This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft File: FHVOhj0RfOYhDylUYajGqgQ8bIA.mft (raw, json) Hash identifier: PKsogKlZ24I+87TRZTTxrB08NVn7PK58avHzxD87C8Q= Subject key identifier: D6:18:FC:0E:99:34:19:E0:38:E3:49:9C:DD:3D:55:07:2F:2C:52:D3 Authority key identifier: 14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80 Certificate issuer: /CN=14754e863d117ce6210f295461a8c6aa043c6c80 Certificate serial: 019AF38945F10E7961CFCCEADF2346CF873D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:00:51 +0000 Manifest this update: Sat 06 Dec 2025 12:00:51 +0000 Manifest next update: Sun 07 Dec 2025 12:00:51 +0000 Files and hashes: 1: FHVOhj0RfOYhDylUYajGqgQ8bIA.crl (hash: CeAkEk2Xs2TVoSg5ANQrWUMfFn3RFd+8NIkYqf5z8/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:45:f1:0e:79:61:cf:cc:ea:df:23:46:cf:87:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14754e863d117ce6210f295461a8c6aa043c6c80 Validity Not Before: Dec 6 12:00:51 2025 GMT Not After : Dec 7 12:00:51 2025 GMT Subject: CN=d618fc0e993419e038e3499cdd3d55072f2c52d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:18:fa:77:b6:0e:b5:99:cf:3a:37:de:50: 18:b9:77:54:b4:6a:ca:98:b4:d9:b9:af:4c:04:bd: 4f:6a:bc:9f:eb:0f:42:60:0c:97:c8:06:ea:6a:1b: 40:60:e8:93:34:d4:b0:7b:c3:33:dc:b9:f1:37:8d: 62:19:8f:31:00:1e:f5:38:3d:51:e4:13:65:b1:1e: 23:e6:80:bf:f8:44:1b:27:78:72:7e:f9:f6:e7:0b: de:4b:8c:9c:46:b1:8e:85:c6:2a:be:92:b4:06:04: 56:e6:d4:62:5f:ab:48:bb:79:da:65:a4:0b:e4:f7: 8d:90:cf:58:b1:b7:e8:16:a8:e9:79:b5:65:c0:39: 7f:36:74:98:1d:3a:71:38:c1:ab:39:6e:1a:97:9f: 7e:24:c7:63:84:c0:5b:74:30:09:cb:35:23:0e:bb: 27:81:53:57:39:37:0e:51:6a:f2:12:a5:09:50:a5: 89:f5:cd:1a:01:e3:f1:98:74:b8:72:95:97:2c:33: 12:51:49:a4:83:37:98:9a:f2:43:7f:df:31:74:8a: 47:b5:f7:fb:94:02:8e:64:81:f0:52:6c:67:bb:dd: 66:c8:0a:ce:7d:26:20:93:43:b5:27:4d:e3:a5:76: 01:89:55:2d:f9:ad:f9:68:7e:1e:ed:d7:96:fd:e1: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:18:FC:0E:99:34:19:E0:38:E3:49:9C:DD:3D:55:07:2F:2C:52:D3 X509v3 Authority Key Identifier: keyid:14:75:4E:86:3D:11:7C:E6:21:0F:29:54:61:A8:C6:AA:04:3C:6C:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHVOhj0RfOYhDylUYajGqgQ8bIA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/d9c3c0-2eaf-4326-8ee2-a7d80e600844/1/FHVOhj0RfOYhDylUYajGqgQ8bIA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:52:4c:86:a5:9d:ac:35:0b:b1:bd:06:86:c9:8e:6e:fe:d0: 51:33:f1:21:30:28:a5:2e:b8:cc:a9:33:29:28:3b:74:b8:3b: fc:9b:46:cf:9f:a9:e2:b7:77:ca:d1:e6:29:47:ae:1d:80:70: d5:a8:11:f1:f7:8d:ab:8a:c5:18:6a:72:f8:c6:8b:dd:eb:5e: 42:24:e4:0e:ae:1b:8e:a9:7e:f3:65:79:76:83:ce:c1:b7:9d: 53:51:95:11:e6:e9:ec:4f:ba:7b:de:4b:76:ae:f4:66:48:38: 61:b1:8b:3a:58:81:62:7d:bb:d4:85:28:12:c5:b7:9d:7c:da: 81:cf:06:df:36:93:47:5f:77:3c:fd:6a:e2:ff:2e:42:fd:a2: 62:55:2e:7a:9c:d5:4a:3d:46:32:7f:70:ec:57:03:b4:0a:78: 88:2a:72:8c:9d:5b:da:04:d2:f0:9d:88:f6:50:f4:9d:eb:18: 27:ea:2d:45:52:57:80:00:97:dc:7f:11:2a:a8:d6:5a:22:a5: 8c:70:50:5f:5e:0c:8f:c8:e9:57:79:3d:60:0d:1c:b4:df:56: 2d:b8:c1:c3:58:65:e6:c0:ed:6f:6a:26:cf:21:29:38:e5:c3: 82:fb:77:96:1e:94:d5:25:17:09:47:11:2c:f9:11:1e:63:fc: 0f:90:de:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUXxDnlhz8zq3yNGz4c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzU0ZTg2M2QxMTdjZTYyMTBmMjk1NDYxYThjNmFhMDQz YzZjODAwHhcNMjUxMjA2MTIwMDUxWhcNMjUxMjA3MTIwMDUxWjAzMTEwLwYDVQQD EyhkNjE4ZmMwZTk5MzQxOWUwMzhlMzQ5OWNkZDNkNTUwNzJmMmM1MmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNwY+ne2DrWZzzo33lAYuXdUtGrK mLTZua9MBL1Paryf6w9CYAyXyAbqahtAYOiTNNSwe8Mz3LnxN41iGY8xAB71OD1R 5BNlsR4j5oC/+EQbJ3hyfvn25wveS4ycRrGOhcYqvpK0BgRW5tRiX6tIu3naZaQL 5PeNkM9YsbfoFqjpebVlwDl/NnSYHTpxOMGrOW4al59+JMdjhMBbdDAJyzUjDrsn gVNXOTcOUWryEqUJUKWJ9c0aAePxmHS4cpWXLDMSUUmkgzeYmvJDf98xdIpHtff7 lAKOZIHwUmxnu91myArOfSYgk0O1J03jpXYBiVUt+a35aH4e7deW/eFcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYY/A6ZNBngOONJnN09VQcvLFLTMB8GA1UdIwQY MBaAFBR1ToY9EXzmIQ8pVGGoxqoEPGyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTIt YTdkODBlNjAwODQ0LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kOWMzYzAtMmVhZi00MzI2LThlZTItYTdkODBlNjAwODQ0 LzEvRkhWT2hqMFJmT1loRHlsVVlhakdxZ1E4YklBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlJMhqWd rDULsb0GhsmObv7QUTPxITAopS64zKkzKSg7dLg7/JtGz5+p4rd3ytHmKUeuHYBw 1agR8feNq4rFGGpy+MaL3eteQiTkDq4bjql+82V5doPOwbedU1GVEebp7E+6e95L dq70Zkg4YbGLOliBYn271IUoEsW3nXzagc8G3zaTR193PP1q4v8uQv2iYlUuepzV Sj1GMn9w7FcDtAp4iCpyjJ1b2gTS8J2I9lD0nesYJ+otRVJXgACX3H8RKqjWWiKl jHBQX14Mj8jpV3k9YA0ctN9WLbjBw1hl5sDtb2omzyEpOOXDgvt3lh6U1SUXCUcR LPkRHmP8D5DeMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:52 2025 by rpki-client