This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft File: FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json) Hash identifier: BHe0NiTqan/m473YW3TtluelykkctmJ9ZScKiCVLA7A= Subject key identifier: BA:2C:20:FC:F5:D2:C3:EA:06:C8:F3:FB:F0:7A:B6:CE:4E:F5:92:66 Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77 Certificate issuer: /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77 Certificate serial: 019AF61CE141D78FEED8E4447061E95FEB7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft Manifest number: 1760 Signing time: Sun 07 Dec 2025 00:01:19 +0000 Manifest this update: Sun 07 Dec 2025 00:01:19 +0000 Manifest next update: Mon 08 Dec 2025 00:01:19 +0000 Files and hashes: 1: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: 0GvbGM6Gt5Lkw6HB3pib4QQeEopTuRnZHtFuftuR45I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:e1:41:d7:8f:ee:d8:e4:44:70:61:e9:5f:eb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77 Validity Not Before: Dec 7 00:01:19 2025 GMT Not After : Dec 8 00:01:19 2025 GMT Subject: CN=ba2c20fcf5d2c3ea06c8f3fbf07ab6ce4ef59266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2c:90:26:63:21:66:1c:d6:e6:80:9a:7c:bb: 13:d9:3c:6e:be:a6:8f:18:60:45:0b:9b:3a:9c:34: 19:23:1d:79:e9:3d:b9:4a:87:00:36:bd:ef:fe:de: f9:57:a6:c3:c3:36:2f:ec:68:93:58:20:d5:6b:3a: f5:7e:56:dd:f0:23:d9:20:ea:b9:9b:c3:1d:c8:c8: 7e:ad:34:12:22:80:2c:0b:31:d0:46:4c:88:3f:39: 5e:05:5c:41:3b:0a:2a:04:af:1f:fe:8e:94:16:ee: 21:4d:c8:a6:6f:5f:42:69:69:40:1a:b1:c4:f2:3a: 22:a4:f8:f5:25:f0:cf:47:71:87:a0:74:9b:57:99: 7b:b9:77:69:f7:eb:99:9f:04:79:33:71:67:f9:cc: 92:d6:7a:58:3f:1a:a4:1a:01:64:94:84:36:3d:85: 33:34:d8:df:ed:2b:a2:64:8c:83:35:ef:7e:ef:26: d6:96:ba:37:92:26:47:bd:8e:cf:3a:41:49:b8:84: 2a:ce:2e:04:fe:d5:2a:62:23:6e:cb:6e:6e:7e:ea: 25:80:75:91:a9:49:21:21:b9:36:74:c9:66:af:c4: d9:63:74:f1:7b:8b:14:19:26:7f:a0:07:21:99:ee: ae:9f:6b:e0:35:76:38:7a:d3:a2:d5:55:30:e8:f1: 72:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2C:20:FC:F5:D2:C3:EA:06:C8:F3:FB:F0:7A:B6:CE:4E:F5:92:66 X509v3 Authority Key Identifier: keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1d:41:0d:9f:12:3b:02:e6:98:0c:a4:14:1a:f6:95:ae:f7: 52:48:7d:76:86:a7:fa:d2:85:b5:0e:c8:6c:b2:61:62:ca:d2: 1c:3d:89:29:07:d9:e7:cd:b3:b4:df:12:c8:ad:9d:0a:91:5f: 6f:cc:0b:a1:4b:09:08:68:5f:07:04:57:c8:4f:25:2f:86:7a: ef:0c:0a:1f:3c:e0:ec:83:86:d5:2d:ff:1c:f5:0d:bc:11:bb: 24:9c:22:d1:9e:95:95:17:a2:6a:a1:16:2c:c8:e4:21:0e:05: 35:2f:f6:90:03:16:f6:96:96:1c:fd:1f:0d:32:1e:f2:eb:f5: 78:bf:94:c3:ff:22:73:63:ed:0e:07:97:be:21:4a:e6:2b:20: d6:7d:80:5c:2d:52:17:2e:10:1c:3b:58:dc:78:d8:86:1b:7e: a9:9c:ff:d9:ca:7a:6e:6b:ab:ee:78:e7:88:7e:04:ed:4c:43: d0:b7:2d:f1:1e:42:ee:34:0f:e6:0a:86:d0:9d:8d:52:34:75: 52:5e:3d:bb:4e:fa:ae:61:86:f6:7f:af:0d:15:56:3d:b9:d7: 6a:61:bc:eb:7c:59:bb:d5:c2:c5:14:7f:6f:7e:f2:2f:55:a4: 48:2f:8c:37:b3:47:b4:e4:02:b2:2f:a7:b8:3f:9a:d2:1f:aa: a7:f4:ab:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOFB14/u2OREcGHpX+t6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YmE2NmJjMGZjM2IyNmJhZGQ3MmZiNWJiODM4N2I2ZGJj MzNmNzcwHhcNMjUxMjA3MDAwMTE5WhcNMjUxMjA4MDAwMTE5WjAzMTEwLwYDVQQD EyhiYTJjMjBmY2Y1ZDJjM2VhMDZjOGYzZmJmMDdhYjZjZTRlZjU5MjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSyQJmMhZhzW5oCafLsT2TxuvqaP GGBFC5s6nDQZIx156T25SocANr3v/t75V6bDwzYv7GiTWCDVazr1flbd8CPZIOq5 m8MdyMh+rTQSIoAsCzHQRkyIPzleBVxBOwoqBK8f/o6UFu4hTcimb19CaWlAGrHE 8joipPj1JfDPR3GHoHSbV5l7uXdp9+uZnwR5M3Fn+cyS1npYPxqkGgFklIQ2PYUz NNjf7SuiZIyDNe9+7ybWlro3kiZHvY7POkFJuIQqzi4E/tUqYiNuy25ufuolgHWR qUkhIbk2dMlmr8TZY3Txe4sUGSZ/oAchme6un2vgNXY4etOi1VUw6PFy0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLosIPz10sPqBsjz+/B6ts5O9ZJmMB8GA1UdIwQY MBaAFBW6ZrwPw7JrrdcvtbuDh7bbwz93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMt YzE3ODRkZmQ2Zjc5LzEvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yZTI2N2UtODk0OS00MzE4LTgzMzMtYzE3ODRkZmQ2Zjc5 LzEvRmJwbXZBX0RzbXV0MXktMXU0T0h0dHZEUDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnh1BDZ8S OwLmmAykFBr2la73Ukh9doan+tKFtQ7IbLJhYsrSHD2JKQfZ582ztN8SyK2dCpFf b8wLoUsJCGhfBwRXyE8lL4Z67wwKHzzg7IOG1S3/HPUNvBG7JJwi0Z6VlReiaqEW LMjkIQ4FNS/2kAMW9paWHP0fDTIe8uv1eL+Uw/8ic2PtDgeXviFK5isg1n2AXC1S Fy4QHDtY3HjYhht+qZz/2cp6bmur7njniH4E7UxD0Lct8R5C7jQP5gqG0J2NUjR1 Ul49u076rmGG9n+vDRVWPbnXamG863xZu9XCxRR/b37yL1WkSC+MN7NHtOQCsi+n uD+a0h+qp/Sr/A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:00 2025 by rpki-client