This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json) Hash identifier: TeKkJALZkiOcr5uf6RCcGmmNWe1R1WxrZOIPCXRhfJU= Subject key identifier: D2:06:DB:75:19:BF:74:B7:27:6D:E1:85:99:BF:D3:25:8E:EB:9D:11 Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9 Certificate serial: 019AF1D1C146C38FB164E66DB10B573CCA5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft Manifest number: 069E Signing time: Sat 06 Dec 2025 04:00:46 +0000 Manifest this update: Sat 06 Dec 2025 04:00:46 +0000 Manifest next update: Sun 07 Dec 2025 04:00:46 +0000 Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: ZJfQvwyo6H18fcskgVu/AmmDAwBuKKL3BlqlhhPv/RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:c1:46:c3:8f:b1:64:e6:6d:b1:0b:57:3c:ca:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9 Validity Not Before: Dec 6 04:00:46 2025 GMT Not After : Dec 7 04:00:46 2025 GMT Subject: CN=d206db7519bf74b7276de18599bfd3258eeb9d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:44:43:aa:47:54:1b:a3:cd:13:2b:74:f3: f6:b5:e1:7f:6d:40:1f:da:53:b4:7e:12:da:9e:53: b3:a4:ac:1f:2a:89:7a:95:a2:35:b9:6c:6e:db:ce: d2:c1:d2:e9:6c:c9:74:b1:86:6e:7f:6b:03:89:50: f0:a4:17:c8:99:c8:dc:76:77:ae:58:0c:11:a8:db: f4:64:81:58:27:f1:b5:f5:5b:3f:01:dd:dd:7b:95: 37:cf:1c:ab:4c:78:4e:46:c7:b9:7e:ca:82:93:27: a7:cf:1f:f1:79:da:6c:a9:22:77:da:6b:a8:a5:74: 32:f9:f2:10:92:7e:7f:94:b8:53:01:c8:17:6b:8d: d2:19:b2:4f:6f:65:02:b0:f3:79:27:68:00:6d:20: b5:5f:94:35:24:b0:15:3c:88:3e:74:50:18:e6:12: 26:38:99:f4:ea:19:45:da:6b:c1:ff:de:7c:71:4b: 39:de:c0:aa:65:26:47:6c:44:08:22:a6:dc:a4:76: 29:2c:69:21:92:0e:88:c0:e4:94:d5:49:79:e3:39: 28:c1:e4:b4:f6:49:1e:bb:ff:41:d0:08:62:75:1a: e0:00:51:d3:21:7e:5a:0f:aa:61:8c:d4:dc:5e:1e: e5:15:2f:f7:4e:38:93:16:5a:2d:1c:84:c5:dc:bd: 4f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:DB:75:19:BF:74:B7:27:6D:E1:85:99:BF:D3:25:8E:EB:9D:11 X509v3 Authority Key Identifier: keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fc:26:51:61:40:17:5d:1d:04:01:e1:1d:e5:77:ad:aa:06: b1:8f:35:89:7e:ef:c8:2b:4e:62:7b:1c:94:dd:81:31:5a:82: 84:9f:bf:ad:6b:59:58:0e:bb:7a:68:91:74:ce:fe:42:f7:4d: 90:87:bf:1e:16:c1:30:0d:2b:7c:1d:71:87:78:fb:f7:d6:bb: 2d:3c:f6:59:a0:8f:a9:ea:be:9a:45:c5:15:04:15:d7:f3:51: b9:ab:8c:19:40:b7:4e:70:ce:66:00:13:61:28:b4:3d:6e:80: eb:8c:74:20:be:80:e5:4e:57:ef:32:96:d8:54:14:97:3a:43: 6d:c6:a0:c2:6d:11:ed:92:53:b6:02:21:1c:b0:0f:05:e1:44: 9f:c6:09:9b:c9:85:26:0b:6b:17:49:75:37:91:e2:92:85:6b: a3:6b:3d:1a:53:58:e9:80:4a:2a:2c:00:9f:66:f1:96:96:e5: 16:02:0d:06:83:c9:53:3c:75:e7:0c:89:97:d8:94:69:ef:ef: 85:42:46:4f:f7:26:65:f2:d4:d9:15:f3:fe:84:14:08:58:5a: a9:77:eb:a2:18:6e:05:7e:1b:84:0d:fc:77:a5:7f:22:e6:db: b0:18:34:0e:f6:0f:ab:34:8e:de:30:0a:ac:67:b0:ab:72:ab: 83:07:5f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0cFGw4+xZOZtsQtXPMpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZmEyZTcwNWQyMzNmZmYzNDVhOTEyYjJmMjM5YjVhY2Uz NzJiYjkwHhcNMjUxMjA2MDQwMDQ2WhcNMjUxMjA3MDQwMDQ2WjAzMTEwLwYDVQQD EyhkMjA2ZGI3NTE5YmY3NGI3Mjc2ZGUxODU5OWJmZDMyNThlZWI5ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUtEQ6pHVBujzRMrdPP2teF/bUAf 2lO0fhLanlOzpKwfKol6laI1uWxu287SwdLpbMl0sYZuf2sDiVDwpBfImcjcdneu WAwRqNv0ZIFYJ/G19Vs/Ad3de5U3zxyrTHhORse5fsqCkyenzx/xedpsqSJ32muo pXQy+fIQkn5/lLhTAcgXa43SGbJPb2UCsPN5J2gAbSC1X5Q1JLAVPIg+dFAY5hIm OJn06hlF2mvB/958cUs53sCqZSZHbEQIIqbcpHYpLGkhkg6IwOSU1Ul54zkoweS0 9kkeu/9B0AhidRrgAFHTIX5aD6phjNTcXh7lFS/3TjiTFlotHITF3L1PtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIG23UZv3S3J23hhZm/0yWO650RMB8GA1UdIwQY MBaAFH76LnBdIz//NFqRKy8jm1rONyu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEt Nzc4MjdmZTE1NTViLzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEtNzc4MjdmZTE1NTVi LzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvwmUWFA F10dBAHhHeV3raoGsY81iX7vyCtOYnsclN2BMVqChJ+/rWtZWA67emiRdM7+QvdN kIe/HhbBMA0rfB1xh3j799a7LTz2WaCPqeq+mkXFFQQV1/NRuauMGUC3TnDOZgAT YSi0PW6A64x0IL6A5U5X7zKW2FQUlzpDbcagwm0R7ZJTtgIhHLAPBeFEn8YJm8mF JgtrF0l1N5HikoVro2s9GlNY6YBKKiwAn2bxlpblFgINBoPJUzx15wyJl9iUae/v hUJGT/cmZfLU2RXz/oQUCFhaqXfrohhuBX4bhA38d6V/IubbsBg0DvYPqzSO3jAK rGewq3KrgwdfMw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:25:49 2025 by rpki-client