This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json) Hash identifier: NCJDnb9x+Mt/3wmXJaAK2hdBHY26/87YGbLtVGgaRP0= Subject key identifier: 7B:BE:74:C1:9C:89:3D:B2:F1:C7:9E:8F:74:0B:29:99:16:0E:3D:3B Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec Certificate serial: 019AF3C003EC664B393F22B1C46856A20C29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 13:00:38 +0000 Manifest this update: Sat 06 Dec 2025 13:00:38 +0000 Manifest next update: Sun 07 Dec 2025 13:00:38 +0000 Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: IseejcLE73ihJlfBuqhXdabc2yjVt7XpIXpCK3CDrq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:03:ec:66:4b:39:3f:22:b1:c4:68:56:a2:0c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec Validity Not Before: Dec 6 13:00:38 2025 GMT Not After : Dec 7 13:00:38 2025 GMT Subject: CN=7bbe74c19c893db2f1c79e8f740b2999160e3d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:e2:05:24:30:39:21:8c:fa:bf:52:a3:e4: c4:e1:3d:c2:f6:0b:aa:cc:be:06:17:4b:d8:00:43: 9e:26:9a:5b:60:4e:b4:65:2b:4d:c9:29:34:99:ab: 07:20:6c:9d:1a:c3:e2:f1:ae:0b:19:db:92:c2:94: 3c:19:01:e8:20:b2:95:9d:43:03:c3:ef:eb:6a:ec: f4:b5:25:ad:27:d7:ea:18:b3:c9:38:56:8c:c4:6a: c9:e8:29:96:15:a8:ac:35:89:f4:0e:44:cb:26:53: ae:54:bf:2f:22:55:8b:80:6f:7d:3a:09:a2:f9:42: 31:50:a6:cd:85:14:70:46:d0:cc:50:e2:c7:48:37: 91:c5:9e:45:6c:2d:80:7c:94:1f:b5:3d:ad:e9:20: 90:86:5b:9f:ac:12:6c:60:f9:49:e0:f4:97:f0:30: 81:bb:69:a9:8b:64:4c:c6:5d:09:2d:7e:75:cc:8b: af:47:d3:34:bb:0d:2e:c0:08:8e:4c:28:4f:10:66: e5:04:9a:99:a0:77:67:f3:0d:52:cc:97:a7:64:15: b9:32:20:cf:32:30:be:75:f0:7f:6d:39:42:23:1c: 00:a8:36:53:33:23:1c:4a:94:50:53:88:04:e5:f0: ad:1e:55:47:39:4b:a0:d8:5a:6e:c3:4f:be:b5:0b: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BE:74:C1:9C:89:3D:B2:F1:C7:9E:8F:74:0B:29:99:16:0E:3D:3B X509v3 Authority Key Identifier: keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b3:99:4b:93:2f:e5:25:88:46:a6:7c:8b:9d:88:92:d1:ae: dc:8c:00:3d:e4:0b:42:6f:9c:6c:fd:55:32:97:19:41:b5:d9: c7:be:44:2a:c7:17:a7:52:fd:63:ab:f8:28:5a:e4:8c:19:4c: 7e:7e:41:af:6c:c8:79:b3:99:1d:22:b0:80:f4:24:59:e7:8b: ea:fb:3b:cb:5a:27:77:0d:81:a1:07:5c:cb:42:25:0e:b3:cc: 12:f4:12:8b:1f:36:3b:55:62:a8:8e:57:cc:31:71:da:1b:1c: 40:5f:4f:7a:c9:0a:1f:54:15:1d:2f:38:46:29:2e:e3:73:83: 16:0d:6a:e4:1d:79:06:7f:f6:d9:72:57:2e:24:09:ae:5b:c0: 55:d7:de:8e:f5:ef:c9:54:e9:f5:f1:6b:36:00:22:7f:1a:65: 62:dd:66:db:da:7b:f6:56:6d:df:8e:0a:5a:a0:ec:8f:74:01: 90:19:46:f0:2b:9c:52:a5:35:4d:c9:41:81:7e:20:08:60:a2: c4:1f:71:38:7e:1f:d3:f9:7b:09:b4:27:f4:a7:c9:6d:57:f1: 1f:82:d0:ec:43:c7:69:37:68:c9:ca:82:8f:70:52:c1:ff:8e: da:b7:08:49:1c:d6:7e:8e:5e:54:a9:c8:06:87:77:88:2e:25: b1:ec:39:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAPsZks5PyKxxGhWogwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Nzc2ZGY2YzI2YTBmZjM5YzQzNTM5ZDAyNDcyOTIxYjg2 MWU0ZWMwHhcNMjUxMjA2MTMwMDM4WhcNMjUxMjA3MTMwMDM4WjAzMTEwLwYDVQQD Eyg3YmJlNzRjMTljODkzZGIyZjFjNzllOGY3NDBiMjk5OTE2MGUzZDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxfiBSQwOSGM+r9So+TE4T3C9guq zL4GF0vYAEOeJppbYE60ZStNySk0masHIGydGsPi8a4LGduSwpQ8GQHoILKVnUMD w+/rauz0tSWtJ9fqGLPJOFaMxGrJ6CmWFaisNYn0DkTLJlOuVL8vIlWLgG99Ogmi +UIxUKbNhRRwRtDMUOLHSDeRxZ5FbC2AfJQftT2t6SCQhlufrBJsYPlJ4PSX8DCB u2mpi2RMxl0JLX51zIuvR9M0uw0uwAiOTChPEGblBJqZoHdn8w1SzJenZBW5MiDP MjC+dfB/bTlCIxwAqDZTMyMcSpRQU4gE5fCtHlVHOUug2Fpuw0++tQv6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHu+dMGciT2y8ceej3QLKZkWDj07MB8GA1UdIwQY MBaAFBV3bfbCag/znENTnQJHKSG4YeTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUt NGFjY2Y5ZjUzOTI3LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZWM4MDgtNTJlMS00ZjY2LWIxNDUtNGFjY2Y5ZjUzOTI3 LzEvRlhkdDlzSnFEX09jUTFPZEFrY3BJYmhoNU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7OZS5Mv 5SWIRqZ8i52IktGu3IwAPeQLQm+cbP1VMpcZQbXZx75EKscXp1L9Y6v4KFrkjBlM fn5Br2zIebOZHSKwgPQkWeeL6vs7y1ondw2BoQdcy0IlDrPMEvQSix82O1ViqI5X zDFx2hscQF9PeskKH1QVHS84Riku43ODFg1q5B15Bn/22XJXLiQJrlvAVdfejvXv yVTp9fFrNgAifxplYt1m29p79lZt344KWqDsj3QBkBlG8CucUqU1TclBgX4gCGCi xB9xOH4f0/l7CbQn9KfJbVfxH4LQ7EPHaTdoycqCj3BSwf+O2rcISRzWfo5eVKnI Bod3iC4lsew5gA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:38 2025 by rpki-client