This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft File: FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json) Hash identifier: YK+dKo8z+/2g1Ll5+DOI/uBf6zN0FxFmFK3pIIKE2co= Subject key identifier: 9C:E8:F4:8B:F4:E4:D3:E5:FA:6A:66:22:BC:F2:90:F0:25:75:38:96 Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81 Certificate issuer: /CN=16f02e70a6553ff0c665139ee55671c860658081 Certificate serial: 019B1EAA599FEF725BF17F346FEAE4A18167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft Manifest number: 1774 Signing time: Sun 14 Dec 2025 21:00:39 +0000 Manifest this update: Sun 14 Dec 2025 21:00:39 +0000 Manifest next update: Mon 15 Dec 2025 21:00:39 +0000 Files and hashes: 1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: Tu9C+t2iauiI0u5au0KhlJr9VvTyYpRSVqqSwOZ070s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:59:9f:ef:72:5b:f1:7f:34:6f:ea:e4:a1:81:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081 Validity Not Before: Dec 14 21:00:39 2025 GMT Not After : Dec 15 21:00:39 2025 GMT Subject: CN=9ce8f48bf4e4d3e5fa6a6622bcf290f025753896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f6:75:b3:7b:12:aa:e8:13:50:86:87:bb:80: a2:0c:dd:6b:b0:6d:db:1a:03:7c:5f:9a:15:31:12: 62:99:6f:e6:90:c7:91:0d:7a:15:8c:7c:c3:0e:1f: 36:1d:7a:d6:27:6c:d5:2d:53:a0:8d:31:f4:55:69: eb:97:56:1b:50:23:fb:b4:5e:30:cd:45:b2:aa:9e: 70:f0:86:ed:1d:f2:60:cb:80:23:72:85:1f:a8:d1: cc:f2:ff:9b:64:0c:92:a4:f1:b9:d7:2e:d2:15:2f: 3b:25:e2:07:ef:be:63:51:c4:bc:56:d0:8c:a5:2b: ae:45:ec:f4:e1:93:f6:5a:99:d0:15:79:81:9e:ea: c7:c0:42:a8:36:da:d5:2c:91:a1:0f:a8:0b:8c:32: e5:8c:e3:74:0e:8a:22:3b:81:18:bd:a2:26:df:fd: 1e:18:55:47:19:47:0c:35:ec:63:13:27:e2:51:b1: 7d:42:3d:b1:c1:d6:81:1b:08:4b:33:86:f4:87:d3: 98:7d:c1:35:1b:6c:00:72:50:36:b9:06:c4:4a:eb: 0b:85:7b:89:f7:95:36:11:9a:ae:ab:62:2a:68:30: b6:ac:b4:0d:22:5b:99:a8:7e:94:e0:bc:35:d1:69: 2c:ec:96:92:48:10:1e:32:a0:6a:47:fd:b9:4c:c7: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:E8:F4:8B:F4:E4:D3:E5:FA:6A:66:22:BC:F2:90:F0:25:75:38:96 X509v3 Authority Key Identifier: keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ac:89:93:f3:a9:e6:7e:47:8b:fb:c7:61:43:d3:89:e2:ce: 80:36:53:03:f3:13:85:fa:96:04:27:0d:77:35:16:58:b1:3e: 9d:f2:71:a2:1a:da:67:11:b7:41:a3:a5:1b:5f:6b:8a:4f:e2: 29:e1:63:71:41:77:a5:3a:59:d3:3b:76:b3:a9:7f:53:14:c4: f0:60:c6:09:7e:8c:b3:9c:d1:46:1a:f9:27:96:d7:82:c1:44: 2b:e4:c3:f1:c7:7d:f7:3b:b3:49:b7:6c:8e:2c:e2:41:e8:15: 50:b6:55:9c:b8:7d:a7:7f:3b:fb:2a:ab:e0:fd:a2:0f:b5:97: fd:b7:81:31:78:89:4d:60:a4:5c:68:0a:a9:ab:29:2a:ad:b0: 33:8e:16:14:ba:7f:47:0b:40:13:c9:80:59:4f:8f:9d:61:20: 80:1d:ce:54:7f:a1:de:00:e6:c3:7a:5d:37:f7:d2:de:dd:c8: ff:66:1d:ff:a5:1c:1f:13:aa:89:73:0f:26:e2:9c:5b:c9:33: ac:f1:23:72:26:f5:c4:de:bf:09:3c:b4:af:64:e9:b1:a2:4a: f4:2d:cb:96:2a:f7:62:06:79:22:17:61:55:27:b8:f1:e2:70: 79:6f:20:71:a8:89:5c:69:fa:3c:89:ff:31:22:98:ae:bf:b4: aa:ec:08:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqlmf73Jb8X80b+rkoYFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjAyZTcwYTY1NTNmZjBjNjY1MTM5ZWU1NTY3MWM4NjA2 NTgwODEwHhcNMjUxMjE0MjEwMDM5WhcNMjUxMjE1MjEwMDM5WjAzMTEwLwYDVQQD Eyg5Y2U4ZjQ4YmY0ZTRkM2U1ZmE2YTY2MjJiY2YyOTBmMDI1NzUzODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvZ1s3sSqugTUIaHu4CiDN1rsG3b GgN8X5oVMRJimW/mkMeRDXoVjHzDDh82HXrWJ2zVLVOgjTH0VWnrl1YbUCP7tF4w zUWyqp5w8IbtHfJgy4AjcoUfqNHM8v+bZAySpPG51y7SFS87JeIH775jUcS8VtCM pSuuRez04ZP2WpnQFXmBnurHwEKoNtrVLJGhD6gLjDLljON0DooiO4EYvaIm3/0e GFVHGUcMNexjEyfiUbF9Qj2xwdaBGwhLM4b0h9OYfcE1G2wAclA2uQbESusLhXuJ 95U2EZquq2IqaDC2rLQNIluZqH6U4Lw10Wks7JaSSBAeMqBqR/25TMcsvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzo9Iv05NPl+mpmIrzykPAldTiWMB8GA1UdIwQY MBaAFBbwLnCmVT/wxmUTnuVWcchgZYCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MzgzYjUtNzA4My00Y2MzLTllNjkt OTdmNmYyYTM5NjI2LzEvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85MzgzYjUtNzA4My00Y2MzLTllNjktOTdmNmYyYTM5NjI2 LzEvRnZBdWNLWlZQX0RHWlJPZTVWWnh5R0JsZ0lFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqyJk/Op 5n5Hi/vHYUPTieLOgDZTA/MThfqWBCcNdzUWWLE+nfJxohraZxG3QaOlG19rik/i KeFjcUF3pTpZ0zt2s6l/UxTE8GDGCX6Ms5zRRhr5J5bXgsFEK+TD8cd99zuzSbds jiziQegVULZVnLh9p387+yqr4P2iD7WX/beBMXiJTWCkXGgKqaspKq2wM44WFLp/ RwtAE8mAWU+PnWEggB3OVH+h3gDmw3pdN/fS3t3I/2Yd/6UcHxOqiXMPJuKcW8kz rPEjcib1xN6/CTy0r2TpsaJK9C3Llir3YgZ5IhdhVSe48eJweW8gcaiJXGn6PIn/ MSKYrr+0quwIxQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:42 2025 by rpki-client