This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json) Hash identifier: 7sb2bewgyzQ2QHdMPO4cBVLs7X0zLF903OQXTa0rSIw= Subject key identifier: 60:EE:FE:F5:8A:57:9E:E5:8F:98:8C:30:93:7D:E2:6E:7B:DE:73:C8 Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd Certificate serial: 019AF12E60EEF786913504A7B9B03F57B2C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: MlvRvMUYn7RTUZEmcSrwpFRv4sn3tOS16JXWdvxeS+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:60:ee:f7:86:91:35:04:a7:b9:b0:3f:57:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=60eefef58a579ee58f988c30937de26e7bde73c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:f8:88:87:de:6c:0b:17:af:ef:be:67:31: a0:9a:ca:e6:64:45:76:6e:c6:f0:f0:a1:54:67:af: 07:a4:21:43:61:b0:c7:01:33:1d:5a:d3:d6:8e:af: b7:bd:a6:6a:d4:0c:23:29:d4:a7:99:3f:92:5f:83: 00:e9:e9:93:b0:f5:1a:d0:03:db:8e:2b:6a:0a:ee: 35:41:f6:1a:7e:99:3f:3b:6c:1f:41:d6:dc:d7:79: ef:de:21:36:4c:b2:99:8f:61:61:70:f8:e6:90:64: 88:29:e5:0b:f2:a3:62:f4:27:40:e1:46:cb:cc:22: 05:de:39:c7:11:48:4e:8e:38:26:08:42:46:6f:f5: 92:de:50:42:7d:c4:54:c1:ed:e9:c6:84:94:26:91: 7c:24:f8:be:7d:9e:b8:37:95:91:53:d1:4e:47:04: 42:b5:d9:91:44:df:a4:7a:cc:c2:dc:ca:b0:91:f2: 7c:78:f7:df:80:fd:7d:66:bc:50:00:c9:ae:e6:25: 17:db:fc:2f:5e:64:06:56:36:b3:7b:2c:6d:a4:3b: 9e:8b:c1:34:97:e1:ba:bc:8d:6b:3e:50:dc:c9:c5: 23:72:7e:4b:d0:25:98:86:71:2a:16:ff:39:c6:93: 01:94:57:32:f2:08:0b:b4:20:ba:4c:ef:12:72:19: 01:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EE:FE:F5:8A:57:9E:E5:8F:98:8C:30:93:7D:E2:6E:7B:DE:73:C8 X509v3 Authority Key Identifier: keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6e:e9:0b:5c:e0:74:d0:a9:89:c2:d6:0c:fd:31:f7:c8:be: 77:e5:86:29:85:fe:4b:93:54:f1:b6:b7:7c:33:93:0d:93:dd: c9:4f:55:b0:04:b8:4f:a8:31:49:ab:f9:ed:d3:cc:b0:17:9b: f0:82:f7:31:e8:21:c1:0d:03:9d:eb:6f:e3:10:6e:89:e2:6f: 2c:83:26:a8:4a:e1:a2:a0:cb:e8:bd:b3:2e:a2:24:86:32:0e: b2:12:36:73:57:bc:4e:4d:ff:54:85:79:30:35:8f:08:96:30: b1:93:4b:a1:f7:5f:62:f2:1b:98:15:8d:37:80:ae:c7:9a:fc: f0:f4:62:93:e0:28:36:14:dd:05:64:70:c7:a3:55:c7:b8:13: c9:0c:d4:aa:e9:07:35:fb:5f:d4:8b:a4:8b:8b:6d:e6:74:16: 44:92:7d:c2:66:0a:04:2a:ac:1d:f3:0d:8e:40:aa:9b:d1:f2: 15:70:14:b6:10:41:d7:92:35:b5:ab:69:83:ed:16:c7:8e:5c: 48:42:22:96:11:18:8c:40:2f:0f:3e:25:d1:ec:b9:21:ce:c4: af:87:8d:52:2d:ac:59:44:e6:0b:ed:02:ac:60:b9:e2:07:a1: dd:6f:37:fd:8e:1c:ea:44:45:1e:f7:48:5c:0e:50:47:9d:f0: 26:2d:28:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmDu94aRNQSnubA/V7LDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNmQ3YTE2YzNmY2Q2NzlkMDVkMjhlZDkyMDkzNWMwODZh ZThjZmQwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg2MGVlZmVmNThhNTc5ZWU1OGY5ODhjMzA5MzdkZTI2ZTdiZGU3M2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK74iIfebAsXr+++ZzGgmsrmZEV2 bsbw8KFUZ68HpCFDYbDHATMdWtPWjq+3vaZq1AwjKdSnmT+SX4MA6emTsPUa0APb jitqCu41QfYafpk/O2wfQdbc13nv3iE2TLKZj2FhcPjmkGSIKeUL8qNi9CdA4UbL zCIF3jnHEUhOjjgmCEJGb/WS3lBCfcRUwe3pxoSUJpF8JPi+fZ64N5WRU9FORwRC tdmRRN+keszC3MqwkfJ8ePffgP19ZrxQAMmu5iUX2/wvXmQGVjazeyxtpDuei8E0 l+G6vI1rPlDcycUjcn5L0CWYhnEqFv85xpMBlFcy8ggLtCC6TO8SchkBDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDu/vWKV57lj5iMMJN94m573nPIMB8GA1UdIwQY MBaAFH5tehbD/NZ50F0o7ZIJNcCGroz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2Yt NGJmYzY2YWQwOGM5LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC81Yzc0NjgtMWEzMy00MjU1LTgyN2YtNGJmYzY2YWQwOGM5 LzEvZm0xNkZzUDgxbm5RWFNqdGtnazF3SWF1alAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG7pC1zg dNCpicLWDP0x98i+d+WGKYX+S5NU8ba3fDOTDZPdyU9VsAS4T6gxSav57dPMsBeb 8IL3MeghwQ0Dnetv4xBuieJvLIMmqErhoqDL6L2zLqIkhjIOshI2c1e8Tk3/VIV5 MDWPCJYwsZNLofdfYvIbmBWNN4Cux5r88PRik+AoNhTdBWRwx6NVx7gTyQzUqukH Nftf1Iuki4tt5nQWRJJ9wmYKBCqsHfMNjkCqm9HyFXAUthBB15I1tatpg+0Wx45c SEIilhEYjEAvDz4l0ey5Ic7Er4eNUi2sWUTmC+0CrGC54geh3W83/Y4c6kRFHvdI XA5QR53wJi0oug== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:59 2025 by rpki-client