This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft File: FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json) Hash identifier: 222J7TzApms2TTdDlwDo4Jrpq/h0oPZ0cY4vHnkHnoE= Subject key identifier: 71:68:75:E6:F3:1F:AA:23:F9:D5:64:95:3C:19:DF:EC:C3:75:61:E6 Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81 Certificate issuer: /CN=16f02e70a6553ff0c665139ee55671c860658081 Certificate serial: 019B2287597491E4F80359ECFEE606FEB355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft Manifest number: 1776 Signing time: Mon 15 Dec 2025 15:00:54 +0000 Manifest this update: Mon 15 Dec 2025 15:00:54 +0000 Manifest next update: Tue 16 Dec 2025 15:00:54 +0000 Files and hashes: 1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: PIIHVLmtoELamNPhPFQ6rUwlpjPlUFBLbfmEX/CWMDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:59:74:91:e4:f8:03:59:ec:fe:e6:06:fe:b3:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081 Validity Not Before: Dec 15 15:00:54 2025 GMT Not After : Dec 16 15:00:54 2025 GMT Subject: CN=716875e6f31faa23f9d564953c19dfecc37561e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:b4:cf:0c:0c:09:9c:16:66:67:63:87:a8: 3e:48:cc:1f:55:8b:c4:7c:3e:57:b6:47:de:39:61: 23:4c:84:0f:78:15:2e:5c:2e:46:fe:48:d8:45:1c: 0f:d4:c1:2d:e4:36:75:30:6f:4b:8b:11:83:7f:91: fc:01:36:7e:82:c7:0a:84:38:a8:4a:c8:31:b9:b6: fa:a3:81:52:a4:69:3c:64:97:10:c7:d8:46:b9:ae: 0d:84:a8:e1:ab:f0:f3:d6:a5:21:cd:40:27:5f:f8: a5:f9:a4:ee:67:8e:1f:1a:d0:1c:64:b0:b3:c4:4f: 82:16:0b:0f:a5:e2:cf:14:34:3c:d4:8a:6c:f0:8e: 73:09:11:1e:aa:28:6d:56:c6:21:71:72:a1:d2:9b: 4c:2e:27:5c:14:37:02:83:3c:50:e8:9f:46:3d:cf: e3:9b:9c:84:ca:c6:3e:3d:92:1a:c3:b3:77:96:03: 01:87:c3:3e:ec:e0:64:a4:3c:c2:56:79:ec:b6:dc: 53:4b:6f:1c:a7:23:c8:cc:08:24:7f:aa:3d:86:b9: 06:12:aa:1c:b5:f2:61:b1:80:ce:c9:d9:ff:f1:17: 89:57:f6:5f:46:34:7b:fe:67:e3:24:e3:df:95:39: 94:d9:a3:3e:ec:e3:1d:46:59:95:aa:17:ca:23:50: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:68:75:E6:F3:1F:AA:23:F9:D5:64:95:3C:19:DF:EC:C3:75:61:E6 X509v3 Authority Key Identifier: keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:13:a4:80:43:29:5f:7d:0d:3e:e1:ec:4c:a1:b4:51:7b:2a: 93:64:ad:1c:86:68:9a:e6:83:51:34:63:90:dc:72:1d:b6:77: 92:97:b5:54:df:18:87:87:db:82:7d:62:97:14:63:c4:27:8e: fd:d7:bc:3f:2b:a1:3e:55:52:d0:31:d5:86:ae:05:14:77:30: 02:1f:0e:dd:f6:86:09:58:6a:4f:41:ce:67:30:42:cc:0b:29: 00:c3:9f:b5:79:9c:c8:b9:26:29:2c:ef:1e:de:80:f7:6a:e8: d2:e5:58:ba:80:21:57:e6:0a:23:5f:7a:b2:07:c6:4c:27:d1: 18:9b:25:d8:39:78:2e:9f:82:fd:b5:70:5f:54:00:1b:4d:3f: 7a:44:41:97:df:00:ce:eb:a1:65:b8:6a:a1:93:a9:41:e7:b6: 50:da:9c:22:cb:96:db:89:6b:9c:41:9c:8c:7a:49:78:40:55: 2a:49:58:d7:f1:50:64:f5:3c:df:8b:3d:0e:a2:e7:a2:08:cc: 3e:68:d4:1f:18:f4:7c:21:5c:fd:62:c9:87:4c:a0:8e:6b:08: 8a:f1:fb:a2:83:74:22:14:a8:ad:8a:60:f0:dc:7f:25:bc:ae: 62:2a:28:fd:b9:5c:b2:5d:fc:ca:20:cc:d8:a1:24:0f:6f:51: 57:56:71:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih1l0keT4A1ns/uYG/rNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjAyZTcwYTY1NTNmZjBjNjY1MTM5ZWU1NTY3MWM4NjA2 NTgwODEwHhcNMjUxMjE1MTUwMDU0WhcNMjUxMjE2MTUwMDU0WjAzMTEwLwYDVQQD Eyg3MTY4NzVlNmYzMWZhYTIzZjlkNTY0OTUzYzE5ZGZlY2MzNzU2MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4m0zwwMCZwWZmdjh6g+SMwfVYvE fD5XtkfeOWEjTIQPeBUuXC5G/kjYRRwP1MEt5DZ1MG9LixGDf5H8ATZ+gscKhDio Ssgxubb6o4FSpGk8ZJcQx9hGua4NhKjhq/Dz1qUhzUAnX/il+aTuZ44fGtAcZLCz xE+CFgsPpeLPFDQ81Ips8I5zCREeqihtVsYhcXKh0ptMLidcFDcCgzxQ6J9GPc/j m5yEysY+PZIaw7N3lgMBh8M+7OBkpDzCVnnsttxTS28cpyPIzAgkf6o9hrkGEqoc tfJhsYDOydn/8ReJV/ZfRjR7/mfjJOPflTmU2aM+7OMdRlmVqhfKI1A1uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFodebzH6oj+dVklTwZ3+zDdWHmMB8GA1UdIwQY MBaAFBbwLnCmVT/wxmUTnuVWcchgZYCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MzgzYjUtNzA4My00Y2MzLTllNjkt OTdmNmYyYTM5NjI2LzEvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85MzgzYjUtNzA4My00Y2MzLTllNjktOTdmNmYyYTM5NjI2 LzEvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhOkgEMp X30NPuHsTKG0UXsqk2StHIZomuaDUTRjkNxyHbZ3kpe1VN8Yh4fbgn1ilxRjxCeO /de8PyuhPlVS0DHVhq4FFHcwAh8O3faGCVhqT0HOZzBCzAspAMOftXmcyLkmKSzv Ht6A92ro0uVYuoAhV+YKI196sgfGTCfRGJsl2Dl4Lp+C/bVwX1QAG00/ekRBl98A zuuhZbhqoZOpQee2UNqcIsuW24lrnEGcjHpJeEBVKklY1/FQZPU834s9DqLnogjM PmjUHxj0fCFc/WLJh0ygjmsIivH7ooN0IhSorYpg8Nx/JbyuYioo/blcsl38yiDM 2KEkD29RV1ZxDA== -----END CERTIFICATE-----Generated at Mon Dec 15 19:27:06 2025 by rpki-client