This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json) Hash identifier: OkQgxvoPm+2u/gtclQHKlmKiRToY3EX1Nx3WbOXyL0w= Subject key identifier: 17:BE:76:61:2F:37:C5:87:D0:BF:5E:4E:79:7F:21:CF:F8:8C:57:41 Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Certificate serial: 019AF12CB3803E512BCF320D1EBDF9D3575F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:29 +0000 Manifest this update: Sat 06 Dec 2025 01:00:29 +0000 Manifest next update: Sun 07 Dec 2025 01:00:29 +0000 Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: EH7hi+jkCTyQNGr319hgNBMFOD4XzAg2Iprct0B+PpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b3:80:3e:51:2b:cf:32:0d:1e:bd:f9:d3:57:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Validity Not Before: Dec 6 01:00:29 2025 GMT Not After : Dec 7 01:00:29 2025 GMT Subject: CN=17be76612f37c587d0bf5e4e797f21cff88c5741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:d0:0f:af:90:2e:08:5f:0d:cb:90:f9:6c: f8:d0:a8:78:05:d4:cd:bd:0f:f3:9d:81:7f:96:df: 4e:d1:6c:f3:72:05:0c:a9:8d:d1:f1:dd:c4:6d:18: e3:8f:15:f6:27:8c:de:68:37:6d:cc:0e:be:9e:65: 81:b6:fd:5f:d1:e0:d1:56:94:1c:42:bb:b6:fc:4f: 70:98:3c:0a:60:23:79:e4:8b:a3:fc:d9:8c:38:57: 4b:cc:a4:5c:75:dc:47:99:a2:35:84:e6:4a:88:8b: 79:91:23:68:eb:29:42:28:97:ba:94:b0:b4:46:aa: f1:7e:96:1f:a3:d7:bd:ec:cd:3c:27:c3:84:2f:cc: 52:85:72:92:ab:4f:dd:c7:01:be:28:46:68:66:fc: 39:3a:eb:d6:9f:ac:e7:2c:de:24:00:db:f0:91:4a: 27:66:ba:64:a2:12:d0:d2:e8:cd:87:c7:79:79:1c: 2f:3d:12:7e:5e:72:d7:9b:c0:e4:2d:6e:e3:04:36: 37:1e:21:5a:e2:56:30:8a:18:54:9b:01:29:0f:db: 20:32:f2:93:ab:96:e0:3b:57:a9:ac:3e:5f:08:2a: 03:17:f4:72:73:95:1f:cb:c2:29:37:39:e8:2d:63: 11:60:dc:7e:72:87:8d:38:03:9d:ee:1d:92:24:51: 49:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:BE:76:61:2F:37:C5:87:D0:BF:5E:4E:79:7F:21:CF:F8:8C:57:41 X509v3 Authority Key Identifier: keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ae:e8:97:ce:31:84:71:16:46:42:8b:b9:be:d7:9a:fc:9f: 44:da:d6:59:6e:76:77:c8:29:6b:0f:75:c1:d2:dd:63:4c:20: 01:04:f1:e8:f8:01:39:0e:0c:71:fd:95:30:c5:fc:5b:58:33: ce:87:5c:6e:7a:b6:c1:cb:47:29:af:83:1b:4b:cd:e7:ca:dd: 01:20:c8:e6:f8:fc:7a:11:d8:57:79:39:fe:87:53:e2:5a:b8: f3:20:79:59:ae:91:4c:e1:7c:8b:61:0e:bf:9f:48:00:c1:d5: 75:3e:5c:d0:6c:5c:68:26:ab:0b:38:a1:86:c9:4a:72:ac:c5: 3f:c2:dc:c2:37:1e:ac:33:c8:db:57:5c:c9:b5:80:ad:d2:9b: 66:58:44:60:ce:f2:d0:dc:94:01:6b:a7:37:3a:17:e4:5b:44: 78:d5:b7:39:bb:1c:2a:2a:c7:b7:26:b5:de:82:0f:0a:58:fd: 3b:ce:1d:5d:49:77:a0:15:92:74:75:74:bd:3b:58:fe:53:e9: 23:a5:1d:8b:a9:c5:42:5a:6d:30:d2:95:7e:29:f2:8d:38:69: be:55:bd:a5:30:f5:69:2e:e1:75:a0:ae:c6:c3:b3:33:b2:ac: 9c:22:fd:a2:5b:fd:59:fc:1a:62:ec:5e:f1:14:0b:fe:96:6d: d2:d9:15:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLOAPlErzzINHr3501dfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWU4NGUxODU0YjE2NjBjNWJkMDI4MTllNDIwZTlmZGNj MTE2YmQwHhcNMjUxMjA2MDEwMDI5WhcNMjUxMjA3MDEwMDI5WjAzMTEwLwYDVQQD EygxN2JlNzY2MTJmMzdjNTg3ZDBiZjVlNGU3OTdmMjFjZmY4OGM1NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOrQD6+QLghfDcuQ+Wz40Kh4BdTN vQ/znYF/lt9O0WzzcgUMqY3R8d3EbRjjjxX2J4zeaDdtzA6+nmWBtv1f0eDRVpQc Qru2/E9wmDwKYCN55Iuj/NmMOFdLzKRcddxHmaI1hOZKiIt5kSNo6ylCKJe6lLC0 RqrxfpYfo9e97M08J8OEL8xShXKSq0/dxwG+KEZoZvw5OuvWn6znLN4kANvwkUon ZrpkohLQ0ujNh8d5eRwvPRJ+XnLXm8DkLW7jBDY3HiFa4lYwihhUmwEpD9sgMvKT q5bgO1eprD5fCCoDF/Ryc5Ufy8IpNznoLWMRYNx+coeNOAOd7h2SJFFJhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBe+dmEvN8WH0L9eTnl/Ic/4jFdBMB8GA1UdIwQY MBaAFHwehOGFSxZgxb0CgZ5CDp/cwRa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEt MzljNTZiNjNiMTgzLzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEtMzljNTZiNjNiMTgz LzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATa7ol84x hHEWRkKLub7XmvyfRNrWWW52d8gpaw91wdLdY0wgAQTx6PgBOQ4Mcf2VMMX8W1gz zodcbnq2wctHKa+DG0vN58rdASDI5vj8ehHYV3k5/odT4lq48yB5Wa6RTOF8i2EO v59IAMHVdT5c0GxcaCarCzihhslKcqzFP8LcwjcerDPI21dcybWArdKbZlhEYM7y 0NyUAWunNzoX5FtEeNW3ObscKirHtya13oIPClj9O84dXUl3oBWSdHV0vTtY/lPp I6Udi6nFQlptMNKVfinyjThpvlW9pTD1aS7hdaCuxsOzM7KsnCL9olv9WfwaYuxe 8RQL/pZt0tkVQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:07 2025 by rpki-client