This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft File: fM2Lj3l51soXEsHVCkDU5VXJThM.mft (raw, json) Hash identifier: GCdncYi0k21hnxSwHatlsVcMoLb7y2ZsqnnRvGdIk6Y= Subject key identifier: F1:CB:9B:AC:C8:F7:3E:78:21:C7:D8:5D:28:22:FD:A3:C8:5F:F0:13 Authority key identifier: 7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 Certificate issuer: /CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Certificate serial: 019AF19BB9F5122C3A54A580B85036E135C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft Manifest number: 0AF4 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: fM2Lj3l51soXEsHVCkDU5VXJThM.crl (hash: OtJqH7IuV1BHsu7BMhjIoCv4lgHvyk4fsLNNaq+27Kc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b9:f5:12:2c:3a:54:a5:80:b8:50:36:e1:35:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ccd8b8f7979d6ca1712c1d50a40d4e555c94e13 Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=f1cb9bacc8f73e7821c7d85d2822fda3c85ff013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:30:35:71:99:b2:38:c1:77:68:9f:ff:42: af:0b:ed:18:d5:42:19:3c:14:35:84:6b:4c:e9:db: b0:4f:11:61:09:6a:90:22:ad:ac:e0:dd:bc:e9:e5: ef:12:41:ce:3e:c3:de:8e:37:25:08:12:61:13:aa: cb:02:e5:7f:f1:76:63:f7:21:7d:0c:ef:7a:0e:0a: 20:12:d2:0c:2a:49:23:5a:1e:5c:9a:c4:48:16:6a: 72:de:d9:4d:6c:13:ee:b3:8a:29:ff:05:7c:e8:ab: 24:f6:72:88:6c:f6:cf:f6:30:f4:75:34:6f:29:18: 42:0a:60:eb:24:c8:93:08:f9:cf:c6:1a:bb:01:68: b7:ef:af:19:f7:9c:c7:db:e1:10:f1:18:76:91:0b: a6:3a:41:b5:2a:eb:0d:78:41:f4:7a:e2:ed:8c:f9: fb:25:6a:00:50:48:1b:cf:7b:f8:61:ca:ac:96:a7: 6b:87:fa:ce:82:a4:ea:4d:69:e9:36:30:35:77:28: 1c:85:a7:24:b1:b7:db:97:2d:ef:f7:45:cc:39:ae: 0a:f4:46:80:ca:06:9a:9b:ff:f8:b0:a1:b9:47:ce: 19:fe:a7:1a:10:7c:f9:65:3f:81:72:ea:0c:ae:0f: 90:c1:8f:70:54:3c:b0:0c:50:54:5b:e5:24:56:1b: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CB:9B:AC:C8:F7:3E:78:21:C7:D8:5D:28:22:FD:A3:C8:5F:F0:13 X509v3 Authority Key Identifier: keyid:7C:CD:8B:8F:79:79:D6:CA:17:12:C1:D5:0A:40:D4:E5:55:C9:4E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fM2Lj3l51soXEsHVCkDU5VXJThM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/81156c-b814-48cf-a0c3-cab786077e83/1/fM2Lj3l51soXEsHVCkDU5VXJThM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:30:ab:89:94:d7:49:40:27:fd:37:c8:c9:e9:ef:18:c8:8e: a7:9f:c8:c2:30:0b:63:28:5a:dd:06:f4:17:40:71:86:77:d3: 1a:2c:20:03:13:31:a2:33:fb:77:fa:89:1b:3f:30:8d:28:87: 81:3c:26:d9:95:2b:68:b2:de:17:7a:88:61:61:b1:2f:0f:0c: 91:f9:f0:d3:c1:ab:36:c1:42:8d:81:e2:67:db:9c:95:da:75: 00:c5:fc:6e:e5:48:bc:6c:8e:3e:80:62:43:4f:f5:46:db:65: a8:11:57:5f:80:28:e5:6d:c5:89:65:cf:f1:6a:a9:f5:34:f1: d0:69:c1:82:c1:d8:fe:b4:17:73:af:2c:1d:7e:c6:25:bb:67: 90:6d:16:4c:c3:08:46:f5:c9:69:5a:2a:57:ec:21:25:5e:c2: d2:13:10:81:fd:fe:c3:f9:df:4c:6d:cb:db:eb:cb:5d:ca:af: c5:ca:f1:fa:6d:37:b6:19:19:73:2c:59:cc:d1:0a:ad:65:db: 12:97:59:5d:37:05:47:2f:78:b9:48:29:e5:81:1a:62:3e:dd: 9d:fe:fe:24:b4:32:80:d6:95:48:30:b4:b5:10:81:c6:25:b4: 4e:00:fe:d9:7d:e3:82:24:44:a0:9a:2c:fa:fd:3f:91:90:43: 3d:87:5b:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7n1Eiw6VKWAuFA24TXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjY2Q4YjhmNzk3OWQ2Y2ExNzEyYzFkNTBhNDBkNGU1NTVj OTRlMTMwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhmMWNiOWJhY2M4ZjczZTc4MjFjN2Q4NWQyODIyZmRhM2M4NWZmMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFgwNXGZsjjBd2if/0KvC+0Y1UIZ PBQ1hGtM6duwTxFhCWqQIq2s4N286eXvEkHOPsPejjclCBJhE6rLAuV/8XZj9yF9 DO96DgogEtIMKkkjWh5cmsRIFmpy3tlNbBPus4op/wV86Ksk9nKIbPbP9jD0dTRv KRhCCmDrJMiTCPnPxhq7AWi3768Z95zH2+EQ8Rh2kQumOkG1KusNeEH0euLtjPn7 JWoAUEgbz3v4Ycqslqdrh/rOgqTqTWnpNjA1dygchacksbfbly3v90XMOa4K9EaA ygaam//4sKG5R84Z/qcaEHz5ZT+BcuoMrg+QwY9wVDywDFBUW+UkVhvRnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHLm6zI9z54IcfYXSgi/aPIX/ATMB8GA1UdIwQY MBaAFHzNi495edbKFxLB1QpA1OVVyU4TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMt Y2FiNzg2MDc3ZTgzLzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS84MTE1NmMtYjgxNC00OGNmLWEwYzMtY2FiNzg2MDc3ZTgz LzEvZk0yTGozbDUxc29YRXNIVkNrRFU1VlhKVGhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDCriZTX SUAn/TfIyenvGMiOp5/IwjALYyha3Qb0F0BxhnfTGiwgAxMxojP7d/qJGz8wjSiH gTwm2ZUraLLeF3qIYWGxLw8Mkfnw08GrNsFCjYHiZ9ucldp1AMX8buVIvGyOPoBi Q0/1RttlqBFXX4Ao5W3FiWXP8Wqp9TTx0GnBgsHY/rQXc68sHX7GJbtnkG0WTMMI RvXJaVoqV+whJV7C0hMQgf3+w/nfTG3L2+vLXcqvxcrx+m03thkZcyxZzNEKrWXb EpdZXTcFRy94uUgp5YEaYj7dnf7+JLQygNaVSDC0tRCBxiW0TgD+2X3jgiREoJos +v0/kZBDPYdbyg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:57 2025 by rpki-client