This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft File: frYDcECoYM2RunejcY7VgMrfXdg.mft (raw, json) Hash identifier: 2/zB/DmQymPXzW2Q+s/XuBCf/gIzPf/yGIfNSIG6Lr8= Subject key identifier: D6:1B:E8:50:78:5C:22:9C:40:40:94:88:E6:98:6B:41:70:99:62:AE Authority key identifier: 7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8 Certificate issuer: /CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8 Certificate serial: 019B5A514DDBD8D947A3EC2F9FDC54D7F4E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft Manifest number: 0779 Signing time: Fri 26 Dec 2025 11:00:36 +0000 Manifest this update: Fri 26 Dec 2025 11:00:36 +0000 Manifest next update: Sat 27 Dec 2025 11:00:36 +0000 Files and hashes: 1: frYDcECoYM2RunejcY7VgMrfXdg.crl (hash: NDrVFCzlUqzbDglaREK4cxAJch0VuBUaugWHUzDf4mA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:4d:db:d8:d9:47:a3:ec:2f:9f:dc:54:d7:f4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb6037040a860cd91ba77a3718ed580cadf5dd8 Validity Not Before: Dec 26 11:00:36 2025 GMT Not After : Dec 27 11:00:36 2025 GMT Subject: CN=d61be850785c229c40409488e6986b41709962ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:20:a1:b9:51:3b:eb:4e:83:fe:59:28:43: 9d:55:f0:7f:7f:ed:80:eb:aa:a0:d2:7a:53:6d:11: b3:e8:1f:c0:ab:fd:45:8f:d7:44:c5:7e:fb:d1:d8: 37:5f:b3:bf:a0:cf:eb:23:7b:d0:7b:77:74:8f:a1: 4a:e0:33:14:b7:54:e6:1a:23:fc:1f:6f:c9:33:93: 8d:e6:09:21:b5:d1:20:eb:50:92:cd:e6:84:de:e8: 83:b9:04:b3:c2:e1:eb:21:63:5a:9b:07:d1:f4:d2: 12:20:88:41:26:14:0e:c6:26:f4:af:71:04:c8:5b: 89:56:19:ed:12:cd:4f:3d:64:00:1a:69:ab:b3:f0: c6:97:b8:5c:c2:4c:a6:3f:78:60:d3:18:7d:a5:6b: 18:96:dd:dc:29:1c:f9:73:4a:33:43:02:29:da:7f: 99:c2:41:df:40:3d:63:38:9f:99:14:36:06:d7:91: c3:f4:e8:47:86:89:df:9b:f6:b1:b1:42:fb:34:6a: a9:a5:39:6a:80:8e:f2:3d:b6:bf:a1:c5:75:4e:73: 4b:b9:40:0c:16:a5:fa:14:1c:ae:38:ce:81:1f:c1: 11:3a:19:fd:8e:17:c0:85:34:d8:a5:b7:bd:9b:15: 33:59:7e:99:1d:f9:8e:87:5d:5b:e6:22:63:a4:30: 37:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1B:E8:50:78:5C:22:9C:40:40:94:88:E6:98:6B:41:70:99:62:AE X509v3 Authority Key Identifier: keyid:7E:B6:03:70:40:A8:60:CD:91:BA:77:A3:71:8E:D5:80:CA:DF:5D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frYDcECoYM2RunejcY7VgMrfXdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/bf9999-2341-4acf-84e9-b8866e941963/1/frYDcECoYM2RunejcY7VgMrfXdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:45:01:64:0e:a8:95:1f:3d:67:99:68:05:b0:6f:5c:dd:c2: 4c:a7:66:3e:99:c6:f8:24:d2:bf:cd:d6:5c:ea:1c:ce:ab:22: 46:61:bd:e9:9f:50:2f:71:6a:d2:ab:0a:38:f9:7f:63:bd:df: 6c:69:fd:f6:af:6f:c5:c6:36:96:e8:3d:1f:3e:0f:40:18:2e: dc:96:d3:ee:e6:06:8d:de:99:36:17:6e:b8:af:25:f1:26:a6: 8f:93:0f:ed:0a:17:91:00:0c:49:48:75:d7:35:05:17:4f:0c: fa:39:55:51:10:62:83:47:23:03:12:99:27:4b:7e:2e:87:c4: 8c:5e:3d:c7:06:16:31:ac:8e:00:a5:de:be:af:34:8f:0e:22: ee:4d:4e:0b:18:04:f1:44:97:12:9d:4d:14:01:ab:79:20:5c: 7a:d3:c3:a1:3f:a8:6b:d7:c1:12:02:72:a4:e9:b5:a6:5b:74: 64:73:11:ad:c5:5c:f9:1c:1c:96:10:a7:3a:a9:7b:be:0f:87: 62:f5:81:b3:a0:c2:df:ed:fd:bb:72:10:31:99:95:0f:df:73: da:62:bd:a0:4a:54:8b:71:ed:ae:31:8a:1f:21:d6:0e:3d:53: 83:64:af:0f:89:99:d2:4e:ec:f1:03:ac:43:ba:cb:20:29:5a: d5:40:75:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUU3b2NlHo+wvn9xU1/TjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjYwMzcwNDBhODYwY2Q5MWJhNzdhMzcxOGVkNTgwY2Fk ZjVkZDgwHhcNMjUxMjI2MTEwMDM2WhcNMjUxMjI3MTEwMDM2WjAzMTEwLwYDVQQD EyhkNjFiZTg1MDc4NWMyMjljNDA0MDk0ODhlNjk4NmI0MTcwOTk2MmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ8goblRO+tOg/5ZKEOdVfB/f+2A 66qg0npTbRGz6B/Aq/1Fj9dExX770dg3X7O/oM/rI3vQe3d0j6FK4DMUt1TmGiP8 H2/JM5ON5gkhtdEg61CSzeaE3uiDuQSzwuHrIWNamwfR9NISIIhBJhQOxib0r3EE yFuJVhntEs1PPWQAGmmrs/DGl7hcwkymP3hg0xh9pWsYlt3cKRz5c0ozQwIp2n+Z wkHfQD1jOJ+ZFDYG15HD9OhHhonfm/axsUL7NGqppTlqgI7yPba/ocV1TnNLuUAM FqX6FByuOM6BH8EROhn9jhfAhTTYpbe9mxUzWX6ZHfmOh11b5iJjpDA3HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYb6FB4XCKcQECUiOaYa0FwmWKuMB8GA1UdIwQY MBaAFH62A3BAqGDNkbp3o3GO1YDK313YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTkt Yjg4NjZlOTQxOTYzLzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9iZjk5OTktMjM0MS00YWNmLTg0ZTktYjg4NjZlOTQxOTYz LzEvZnJZRGNFQ29ZTTJSdW5lamNZN1ZnTXJmWGRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVkUBZA6o lR89Z5loBbBvXN3CTKdmPpnG+CTSv83WXOoczqsiRmG96Z9QL3Fq0qsKOPl/Y73f bGn99q9vxcY2lug9Hz4PQBgu3JbT7uYGjd6ZNhduuK8l8Samj5MP7QoXkQAMSUh1 1zUFF08M+jlVURBig0cjAxKZJ0t+LofEjF49xwYWMayOAKXevq80jw4i7k1OCxgE 8USXEp1NFAGreSBcetPDoT+oa9fBEgJypOm1plt0ZHMRrcVc+RwclhCnOql7vg+H YvWBs6DC3+39u3IQMZmVD99z2mK9oEpUi3HtrjGKHyHWDj1Tg2SvD4mZ0k7s8QOs Q7rLICla1UB1YA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:47 2025 by rpki-client