This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json) Hash identifier: JdjVhbtC8wanLgg6nxdz/RC6asnoZdHBG6jES1FjFB8= Subject key identifier: 56:FA:8B:17:42:FE:EE:7D:BE:B5:96:23:CF:F4:2C:7E:34:2E:34:C1 Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Certificate serial: 019B1A297CCA2E407D7924C305BAC357376F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft Manifest number: 1772 Signing time: Sun 14 Dec 2025 00:01:24 +0000 Manifest this update: Sun 14 Dec 2025 00:01:24 +0000 Manifest next update: Mon 15 Dec 2025 00:01:24 +0000 Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: V3ta+VKyysWfSfZ2Z7e+hHd3I8HQoshUS8KkDLZ50uQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:7c:ca:2e:40:7d:79:24:c3:05:ba:c3:57:37:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Validity Not Before: Dec 14 00:01:24 2025 GMT Not After : Dec 15 00:01:24 2025 GMT Subject: CN=56fa8b1742feee7dbeb59623cff42c7e342e34c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:7c:73:ac:73:b1:00:3c:57:c2:9b:5f:eb: 96:9c:f1:cd:cf:fc:fc:2d:3e:20:37:b8:e8:1a:e8: 9e:a0:9a:84:75:df:19:0a:e9:43:c7:cf:41:3b:d1: a5:80:4f:4a:ce:7b:26:67:dd:68:1d:ef:d3:36:b8: 4d:de:1b:d0:ad:2d:80:88:5e:7d:53:a5:9e:5d:5b: f4:34:c9:bf:da:79:72:7d:09:d7:11:21:f7:d6:e4: ae:1f:5a:60:66:a4:21:9d:d7:b2:ed:47:0b:17:ad: 01:5f:73:50:5c:f4:3a:34:b0:ed:83:62:e0:d2:29: 63:77:8d:32:0d:1d:6a:00:2f:3c:12:94:c2:11:bd: 98:6a:40:cf:b1:a2:ce:e2:c3:81:cd:f0:33:a5:cc: 1f:ec:d0:ff:69:2f:16:a9:a3:53:76:be:d9:8b:46: 7e:e7:3d:a8:8b:a9:e1:d0:ae:e1:30:50:44:89:13: 5a:5a:1c:c2:6b:d6:8e:5d:fd:a3:9c:3a:58:dd:20: 7d:ab:9c:0e:1d:a9:bc:fa:62:ec:1c:53:4e:b3:c7: 9d:05:b2:ea:cc:19:18:38:a4:e2:63:00:44:ec:6d: 83:49:0d:79:08:63:f4:ff:96:40:8d:5c:41:6d:c4: a7:47:9a:60:e9:81:e7:e5:4c:e1:17:e0:4f:95:0e: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:8B:17:42:FE:EE:7D:BE:B5:96:23:CF:F4:2C:7E:34:2E:34:C1 X509v3 Authority Key Identifier: keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:41:1e:fb:99:c4:74:da:7e:e5:fc:69:fa:eb:40:9d:e5:7a: b1:aa:f2:56:71:25:2a:fb:ce:ae:8b:82:6b:11:27:93:ee:1a: 8c:df:d2:bb:a3:65:82:72:28:a6:df:bc:74:32:8c:5e:c4:6e: 4b:e3:1f:47:dc:83:a1:bf:31:26:d9:5f:f7:74:5b:b6:87:28: b7:28:eb:9e:ae:23:ca:7d:e9:a0:3d:26:0a:10:19:00:c5:e3: c9:99:51:50:95:c7:6c:40:b6:96:de:4d:8e:14:d8:64:dd:7c: 09:46:f9:66:42:49:7a:6f:17:01:bf:7e:2f:c2:e3:23:05:72: 57:60:36:79:93:91:4c:47:b6:da:c0:de:25:8b:80:f3:0a:dc: d8:cf:d5:df:d9:22:bd:1a:0a:0c:9e:b7:46:7d:b3:07:f5:a8: ec:9e:37:05:ef:0d:d0:3c:de:26:45:e0:e9:9c:96:f4:d7:36: ca:eb:c3:f2:14:6a:36:d1:8a:44:9e:65:0c:85:f5:f4:ea:b8: 29:10:ad:dc:40:83:ad:3b:2e:c9:8e:8a:ca:0a:28:53:06:7e: 2a:46:3e:0e:49:1a:16:8e:ee:31:bc:a8:bb:80:3f:7d:a6:a3: 65:25:0c:5b:db:26:7f:3f:50:f7:79:fb:09:bc:e3:af:ca:b9: 37:d1:af:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKXzKLkB9eSTDBbrDVzdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj MTljMGQwHhcNMjUxMjE0MDAwMTI0WhcNMjUxMjE1MDAwMTI0WjAzMTEwLwYDVQQD Eyg1NmZhOGIxNzQyZmVlZTdkYmViNTk2MjNjZmY0MmM3ZTM0MmUzNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMx8c6xzsQA8V8KbX+uWnPHNz/z8 LT4gN7joGuieoJqEdd8ZCulDx89BO9GlgE9KznsmZ91oHe/TNrhN3hvQrS2AiF59 U6WeXVv0NMm/2nlyfQnXESH31uSuH1pgZqQhndey7UcLF60BX3NQXPQ6NLDtg2Lg 0iljd40yDR1qAC88EpTCEb2YakDPsaLO4sOBzfAzpcwf7ND/aS8WqaNTdr7Zi0Z+ 5z2oi6nh0K7hMFBEiRNaWhzCa9aOXf2jnDpY3SB9q5wOHam8+mLsHFNOs8edBbLq zBkYOKTiYwBE7G2DSQ15CGP0/5ZAjVxBbcSnR5pg6YHn5UzhF+BPlQ6E9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb6ixdC/u59vrWWI8/0LH40LjTBMB8GA1UdIwQY MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt OGI4YjJhYzU2YzliLzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEEe+5nE dNp+5fxp+utAneV6saryVnElKvvOrouCaxEnk+4ajN/Su6NlgnIopt+8dDKMXsRu S+MfR9yDob8xJtlf93Rbtocotyjrnq4jyn3poD0mChAZAMXjyZlRUJXHbEC2lt5N jhTYZN18CUb5ZkJJem8XAb9+L8LjIwVyV2A2eZORTEe22sDeJYuA8wrc2M/V39ki vRoKDJ63Rn2zB/Wo7J43Be8N0DzeJkXg6ZyW9Nc2yuvD8hRqNtGKRJ5lDIX19Oq4 KRCt3ECDrTsuyY6KygooUwZ+KkY+DkkaFo7uMbyou4A/faajZSUMW9smfz9Q93n7 Cbzjr8q5N9GvfQ== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:35 2025 by rpki-client