This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json) Hash identifier: HZPIsXJkXlDIZ0QgdaB+e8iKJxW2sEM4vfMSGuEzbK4= Subject key identifier: 51:FE:CE:A0:5C:CF:AE:48:11:AB:24:49:0A:71:7D:48:6C:E7:3E:18 Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Certificate serial: 019AF50B791E27AD0BCAAD62B8D008E08CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft Manifest number: 06E2 Signing time: Sat 06 Dec 2025 19:02:40 +0000 Manifest this update: Sat 06 Dec 2025 19:02:40 +0000 Manifest next update: Sun 07 Dec 2025 19:02:40 +0000 Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: t6fuKSHV7OjFBibADhKbMAMUyKhJYaS5bHn+MjyWAOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:79:1e:27:ad:0b:ca:ad:62:b8:d0:08:e0:8c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Validity Not Before: Dec 6 19:02:40 2025 GMT Not After : Dec 7 19:02:40 2025 GMT Subject: CN=51fecea05ccfae4811ab24490a717d486ce73e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:61:35:12:57:ab:f8:11:38:da:12:f2:d9: 29:ba:ba:cc:49:25:e2:65:76:d0:54:0b:1a:3d:8f: c5:ea:8b:44:e3:c6:ee:08:76:dc:e6:53:52:3d:88: 51:3f:47:e5:c7:32:45:39:d9:3b:d9:f8:e3:37:d0: 05:e2:44:a2:12:f2:2f:30:98:fa:97:02:b7:8a:0d: 12:9e:c6:b8:26:33:c1:d4:be:d3:a1:cd:cc:93:12: 19:d8:92:d2:26:36:58:ac:de:23:6b:ac:69:7d:38: b0:3a:b2:e0:61:bf:d5:42:39:84:88:e2:df:78:16: bb:32:3d:94:84:f1:af:e0:83:09:4f:a9:9f:6b:e9: ca:0f:8b:72:33:66:6d:62:b8:f1:86:de:c8:16:49: 64:70:7a:fa:fc:85:5b:34:1e:8b:8d:bc:75:aa:63: ce:0f:b4:3d:f1:c0:83:6e:5e:57:ae:59:1f:9a:2a: 40:9d:3d:91:b1:9d:14:9f:fb:e6:1c:d4:ce:5a:64: 24:8d:34:ca:16:e7:a2:ce:80:81:13:b7:ab:35:37: 39:69:8f:8f:fd:bd:d4:24:cd:da:62:17:03:41:1d: 77:ce:68:20:b1:51:e2:c0:9e:f2:7b:89:c5:de:df: e9:8a:7c:86:8b:66:07:2e:c6:e6:30:e8:31:10:9e: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FE:CE:A0:5C:CF:AE:48:11:AB:24:49:0A:71:7D:48:6C:E7:3E:18 X509v3 Authority Key Identifier: keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2f:12:ab:fe:d2:31:82:0b:51:0b:a3:dd:d1:10:c1:dd:ae: b5:56:61:4d:fc:a2:41:c6:a3:6a:3e:99:11:a4:5c:22:df:53: 3b:e3:88:aa:08:b6:af:ad:b9:26:6d:03:41:9c:d8:10:5b:53: 49:4b:3f:b7:e8:c5:dd:97:1c:20:4d:b9:5e:07:43:2c:f4:d3: ff:b8:de:3a:55:31:15:63:38:f7:8b:9d:d0:59:73:a0:f8:fa: 89:79:ec:a0:38:6b:4b:20:ff:1b:bd:ae:b7:29:6c:0e:1f:53: 98:fe:c6:7a:1b:ce:35:8b:b9:b3:22:b2:31:4e:ba:8e:f5:68: 36:37:30:81:4f:6b:03:6e:af:65:08:8d:d1:43:a4:b7:86:5a: ee:5e:06:9c:7a:32:f6:05:b6:82:d6:b6:b5:4a:b7:7c:d0:cc: a0:3a:3e:a6:1e:40:ab:c1:b2:58:fb:1d:e6:82:c9:e8:a9:5d: 61:6a:e9:c0:46:e6:c7:e5:4b:ba:3e:91:81:69:22:e1:ab:1b: 3e:67:42:f6:1d:fc:9b:da:4b:14:9d:e3:be:12:a0:06:d1:3f: c1:5f:b9:38:a0:72:07:3c:8c:3b:11:51:cc:45:28:b6:1f:44: c1:f6:d8:80:7c:e9:a6:f7:b1:9a:c6:18:78:36:27:e0:70:ea: f5:99:fe:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C3keJ60Lyq1iuNAI4Iz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3 M2Y0YzkwHhcNMjUxMjA2MTkwMjQwWhcNMjUxMjA3MTkwMjQwWjAzMTEwLwYDVQQD Eyg1MWZlY2VhMDVjY2ZhZTQ4MTFhYjI0NDkwYTcxN2Q0ODZjZTczZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq61hNRJXq/gRONoS8tkpurrMSSXi ZXbQVAsaPY/F6otE48buCHbc5lNSPYhRP0flxzJFOdk72fjjN9AF4kSiEvIvMJj6 lwK3ig0Snsa4JjPB1L7Toc3MkxIZ2JLSJjZYrN4ja6xpfTiwOrLgYb/VQjmEiOLf eBa7Mj2UhPGv4IMJT6mfa+nKD4tyM2ZtYrjxht7IFklkcHr6/IVbNB6Ljbx1qmPO D7Q98cCDbl5XrlkfmipAnT2RsZ0Un/vmHNTOWmQkjTTKFueizoCBE7erNTc5aY+P /b3UJM3aYhcDQR13zmggsVHiwJ7ye4nF3t/pinyGi2YHLsbmMOgxEJ5RgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH+zqBcz65IEaskSQpxfUhs5z4YMB8GA1UdIwQY MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhy8Sq/7S MYILUQuj3dEQwd2utVZhTfyiQcajaj6ZEaRcIt9TO+OIqgi2r625Jm0DQZzYEFtT SUs/t+jF3ZccIE25XgdDLPTT/7jeOlUxFWM494ud0FlzoPj6iXnsoDhrSyD/G72u tylsDh9TmP7GehvONYu5syKyMU66jvVoNjcwgU9rA26vZQiN0UOkt4Za7l4GnHoy 9gW2gta2tUq3fNDMoDo+ph5Aq8GyWPsd5oLJ6KldYWrpwEbmx+VLuj6RgWki4asb PmdC9h38m9pLFJ3jvhKgBtE/wV+5OKByBzyMOxFRzEUoth9EwfbYgHzppvexmsYY eDYn4HDq9Zn+Yg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:24:34 2025 by rpki-client