This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json) Hash identifier: HcmDSsmYU5Y02bpLBhCxuDjL0A30mjI/hNa9LUP8O+I= Subject key identifier: CF:06:15:42:91:C5:F3:E5:01:95:0C:B9:BA:6E:9B:E4:9B:EA:95:4F Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8 Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8 Certificate serial: 019AF3F7DDBE66741B8D78A1323F57DC003A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft Manifest number: 0744 Signing time: Sat 06 Dec 2025 14:01:38 +0000 Manifest this update: Sat 06 Dec 2025 14:01:38 +0000 Manifest next update: Sun 07 Dec 2025 14:01:38 +0000 Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: oMPRd5CIPLlHMaZNzMqemYr3GKOBsBIacwSm88cYRdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:dd:be:66:74:1b:8d:78:a1:32:3f:57:dc:00:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8 Validity Not Before: Dec 6 14:01:38 2025 GMT Not After : Dec 7 14:01:38 2025 GMT Subject: CN=cf06154291c5f3e501950cb9ba6e9be49bea954f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8d:b1:18:0b:b0:de:d1:1c:76:6e:56:36:75: e9:3b:87:fa:50:34:93:c0:31:e4:2c:9f:e8:16:bb: 3e:8b:87:91:33:4e:38:f7:80:f2:4d:87:6c:dc:fa: 2a:63:7c:c2:08:fc:25:f2:2b:8f:d1:7d:7d:9d:25: 5c:6f:be:1c:a4:78:8d:95:a3:a2:c4:2a:48:6d:9c: 27:fc:95:67:8c:61:70:a8:77:8d:9e:30:cb:29:49: 0e:7b:cb:bb:59:cb:4f:db:d2:cc:db:1b:d1:fd:f3: 1f:6a:17:1d:02:09:04:79:96:85:10:ec:b6:6e:b6: 53:91:01:93:c5:5d:71:dc:b4:55:e8:f0:48:e1:ef: 57:ac:cb:16:ec:d5:f7:1c:fb:b9:31:be:8e:38:72: b2:6c:6b:1f:d9:b9:cc:48:72:b6:cd:7d:49:26:e4: 45:66:03:3e:ce:e6:05:be:f9:3b:0c:7c:4a:2e:7c: 08:2d:4a:6c:b0:8f:16:88:39:47:b1:2e:67:ab:fd: 5e:01:99:65:5a:7d:b3:0f:46:ea:52:09:42:d0:af: cf:ea:3f:25:89:8b:e7:14:f3:2c:fd:d5:4c:b9:1a: fd:7e:b3:4d:23:40:25:d8:18:0f:32:60:1a:87:39: 62:36:7c:8f:88:c9:ae:ed:db:e6:ed:40:0c:cb:5f: 3a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:15:42:91:C5:F3:E5:01:95:0C:B9:BA:6E:9B:E4:9B:EA:95:4F X509v3 Authority Key Identifier: keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9f:32:6f:be:9e:4c:39:0e:fa:3f:3d:c4:2e:ae:4c:8a:e2: 3d:ed:4c:ed:74:7e:83:eb:14:74:25:08:d8:e5:c2:83:89:53: a5:35:1f:d7:61:04:32:10:f0:08:aa:2b:81:b5:c4:bb:70:2d: 86:de:98:49:7c:8d:d8:2e:25:57:f8:44:12:6f:34:da:f1:c0: e0:8f:36:f7:15:1a:2c:9a:a6:ef:41:76:6d:d3:29:e5:eb:40: 04:9e:d8:52:e1:64:2a:46:84:c4:33:80:bf:4f:a5:91:d1:e8: 73:01:57:31:f6:25:53:a3:2c:39:41:9c:00:f4:db:90:94:cc: ec:ed:78:25:46:4d:f8:5d:97:9f:05:58:94:0c:07:45:d3:ed: dd:3b:7b:a2:d9:be:e9:ca:76:13:ea:22:40:d3:41:dc:53:d2: 46:e7:68:2a:4f:8d:53:66:ed:b4:ec:34:5d:5e:6f:39:98:b9: b8:16:24:a5:11:7a:b9:3f:dc:11:54:af:b1:ca:ef:da:d1:6a: 1d:23:c0:ba:2a:dd:66:00:8b:a6:0a:10:4c:e9:5f:71:26:37: 8e:04:61:e9:2b:32:ad:8e:b9:da:77:28:2c:bc:9f:5f:af:a9: bf:63:e0:d7:60:82:94:d0:87:f5:e6:e0:5d:21:51:ca:2c:21: 17:b4:fa:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz992+ZnQbjXihMj9X3AA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk ZjVkZDgwHhcNMjUxMjA2MTQwMTM4WhcNMjUxMjA3MTQwMTM4WjAzMTEwLwYDVQQD EyhjZjA2MTU0MjkxYzVmM2U1MDE5NTBjYjliYTZlOWJlNDliZWE5NTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI2xGAuw3tEcdm5WNnXpO4f6UDST wDHkLJ/oFrs+i4eRM04494DyTYds3PoqY3zCCPwl8iuP0X19nSVcb74cpHiNlaOi xCpIbZwn/JVnjGFwqHeNnjDLKUkOe8u7WctP29LM2xvR/fMfahcdAgkEeZaFEOy2 brZTkQGTxV1x3LRV6PBI4e9XrMsW7NX3HPu5Mb6OOHKybGsf2bnMSHK2zX1JJuRF ZgM+zuYFvvk7DHxKLnwILUpssI8WiDlHsS5nq/1eAZllWn2zD0bqUglC0K/P6j8l iYvnFPMs/dVMuRr9frNNI0Al2BgPMmAahzliNnyPiMmu7dvm7UAMy186bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8GFUKRxfPlAZUMubpum+Sb6pVPMB8GA1UdIwQY MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZ8yb76e TDkO+j89xC6uTIriPe1M7XR+g+sUdCUI2OXCg4lTpTUf12EEMhDwCKorgbXEu3At ht6YSXyN2C4lV/hEEm802vHA4I829xUaLJqm70F2bdMp5etABJ7YUuFkKkaExDOA v0+lkdHocwFXMfYlU6MsOUGcAPTbkJTM7O14JUZN+F2XnwVYlAwHRdPt3Tt7otm+ 6cp2E+oiQNNB3FPSRudoKk+NU2bttOw0XV5vOZi5uBYkpRF6uT/cEVSvscrv2tFq HSPAuirdZgCLpgoQTOlfcSY3jgRh6SsyrY652ncoLLyfX6+pv2Pg12CClNCH9ebg XSFRyiwhF7T6Pg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:14 2025 by rpki-client