This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json) Hash identifier: /cEzDhYrjOULMgfJSrl+aXWzPTi9BusJMXrD5jYUbVM= Subject key identifier: B5:38:D2:F6:63:A4:13:C0:15:33:BA:E9:60:D2:32:91:F4:CF:EC:C5 Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481 Certificate serial: 019B33E893BF494FA568FF2B55834919149C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 00:00:38 +0000 Manifest this update: Fri 19 Dec 2025 00:00:38 +0000 Manifest next update: Sat 20 Dec 2025 00:00:38 +0000 Files and hashes: 1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: wDNicgdNJVW2Osdr7kJrhBOS4F+n9RpfY49Yoh2CwsA=) 2: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (hash: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:93:bf:49:4f:a5:68:ff:2b:55:83:49:19:14:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481 Validity Not Before: Dec 19 00:00:38 2025 GMT Not After : Dec 20 00:00:38 2025 GMT Subject: CN=b538d2f663a413c01533bae960d23291f4cfecc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3f:6e:a4:df:b8:1b:2a:db:d3:d2:c5:be:92: 2e:ca:7a:5b:03:e7:38:26:7f:67:e1:e2:80:ef:e0: 8b:7d:16:14:2d:44:a7:3a:c7:bb:55:63:f4:88:78: 34:44:87:b6:9a:d1:06:0b:cf:ea:f3:17:02:6a:0c: 5b:d0:6a:28:95:3e:96:9d:3e:1a:ff:64:10:f1:c1: b1:01:8a:e4:9b:16:3c:c6:69:85:c2:72:2a:fa:a3: 5f:46:56:c4:62:0a:5f:f4:e8:82:3e:79:44:9a:c5: bf:7e:99:2c:75:c9:a8:b0:bb:ef:78:e2:37:d8:e1: 75:5e:7b:23:66:e5:bf:1b:9b:29:96:31:37:3a:33: 8a:f9:d1:51:41:82:11:e4:b1:d8:a8:c0:67:f7:57: 11:1e:fb:ed:a3:eb:96:b2:7f:cd:82:bd:39:82:d9: a7:72:12:22:30:c0:d3:bd:be:22:6b:15:50:4c:7a: 32:b5:2d:a5:bc:7d:6e:21:95:32:3a:1d:76:21:e7: b3:1e:3a:30:8c:3f:8c:79:8b:24:e0:18:b5:66:78: b7:b4:5c:a5:a1:24:c4:6b:fa:87:e0:54:38:b7:54: 71:a4:86:98:0b:65:c4:1f:ed:42:5c:35:3a:47:09: e9:46:d5:8f:ae:cb:77:76:93:f3:a8:36:e5:bc:00: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:38:D2:F6:63:A4:13:C0:15:33:BA:E9:60:D2:32:91:F4:CF:EC:C5 X509v3 Authority Key Identifier: keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:63:4d:61:c4:b2:a2:dd:b0:42:85:98:10:d1:fe:03:f4:37: 5f:c9:90:0a:01:a7:3c:2f:f5:96:0e:4f:ed:32:58:da:1e:98: a5:82:7e:08:a7:24:30:32:9f:21:99:72:89:4b:1a:84:11:54: ff:e3:f0:1e:ef:27:87:a4:0a:5d:4c:88:cd:37:55:3b:dc:1a: 3e:04:e1:36:a3:09:89:21:71:f3:54:1e:22:c6:5a:7e:58:c5: d1:03:ba:77:a1:6b:2a:6e:6c:53:d5:02:ff:4a:1f:eb:7f:7c: 55:1c:32:e9:3a:73:11:62:97:3d:c4:3b:08:8f:f8:ab:90:6b: 45:dd:77:4c:bd:09:ca:ac:ee:b7:35:9b:9c:31:c2:1c:35:8c: 96:b0:1d:e5:97:1f:04:92:f1:25:4e:60:6a:06:48:e3:a7:4e: 70:8b:7a:e0:93:0b:76:27:b9:fd:57:10:c4:29:8d:7e:b7:17: ac:55:73:fc:78:28:21:f1:f9:67:a8:e4:42:a5:78:33:91:e1: 0c:50:4d:58:77:e1:f7:18:23:7f:f3:f2:5f:d2:3e:9a:00:96: 68:75:bb:0b:fc:20:e7:cc:af:36:13:b0:3f:dd:30:35:2a:96: 50:5d:b3:e2:42:e8:8b:7e:3e:fe:f2:c0:c5:c4:2b:5c:d6:e3: 4a:6c:75:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6JO/SU+laP8rVYNJGRScMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk ZjU0ODEwHhcNMjUxMjE5MDAwMDM4WhcNMjUxMjIwMDAwMDM4WjAzMTEwLwYDVQQD EyhiNTM4ZDJmNjYzYTQxM2MwMTUzM2JhZTk2MGQyMzI5MWY0Y2ZlY2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxD9upN+4Gyrb09LFvpIuynpbA+c4 Jn9n4eKA7+CLfRYULUSnOse7VWP0iHg0RIe2mtEGC8/q8xcCagxb0GoolT6WnT4a /2QQ8cGxAYrkmxY8xmmFwnIq+qNfRlbEYgpf9OiCPnlEmsW/fpksdcmosLvveOI3 2OF1XnsjZuW/G5spljE3OjOK+dFRQYIR5LHYqMBn91cRHvvto+uWsn/Ngr05gtmn chIiMMDTvb4iaxVQTHoytS2lvH1uIZUyOh12IeezHjowjD+MeYsk4Bi1Zni3tFyl oSTEa/qH4FQ4t1RxpIaYC2XEH+1CXDU6RwnpRtWPrst3dpPzqDblvAAprQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU40vZjpBPAFTO66WDSMpH0z+zFMB8GA1UdIwQY MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmNNYcSy ot2wQoWYENH+A/Q3X8mQCgGnPC/1lg5P7TJY2h6YpYJ+CKckMDKfIZlyiUsahBFU /+PwHu8nh6QKXUyIzTdVO9waPgThNqMJiSFx81QeIsZafljF0QO6d6FrKm5sU9UC /0of6398VRwy6TpzEWKXPcQ7CI/4q5BrRd13TL0JyqzutzWbnDHCHDWMlrAd5Zcf BJLxJU5gagZI46dOcIt64JMLdie5/VcQxCmNfrcXrFVz/HgoIfH5Z6jkQqV4M5Hh DFBNWHfh9xgjf/PyX9I+mgCWaHW7C/wg58yvNhOwP90wNSqWUF2z4kLoi34+/vLA xcQrXNbjSmx1Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 05:47:37 2025 by rpki-client