This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json) Hash identifier: kL0+cTmU8NkrY+BThUxhVb7WRQ7On/XmXig/XVLma10= Subject key identifier: BF:51:CC:E9:5A:F8:16:85:51:6F:A6:91:F0:6C:2A:30:10:5F:31:50 Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Certificate serial: 019B5A516ED9F7DE81A5F99454E825600E06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft Manifest number: 1727 Signing time: Fri 26 Dec 2025 11:00:44 +0000 Manifest this update: Fri 26 Dec 2025 11:00:44 +0000 Manifest next update: Sat 27 Dec 2025 11:00:44 +0000 Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: jw+VlQNZ4xE/TcPrvZBTn9cuj6hWZJD4VJreskhJxUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6e:d9:f7:de:81:a5:f9:94:54:e8:25:60:0e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171 Validity Not Before: Dec 26 11:00:44 2025 GMT Not After : Dec 27 11:00:44 2025 GMT Subject: CN=bf51cce95af81685516fa691f06c2a30105f3150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:8e:d4:33:a0:fa:61:f1:36:34:6b:c5:d9: be:48:b1:e7:1d:8e:a8:0a:1a:e5:16:8d:f6:f3:bd: 2f:99:d6:aa:0b:02:f1:fc:fd:2c:d7:c7:2b:83:83: 89:cc:cf:f2:36:d1:3f:59:b6:c9:78:91:b5:2c:ae: 8e:ea:9f:40:61:26:87:19:4e:29:c5:8a:ff:b7:9f: f1:6b:bc:15:3d:1b:02:6c:14:af:1b:e7:f5:c7:a7: d7:ec:ed:4c:df:34:83:83:29:67:35:28:87:29:61: 0a:ee:1d:d3:f8:2f:63:71:1b:01:bc:6e:b8:4b:0c: 8e:1d:6f:16:91:e6:cd:c3:bd:f7:e0:ff:cf:e4:fa: 4e:7c:de:08:7a:9a:d4:4d:3e:fd:15:60:94:13:78: cd:90:c1:57:e4:f4:b3:4f:ee:d2:7d:d4:82:d6:0e: 46:25:24:52:12:f7:6d:73:6f:c7:f6:5d:b0:40:1a: 33:8a:10:5e:79:87:cc:78:69:95:dc:ff:3c:16:9c: ba:14:76:f2:b2:68:e2:70:e1:3c:da:6b:79:aa:94: a6:be:c0:dd:f4:30:c5:bf:ab:b6:26:e5:d1:5f:fe: 21:b1:17:b3:d4:f6:06:96:2f:40:29:9f:0b:44:ca: a5:a1:06:9e:8f:36:f2:2a:d4:26:8d:5a:a8:54:88: d0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:CC:E9:5A:F8:16:85:51:6F:A6:91:F0:6C:2A:30:10:5F:31:50 X509v3 Authority Key Identifier: keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:23:d3:5e:3d:93:37:b5:ef:9e:0f:4b:12:9a:aa:e2:de:0e: 7c:11:e0:07:c8:7c:b5:d4:0e:60:25:16:f1:91:7e:71:ce:7a: 8c:92:9a:b7:3d:d1:58:42:20:ee:19:b0:99:13:5a:ed:9a:c7: 74:fe:c0:06:ae:29:37:c5:00:05:35:8f:aa:3c:85:df:93:4e: 7c:d9:ca:ae:d1:47:b0:9a:a2:68:d3:0f:8b:55:fb:38:01:eb: 2c:2b:f2:5e:7b:6f:74:c7:88:69:c4:24:83:e8:75:18:1b:f9: b5:00:35:d5:06:54:88:d9:45:91:64:e9:77:cd:9b:65:4f:9d: e1:3f:3e:1d:66:3c:ec:67:59:3e:f4:fb:bc:48:bf:8d:f5:3d: 94:b6:22:53:6b:e2:5d:37:14:18:a6:fe:08:41:47:56:ad:cd: 4f:4b:8f:5d:21:f3:f7:5b:8d:46:b4:71:b2:30:df:d1:2f:51: e7:37:7c:1e:ec:f8:a7:a5:d0:eb:f5:48:5e:00:14:d5:b0:b1: dd:8e:e5:89:96:9a:c9:32:fb:56:45:68:6b:96:b2:7a:a2:05: 08:40:8d:a6:51:83:20:89:ca:e9:4c:ac:6d:40:fb:53:ad:e4: 4f:2c:35:3c:1f:cb:97:54:24:48:36:b5:1a:ac:ff:f8:68:9b: 50:ed:48:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUW7Z996BpfmUVOglYA4GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGJjYWJlYzQzNzlmMmQzYjk0MTg3NDEwZDJlNmUwMzFh NzQxNzEwHhcNMjUxMjI2MTEwMDQ0WhcNMjUxMjI3MTEwMDQ0WjAzMTEwLwYDVQQD EyhiZjUxY2NlOTVhZjgxNjg1NTE2ZmE2OTFmMDZjMmEzMDEwNWYzMTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1SO1DOg+mHxNjRrxdm+SLHnHY6o ChrlFo32870vmdaqCwLx/P0s18crg4OJzM/yNtE/WbbJeJG1LK6O6p9AYSaHGU4p xYr/t5/xa7wVPRsCbBSvG+f1x6fX7O1M3zSDgylnNSiHKWEK7h3T+C9jcRsBvG64 SwyOHW8WkebNw7334P/P5PpOfN4IeprUTT79FWCUE3jNkMFX5PSzT+7SfdSC1g5G JSRSEvdtc2/H9l2wQBozihBeeYfMeGmV3P88Fpy6FHbysmjicOE82mt5qpSmvsDd 9DDFv6u2JuXRX/4hsRez1PYGli9AKZ8LRMqloQaejzbyKtQmjVqoVIjQIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9RzOla+BaFUW+mkfBsKjAQXzFQMB8GA1UdIwQY MBaAFH0Lyr7EN58tO5QYdBDS5uAxp0FxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjIt OTcxNWNkNjk4ZTMyLzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83NDFkYzMtMjI2ZC00N2ZiLThmZjItOTcxNWNkNjk4ZTMy LzEvZlF2S3ZzUTNueTA3bEJoMEVOTG00REduUVhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiPTXj2T N7Xvng9LEpqq4t4OfBHgB8h8tdQOYCUW8ZF+cc56jJKatz3RWEIg7hmwmRNa7ZrH dP7ABq4pN8UABTWPqjyF35NOfNnKrtFHsJqiaNMPi1X7OAHrLCvyXntvdMeIacQk g+h1GBv5tQA11QZUiNlFkWTpd82bZU+d4T8+HWY87GdZPvT7vEi/jfU9lLYiU2vi XTcUGKb+CEFHVq3NT0uPXSHz91uNRrRxsjDf0S9R5zd8Huz4p6XQ6/VIXgAU1bCx 3Y7liZaayTL7VkVoa5ayeqIFCECNplGDIInK6UysbUD7U63kTyw1PB/Ll1QkSDa1 Gqz/+GibUO1I7A== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:20 2025 by rpki-client