This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft File: FsF7vpSeJS3Q4skgr13ij96HRxw.mft (raw, json) Hash identifier: nF0Ue6r3Eyoi4CgqT9IgfxXQTDYnSDL/x1jnn8Nvrz8= Subject key identifier: 2E:33:81:31:9A:DF:E9:CB:D6:A8:25:78:42:18:0B:FA:7D:C2:0B:F0 Authority key identifier: 16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C Certificate issuer: /CN=16c17bbe949e252dd0e2c920af5de28fde87471c Certificate serial: 019B597605E352A1D8506458EC34288ABFF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:01:05 +0000 Manifest this update: Fri 26 Dec 2025 07:01:05 +0000 Manifest next update: Sat 27 Dec 2025 07:01:05 +0000 Files and hashes: 1: FsF7vpSeJS3Q4skgr13ij96HRxw.crl (hash: RKwh43+lFaKfhw+J8WdaOYGGThsLCTZgyqISvGh2jLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:05:e3:52:a1:d8:50:64:58:ec:34:28:8a:bf:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c17bbe949e252dd0e2c920af5de28fde87471c Validity Not Before: Dec 26 07:01:05 2025 GMT Not After : Dec 27 07:01:05 2025 GMT Subject: CN=2e3381319adfe9cbd6a8257842180bfa7dc20bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:07:37:3a:d9:1f:51:b8:11:f0:5a:9a:14:85: c8:b9:c0:d5:aa:7e:eb:6d:0f:b4:ed:c8:81:3a:86: c5:0e:1b:69:e0:3c:cc:88:af:31:a9:17:e5:57:8e: 5a:87:de:9c:8c:92:d9:28:58:ed:81:c3:50:85:76: 60:39:fb:d2:6d:14:a7:5d:99:d8:f3:7e:17:be:64: 12:5a:9e:f5:b8:7f:27:d4:1f:16:21:dc:ac:8d:69: 63:e4:1e:48:18:68:c8:c9:c2:26:df:45:da:39:d5: 92:82:22:cb:dc:b2:2e:b3:f2:4d:c1:a8:78:dd:19: aa:48:74:77:6c:95:91:fd:e3:0f:9d:fc:0d:fb:96: 94:b8:24:39:86:ab:e9:ca:cc:a3:99:12:c1:51:0d: b2:2c:b1:6a:3c:7c:69:8a:9b:bb:2d:c3:97:ae:ed: 09:66:8d:c4:0b:d7:5f:f8:a6:85:2f:c7:48:be:ad: 9e:26:9d:f6:7a:77:56:fb:d3:2b:f3:a1:14:47:5c: 17:98:d2:3c:0f:fe:2e:b7:04:f8:ba:af:7d:22:2f: f1:54:73:32:e7:7d:e3:1f:f0:d4:c8:01:49:0a:e3: fb:5c:eb:56:35:4c:76:4d:f0:03:f6:d5:a9:29:41: 47:7b:2d:d0:85:7d:b1:fe:f1:28:83:c5:ea:f7:1b: f3:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:33:81:31:9A:DF:E9:CB:D6:A8:25:78:42:18:0B:FA:7D:C2:0B:F0 X509v3 Authority Key Identifier: keyid:16:C1:7B:BE:94:9E:25:2D:D0:E2:C9:20:AF:5D:E2:8F:DE:87:47:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsF7vpSeJS3Q4skgr13ij96HRxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/e9c988-add5-4a44-a29c-7f59bc60e300/1/FsF7vpSeJS3Q4skgr13ij96HRxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:39:15:ec:07:47:24:d0:72:53:90:ca:b6:0f:bb:6c:25:08: