This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft File: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft (raw, json) Hash identifier: bYTzaO1xdxm2XFh4xTEQhTDlgmYUUbXoQlTkB/z+yu8= Subject key identifier: 45:80:31:4F:1D:E7:BE:B3:BE:45:02:A1:4E:BC:C9:B5:DB:8C:A0:02 Authority key identifier: 16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0 Certificate issuer: /CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0 Certificate serial: 019AF1D19A625D1A8397F0C37076F672F766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:36 +0000 Manifest this update: Sat 06 Dec 2025 04:00:36 +0000 Manifest next update: Sun 07 Dec 2025 04:00:36 +0000 Files and hashes: 1: FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl (hash: QKJr6Becr0qpjWLh8NAcpQRNFO+PlZFZoPZpnd0La+Q=) 2: saj-6seGjxdmUbifeNJvW_LjaF8.roa (hash: O4b1y8+uTEcNwAuT2Vp3OrGxpFXzD30149NauyrIq/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9a:62:5d:1a:83:97:f0:c3:70:76:f6:72:f7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b43fb87e804922d1c6d07e2597b61e04ee17f0 Validity Not Before: Dec 6 04:00:36 2025 GMT Not After : Dec 7 04:00:36 2025 GMT Subject: CN=4580314f1de7beb3be4502a14ebcc9b5db8ca002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:08:84:d5:77:e4:17:e0:ec:8b:9e:d4:d6: 67:64:94:c2:12:37:0a:8b:26:e2:a0:f2:00:33:b5: 68:ab:27:1c:af:26:dc:8a:ad:e0:af:ac:8e:e5:d1: ef:25:1b:26:f5:d5:a6:b5:b0:66:3e:12:09:b9:45: 0d:0b:bc:f0:7f:2f:99:3e:28:ee:9d:81:93:bd:8c: 9f:01:c6:86:07:ed:ae:85:39:d3:6c:89:5e:16:a4: f4:4f:7f:78:09:e6:ad:86:6a:61:73:47:2a:ed:0b: da:66:f8:bb:0e:13:f8:91:20:6f:01:39:23:cd:cb: 70:84:62:70:67:28:c0:e0:bf:e1:4b:98:03:2d:69: d1:0e:84:d4:c2:1d:84:41:e1:79:9f:a3:1e:b5:5d: ea:b0:99:fe:30:90:d2:be:71:99:58:9d:98:9f:32: a8:be:eb:9f:ab:fd:d0:0a:1d:14:1c:82:a4:61:70: 1c:b0:ee:94:d5:d3:27:d3:3a:5a:51:4f:a4:7d:03: 3d:66:d5:c6:cf:53:e2:75:f6:cf:06:db:34:13:9b: d8:00:ed:ec:ba:5c:bf:6c:76:55:6b:94:36:96:5c: 8a:9e:37:43:7b:3a:a2:fe:6b:e9:4d:d5:6d:6b:82: b2:e0:ca:e2:7d:85:d3:a8:7e:98:8f:ae:c5:17:d1: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:80:31:4F:1D:E7:BE:B3:BE:45:02:A1:4E:BC:C9:B5:DB:8C:A0:02 X509v3 Authority Key Identifier: keyid:16:B4:3F:B8:7E:80:49:22:D1:C6:D0:7E:25:97:B6:1E:04:EE:17:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb0ea4-2458-4977-827d-fce2795fd80b/1/FrQ_uH6ASSLRxtB-JZe2HgTuF_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:00:d3:a9:72:88:44:cb:ae:47:6a:7e:ef:36:80:4e:5a:86: