This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json) Hash identifier: XbPzrkNW2LpGc1SinNksASHAa17vIm/MBR5jouPv2L8= Subject key identifier: 4D:1F:7B:03:A5:C8:73:D2:42:1D:ED:98:F5:8E:E6:9A:33:2C:90:1B Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Certificate serial: 019AF2766759B4C72A7A7B25D1F48F35254C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:00:37 +0000 Manifest this update: Sat 06 Dec 2025 07:00:37 +0000 Manifest next update: Sun 07 Dec 2025 07:00:37 +0000 Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: rCptzcOexM7ewig/bFvb3/DcPxC3yz0Ji89OHtDQs2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:67:59:b4:c7:2a:7a:7b:25:d1:f4:8f:35:25:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Validity Not Before: Dec 6 07:00:37 2025 GMT Not After : Dec 7 07:00:37 2025 GMT Subject: CN=4d1f7b03a5c873d2421ded98f58ee69a332c901b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:12:90:ef:7b:72:b7:39:30:74:6d:fa:ed: c0:92:80:18:2c:d6:89:34:c6:02:d5:f5:d2:b8:d1: f6:97:28:71:ae:d2:20:35:49:e9:57:76:13:4a:5a: 7f:a2:8a:75:60:a0:4b:7f:63:3c:71:86:b3:74:86: 8b:b8:f3:aa:4a:7d:0f:c9:51:2d:1e:51:ec:aa:aa: 33:40:32:83:16:29:dd:b3:a0:ec:52:2e:29:b9:91: a0:e7:78:19:11:30:1b:18:0b:00:33:39:31:48:88: 61:73:90:37:ef:46:0c:79:d7:74:f4:cd:40:14:2f: 89:e8:33:b9:a6:bb:e9:2b:fa:d1:6b:c6:e0:b7:68: f7:0f:00:61:60:c0:6b:c4:5f:a5:67:bb:11:52:92: 94:f9:13:20:b5:00:6e:d9:e6:cf:50:2c:54:02:f5: 42:49:4e:01:5a:f9:0a:b6:41:52:e4:48:46:d5:76: f1:2f:38:67:a1:29:eb:b8:8f:90:c6:45:3f:35:dc: 7f:1a:54:e5:4e:47:da:97:6b:fc:47:aa:8b:03:b7: 72:e4:15:14:ce:91:a0:40:72:22:07:f3:c6:67:6e: 32:12:ee:da:38:1b:fa:c4:55:78:44:33:f3:ed:8a: ec:9b:51:24:f3:b0:3d:64:c6:b5:5d:23:f7:55:92: c1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1F:7B:03:A5:C8:73:D2:42:1D:ED:98:F5:8E:E6:9A:33:2C:90:1B X509v3 Authority Key Identifier: keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:aa:dd:ea:15:27:9a:2a:2a:0f:1d:bb:1b:30:fc:b4:a9:fd: ed:1f:75:77:d9:ab:cf:bd:1c:2c:99:c9:d9:03:e3:c5:07:70: 46:aa:c7:2b:7f:e8:a4:c9:14:5d:76:81:71:66:bf:70:2c:00: 1f:6a:a4:b6:4f:d3:cf:44:fe:e5:6a:fc:1b:21:f0:ec:05:eb: 94:21:ae:3b:09:48:41:7b:f2:c4:7a:16:4c:91:6e:a8:ef:f7: 04:92:66:0a:f8:fb:85:31:c0:e1:58:ed:d8:31:76:74:74:f0: 19:0d:5c:07:7f:6c:9d:ac:8b:d1:4c:fd:ea:0f:75:ab:18:3d: 30:a9:26:4d:15:56:1a:75:f8:30:80:5e:14:14:79:18:66:77: 1e:db:77:bc:d5:85:8d:11:ce:84:3a:34:4b:44:d4:35:d9:56: 88:80:d7:04:fe:70:3b:f2:40:00:4d:3f:cd:3d:f1:14:79:7a: af:ed:08:f2:f2:25:47:b2:e8:e0:96:a2:66:e0:ca:92:94:fc: 6b:a8:93:73:ad:14:15:74:af:ac:8a:3d:64:85:64:df:fa:17: ba:a5:90:9c:c8:9d:76:f1:0b:b3:6f:6b:4c:ac:19:78:62:34: ad:2b:b8:53:ee:1e:76:f8:48:7e:4f:ef:79:fb:5f:c8:f0:05: 18:29:de:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmdZtMcqensl0fSPNSVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0 NTkwZWIwHhcNMjUxMjA2MDcwMDM3WhcNMjUxMjA3MDcwMDM3WjAzMTEwLwYDVQQD Eyg0ZDFmN2IwM2E1Yzg3M2QyNDIxZGVkOThmNThlZTY5YTMzMmM5MDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlcSkO97crc5MHRt+u3AkoAYLNaJ NMYC1fXSuNH2lyhxrtIgNUnpV3YTSlp/oop1YKBLf2M8cYazdIaLuPOqSn0PyVEt HlHsqqozQDKDFinds6DsUi4puZGg53gZETAbGAsAMzkxSIhhc5A370YMedd09M1A FC+J6DO5prvpK/rRa8bgt2j3DwBhYMBrxF+lZ7sRUpKU+RMgtQBu2ebPUCxUAvVC SU4BWvkKtkFS5EhG1XbxLzhnoSnruI+QxkU/Ndx/GlTlTkfal2v8R6qLA7dy5BUU zpGgQHIiB/PGZ24yEu7aOBv6xFV4RDPz7Yrsm1Ek87A9ZMa1XSP3VZLBcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0fewOlyHPSQh3tmPWO5pozLJAbMB8GA1UdIwQY MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKrd6hUn mioqDx27GzD8tKn97R91d9mrz70cLJnJ2QPjxQdwRqrHK3/opMkUXXaBcWa/cCwA H2qktk/Tz0T+5Wr8GyHw7AXrlCGuOwlIQXvyxHoWTJFuqO/3BJJmCvj7hTHA4Vjt 2DF2dHTwGQ1cB39snayL0Uz96g91qxg9MKkmTRVWGnX4MIBeFBR5GGZ3Htt3vNWF jRHOhDo0S0TUNdlWiIDXBP5wO/JAAE0/zT3xFHl6r+0I8vIlR7Lo4JaiZuDKkpT8 a6iTc60UFXSvrIo9ZIVk3/oXuqWQnMiddvELs29rTKwZeGI0rSu4U+4edvhIfk/v eftfyPAFGCnelQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:11 2025 by rpki-client