This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft File: fvoucF0jP_80WpErLyObWs43K7k.mft (raw, json) Hash identifier: GgAy6qLlxkrznOABy+Sw8X0K4aN8cl7wFMpPinfp2wQ= Subject key identifier: C2:C6:62:D1:9C:AC:52:FA:D4:26:0E:2D:4D:D8:B6:B0:AE:72:E8:41 Authority key identifier: 7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 Certificate issuer: /CN=7efa2e705d233fff345a912b2f239b5ace372bb9 Certificate serial: 019B240860378799C29FC0C997C90D7BBA23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft Manifest number: 06B8 Signing time: Mon 15 Dec 2025 22:01:27 +0000 Manifest this update: Mon 15 Dec 2025 22:01:27 +0000 Manifest next update: Tue 16 Dec 2025 22:01:27 +0000 Files and hashes: 1: fvoucF0jP_80WpErLyObWs43K7k.crl (hash: qfsktrGQhfnomn9oQpRKYucfyMQheYv0VDh2t92SiTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:60:37:87:99:c2:9f:c0:c9:97:c9:0d:7b:ba:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7efa2e705d233fff345a912b2f239b5ace372bb9 Validity Not Before: Dec 15 22:01:27 2025 GMT Not After : Dec 16 22:01:27 2025 GMT Subject: CN=c2c662d19cac52fad4260e2d4dd8b6b0ae72e841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:a1:06:48:68:62:ee:8d:3f:8d:9f:4e:02: 9d:68:0f:a9:13:80:73:99:69:3d:52:82:f4:3f:b7: 99:70:ba:05:e1:a3:de:37:b2:61:d5:80:ab:c9:7a: 02:37:c6:8f:0b:14:0d:53:22:a4:fc:ce:64:1f:aa: 3b:ae:09:d7:1e:cc:55:cb:de:45:6f:39:c8:b5:37: 60:3a:e9:72:f2:fb:98:40:3a:fb:9f:00:9b:b9:b4: b2:de:33:bc:e1:9b:a2:fc:d2:70:76:c3:8d:1a:6a: 05:f5:b6:9e:87:59:69:54:4d:e1:14:cf:25:7d:1e: eb:ce:22:bc:6b:ae:15:5c:b0:8d:b6:6e:6b:a3:32: d4:34:72:3a:9d:11:60:c0:40:7a:78:1d:b3:64:ed: 27:ed:38:44:8c:f4:91:27:a3:1e:06:1e:88:a9:60: 36:b4:9c:28:57:9e:94:33:ff:43:d1:d3:0a:7f:44: 42:4f:7e:ad:c6:ff:07:35:0f:d1:f4:de:fd:0f:70: b5:56:16:91:f4:f0:18:07:ec:f0:d0:c7:02:2e:67: 11:7e:0b:d0:86:22:71:a6:c0:89:99:ce:d1:71:a5: cd:94:f4:06:fb:cd:89:f6:9e:7b:d5:13:0d:8f:11: 00:8d:c7:5d:73:1e:39:b6:3b:a5:3e:89:2b:5f:13: 78:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C6:62:D1:9C:AC:52:FA:D4:26:0E:2D:4D:D8:B6:B0:AE:72:E8:41 X509v3 Authority Key Identifier: keyid:7E:FA:2E:70:5D:23:3F:FF:34:5A:91:2B:2F:23:9B:5A:CE:37:2B:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fvoucF0jP_80WpErLyObWs43K7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9f6ba4-1ad7-4fe3-b211-77827fe1555b/1/fvoucF0jP_80WpErLyObWs43K7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:cd:6f:70:d5:47:10:68:93:8b:1b:a2:f5:2b:b7:f0:87:d9: 