This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json) Hash identifier: e32/xHJMmH6+fE3fQq0z+6HPnzhQNSZCeOQbWv+7R9o= Subject key identifier: A4:22:B1:32:11:DC:A5:AB:A5:3B:95:3E:46:6A:7C:F1:7B:A6:49:E6 Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae Certificate serial: 019B3B6C063D2B4C2125A517F5246AA5265B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft Manifest number: 0536 Signing time: Sat 20 Dec 2025 11:01:33 +0000 Manifest this update: Sat 20 Dec 2025 11:01:33 +0000 Manifest next update: Sun 21 Dec 2025 11:01:33 +0000 Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: JuP9SwIBja109wP5hw/Q+A7YePlxSFcBhKPEwuTv+Z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6c:06:3d:2b:4c:21:25:a5:17:f5:24:6a:a5:26:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae Validity Not Before: Dec 20 11:01:33 2025 GMT Not After : Dec 21 11:01:33 2025 GMT Subject: CN=a422b13211dca5aba53b953e466a7cf17ba649e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ea:61:7d:11:9b:ee:bf:52:ab:be:13:9a:76: 4c:81:89:8d:d2:a1:54:5f:75:70:28:c0:53:a4:fb: 35:5a:0d:88:2d:20:ff:2b:ce:e8:4e:36:c1:e3:93: 67:79:e4:86:3d:ca:16:6f:45:83:b1:09:73:4a:7a: a4:38:0e:42:ea:37:54:4f:ce:21:90:96:d7:cd:80: 4c:80:e5:79:d1:95:01:30:0a:d2:28:2b:e7:e4:4e: 2a:b1:b6:f3:bd:61:1a:43:47:e1:bb:59:99:59:a8: 48:d8:83:dd:7e:fb:a5:35:3d:4b:57:7e:1c:c4:e0: c1:c0:c4:a9:7a:b0:1a:bf:56:31:dd:17:a1:e1:d5: 17:00:24:5d:a0:dc:18:81:50:64:79:d9:6d:9b:2b: ac:9a:cd:6f:ef:3c:3b:eb:f3:c9:d4:24:ea:b3:71: ed:30:40:01:06:5c:59:30:dc:71:eb:16:e7:0e:9f: f0:fd:10:6b:76:64:2c:5b:4d:aa:d5:47:c2:3c:36: 3d:5a:bd:f3:46:8f:59:e9:44:a9:a9:cd:23:3b:6e: 1d:01:62:8b:ec:e0:b2:e3:45:7f:4e:e7:46:8e:e5: 65:a9:56:94:95:72:e9:36:e2:a4:40:f0:71:e8:18: 6e:e1:f7:ff:60:0e:3e:90:3a:89:3b:26:bb:e3:66: ae:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:22:B1:32:11:DC:A5:AB:A5:3B:95:3E:46:6A:7C:F1:7B:A6:49:E6 X509v3 Authority Key Identifier: keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:00:91:67:4c:e9:e1:8d:d0:1c:2b:4b:4c:d1:82:83:4b:1b: 51:99:72:8b:dd:01:a4:bc:d5:f4:25:9c:cc:b3:c5:15:72:7d: 8b:a7:fa:41:aa:d5:c8:70:dc:76:d5:bc:27:ae:31:91:7c:81: 6e:ed:d9:df:42:65:3e:ea:1c:81:b4:52:9f:b1:cc:9f:55:31: ae:18:eb:35:85:bb:b2:4b:3d:40:dd:cf:28:81:0b:9b:63:32: 23:d9:a8:ed:42:27:31:ef:02:35:42:e4:ed:58:b7:77:54:6f: b2:33:d9:55:d4:18:e9:97:96:c6:fb:b2:da:d1:0e:cf:89:5a: ff:c7:71:a0:8a:bf:99:a8:c8:c2:bc:36:e7:bd:ef:10:d8:45: 56:64:1d:20:81:19:73:8a:51:ac:6c:5a:43:62:dd:ca:e8:52: 25:c7:58:33:ae:74:64:6f:fa:f5:b4:6a:93:77:11:f0:c1:6c: 5d:74:02:ca:37:27:0b:c7:b7:77:a2:b2:65:28:0c:01:a2:9d: 54:6c:3a:e7:00:e2:1e:94:7e:bc:8c:db:52:65:86:aa:2d:56: 2e:ed:36:08:95:f7:cb:73:ee:de:9e:96:fc:87:cd:0a:dd:8f: 30:9c:0c:f2:2b:78:f2:c3:9c:d5:91:5a:1a:8b:79:b0:ec:63: 3c:14:38:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7bAY9K0whJaUX9SRqpSZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MTdkMGFmZWFiYmYzMzliMDZkYjI4M2M0YjhlMDI3YTA0 YWJjYWUwHhcNMjUxMjIwMTEwMTMzWhcNMjUxMjIxMTEwMTMzWjAzMTEwLwYDVQQD EyhhNDIyYjEzMjExZGNhNWFiYTUzYjk1M2U0NjZhN2NmMTdiYTY0OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uphfRGb7r9Sq74TmnZMgYmN0qFU X3VwKMBTpPs1Wg2ILSD/K87oTjbB45NneeSGPcoWb0WDsQlzSnqkOA5C6jdUT84h kJbXzYBMgOV50ZUBMArSKCvn5E4qsbbzvWEaQ0fhu1mZWahI2IPdfvulNT1LV34c xODBwMSperAav1Yx3Reh4dUXACRdoNwYgVBkedltmyusms1v7zw76/PJ1CTqs3Ht MEABBlxZMNxx6xbnDp/w/RBrdmQsW02q1UfCPDY9Wr3zRo9Z6USpqc0jO24dAWKL 7OCy40V/TudGjuVlqVaUlXLpNuKkQPBx6Bhu4ff/YA4+kDqJOya742au3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQisTIR3KWrpTuVPkZqfPF7pknmMB8GA1UdIwQY MBaAFBYX0K/qu/M5sG2yg8S44CegSryuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEt ZDdmMjFmYzEzNTBlLzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEtZDdmMjFmYzEzNTBl LzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANACRZ0zp 4Y3QHCtLTNGCg0sbUZlyi90BpLzV9CWczLPFFXJ9i6f6QarVyHDcdtW8J64xkXyB bu3Z30JlPuocgbRSn7HMn1UxrhjrNYW7sks9QN3PKIELm2MyI9mo7UInMe8CNULk 7Vi3d1RvsjPZVdQY6ZeWxvuy2tEOz4la/8dxoIq/majIwrw2573vENhFVmQdIIEZ c4pRrGxaQ2LdyuhSJcdYM650ZG/69bRqk3cR8MFsXXQCyjcnC8e3d6KyZSgMAaKd VGw65wDiHpR+vIzbUmWGqi1WLu02CJX3y3Pu3p6W/IfNCt2PMJwM8it48sOc1ZFa Got5sOxjPBQ4Cw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:46 2025 by rpki-client