This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json) Hash identifier: 5U8W72LXx1PkbdmuH5Eo5d8qlzBhLyThYeK5bUX7XDU= Subject key identifier: 9B:B4:37:45:0C:26:29:4D:4D:AF:8F:F7:F3:E4:07:5B:D1:78:1F:A1 Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Certificate serial: 019AF31D011D5014EA87764D68046E82B2C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:35 +0000 Manifest this update: Sat 06 Dec 2025 10:02:35 +0000 Manifest next update: Sun 07 Dec 2025 10:02:35 +0000 Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: f5Q5fbLw2ppvJa4Q+l4twuZgREbYgp5grCbV3FSFLKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:01:1d:50:14:ea:87:76:4d:68:04:6e:82:b2:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Validity Not Before: Dec 6 10:02:35 2025 GMT Not After : Dec 7 10:02:35 2025 GMT Subject: CN=9bb437450c26294d4daf8ff7f3e4075bd1781fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:03:e8:c1:c7:96:a4:e9:a5:b8:12:08:4a: 8d:d8:ea:89:f6:fb:f1:06:22:8d:1f:7a:e0:45:05: 2a:dd:3b:36:ac:b2:21:1b:3b:44:37:a9:42:f9:9f: 41:9e:af:99:0d:5f:77:f3:aa:bf:f6:fc:b4:28:23: 8f:c6:27:3f:11:b6:a6:ff:15:57:47:8c:fc:a0:5a: ca:c5:b7:a7:c7:69:43:be:f2:e1:31:74:0c:8d:a2: 29:89:14:35:b7:e0:b7:a7:46:bc:1c:19:a9:ae:a0: cc:a7:31:fb:f4:b4:d1:0f:a5:27:f6:85:c6:66:f5: 7a:34:94:72:7a:20:75:57:de:e8:f6:b6:f2:d9:15: c0:03:a4:ec:a4:2e:ed:6a:ea:84:30:35:39:bd:5b: 88:75:5e:69:f3:ac:c5:61:11:1a:88:99:0f:9c:02: 5c:34:14:55:f6:56:50:87:a5:56:94:d9:0e:fe:45: 37:b8:25:14:e3:62:aa:6f:e6:ea:ba:8f:8b:ce:b6: d3:30:77:9f:30:83:35:49:f1:c7:d3:0f:b9:45:53: 8c:44:f4:18:0b:58:52:c6:70:c7:3a:9f:1c:98:d9: 73:0b:d1:0c:62:c3:f0:3c:b1:24:d8:67:c0:f2:56: 44:6c:a0:2e:72:d0:4b:c8:90:a7:78:2b:d5:6d:e8: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B4:37:45:0C:26:29:4D:4D:AF:8F:F7:F3:E4:07:5B:D1:78:1F:A1 X509v3 Authority Key Identifier: keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d7:b4:44:d1:c1:b3:39:95:19:75:28:f1:0e:db:61:f7:be: 1c:29:7d:23:14:46:49:14:68:49:89:a4:34:d5:e4:2f:9b:20: 0a:01:04:07:8a:03:13:ff:f1:5b:dd:e7:11:5d:67:e4:6e:83: 43:9c:57:ae:9d:a8:be:57:e0:a2:bc:99:2d:28:97:25:29:6f: aa:41:2c:bc:c5:35:89:9a:3e:20:f4:00:49:41:51:d3:c3:b0: a5:99:8e:58:21:55:a7:5f:7b:63:dd:12:00:fa:9a:7c:e9:22: 05:37:b2:19:34:05:cd:e3:f5:59:f6:4c:cb:d0:21:aa:68:a2: 1e:32:22:d0:53:9d:00:89:d1:17:7b:20:fd:62:26:2e:87:cb: bd:67:84:68:92:c1:0c:6e:5a:b1:e6:87:4f:bc:c5:80:ad:bd: 3d:4a:28:58:d2:a8:a0:e5:1a:89:77:5c:17:bd:49:34:fa:bc: 35:28:78:44:23:32:dc:54:dc:81:01:6a:95:1f:82:59:e4:c6: ba:70:a3:c2:b9:1a:f5:b2:b7:60:be:af:3f:fa:d5:3a:fe:ed: dc:1b:46:db:a2:c5:6d:2f:d8:f4:f5:b3:7c:e5:c0:15:25:60: 99:61:3f:54:5b:d8:d5:0b:0b:ff:63:fe:22:ed:09:11:f7:bd: 8e:84:02:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHQEdUBTqh3ZNaARugrLJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl NDZlNmIwHhcNMjUxMjA2MTAwMjM1WhcNMjUxMjA3MTAwMjM1WjAzMTEwLwYDVQQD Eyg5YmI0Mzc0NTBjMjYyOTRkNGRhZjhmZjdmM2U0MDc1YmQxNzgxZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPED6MHHlqTppbgSCEqN2OqJ9vvx BiKNH3rgRQUq3Ts2rLIhGztEN6lC+Z9Bnq+ZDV9386q/9vy0KCOPxic/Ebam/xVX R4z8oFrKxbenx2lDvvLhMXQMjaIpiRQ1t+C3p0a8HBmprqDMpzH79LTRD6Un9oXG ZvV6NJRyeiB1V97o9rby2RXAA6TspC7tauqEMDU5vVuIdV5p86zFYREaiJkPnAJc NBRV9lZQh6VWlNkO/kU3uCUU42Kqb+bquo+LzrbTMHefMIM1SfHH0w+5RVOMRPQY C1hSxnDHOp8cmNlzC9EMYsPwPLEk2GfA8lZEbKAuctBLyJCneCvVbehwxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu0N0UMJilNTa+P9/PkB1vReB+hMB8GA1UdIwQY MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5 LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOte0RNHB szmVGXUo8Q7bYfe+HCl9IxRGSRRoSYmkNNXkL5sgCgEEB4oDE//xW93nEV1n5G6D Q5xXrp2ovlfgoryZLSiXJSlvqkEsvMU1iZo+IPQASUFR08OwpZmOWCFVp197Y90S APqafOkiBTeyGTQFzeP1WfZMy9AhqmiiHjIi0FOdAInRF3sg/WImLofLvWeEaJLB DG5aseaHT7zFgK29PUooWNKooOUaiXdcF71JNPq8NSh4RCMy3FTcgQFqlR+CWeTG unCjwrka9bK3YL6vP/rVOv7t3BtG26LFbS/Y9PWzfOXAFSVgmWE/VFvY1QsL/2P+ Iu0JEfe9joQC/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:38:51 2025 by rpki-client