This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft File: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft (raw, json) Hash identifier: clV43Mq/uNzQdSPrC+ZG9Go4i5u2aI4DwFYri1iV8cs= Subject key identifier: FE:6E:AE:A9:76:DE:96:0E:9A:8A:11:61:0E:01:41:47:10:90:32:7E Authority key identifier: FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 Certificate issuer: /CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Certificate serial: 019AF12E527F0FF87E4B20FDDA7EDF42753E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: _lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl (hash: H5yVTtMmM2qxKO4OYO+4wXDXFom+EVqIJam4xgIiBXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:52:7f:0f:f8:7e:4b:20:fd:da:7e:df:42:75:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe51bda6cdc898f674441fce5c7421b46f611d59 Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=fe6eaea976de960e9a8a11610e0141471090327e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cc:25:5f:e4:3b:db:f6:6e:e5:42:46:22:6e: 3d:19:d8:94:9b:2e:c9:b7:e4:64:0a:c6:c4:72:4f: 9b:ac:7d:90:96:11:9f:91:03:b5:11:4f:b1:d2:a6: bb:76:16:2b:82:da:4f:9c:7b:3a:18:ee:e0:78:a3: 8f:fa:62:e0:f6:31:81:d4:03:24:c7:1b:02:04:22: 60:e0:61:24:f3:ee:a0:36:37:db:e5:c2:f6:00:e2: 97:fe:b1:2f:b3:6c:62:b7:a9:e1:81:75:21:f8:fc: 71:56:ea:76:64:be:44:f6:32:35:3c:b1:2e:b8:5b: c1:23:b7:92:79:d5:0e:cd:c0:75:4e:d7:20:48:2f: 73:e8:13:bc:26:3e:0d:b7:62:44:1d:b2:80:a2:57: ea:5f:95:b9:ea:5f:1b:74:1e:49:70:02:c0:c7:37: 18:ae:3a:54:9b:07:50:09:08:e2:82:31:3b:0d:5d: 9f:31:82:4b:58:a4:75:a5:85:6f:2b:89:b8:7e:07: 44:d1:19:74:09:6c:20:0d:82:00:71:05:97:33:16: ef:21:eb:34:77:d2:d2:e1:f2:06:05:e2:15:02:2b: 50:7a:fc:71:65:94:bc:ed:e9:dd:b2:31:74:ad:dd: 5c:7d:68:d1:ed:ff:b8:7d:ef:25:08:31:e1:9f:a7: dc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:AE:A9:76:DE:96:0E:9A:8A:11:61:0E:01:41:47:10:90:32:7E X509v3 Authority Key Identifier: keyid:FE:51:BD:A6:CD:C8:98:F6:74:44:1F:CE:5C:74:21:B4:6F:61:1D:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0409ad-f568-4919-ada7-d4c0c88c05df/1/_lG9ps3ImPZ0RB_OXHQhtG9hHVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:36:49:43:b2:dd:4a:ab:a0:18:15:02:bb:a0:ac:15:4e:b1: 53:97:85:19:b1:d0:f7:1f:79:66:e2:8e:74:05:5a:da:a9:a9: 5f:39:31:57:09:65:58:b1:cd:67:60:d0:51:c6:29:59:e8:87: b2:66:9d:19:ff:93:9b:f9:91:33:c0:fc:95:e1:dc:d2:c7:ec: 70:5a:f6:f2:2b:57:d2:a2:1e:68:73:1f:a1:95:2f:31:20:db: 87:30:88:3d:33:bf:81:12:98:6a:bb:3f:73:e8:2d:6c:c6:94: b0:24:a6:04:65:1c:1c:0e:c0:f5:ba:3e:d6:86:fe:dd:f4:6a: 64:90:2a:c9:07:83:6b:c3:45:1a:40:d8:c5:22:97:08:26:35: 95:8a:aa:9d:4c:3e:66:19:99:f5:f2:f8:d2:e7:b0:49:55:38: c0:fa:60:14:c4:f6:2f:d1:51:32:2e:75:c7:04:df:4a:5a:d3: a8:31:13:9e:10:be:d5:fe:a7:c3:56:31:4c:0e:29:e1:f7:f3: 8f:25:a5:31:3c:41:d5:9a:6c:56:27:ae:29:01:e9:97:e7:e3: 26:84:3f:1c:a5:c3:93:d9:f0:0b:5f:cb:c1:98:eb:b4:86:de: 94:38:a3:d8:91:80:a8:b2:6a:d5:7b:9c:9d:2a:17:6d:9e:0f: 67:5e:57:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlJ/D/h+SyD92n7fQnU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTFiZGE2Y2RjODk4ZjY3NDQ0MWZjZTVjNzQyMWI0NmY2 MTFkNTkwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD EyhmZTZlYWVhOTc2ZGU5NjBlOWE4YTExNjEwZTAxNDE0NzEwOTAzMjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8wlX+Q72/Zu5UJGIm49GdiUmy7J t+RkCsbEck+brH2QlhGfkQO1EU+x0qa7dhYrgtpPnHs6GO7geKOP+mLg9jGB1AMk xxsCBCJg4GEk8+6gNjfb5cL2AOKX/rEvs2xit6nhgXUh+PxxVup2ZL5E9jI1PLEu uFvBI7eSedUOzcB1TtcgSC9z6BO8Jj4Nt2JEHbKAolfqX5W56l8bdB5JcALAxzcY rjpUmwdQCQjigjE7DV2fMYJLWKR1pYVvK4m4fgdE0Rl0CWwgDYIAcQWXMxbvIes0 d9LS4fIGBeIVAitQevxxZZS87endsjF0rd1cfWjR7f+4fe8lCDHhn6fcaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5urql23pYOmooRYQ4BQUcQkDJ+MB8GA1UdIwQY MBaAFP5RvabNyJj2dEQfzlx0IbRvYR1ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTct ZDRjMGM4OGMwNWRmLzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wNDA5YWQtZjU2OC00OTE5LWFkYTctZDRjMGM4OGMwNWRm LzEvX2xHOXBzM0ltUFowUkJfT1hIUWh0RzloSFZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjZJQ7Ld SqugGBUCu6CsFU6xU5eFGbHQ9x95ZuKOdAVa2qmpXzkxVwllWLHNZ2DQUcYpWeiH smadGf+Tm/mRM8D8leHc0sfscFr28itX0qIeaHMfoZUvMSDbhzCIPTO/gRKYars/ c+gtbMaUsCSmBGUcHA7A9bo+1ob+3fRqZJAqyQeDa8NFGkDYxSKXCCY1lYqqnUw+ ZhmZ9fL40uewSVU4wPpgFMT2L9FRMi51xwTfSlrTqDETnhC+1f6nw1YxTA4p4ffz jyWlMTxB1ZpsVieuKQHpl+fjJoQ/HKXDk9nwC1/LwZjrtIbelDij2JGAqLJq1Xuc nSoXbZ4PZ15XkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:43 2025 by rpki-client