This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json) Hash identifier: WoABrq7nvW0ohrmILZILT8x5qpm5thgaMnlQu7xrAjk= Subject key identifier: 57:F0:19:50:D4:FA:58:4C:BB:A9:EE:FB:BB:19:95:20:4C:E7:1A:5F Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Certificate serial: 019AF31B41B372FF2D5A045008D459DB7DED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft Manifest number: 0869 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: 2N97hLl2xQxKIqQHfTwinBsqAWrShIJoTxPFvtYJ9g8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:41:b3:72:ff:2d:5a:04:50:08:d4:59:db:7d:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=57f01950d4fa584cbba9eefbbb1995204ce71a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5d:5b:4b:65:64:72:14:ab:c2:9c:c3:b9:cd: cf:b0:23:6a:05:94:b1:4e:b4:7e:0e:67:c9:c3:be: 63:2e:dd:f3:c0:32:bf:f9:7e:df:a4:f9:d7:8c:f5: bb:21:7f:c7:96:c7:fe:42:a2:0c:46:ee:5b:bb:42: 41:0f:a2:a8:9b:9a:ef:97:71:ef:44:9f:25:fc:7d: c0:a4:b5:46:20:5d:58:02:ee:ba:95:73:9f:c1:c4: 6c:71:a2:9d:fc:b4:63:c0:7e:f6:9e:6d:40:70:ee: 5f:92:62:76:8e:e8:17:68:f6:cd:39:f2:97:f0:67: f5:f9:0b:2d:d7:df:07:a0:d4:41:b4:9c:57:e8:a2: df:0d:69:6f:e1:91:c2:43:65:21:c1:36:a0:90:a7: d1:3e:ea:6d:eb:3b:30:be:9b:6e:74:ae:39:f8:ca: 86:10:47:f6:ce:9e:83:86:d0:18:38:62:d7:50:34: fa:a2:45:f2:cf:8d:0c:bb:a9:d6:4e:26:f3:1f:b7: 7b:6e:25:8b:c0:09:2e:3b:75:e7:ed:39:2d:06:67: 85:92:58:19:56:3a:56:55:2e:bc:84:db:7c:04:88: 09:94:e0:71:44:a7:62:c8:90:05:22:d4:79:3e:9a: 86:19:8f:3a:e0:df:49:dd:f3:a8:54:27:6f:7a:c1: d7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:F0:19:50:D4:FA:58:4C:BB:A9:EE:FB:BB:19:95:20:4C:E7:1A:5F X509v3 Authority Key Identifier: keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0f:e6:2e:69:f7:2b:71:37:63:d8:06:55:2b:18:ec:c1:b2: be:d6:49:1a:6c:7d:61:c7:48:93:eb:66:7a:76:98:d6:66:41: da:51:3a:10:d1:64:56:e9:49:55:23:9c:65:0f:59:1b:ee:db: 24:a1:7c:98:6e:84:de:ca:19:30:29:0e:86:ca:78:19:82:5e: ee:2f:e9:23:6d:7a:5b:af:3e:c1:46:23:ab:fe:37:8b:fb:05: f9:fc:17:ff:18:c1:17:fd:52:73:e3:6d:23:9c:99:53:0a:59: b0:ef:bf:ec:42:59:3c:d9:b0:8d:70:d5:5a:58:0b:a3:53:8b: 6c:b0:62:89:ca:83:7b:cc:c5:a6:b0:dd:51:2d:72:88:1c:67: fe:7f:d5:50:e8:dd:23:5f:c9:8e:72:49:55:e2:8a:b2:e4:2d: 9a:8a:6b:6b:f9:ee:4a:f3:08:c6:ad:14:8f:91:38:15:da:8a: a2:48:48:2d:35:f6:63:a1:13:d4:e6:46:17:0a:53:65:4f:ca: e9:ad:21:7f:70:13:f7:b8:38:8c:30:88:40:4c:bb:47:31:6c: b2:5f:57:f1:c7:7b:d8:d2:80:d8:c2:a9:48:55:2c:83:79:84: 5b:b7:fb:6e:a1:35:43:01:cc:96:50:09:e4:d4:b5:40:95:c4: 27:61:00:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0Gzcv8tWgRQCNRZ233tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjVlYzhlZTc5MmJiNWQwYTNjYzcwOWFkY2FlOWI2ODVh OWRlNWIwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD Eyg1N2YwMTk1MGQ0ZmE1ODRjYmJhOWVlZmJiYjE5OTUyMDRjZTcxYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx11bS2VkchSrwpzDuc3PsCNqBZSx TrR+DmfJw75jLt3zwDK/+X7fpPnXjPW7IX/Hlsf+QqIMRu5bu0JBD6Kom5rvl3Hv RJ8l/H3ApLVGIF1YAu66lXOfwcRscaKd/LRjwH72nm1AcO5fkmJ2jugXaPbNOfKX 8Gf1+Qst198HoNRBtJxX6KLfDWlv4ZHCQ2UhwTagkKfRPupt6zswvptudK45+MqG EEf2zp6DhtAYOGLXUDT6okXyz40Mu6nWTibzH7d7biWLwAkuO3Xn7TktBmeFklgZ VjpWVS68hNt8BIgJlOBxRKdiyJAFItR5PpqGGY864N9J3fOoVCdvesHXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfwGVDU+lhMu6nu+7sZlSBM5xpfMB8GA1UdIwQY MBaAFHxl7I7nkrtdCjzHCa3K6baFqd5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2Yt NjNiOTUwYWEzZTFkLzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2YtNjNiOTUwYWEzZTFk LzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjA/mLmn3 K3E3Y9gGVSsY7MGyvtZJGmx9YcdIk+tmenaY1mZB2lE6ENFkVulJVSOcZQ9ZG+7b JKF8mG6E3soZMCkOhsp4GYJe7i/pI216W68+wUYjq/43i/sF+fwX/xjBF/1Sc+Nt I5yZUwpZsO+/7EJZPNmwjXDVWlgLo1OLbLBiicqDe8zFprDdUS1yiBxn/n/VUOjd I1/JjnJJVeKKsuQtmopra/nuSvMIxq0Uj5E4FdqKokhILTX2Y6ET1OZGFwpTZU/K 6a0hf3AT97g4jDCIQEy7RzFssl9X8cd72NKA2MKpSFUsg3mEW7f7bqE1QwHMllAJ 5NS1QJXEJ2EAEA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:21:39 2025 by rpki-client