This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft File: FW-pMchet5jGgtwy5CkJ1xySOyM.mft (raw, json) Hash identifier: G2CbWZBLFz3FMQrQiJJeN76fKGlm4k8Owt7htFJgB38= Subject key identifier: 1F:AC:D0:77:D6:EC:E4:98:6A:70:3A:1A:EA:CA:6E:BD:47:D9:0E:D7 Authority key identifier: 15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23 Certificate issuer: /CN=156fa931c85eb798c682dc32e42909d71c923b23 Certificate serial: 019AF61CC8EEBB81C94B468B81EDC7549CAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft Manifest number: 064D Signing time: Sun 07 Dec 2025 00:01:12 +0000 Manifest this update: Sun 07 Dec 2025 00:01:12 +0000 Manifest next update: Mon 08 Dec 2025 00:01:12 +0000 Files and hashes: 1: FW-pMchet5jGgtwy5CkJ1xySOyM.crl (hash: gjf/89G77+mW3c1PX+bdw3trCiUAc2cFU1VbkHyaZA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:c8:ee:bb:81:c9:4b:46:8b:81:ed:c7:54:9c:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156fa931c85eb798c682dc32e42909d71c923b23 Validity Not Before: Dec 7 00:01:12 2025 GMT Not After : Dec 8 00:01:12 2025 GMT Subject: CN=1facd077d6ece4986a703a1aeaca6ebd47d90ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:89:ea:b4:7a:10:b3:2e:e4:39:ce:6d:9a: 12:33:a3:f4:45:53:9b:9f:65:47:7a:5a:2c:94:f0: 67:13:49:de:8f:34:22:24:e1:f8:a5:47:a9:fb:2d: 55:00:5b:cc:05:89:2a:36:b5:d6:e7:dc:b5:24:48: 2c:af:1d:ad:e7:0d:64:04:4a:2b:d7:2b:a3:c7:44: 95:e1:dd:eb:6f:93:94:0e:9e:5c:2f:77:9d:f8:18: 6e:2d:be:5f:df:57:e6:d4:be:54:91:cf:c0:1d:22: 76:3f:5e:76:5f:f0:ea:f5:88:3c:15:6f:cf:e4:6f: dc:2f:65:ef:5f:8e:42:89:0a:62:42:50:9b:64:ce: ae:1f:4d:ed:77:1d:56:05:4c:3e:6c:9e:41:62:3c: 99:49:e7:3b:57:ee:b8:47:bb:5a:60:c6:5e:e9:cb: a6:70:87:c9:f6:8c:87:8d:be:cf:bf:de:0d:cb:97: ec:b8:7b:e8:33:6d:a5:3b:bc:b7:b2:46:92:c5:f4: 51:42:89:ce:db:97:52:20:63:57:6e:c1:5d:ae:c5: dd:43:3b:6a:7d:ab:ca:1a:70:5c:07:84:b1:14:a5: 0d:37:df:87:60:b7:31:97:fb:0f:b7:78:88:a3:ed: f6:2a:09:db:0b:0b:d8:a6:f5:dd:21:17:2d:30:bc: 48:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:D0:77:D6:EC:E4:98:6A:70:3A:1A:EA:CA:6E:BD:47:D9:0E:D7 X509v3 Authority Key Identifier: keyid:15:6F:A9:31:C8:5E:B7:98:C6:82:DC:32:E4:29:09:D7:1C:92:3B:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW-pMchet5jGgtwy5CkJ1xySOyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec6a83-bba6-45cb-90ec-4ea806ff28cd/1/FW-pMchet5jGgtwy5CkJ1xySOyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2c:4d:a5:be:e9:76:b1:23:b3:32:46:cc:d3:0f:0f:95:2a: