This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json) Hash identifier: 4I145nKb5O1uKhfUjZD/lkz8W/h5oraXIIMKhnZdjQ0= Subject key identifier: 71:7F:D7:2A:07:3C:39:AE:9E:1A:9A:9F:6E:42:13:82:87:56:F1:72 Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99 Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799 Certificate serial: 019AF1D18D045EC561D6E53EF1A333BF5D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft Manifest number: 096C Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: XTVEZbDvg+VOuwBcbHMi++Dg4dRjJ13DKsVRVlN9VkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8d:04:5e:c5:61:d6:e5:3e:f1:a3:33:bf:5d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=717fd72a073c39ae9e1a9a9f6e4213828756f172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a4:68:ec:dc:48:ac:53:6e:62:36:29:64:f4: f4:37:da:7c:42:67:d1:e6:96:2d:91:1e:24:35:1f: cd:ea:7e:31:b6:9e:e4:27:34:35:85:fa:4a:4d:0b: af:b6:ba:ed:45:56:4c:cb:1b:25:05:f4:24:40:dd: 98:a5:39:ff:2b:c3:d1:64:4b:40:aa:66:bb:2d:5e: 1e:b8:c3:ea:d3:61:47:be:04:ec:f6:29:3d:90:f6: 1e:06:64:a7:a0:12:84:0f:5a:df:72:da:1b:23:a5: 47:e5:c7:5b:ae:46:56:33:b0:e4:8d:45:47:e3:dc: df:c0:c8:94:13:52:32:b4:d2:1d:0b:58:4a:3b:fb: 3a:a5:8d:11:4f:d8:3f:b6:e6:6b:5b:b5:60:69:e0: 90:aa:57:52:34:ca:c3:54:0f:c8:f4:02:5d:a9:41: 77:1b:99:5e:a9:62:ae:92:77:3a:1f:0e:4e:c7:4e: 6d:fd:47:f4:5f:03:f5:98:d2:10:0b:31:eb:44:d4: a3:09:33:e7:1c:ff:a1:02:a0:d2:5e:7d:20:b3:0a: 5a:b8:9d:5c:ac:7c:09:c9:5a:b7:25:ec:62:ea:40: b9:9c:0e:02:82:b6:be:54:e6:af:de:50:77:e6:80: 3b:86:18:8c:93:01:0b:bd:99:49:ce:04:77:7c:b2: fd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:D7:2A:07:3C:39:AE:9E:1A:9A:9F:6E:42:13:82:87:56:F1:72 X509v3 Authority Key Identifier: keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9a:4d:f8:be:b8:a2:05:42:b7:58:1a:60:31:bd:5c:f2:44: d3:f4:e6:91:e3:98:d9:c7:29:84:2e:82:7b:c5:fc:ae:39:cd: ff:97:db:54:7f:56:74:3e:2d:09:e2:1a:9a:c4:22:cb:52:80: dc:c5:81:34:92:1c:ee:40:56:c6:b9:78:1a:51:aa:49:9f:fb: 36:8d:71:44:88:1d:b0:1c:e8:ae:dc:f3:b2:4f:f4:db:3f:4f: da:db:ad:e8:9b:ab:49:1c:64:1b:f2:4b:1c:7b:f6:be:b9:cf: 15:ad:1f:41:ab:41:f4:ca:be:de:f4:2e:b8:d5:db:5f:84:6d: 55:ee:38:8e:04:d9:58:ae:69:c0:8a:06:cb:27:03:9c:7e:c9: 18:1b:d4:06:5c:59:c3:7a:86:6c:84:a2:00:87:4c:82:f0:c1: f4:83:6e:a6:c3:26:ed:39:90:80:35:9c:1a:c2:f0:8d:a9:f4: 5d:90:31:6f:8c:88:b4:b3:a7:89:58:6e:7f:f5:37:bb:44:89: 24:8f:ef:2e:3e:32:53:d4:ff:ef:99:5e:6d:c6:2e:d4:01:b8: bb:40:eb:37:f3:fd:96:53:cb:5b:48:53:76:a9:c9:5f:15:1f: c4:88:6c:7a:3c:56:93:e5:70:1f:b7:25:79:ca:d0:02:b1:4f: 92:aa:d7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y0EXsVh1uU+8aMzv11qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1 MGU3OTkwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD Eyg3MTdmZDcyYTA3M2MzOWFlOWUxYTlhOWY2ZTQyMTM4Mjg3NTZmMTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6Ro7NxIrFNuYjYpZPT0N9p8QmfR 5pYtkR4kNR/N6n4xtp7kJzQ1hfpKTQuvtrrtRVZMyxslBfQkQN2YpTn/K8PRZEtA qma7LV4euMPq02FHvgTs9ik9kPYeBmSnoBKED1rfctobI6VH5cdbrkZWM7DkjUVH 49zfwMiUE1IytNIdC1hKO/s6pY0RT9g/tuZrW7VgaeCQqldSNMrDVA/I9AJdqUF3 G5leqWKuknc6Hw5Ox05t/Uf0XwP1mNIQCzHrRNSjCTPnHP+hAqDSXn0gswpauJ1c rHwJyVq3Jexi6kC5nA4Cgra+VOav3lB35oA7hhiMkwELvZlJzgR3fLL9XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF/1yoHPDmunhqan25CE4KHVvFyMB8GA1UdIwQY MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZpN+L64 ogVCt1gaYDG9XPJE0/TmkeOY2ccphC6Ce8X8rjnN/5fbVH9WdD4tCeIamsQiy1KA 3MWBNJIc7kBWxrl4GlGqSZ/7No1xRIgdsBzortzzsk/02z9P2tut6JurSRxkG/JL HHv2vrnPFa0fQatB9Mq+3vQuuNXbX4RtVe44jgTZWK5pwIoGyycDnH7JGBvUBlxZ w3qGbISiAIdMgvDB9INupsMm7TmQgDWcGsLwjan0XZAxb4yItLOniVhuf/U3u0SJ JI/vLj4yU9T/75lebcYu1AG4u0DrN/P9llPLW0hTdqnJXxUfxIhsejxWk+VwH7cl ecrQArFPkqrX4g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:21:01 2025 by rpki-client