8GA1UdIwQY MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtn7o5AU GIwLG6r6s/HaXjbSupuwbLCSM8Y53sNLh2mNt44VbLrsLOR5XJVnub79TcvmcpSW LyvMS+m4meAPNSQJgKBcCneYRWIox8Y5kTrgKr3UZYW0Eb0ICya5h2I3s1DppRC9 IWOOHkuUvsi+UOJyL8A1MomuwbFhOmYu36Rr2G7aFvRHK4JJpuI6RXo9pyXJY9oq i3IZPdGa2pD1g3N3HSC0huSRMp5cC32raArdvAf+FS5fIgrxo0CPvMk1BIt47u// 0xvLQBPx/5Ve8LbBYM2mhOmguFp/K0FsMdFQ73HOIgHrCKJuJoybjYZey7WCzH0x qvMzpm/wyMSrUA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:31 2025 by rpki-client