34:88:34:69:af:c3:0b:2c:9d:2d:5e:d3:62:32:b2:97:49:3b: 73:5f:ff:78:38:cc:ca:4f:1b:88:53:76:d5:51:d9:46:39:3f: 14:33:aa:48:f1:e1:74:99:e1:3e:64:bf:22:88:c0:8e:55:30: 78:1d:51:25:94:00:f1:5d:05:d1:91:00:eb:00:f0:3b:55:cb: 4c:c0:63:06:c6:75:3d:49:40:99:cc:f7:3e:79:0d:02:5e:28: af:4b:ce:4c:8d:96:51:48:1e:ac:e1:6c:84:04:ec:57:74:67: b9:55:f3:80:4a:37:78:56:e5:59:f5:73:72:4e:d8:06:31:b0: 50:58:0e:f5:bb:8e:d9:a2:25:5c:d1:29:a6:ce:df:2c:17:a9: a2:2b:40:5b:17:c4:5f:70:56:7a:61:72:01:9a:0b:62:3a:3c: 83:0a:bb:cc:77:ee:38:7e:cb:a6:cc:b6:48:d0:2b:e1:f9:00: be:38:27:e7:0c:f0:28:cc:f9:38:0f:0c:84:7e:3c:63:c9:0c: 41:cf:16:d2:62:5f:05:c6:81:5d:97:45:cb:3a:1d:d1:84:9e: a3:9a:98:0d:91:a3:4e:6c:df:00:91:ca:62:35:1d:27:ea:1b: a1:1c:57:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCGA3h5nCn8DJl8kNe7ojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZmEyZTcwNWQyMzNmZmYzNDVhOTEyYjJmMjM5YjVhY2Uz NzJiYjkwHhcNMjUxMjE1MjIwMTI3WhcNMjUxMjE2MjIwMTI3WjAzMTEwLwYDVQQD EyhjMmM2NjJkMTljYWM1MmZhZDQyNjBlMmQ0ZGQ4YjZiMGFlNzJlODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts2hBkhoYu6NP42fTgKdaA+pE4Bz mWk9UoL0P7eZcLoF4aPeN7Jh1YCryXoCN8aPCxQNUyKk/M5kH6o7rgnXHsxVy95F bznItTdgOuly8vuYQDr7nwCbubSy3jO84Zui/NJwdsONGmoF9baeh1lpVE3hFM8l fR7rziK8a64VXLCNtm5rozLUNHI6nRFgwEB6eB2zZO0n7ThEjPSRJ6MeBh6IqWA2 tJwoV56UM/9D0dMKf0RCT36txv8HNQ/R9N79D3C1VhaR9PAYB+zw0McCLmcRfgvQ hiJxpsCJmc7RcaXNlPQG+82J9p571RMNjxEAjcddcx45tjulPokrXxN4IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLGYtGcrFL61CYOLU3YtrCucuhBMB8GA1UdIwQY MBaAFH76LnBdIz//NFqRKy8jm1rONyu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEt Nzc4MjdmZTE1NTViLzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85ZjZiYTQtMWFkNy00ZmUzLWIyMTEtNzc4MjdmZTE1NTVi LzEvZnZvdWNGMGpQXzgwV3BFckx5T2JXczQzSzdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEc1vcNVH EGiTixui9Su38IfZNIg0aa/DCyydLV7TYjKyl0k7c1//eDjMyk8biFN21VHZRjk/ FDOqSPHhdJnhPmS/IojAjlUweB1RJZQA8V0F0ZEA6wDwO1XLTMBjBsZ1PUlAmcz3 PnkNAl4or0vOTI2WUUgerOFshATsV3RnuVXzgEo3eFblWfVzck7YBjGwUFgO9buO 2aIlXNEpps7fLBepoitAWxfEX3BWemFyAZoLYjo8gwq7zHfuOH7Lpsy2SNAr4fkA vjgn5wzwKMz5OA8MhH48Y8kMQc8W0mJfBcaBXZdFyzod0YSeo5qYDZGjTmzfAJHK YjUdJ+oboRxXEg== -----END CERTIFICATE-----Generated at Tue Dec 16 02:50:17 2025 by rpki-client