This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft File: Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft (raw, json) Hash identifier: P7a1TLveuTZprt2nzK1vdu1BiACCuE3fG5G/SXj7/sc= Subject key identifier: 28:4D:00:1C:5D:44:8F:BF:6E:D4:44:38:95:29:8E:AB:C5:9D:A8:78 Authority key identifier: 16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA Certificate issuer: /CN=161e0eae77a98c3623d1781f9af4557d3541d2ba Certificate serial: 019AF19ABFF94C0C9E4C0BDE7C54F176BC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl (hash: L6sBKhhN7YgCBwD6/TdZzTRqVMiw1Lu+dz4tTlgDGyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bf:f9:4c:0c:9e:4c:0b:de:7c:54:f1:76:bc:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161e0eae77a98c3623d1781f9af4557d3541d2ba Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=284d001c5d448fbf6ed4443895298eabc59da878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a3:79:74:20:39:c7:d1:47:24:9a:3d:4d:cb: 55:a2:b4:07:9a:87:38:7b:e4:b5:f4:a4:be:4b:dc: 13:f0:b9:40:92:fd:d1:48:30:3f:e3:05:d7:b2:e3: 7b:d0:a7:1c:16:55:b4:21:1e:03:24:71:99:1b:35: c3:a6:ea:14:5d:d7:2b:34:a5:3e:23:22:17:52:eb: af:3d:cc:08:56:6c:66:b2:89:96:a7:81:40:75:83: c5:87:d9:c6:b3:f6:c2:a5:b4:7d:a6:38:00:35:8a: 90:c9:64:2e:f6:7e:83:eb:46:9a:58:00:5d:a6:c6: ef:d8:4b:cf:db:63:18:60:af:3f:48:28:6b:ca:78: 96:a9:c6:cf:c7:67:11:bb:fe:93:af:1a:76:c3:ca: 47:a2:ca:cf:95:c1:94:ae:9d:ed:e5:b1:0f:66:c4: cd:38:38:36:a3:89:69:b9:5c:b3:e9:37:41:9a:ae: 17:1b:b5:f6:0f:1f:84:9e:43:dc:84:51:a7:e8:4b: f8:74:d8:b4:69:ad:c7:85:35:de:81:ec:cd:67:82: ad:23:45:d9:5b:d8:2a:91:d9:f2:cc:6b:a6:f5:95: 1f:4e:22:ef:ef:2b:9e:f6:39:49:5f:84:27:7f:3e: 61:6a:ee:da:21:b2:1b:8a:5b:c7:8f:ad:42:4d:e8: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:4D:00:1C:5D:44:8F:BF:6E:D4:44:38:95:29:8E:AB:C5:9D:A8:78 X509v3 Authority Key Identifier: keyid:16:1E:0E:AE:77:A9:8C:36:23:D1:78:1F:9A:F4:55:7D:35:41:D2:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fh4OrnepjDYj0XgfmvRVfTVB0ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/969708-e4b9-4ab2-b50b-29dc953620c1/1/Fh4OrnepjDYj0XgfmvRVfTVB0ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:ed:89:7e:31:09:2c:1b:9f:6e:f8:62:79:ec:ee:ee:02:4b: f5:80:78:6c:2d:26:79:49:50:3b:71:9f:43:9e:80:d6:51:92: 41:8a:0a:55:09:d2:71:a5:e9:88:3c:73:a0:5b:8d:cb:b7:f9: c2:6c:f3:d6:f2:a1:54:89:42:99:7a:83:a8:20:90:22:36:7f: b6:2b:65:f5:bc:70:97:21:9a:0d:23:b1:31:29:69:8f:e8:3e: ca:0e:9c:4f:66:d0:9d:1d:6d:c3:cf:b2:3d:3e:d2:33:18:a6: ef:0b:24:05:15:76:23:02:fd:35:23:4f:3c:5a:1d:de:bc:13: 08:14:e1:d6:fd:53:6a:a8:03:9d:69:54:1a:ec:04:6d:f7:af: 5e:9a:84:d8:eb:7f:4c:d8:cb:ed:14:f7:15:b4:93:83:1b:a4: 0a:54:06:de:d7:c8:8a:7a:04:59:3d:49:01:92:87:81:43:aa: 7c:df:67:88:0c:a4:ca:7d:06:52:b2:f7:69:ab:85:7b:00:eb: 99:f8:a6:3c:64:ca:b8:24:40:e8:39:a0:f1:c1:7e:33:e7:7b: a4:a2:9f:5a:1a:92:5f:7f:d3:22:31:e9:41:65:8e:a4:e8:51: 41:79:6e:90:10:67:15:5a:12:24:5a:88:fe:24:6c:0a:53:ed: 66:c4:f3:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr/5TAyeTAvefFTxdrw+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MWUwZWFlNzdhOThjMzYyM2QxNzgxZjlhZjQ1NTdkMzU0 MWQyYmEwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD EygyODRkMDAxYzVkNDQ4ZmJmNmVkNDQ0Mzg5NTI5OGVhYmM1OWRhODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6N5dCA5x9FHJJo9TctVorQHmoc4 e+S19KS+S9wT8LlAkv3RSDA/4wXXsuN70KccFlW0IR4DJHGZGzXDpuoUXdcrNKU+ IyIXUuuvPcwIVmxmsomWp4FAdYPFh9nGs/bCpbR9pjgANYqQyWQu9n6D60aaWABd psbv2EvP22MYYK8/SChryniWqcbPx2cRu/6Trxp2w8pHosrPlcGUrp3t5bEPZsTN ODg2o4lpuVyz6TdBmq4XG7X2Dx+EnkPchFGn6Ev4dNi0aa3HhTXegezNZ4KtI0XZ W9gqkdnyzGum9ZUfTiLv7yue9jlJX4Qnfz5hau7aIbIbilvHj61CTegUuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChNABxdRI+/btREOJUpjqvFnah4MB8GA1UdIwQY MBaAFBYeDq53qYw2I9F4H5r0VX01QdK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85Njk3MDgtZTRiOS00YWIyLWI1MGIt MjlkYzk1MzYyMGMxLzEvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85Njk3MDgtZTRiOS00YWIyLWI1MGItMjlkYzk1MzYyMGMx LzEvRmg0T3JuZXBqRFlqMFhnZm12UlZmVFZCMHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+2JfjEJ LBufbvhieezu7gJL9YB4bC0meUlQO3GfQ56A1lGSQYoKVQnScaXpiDxzoFuNy7f5 wmzz1vKhVIlCmXqDqCCQIjZ/titl9bxwlyGaDSOxMSlpj+g+yg6cT2bQnR1tw8+y PT7SMxim7wskBRV2IwL9NSNPPFod3rwTCBTh1v1TaqgDnWlUGuwEbfevXpqE2Ot/ TNjL7RT3FbSTgxukClQG3tfIinoEWT1JAZKHgUOqfN9niAykyn0GUrL3aauFewDr mfimPGTKuCRA6Dmg8cF+M+d7pKKfWhqSX3/TIjHpQWWOpOhRQXlukBBnFVoSJFqI /iRsClPtZsTzoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:13:15 2025 by rpki-client