d6:04:f8:00:7b:c4:34:3e:41:17:df:eb:df:9d:b5:a5:d9:c9: 88:2a:72:91:cb:08:aa:14:9d:e9:ac:ba:6e:bc:f0:1d:97:7a: 7a:d9:5f:20:5e:4f:d0:2f:53:7a:21:25:c8:9d:9d:f9:aa:da: a7:52:b6:58:d3:87:32:41:5f:3b:06:2f:83:4b:64:eb:04:bb: cc:58:de:3c:55:b0:99:47:cb:66:67:a3:0b:88:fb:ea:14:76: 96:f5:9d:91:d5:c3:c5:ed:37:f6:35:05:8c:2a:03:ff:86:38: f9:d5:57:0f:46:fe:85:75:e9:a5:27:fb:9c:d3:9f:70:ea:a0: 81:f7:68:0a:de:44:6c:ef:a9:11:24:aa:b0:70:74:0a:ea:3d: e3:88:57:1a:a9:fa:9e:43:74:8a:bf:4d:ce:4f:6d:00:0f:19: 4d:6c:5d:ac:d3:a6:7e:31:3c:8d:79:0f:95:40:11:03:fc:7c: 10:04:d5:4f:3a:25:c6:76:da:91:95:f9:d9:08:f1:09:23:90: 17:3d:a4:8a:62:41:fc:7f:e0:ac:7a:53:55:85:57:d2:fd:85: 19:7c:cd:e3:07:72:59:44:ca:dc:86:e3:8b:82:40:b7:53:43: be:78:9c:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgXjUqHYUGRY7DQoir/1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzE3YmJlOTQ5ZTI1MmRkMGUyYzkyMGFmNWRlMjhmZGU4 NzQ3MWMwHhcNMjUxMjI2MDcwMTA1WhcNMjUxMjI3MDcwMTA1WjAzMTEwLwYDVQQD EygyZTMzODEzMTlhZGZlOWNiZDZhODI1Nzg0MjE4MGJmYTdkYzIwYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wc3OtkfUbgR8FqaFIXIucDVqn7r bQ+07ciBOobFDhtp4DzMiK8xqRflV45ah96cjJLZKFjtgcNQhXZgOfvSbRSnXZnY 834XvmQSWp71uH8n1B8WIdysjWlj5B5IGGjIycIm30XaOdWSgiLL3LIus/JNwah4 3RmqSHR3bJWR/eMPnfwN+5aUuCQ5hqvpysyjmRLBUQ2yLLFqPHxpipu7LcOXru0J Zo3EC9df+KaFL8dIvq2eJp32endW+9Mr86EUR1wXmNI8D/4utwT4uq99Ii/xVHMy 533jH/DUyAFJCuP7XOtWNUx2TfAD9tWpKUFHey3QhX2x/vEog8Xq9xvzlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4zgTGa3+nL1qgleEIYC/p9wgvwMB8GA1UdIwQY MBaAFBbBe76UniUt0OLJIK9d4o/eh0ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMt N2Y1OWJjNjBlMzAwLzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lOWM5ODgtYWRkNS00YTQ0LWEyOWMtN2Y1OWJjNjBlMzAw LzEvRnNGN3ZwU2VKUzNRNHNrZ3IxM2lqOTZIUnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTkV7AdH JNByU5DKtg+7bCUI1gT4AHvEND5BF9/r3521pdnJiCpykcsIqhSd6ay6brzwHZd6 etlfIF5P0C9TeiElyJ2d+arap1K2WNOHMkFfOwYvg0tk6wS7zFjePFWwmUfLZmej C4j76hR2lvWdkdXDxe039jUFjCoD/4Y4+dVXD0b+hXXppSf7nNOfcOqggfdoCt5E bO+pESSqsHB0Cuo944hXGqn6nkN0ir9Nzk9tAA8ZTWxdrNOmfjE8jXkPlUARA/x8 EATVTzolxnbakZX52QjxCSOQFz2kimJB/H/grHpTVYVX0v2FGXzN4wdyWUTK3Ibj i4JAt1NDvnicfg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:51 2025 by rpki-client