This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft File: fAZh3JBogykjw7tyv8knJTtL2bg.mft (raw, json) Hash identifier: WWUIcjeA7cyKMIgGyVmM8kh8OIHASEezstx/pZ2r074= Subject key identifier: D5:77:08:C3:54:0F:36:64:4B:AD:3B:00:98:5D:2F:40:B5:54:E0:B2 Authority key identifier: 7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8 Certificate issuer: /CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8 Certificate serial: 019AF5781B22A9F804AC4FE356BB293D0197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft Manifest number: C5 Signing time: Sat 06 Dec 2025 21:01:20 +0000 Manifest this update: Sat 06 Dec 2025 21:01:20 +0000 Manifest next update: Sun 07 Dec 2025 21:01:20 +0000 Files and hashes: 1: fAZh3JBogykjw7tyv8knJTtL2bg.crl (hash: vo/2em9w//wzaJLhwJLO1aIM0JpzwYgaPYlrrAEC3L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:1b:22:a9:f8:04:ac:4f:e3:56:bb:29:3d:01:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c0661dc9068832923c3bb72bfc927253b4bd9b8 Validity Not Before: Dec 6 21:01:20 2025 GMT Not After : Dec 7 21:01:20 2025 GMT Subject: CN=d57708c3540f36644bad3b00985d2f40b554e0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:91:ee:6c:e4:95:f6:7c:54:bf:c0:68:8d: b2:c6:3b:48:ed:12:96:91:a0:2a:42:27:b2:17:79: 84:1b:a6:2b:a2:e2:4b:28:86:36:a0:9f:7f:e7:30: 8f:66:c4:f3:07:b8:2a:8b:f7:3c:a3:b7:98:a0:b2: f1:25:2a:9a:e4:b3:47:fb:b5:8e:c7:b2:03:fb:43: e1:13:41:65:04:c2:e5:0d:2f:46:f1:56:b1:3f:d0: b5:c5:32:1b:28:af:c8:e4:96:5a:c8:20:46:cd:6e: a1:36:df:e7:57:dd:89:c8:9c:f2:d1:50:73:34:46: cd:c5:b1:7b:bf:41:76:50:eb:3b:b5:58:4a:c9:1c: 6d:37:be:b4:72:40:aa:71:23:0f:eb:d6:13:49:03: ed:cd:38:64:c0:33:3c:ac:86:6c:8e:87:50:ff:65: 2c:49:d0:da:25:5f:e8:ae:dc:75:99:4d:14:0a:a0: f0:cb:66:13:ab:4d:63:1b:da:c5:5f:a7:7a:73:03: e6:6a:99:91:43:fa:93:9e:e3:b6:22:94:a5:7a:57: 2b:3d:d0:13:af:94:c3:87:c2:0d:ff:2b:24:73:b6: 73:bb:19:3b:4a:d8:78:5d:ab:48:1c:54:4d:0f:06: b0:1c:67:17:18:55:47:a9:9c:6a:74:8f:ad:7a:af: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:77:08:C3:54:0F:36:64:4B:AD:3B:00:98:5D:2F:40:B5:54:E0:B2 X509v3 Authority Key Identifier: keyid:7C:06:61:DC:90:68:83:29:23:C3:BB:72:BF:C9:27:25:3B:4B:D9:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAZh3JBogykjw7tyv8knJTtL2bg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/883866-c47a-497e-ae92-fe8fb6b34fd9/1/fAZh3JBogykjw7tyv8knJTtL2bg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:88:fe:b4:c1:e1:7b:40:0f:a9:98:33:a7:cc:7a:ee:40:6a: 