a1:b2:0a:95:a6:86:55:fb:e2:35:b8:ab:8c:82:d1:24:94:41: 36:e0:87:bf:8c:11:4e:a7:f6:29:9c:ad:bb:a9:9f:ff:76:e0: 68:5c:a6:f0:cf:55:8b:2c:26:01:2f:64:d9:29:66:f7:90:8b: 4c:12:3a:07:80:86:9b:5b:cd:51:31:3d:3d:d1:b3:57:80:44: af:24:63:68:89:10:13:da:66:a6:ca:b7:d9:75:2b:e5:00:2a: 3c:c8:0f:80:96:ef:49:11:d6:a3:5b:53:cd:f5:44:3d:d7:2a: 8e:b0:3f:93:e4:5c:dc:c1:42:a5:3a:e6:8c:22:39:3c:e7:40: 6d:2f:99:13:0f:98:4f:91:2c:4e:8d:58:76:f0:5d:fb:f7:74: a1:86:5e:45:86:f6:b0:68:37:da:3e:15:3a:ba:57:79:08:cc: 46:15:5c:a9:c3:89:11:9e:2f:0c:b6:ee:a6:ec:94:e8:18:7f: f2:2e:5b:3a:f6:ae:2f:5f:88:11:6e:ea:ec:41:70:0c:7f:67: b2:c2:78:47:43:ba:f8:d0:6a:71:b5:db:4c:75:bf:67:92:df: b5:19:02:b7:71:b5:76:dc:d8:2b:55:7b:d2:e3:63:03:08:04: 99:b3:5e:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ZpiXRqDl/DDcHb2cvdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjQzZmI4N2U4MDQ5MjJkMWM2ZDA3ZTI1OTdiNjFlMDRl ZTE3ZjAwHhcNMjUxMjA2MDQwMDM2WhcNMjUxMjA3MDQwMDM2WjAzMTEwLwYDVQQD Eyg0NTgwMzE0ZjFkZTdiZWIzYmU0NTAyYTE0ZWJjYzliNWRiOGNhMDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj8IhNV35Bfg7Iue1NZnZJTCEjcK iybioPIAM7Voqyccrybciq3gr6yO5dHvJRsm9dWmtbBmPhIJuUUNC7zwfy+ZPiju nYGTvYyfAcaGB+2uhTnTbIleFqT0T394Ceathmphc0cq7QvaZvi7DhP4kSBvATkj zctwhGJwZyjA4L/hS5gDLWnRDoTUwh2EQeF5n6MetV3qsJn+MJDSvnGZWJ2YnzKo vuufq/3QCh0UHIKkYXAcsO6U1dMn0zpaUU+kfQM9ZtXGz1PidfbPBts0E5vYAO3s uly/bHZVa5Q2llyKnjdDezqi/mvpTdVta4Ky4MrifYXTqH6Yj67FF9G/YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWAMU8d576zvkUCoU68ybXbjKACMB8GA1UdIwQY MBaAFBa0P7h+gEki0cbQfiWXth4E7hfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2Qt ZmNlMjc5NWZkODBiLzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9lYjBlYTQtMjQ1OC00OTc3LTgyN2QtZmNlMjc5NWZkODBi LzEvRnJRX3VINkFTU0xSeHRCLUpaZTJIZ1R1Rl9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQDTqXKI RMuuR2p+7zaATlqGobIKlaaGVfviNbirjILRJJRBNuCHv4wRTqf2KZytu6mf/3bg aFym8M9ViywmAS9k2Slm95CLTBI6B4CGm1vNUTE9PdGzV4BEryRjaIkQE9pmpsq3 2XUr5QAqPMgPgJbvSRHWo1tTzfVEPdcqjrA/k+Rc3MFCpTrmjCI5POdAbS+ZEw+Y T5EsTo1YdvBd+/d0oYZeRYb2sGg32j4VOrpXeQjMRhVcqcOJEZ4vDLbupuyU6Bh/ 8i5bOvauL1+IEW7q7EFwDH9nssJ4R0O6+NBqcbXbTHW/Z5LftRkCt3G1dtzYK1V7 0uNjAwgEmbNe4w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:31 2025 by rpki-client