f6:8c:ed:92:79:a4:97:61:23:83:8a:60:03:29:e4:10:f3:e8: 7a:4b:4e:e1:56:cb:01:cb:04:a1:ce:0f:3c:a9:81:75:05:80: 88:ee:d3:41:3e:14:1b:97:d3:6a:0d:5b:9e:0d:38:ac:15:8e: 3e:e3:de:cd:b3:47:42:22:15:2f:41:8b:bf:81:c5:33:76:c1: 4f:c7:bb:f1:31:19:e6:37:dc:a5:30:f3:32:e8:04:c4:eb:1d: 38:cc:4c:d0:de:af:16:c0:58:71:60:e3:d9:5a:da:4a:47:c7: 22:9b:0a:8d:80:3a:15:e7:0d:8f:a0:c9:8b:25:4a:1f:87:a5: d7:cc:d3:1b:d3:11:69:92:b1:7e:95:d5:03:b3:28:49:33:e8: a5:bd:e5:93:f2:dd:0a:a7:8d:8a:38:87:0d:cb:70:cf:02:5c: 17:46:34:0f:e9:a4:ae:d4:a9:c6:16:82:01:51:a4:18:24:c9: 07:fb:c4:26:2e:8b:c8:9a:7b:0f:d6:b9:c2:c6:09:fc:ce:eb: a3:da:05:9e:b2:5e:3f:04:7c:98:dc:86:96:f1:8d:d4:f8:0f: bf:cd:62:ac:b7:bf:95:1a:7b:be:e3:75:4e:b0:02:ae:c3:9d: 76:fe:ff:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HMjuu4HJS0aLge3HVJyrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NmZhOTMxYzg1ZWI3OThjNjgyZGMzMmU0MjkwOWQ3MWM5 MjNiMjMwHhcNMjUxMjA3MDAwMTEyWhcNMjUxMjA4MDAwMTEyWjAzMTEwLwYDVQQD EygxZmFjZDA3N2Q2ZWNlNDk4NmE3MDNhMWFlYWNhNmViZDQ3ZDkwZWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1+J6rR6ELMu5DnObZoSM6P0RVOb n2VHeloslPBnE0nejzQiJOH4pUep+y1VAFvMBYkqNrXW59y1JEgsrx2t5w1kBEor 1yujx0SV4d3rb5OUDp5cL3ed+BhuLb5f31fm1L5Ukc/AHSJ2P152X/Dq9Yg8FW/P 5G/cL2XvX45CiQpiQlCbZM6uH03tdx1WBUw+bJ5BYjyZSec7V+64R7taYMZe6cum cIfJ9oyHjb7Pv94Ny5fsuHvoM22lO7y3skaSxfRRQonO25dSIGNXbsFdrsXdQztq favKGnBcB4SxFKUNN9+HYLcxl/sPt3iIo+32KgnbCwvYpvXdIRctMLxISwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+s0HfW7OSYanA6GurKbr1H2Q7XMB8GA1UdIwQY MBaAFBVvqTHIXreYxoLcMuQpCdcckjsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMt NGVhODA2ZmYyOGNkLzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9lYzZhODMtYmJhNi00NWNiLTkwZWMtNGVhODA2ZmYyOGNk LzEvRlctcE1jaGV0NWpHZ3R3eTVDa0oxeHlTT3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPyxNpb7p drEjszJGzNMPD5Uq9oztknmkl2Ejg4pgAynkEPPoektO4VbLAcsEoc4PPKmBdQWA iO7TQT4UG5fTag1bng04rBWOPuPezbNHQiIVL0GLv4HFM3bBT8e78TEZ5jfcpTDz MugExOsdOMxM0N6vFsBYcWDj2VraSkfHIpsKjYA6FecNj6DJiyVKH4el18zTG9MR aZKxfpXVA7MoSTPopb3lk/LdCqeNijiHDctwzwJcF0Y0D+mkrtSpxhaCAVGkGCTJ B/vEJi6LyJp7D9a5wsYJ/M7ro9oFnrJePwR8mNyGlvGN1PgPv81irLe/lRp7vuN1 TrACrsOddv7/vA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:12:43 2025 by rpki-client