49:d4:eb:40:0a:fe:2a:e5:9d:2e:35:b3:15:03:6e:3d:b1:92: 67:65:1a:4d:2c:fd:d4:f8:f3:73:2c:9f:b8:bf:3b:03:01:3d: 7b:f3:da:3f:8a:25:6c:05:dd:54:e7:91:63:4c:cc:5d:b9:d1: e1:6a:92:79:7c:51:5c:67:b7:99:aa:b2:4a:26:e4:2c:51:c6: f2:cf:ce:2f:85:4a:fb:af:62:0e:e7:4a:1d:eb:ba:56:13:dc: 82:2c:fe:d5:e3:a9:36:2f:74:70:b8:76:5a:96:6b:f8:9a:9c: 48:78:28:b8:a1:79:31:1c:ca:97:27:79:33:05:8e:de:a8:2c: 96:bf:f0:a8:de:4c:26:42:26:3c:1e:7d:16:d6:35:6b:8c:19: 13:e3:eb:db:b5:6f:4a:e3:d3:bf:dd:50:a8:43:24:98:ea:7e: fe:45:19:cb:78:7b:88:ac:12:a7:fb:0f:62:b6:0e:f0:26:00: 40:bc:90:dd:0b:9c:a8:0e:cb:bd:c4:85:3d:21:cd:1f:ec:15: 88:c7:ea:2b:fb:c1:c5:b3:51:15:60:2d:a8:80:80:d1:df:e5: 5a:78:5f:52:c2:42:3c:11:36:f2:4d:74:03:b6:d2:42:dd:83: 43:27:c9:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBsiqfgErE/jVrspPQGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDY2MWRjOTA2ODgzMjkyM2MzYmI3MmJmYzkyNzI1M2I0 YmQ5YjgwHhcNMjUxMjA2MjEwMTIwWhcNMjUxMjA3MjEwMTIwWjAzMTEwLwYDVQQD EyhkNTc3MDhjMzU0MGYzNjY0NGJhZDNiMDA5ODVkMmY0MGI1NTRlMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZiR7mzklfZ8VL/AaI2yxjtI7RKW kaAqQieyF3mEG6YrouJLKIY2oJ9/5zCPZsTzB7gqi/c8o7eYoLLxJSqa5LNH+7WO x7ID+0PhE0FlBMLlDS9G8VaxP9C1xTIbKK/I5JZayCBGzW6hNt/nV92JyJzy0VBz NEbNxbF7v0F2UOs7tVhKyRxtN760ckCqcSMP69YTSQPtzThkwDM8rIZsjodQ/2Us SdDaJV/ortx1mU0UCqDwy2YTq01jG9rFX6d6cwPmapmRQ/qTnuO2IpSlelcrPdAT r5TDh8IN/yskc7Zzuxk7Sth4XatIHFRNDwawHGcXGFVHqZxqdI+teq/cNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV3CMNUDzZkS607AJhdL0C1VOCyMB8GA1UdIwQY MBaAFHwGYdyQaIMpI8O7cr/JJyU7S9m4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFaaDNKQm9neWtqdzd0eXY4a25KVHRMMmJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84ODM4NjYtYzQ3YS00OTdlLWFlOTIt ZmU4ZmI2YjM0ZmQ5LzEvZkFaaDNKQm9neWtqdzd0eXY4a25KVHRMMmJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84ODM4NjYtYzQ3YS00OTdlLWFlOTItZmU4ZmI2YjM0ZmQ5 LzEvZkFaaDNKQm9neWtqdzd0eXY4a25KVHRMMmJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATYj+tMHh e0APqZgzp8x67kBqSdTrQAr+KuWdLjWzFQNuPbGSZ2UaTSz91PjzcyyfuL87AwE9 e/PaP4olbAXdVOeRY0zMXbnR4WqSeXxRXGe3maqySibkLFHG8s/OL4VK+69iDudK Heu6VhPcgiz+1eOpNi90cLh2WpZr+JqcSHgouKF5MRzKlyd5MwWO3qgslr/wqN5M JkImPB59FtY1a4wZE+Pr27VvSuPTv91QqEMkmOp+/kUZy3h7iKwSp/sPYrYO8CYA QLyQ3QucqA7LvcSFPSHNH+wViMfqK/vBxbNRFWAtqICA0d/lWnhfUsJCPBE28k10 A7bSQt2DQyfJ+w== -----END CERTIFICATE-----Generated at Sun Dec 7 06:32:30 2025 by rpki-client