This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json) Hash identifier: xyeYzQKYARPerBlO/T8zrIaT3AIcekziORYgS9WbhQI= Subject key identifier: 24:7D:4D:56:95:BF:F5:0C:B2:FB:EB:11:8F:91:98:F2:FA:4E:4A:51 Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c Certificate serial: 019AF31B3662AAF4DF4E70FAF05E37324458 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft Manifest number: 0EA6 Signing time: Sat 06 Dec 2025 10:00:38 +0000 Manifest this update: Sat 06 Dec 2025 10:00:38 +0000 Manifest next update: Sun 07 Dec 2025 10:00:38 +0000 Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: f2yXpHIyHZlqjX8H63oHGlC3PtJfmBaetDc38Y3g1B0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:36:62:aa:f4:df:4e:70:fa:f0:5e:37:32:44:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c Validity Not Before: Dec 6 10:00:38 2025 GMT Not After : Dec 7 10:00:38 2025 GMT Subject: CN=247d4d5695bff50cb2fbeb118f9198f2fa4e4a51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:cb:3d:9a:54:5c:bd:bd:63:24:e9:b6:4f: 74:ac:98:fb:70:1a:e9:39:c9:72:d8:bf:64:2c:27: a2:a2:97:d4:6f:74:1c:d4:bf:fb:cd:87:fa:e9:5b: 04:21:a4:8f:a0:fb:60:c3:8d:48:57:68:98:65:34: 2d:b0:b9:9b:44:30:38:1b:e4:ea:7d:ac:55:7d:1d: e3:5f:07:52:12:d9:0c:b8:1e:68:11:50:33:dc:42: 86:80:99:41:53:25:b3:d5:b0:d0:b7:6f:74:c2:94: b0:1f:87:52:f8:76:0e:03:fd:09:04:7e:83:53:a1: 83:5e:9b:19:fa:20:e7:83:89:29:6d:19:8b:0a:67: 6d:d5:28:c9:2a:ff:8f:44:ac:a5:fb:b7:3c:63:f8: 11:cc:b3:1a:51:53:23:83:4a:cd:1b:a0:f0:cd:04: a8:11:49:d5:94:82:74:e6:f2:14:04:53:01:0e:60: 2f:76:71:b0:45:07:6c:7a:a5:71:39:10:68:c7:88: 98:45:df:ce:a6:7e:e2:ce:2b:d8:94:3c:c0:23:fa: b6:b6:f6:21:d7:6f:14:0e:92:f7:35:e7:e3:ba:fb: 29:23:97:37:0d:77:0e:9e:50:26:29:eb:f7:37:47: 30:e2:19:6f:00:2a:d6:35:6b:67:eb:81:ac:0c:de: f8:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:7D:4D:56:95:BF:F5:0C:B2:FB:EB:11:8F:91:98:F2:FA:4E:4A:51 X509v3 Authority Key Identifier: keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:43:3c:63:ec:a7:45:09:80:23:f2:fa:37:0a:02:23:36: a3:26:5d:23:75:fb:50:59:d6:fa:a6:34:55:98:85:e6:8e:38: 93:1d:65:e4:0a:1b:23:44:ed:3e:b4:14:08:66:ea:5c:a2:92: 50:44:83:ba:17:ad:c8:8c:ea:8b:21:a9:23:82:2c:97:4d:bb: 30:cc:41:9d:87:a6:bb:be:b5:a0:f9:7a:24:d0:57:71:b5:15: 2a:6a:27:13:14:86:09:47:d3:4a:ff:57:5c:1e:b4:26:5a:d6: 19:ba:99:09:19:ff:7b:8a:28:f5:d5:f0:9e:aa:c3:8b:22:ba: 56:91:99:00:c8:a7:45:10:ca:08:2e:a6:5d:27:96:b9:96:04: c0:ca:ed:dd:41:02:b7:4d:61:38:1f:4f:b2:1f:98:ed:3f:3e: 5a:a6:da:94:b9:89:30:5a:d2:56:ba:91:9b:ff:24:00:9e:ad: 2b:35:68:a3:d5:43:1d:d9:05:19:ac:4f:98:cf:fb:00:85:f3: 9b:19:88:2a:89:1c:34:a6:ff:19:4c:40:0e:1c:1b:b2:f3:20: 10:39:61:de:61:5f:75:0f:95:20:7c:02:14:0e:2c:80:e0:67: 29:3a:db:6c:6b:15:6a:28:7b:ca:e6:28:f6:7f:24:11:39:b0: 7a:d4:73:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzZiqvTfTnD68F43MkRYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGY1MzA0ZTFkOTI5NjhlOTg1ZTM2OGU4NGYzN2RkMzY3 MGVmNWMwHhcNMjUxMjA2MTAwMDM4WhcNMjUxMjA3MTAwMDM4WjAzMTEwLwYDVQQD EygyNDdkNGQ1Njk1YmZmNTBjYjJmYmViMTE4ZjkxOThmMmZhNGU0YTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta/LPZpUXL29YyTptk90rJj7cBrp Ocly2L9kLCeiopfUb3Qc1L/7zYf66VsEIaSPoPtgw41IV2iYZTQtsLmbRDA4G+Tq faxVfR3jXwdSEtkMuB5oEVAz3EKGgJlBUyWz1bDQt290wpSwH4dS+HYOA/0JBH6D U6GDXpsZ+iDng4kpbRmLCmdt1SjJKv+PRKyl+7c8Y/gRzLMaUVMjg0rNG6DwzQSo EUnVlIJ05vIUBFMBDmAvdnGwRQdseqVxORBox4iYRd/Opn7izivYlDzAI/q2tvYh 128UDpL3NefjuvspI5c3DXcOnlAmKev3N0cw4hlvACrWNWtn64GsDN74BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCR9TVaVv/UMsvvrEY+RmPL6TkpRMB8GA1UdIwQY MBaAFH0PUwTh2Slo6YXjaOhPN902cO9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUt MGU4MTBiN2RkZWJjLzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUtMGU4MTBiN2RkZWJj LzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdVhDPGPs p0UJgCPy+jcKAiM2oyZdI3X7UFnW+qY0VZiF5o44kx1l5AobI0TtPrQUCGbqXKKS UESDuhetyIzqiyGpI4Isl027MMxBnYemu761oPl6JNBXcbUVKmonExSGCUfTSv9X XB60JlrWGbqZCRn/e4oo9dXwnqrDiyK6VpGZAMinRRDKCC6mXSeWuZYEwMrt3UEC t01hOB9Psh+Y7T8+WqbalLmJMFrSVrqRm/8kAJ6tKzVoo9VDHdkFGaxPmM/7AIXz mxmIKokcNKb/GUxADhwbsvMgEDlh3mFfdQ+VIHwCFA4sgOBnKTrbbGsVaih7yuYo 9n8kETmwetRzqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:30:59 2025 by rpki-client