This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft File: fuKac7j6u65GDnkk_nZoR13LmmM.mft (raw, json) Hash identifier: 3cnBxieZCp6xFugmCLR6Fwl9d7aYrD9nfHL1/CHsQo4= Subject key identifier: 77:3D:4F:42:89:88:3D:FB:85:F1:11:68:2E:52:B5:6C:31:3C:F7:48 Authority key identifier: 7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63 Certificate issuer: /CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63 Certificate serial: 019AF31D16E9D6B44E63BDF4DA36B537E251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft Manifest number: 06DC Signing time: Sat 06 Dec 2025 10:02:41 +0000 Manifest this update: Sat 06 Dec 2025 10:02:41 +0000 Manifest next update: Sun 07 Dec 2025 10:02:41 +0000 Files and hashes: 1: fuKac7j6u65GDnkk_nZoR13LmmM.crl (hash: NIOQikUIFIsl39aZj6JebnoYHNEEF29JQVETJb+aYbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:16:e9:d6:b4:4e:63:bd:f4:da:36:b5:37:e2:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee29a73b8fabbae460e7924fe7668475dcb9a63 Validity Not Before: Dec 6 10:02:41 2025 GMT Not After : Dec 7 10:02:41 2025 GMT Subject: CN=773d4f4289883dfb85f111682e52b56c313cf748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:34:29:cf:f6:66:14:bc:7c:c1:ab:70:c7: 7c:8b:9b:c4:53:ab:92:b4:f5:41:b6:64:ba:3c:23: 83:2c:fd:6c:f4:46:aa:69:82:de:f7:00:39:a7:37: 52:2c:42:32:2a:0b:83:89:62:d5:98:29:78:f0:c0: 66:74:d4:9a:e9:4c:c4:ff:00:0f:9c:cb:16:89:8b: 8a:b2:ef:a1:07:37:e1:a3:c9:6b:80:25:27:b9:eb: d2:53:cd:38:72:cb:38:8f:4f:e4:3e:5c:56:fd:9f: aa:85:d4:91:f7:de:d1:88:ab:56:72:ec:69:f5:fe: 1f:4d:a8:bc:93:a0:ca:9a:35:a7:2b:81:ae:8c:08: 98:9d:e1:77:6e:24:5b:1d:5b:14:41:e0:3b:34:f1: 9b:28:66:7a:18:d9:8f:24:fd:ad:17:d6:ae:c0:a0: 89:bd:e1:96:95:fb:c1:3e:ad:a9:e5:79:9c:bc:19: 6c:41:55:a9:1d:fa:50:84:87:ea:e7:82:22:d7:7b: 0b:8c:83:80:39:f0:b0:a9:99:37:9a:5c:8c:c6:cc: 8b:bf:e3:e4:a3:f6:de:50:d5:16:5b:e1:7e:a2:42: ea:3e:32:4a:b1:29:60:0a:25:4b:99:34:54:29:a7: d5:c1:94:82:f5:a8:cf:7b:06:a2:b2:04:7b:05:5a: b8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:3D:4F:42:89:88:3D:FB:85:F1:11:68:2E:52:B5:6C:31:3C:F7:48 X509v3 Authority Key Identifier: keyid:7E:E2:9A:73:B8:FA:BB:AE:46:0E:79:24:FE:76:68:47:5D:CB:9A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuKac7j6u65GDnkk_nZoR13LmmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/13df3e-bc22-402f-afbc-fc9ead8256ac/1/fuKac7j6u65GDnkk_nZoR13LmmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:e2:a7:df:9d:38:37:16:6b:62:03:40:99:14:15:34:be:3c: