This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft File: Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json) Hash identifier: 4YWhh/ci6juPlhJvlzpTlDU+40sAlAA5oE8zXNAGMYc= Subject key identifier: E2:60:C1:1A:E6:11:09:A3:27:62:15:A1:A5:91:BD:26:1A:2C:11:47 Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 Certificate issuer: /CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Certificate serial: 019AFCC48F2C35B4B12D40DAD8371FF83D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft Manifest number: 0599 Signing time: Mon 08 Dec 2025 07:02:11 +0000 Manifest this update: Mon 08 Dec 2025 07:02:11 +0000 Manifest next update: Tue 09 Dec 2025 07:02:11 +0000 Files and hashes: 1: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: R6HWBcafFXv2Mend3vy0aSVnUBczbYT5tLwn6I7v26I=) 2: pzlWJjQzQzoCKZbR26xCajPlSDU.roa (hash: 61Hu+9N0msg0OltqRJ2+tDJ9j89XxxQKSANBLiUSU78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 07:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:8f:2c:35:b4:b1:2d:40:da:d8:37:1f:f8:3d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9 Validity Not Before: Dec 8 07:02:11 2025 GMT Not After : Dec 9 07:02:11 2025 GMT Subject: CN=e260c11ae61109a3276215a1a591bd261a2c1147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9b:c3:25:c7:6f:33:f4:e1:69:6c:49:7d:41: b5:83:b5:c7:e5:b2:75:5b:76:47:e3:57:4e:c8:cf: 5e:d2:a8:cc:d8:ad:a3:d5:4c:31:45:b7:80:40:79: f4:ca:15:22:fe:d3:27:37:27:10:e8:f2:e4:02:68: 1b:dc:54:d0:61:62:42:15:43:92:a5:a1:70:16:77: 11:6f:5f:6b:ec:0d:53:0b:b8:90:13:53:df:60:be: 52:fa:44:da:6c:e4:f4:f9:61:ed:71:17:a0:53:ba: 47:a8:e0:43:ba:ce:0c:e3:de:ab:44:b2:bf:d3:0c: 92:11:c1:14:23:72:0b:cb:84:ec:5b:c4:1b:81:cb: 56:49:e9:95:b6:9b:97:47:61:22:1c:c1:ed:ad:80: 38:76:15:83:2c:bf:11:f9:dd:dc:a6:13:d8:5f:0d: d6:f8:e9:b2:a1:44:75:6b:ae:ef:19:57:ad:59:ff: 20:b0:32:0e:e9:30:49:8a:99:7e:58:b1:b1:93:72: 92:e2:a5:9f:77:3d:83:b7:a0:a7:76:5b:5f:a6:41: 2b:05:b2:15:45:8d:57:9d:04:53:0a:05:63:92:91: 2a:88:01:a9:49:fe:59:2e:7f:e5:07:6b:83:cc:20: 6e:df:46:51:93:69:f8:12:ca:b7:7c:cc:76:61:84: fe:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:60:C1:1A:E6:11:09:A3:27:62:15:A1:A5:91:BD:26:1A:2C:11:47 X509v3 Authority Key Identifier: keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:9a:cc:16:b2:30:cc:06:20:64:98:bb:26:5e:fd:6f:10:aa: 63:26:f4:a4:59:fe:08:73:54:52:ec:de:ba:28:bd:18:b1:07: 6c:ec:9f:f5:0c:3c:a3:f6:ef:4a:f8:3c:82:c4:88:d2:52:2b: f3:d9:d9:69:c1:6a:91:ba:92:26:09:da:69:19:4d:0b:08:0d: bc:46:1c:17:a5:a4:a4:ee:0c:ee:3f:29:b1:44:85:d2:0d:47: 1a:ae:21:7c:7f:40:56:cc:28:2c:d6:30:22:d8:2d:8a:55:0a: 98:6b:d9:e4:2f:a1:ab:ce:e0:d8:73:e3:e4:c5:dd:9f:b5:6e: 78:4f:88:e6:e0:64:29:77:5f:23:0c:b2:db:6a:94:8f:5c:a2: ea:40:80:bb:98:12:7d:08:74:db:38:3f:52:78:77:36:98:f6: b4:48:f1:8a:c4:09:0b:e6:72:75:f7:98:a1:b6:15:7e:72:66: d3:14:49:38:f9:be:1d:08:2b:d4:f5:a1:7c:75:c9:8c:40:9d: fc:0d:ee:28:dc:0c:df:36:60:f7:42:a5:33:0b:09:05:a5:cc: e1:a2:fa:45:17:db:34:70:8d:59:bc:84:33:e3:77:70:b7:f3: 36:c8:00:ba:0d:cc:2d:b2:43:68:a4:47:19:ec:c5:bf:9a:37: db:5e:55:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xI8sNbSxLUDa2Dcf+D1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl MTE5ZjkwHhcNMjUxMjA4MDcwMjExWhcNMjUxMjA5MDcwMjExWjAzMTEwLwYDVQQD EyhlMjYwYzExYWU2MTEwOWEzMjc2MjE1YTFhNTkxYmQyNjFhMmMxMTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5vDJcdvM/ThaWxJfUG1g7XH5bJ1 W3ZH41dOyM9e0qjM2K2j1UwxRbeAQHn0yhUi/tMnNycQ6PLkAmgb3FTQYWJCFUOS paFwFncRb19r7A1TC7iQE1PfYL5S+kTabOT0+WHtcRegU7pHqOBDus4M496rRLK/ 0wySEcEUI3ILy4TsW8QbgctWSemVtpuXR2EiHMHtrYA4dhWDLL8R+d3cphPYXw3W +OmyoUR1a67vGVetWf8gsDIO6TBJipl+WLGxk3KS4qWfdz2Dt6CndltfpkErBbIV RY1XnQRTCgVjkpEqiAGpSf5ZLn/lB2uDzCBu30ZRk2n4Esq3fMx2YYT+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJgwRrmEQmjJ2IVoaWRvSYaLBFHMB8GA1UdIwQY MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3 LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZrMFrIw zAYgZJi7Jl79bxCqYyb0pFn+CHNUUuzeuii9GLEHbOyf9Qw8o/bvSvg8gsSI0lIr 89nZacFqkbqSJgnaaRlNCwgNvEYcF6WkpO4M7j8psUSF0g1HGq4hfH9AVswoLNYw ItgtilUKmGvZ5C+hq87g2HPj5MXdn7VueE+I5uBkKXdfIwyy22qUj1yi6kCAu5gS fQh02zg/Unh3Npj2tEjxisQJC+ZydfeYobYVfnJm0xRJOPm+HQgr1PWhfHXJjECd /A3uKNwM3zZg90KlMwsJBaXM4aL6RRfbNHCNWbyEM+N3cLfzNsgAug3MLbJDaKRH GezFv5o3215VGQ== -----END CERTIFICATE-----Generated at Mon Dec 8 15:47:05 2025 by rpki-client