This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json) Hash identifier: vALLYKtP+7K+NM7Yx9gtToD+sAde93OG/YB037gtQXs= Subject key identifier: 6D:FF:E8:D8:BE:9C:B0:46:8C:D7:3F:49:81:85:F3:B1:7A:C6:69:8D Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9 Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9 Certificate serial: 019AF12E7A22CA5CBF7EFB26DE4F235E9DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft Manifest number: 06F0 Signing time: Sat 06 Dec 2025 01:02:26 +0000 Manifest this update: Sat 06 Dec 2025 01:02:26 +0000 Manifest next update: Sun 07 Dec 2025 01:02:26 +0000 Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: LFw5u8Ej6EWRVD6BU2UiFTenrn9odw5o4JQh975T5dw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7a:22:ca:5c:bf:7e:fb:26:de:4f:23:5e:9d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9 Validity Not Before: Dec 6 01:02:26 2025 GMT Not After : Dec 7 01:02:26 2025 GMT Subject: CN=6dffe8d8be9cb0468cd73f498185f3b17ac6698d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:ac:33:eb:c6:f8:6e:64:42:c6:65:ff:38: 82:a5:bb:c1:a7:f7:a8:70:11:c8:fe:88:60:6f:5c: 91:7f:44:39:f3:8a:c8:a9:85:05:b7:8f:2e:ae:20: 79:de:86:f2:85:2d:7b:80:a5:ee:83:d7:fc:d4:cb: f2:5c:84:47:c8:ed:80:32:d2:82:58:37:1e:a3:bd: 5b:cb:ce:98:52:4b:54:04:8c:e2:44:fc:47:3a:81: f7:50:28:d8:83:a2:b3:76:24:b0:80:07:f5:e6:ab: 9c:ac:95:df:6e:28:80:54:ae:15:02:51:73:37:ea: 6b:ad:a4:dc:74:6c:eb:34:97:4c:d7:8a:a9:0f:3c: 06:a4:63:11:16:23:23:96:cd:52:0d:62:50:50:1d: 21:1f:94:83:5a:65:e9:af:b2:98:6f:3f:37:c5:5a: 9c:49:c3:cf:80:8f:cc:64:cf:f7:8b:a7:69:55:67: f8:06:e1:96:1f:22:e0:df:37:9c:e5:dc:1c:7d:40: 5e:ae:27:eb:03:2b:8c:49:e0:bd:e5:69:a3:08:c8: 2c:0c:09:14:3d:39:12:b0:64:cf:72:10:f6:cd:fc: cc:12:be:e1:57:07:c0:a4:0a:f2:df:f6:26:60:4e: 7f:cd:50:ce:a3:0a:a2:9c:b3:4e:07:33:e2:0e:f4: f9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:FF:E8:D8:BE:9C:B0:46:8C:D7:3F:49:81:85:F3:B1:7A:C6:69:8D X509v3 Authority Key Identifier: keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ef:2d:a4:73:7d:37:9b:38:0c:ac:73:a3:d3:ee:52:cb:93: 1f:1e:41:16:4f:6a:72:1c:f4:60:39:e9:d7:03:e5:81:67:46: 4a:c9:ca:ff:07:dd:70:13:1d:4d:02:8c:7a:67:e4:e5:c9:de: b6:c8:9f:35:53:0b:b4:68:73:ba:13:fc:28:c6:02:19:90:23: 92:dd:d5:7e:94:f8:49:e2:95:4f:f1:43:dc:0c:e1:bb:83:d5: b0:f6:72:0e:bf:48:f6:ce:f9:c4:c0:d7:6c:26:8a:ff:3b:79: 54:b0:92:91:55:49:3c:b4:4c:cd:3a:e3:34:f6:4b:17:09:67: 85:c4:ea:78:94:36:b4:43:02:0e:40:71:fe:84:6d:3d:70:8e: 09:1d:f1:45:f4:cb:3f:a2:a0:a1:5b:bd:b0:ea:e5:95:bb:29: af:67:34:c7:1c:ff:13:20:14:71:82:7a:fb:1b:00:bb:67:d7: bd:81:1a:ca:1f:d8:a7:78:8a:49:dd:35:e1:04:ea:8f:5d:a9: 4f:34:91:be:4c:83:0a:d4:bd:f9:5f:32:b1:23:b5:d4:13:71: c4:b2:a4:3c:11:49:f8:e6:bf:e4:82:ef:e4:b2:aa:6d:d2:d7: 4f:7e:ea:43:b8:11:a7:96:2f:18:75:ad:1c:5a:d1:b7:ff:b9: 00:db:29:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLnoiyly/fvsm3k8jXp25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODIzMDI4YWVmZmM1OTlhZWZmYTVkZTViOTBjY2FkMzM0 OTdkYjkwHhcNMjUxMjA2MDEwMjI2WhcNMjUxMjA3MDEwMjI2WjAzMTEwLwYDVQQD Eyg2ZGZmZThkOGJlOWNiMDQ2OGNkNzNmNDk4MTg1ZjNiMTdhYzY2OThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjSsM+vG+G5kQsZl/ziCpbvBp/eo cBHI/ohgb1yRf0Q584rIqYUFt48uriB53obyhS17gKXug9f81MvyXIRHyO2AMtKC WDceo71by86YUktUBIziRPxHOoH3UCjYg6KzdiSwgAf15qucrJXfbiiAVK4VAlFz N+prraTcdGzrNJdM14qpDzwGpGMRFiMjls1SDWJQUB0hH5SDWmXpr7KYbz83xVqc ScPPgI/MZM/3i6dpVWf4BuGWHyLg3zec5dwcfUBerifrAyuMSeC95WmjCMgsDAkU PTkSsGTPchD2zfzMEr7hVwfApAry3/YmYE5/zVDOowqinLNOBzPiDvT5mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3/6Ni+nLBGjNc/SYGF87F6xmmNMB8GA1UdIwQY MBaAFHyCMCiu/8WZrv+l3luQzK0zSX25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMt Njg2OTFkYWJiZGYzLzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMtNjg2OTFkYWJiZGYz LzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMu8tpHN9 N5s4DKxzo9PuUsuTHx5BFk9qchz0YDnp1wPlgWdGSsnK/wfdcBMdTQKMemfk5cne tsifNVMLtGhzuhP8KMYCGZAjkt3VfpT4SeKVT/FD3Azhu4PVsPZyDr9I9s75xMDX bCaK/zt5VLCSkVVJPLRMzTrjNPZLFwlnhcTqeJQ2tEMCDkBx/oRtPXCOCR3xRfTL P6KgoVu9sOrllbspr2c0xxz/EyAUcYJ6+xsAu2fXvYEayh/Yp3iKSd014QTqj12p TzSRvkyDCtS9+V8ysSO11BNxxLKkPBFJ+Oa/5ILv5LKqbdLXT37qQ7gRp5YvGHWt HFrRt/+5ANspJg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:27 2025 by rpki-client