f9:0a:74:17:9a:30:25:aa:63:cc:0c:73:a6:87:71:59:df:46: 9a:45:1c:d3:2d:9d:14:22:e3:94:a1:0a:08:d5:da:34:47:96: 7f:f3:90:6c:a3:66:15:91:4b:6f:d9:5d:37:95:61:66:7e:56: a8:30:73:9c:54:97:fe:c1:c9:6c:cb:44:45:86:64:22:ce:37: 4b:12:ca:5b:f7:2d:f4:f0:0a:b6:d1:b9:88:65:8d:87:48:05: 7a:76:48:b2:16:ff:2f:e3:e6:b4:26:12:7a:04:75:92:aa:89: bd:07:87:41:a8:0d:0c:c7:f8:5b:01:de:66:4b:50:9e:0f:40: e4:07:a0:f6:72:45:5c:cf:f9:31:66:b1:84:19:31:52:8b:a3: 66:3b:0d:fc:43:f4:d2:0f:1b:21:61:eb:ae:ad:17:37:cb:fc: 98:f2:e5:81:26:38:fd:11:a8:71:a3:e0:88:35:f8:46:02:95: 94:d8:83:d6:bb:80:7c:e8:6f:36:e2:29:84:db:0c:60:6f:3e: 04:4b:24:8e:86:7b:6b:b7:a2:e5:84:48:2d:cc:c4:09:ca:f0: 26:4e:11:da:93:3b:e2:85:a9:91:88:9e:b4:8d:9c:02:18:04: 11:00:3b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRbp1rROY7302ja1N+JRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTI5YTczYjhmYWJiYWU0NjBlNzkyNGZlNzY2ODQ3NWRj YjlhNjMwHhcNMjUxMjA2MTAwMjQxWhcNMjUxMjA3MTAwMjQxWjAzMTEwLwYDVQQD Eyg3NzNkNGY0Mjg5ODgzZGZiODVmMTExNjgyZTUyYjU2YzMxM2NmNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4c0Kc/2ZhS8fMGrcMd8i5vEU6uS tPVBtmS6PCODLP1s9EaqaYLe9wA5pzdSLEIyKguDiWLVmCl48MBmdNSa6UzE/wAP nMsWiYuKsu+hBzfho8lrgCUnuevSU804css4j0/kPlxW/Z+qhdSR997RiKtWcuxp 9f4fTai8k6DKmjWnK4GujAiYneF3biRbHVsUQeA7NPGbKGZ6GNmPJP2tF9auwKCJ veGWlfvBPq2p5XmcvBlsQVWpHfpQhIfq54Ii13sLjIOAOfCwqZk3mlyMxsyLv+Pk o/beUNUWW+F+okLqPjJKsSlgCiVLmTRUKafVwZSC9ajPewaisgR7BVq4NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHc9T0KJiD37hfERaC5StWwxPPdIMB8GA1UdIwQY MBaAFH7imnO4+ruuRg55JP52aEddy5pjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8xM2RmM2UtYmMyMi00MDJmLWFmYmMt ZmM5ZWFkODI1NmFjLzEvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8xM2RmM2UtYmMyMi00MDJmLWFmYmMtZmM5ZWFkODI1NmFj LzEvZnVLYWM3ajZ1NjVHRG5ra19uWm9SMTNMbW1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnuKn3504 NxZrYgNAmRQVNL48+Qp0F5owJapjzAxzpodxWd9GmkUc0y2dFCLjlKEKCNXaNEeW f/OQbKNmFZFLb9ldN5VhZn5WqDBznFSX/sHJbMtERYZkIs43SxLKW/ct9PAKttG5 iGWNh0gFenZIshb/L+PmtCYSegR1kqqJvQeHQagNDMf4WwHeZktQng9A5Aeg9nJF XM/5MWaxhBkxUoujZjsN/EP00g8bIWHrrq0XN8v8mPLlgSY4/RGocaPgiDX4RgKV lNiD1ruAfOhvNuIphNsMYG8+BEskjoZ7a7ei5YRILczECcrwJk4R2pM74oWpkYie tI2cAhgEEQA7XA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:10:24 2025 by rpki-client