This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json) Hash identifier: TRkMDYpCU6I6Pzr8TwE5sbHC2OSrX8Sh7ff4iw5CSBU= Subject key identifier: 70:21:15:8C:D6:46:6B:29:00:55:99:C3:8E:35:E6:04:32:D3:44:6B Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Certificate serial: 019B19BB8C6F49626A944CB1D2ECE5D2425E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft Manifest number: 1772 Signing time: Sat 13 Dec 2025 22:01:20 +0000 Manifest this update: Sat 13 Dec 2025 22:01:20 +0000 Manifest next update: Sun 14 Dec 2025 22:01:20 +0000 Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: dNCo5lNtBKYb+sK6Oh0enYN8BQZDw24qej2kG0Efu8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:8c:6f:49:62:6a:94:4c:b1:d2:ec:e5:d2:42:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Validity Not Before: Dec 13 22:01:20 2025 GMT Not After : Dec 14 22:01:20 2025 GMT Subject: CN=7021158cd6466b29005599c38e35e60432d3446b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:b6:dc:96:20:b3:a1:f2:56:6b:4a:fb:54: a1:23:ae:81:44:a4:69:54:de:b2:26:e2:dc:bc:ea: 4e:83:3c:0a:47:98:25:8b:cd:1e:d2:3c:e5:a5:a2: 0d:96:d0:43:ab:83:fa:fb:a2:ca:90:7d:dc:00:1b: e7:51:7e:70:88:0d:56:21:e4:c5:bf:4f:cc:5a:21: af:81:ea:41:99:b7:ed:77:2f:9b:b4:4d:ed:b9:bb: 75:1a:8d:7e:c4:4b:2d:a6:51:af:9a:61:a1:c6:84: 82:8e:94:88:58:bc:94:e8:41:f6:f4:cf:81:a8:81: 92:8b:52:22:20:a8:85:48:3e:c9:6b:d2:37:24:fa: 26:09:f7:8b:9e:ca:d9:05:0b:2f:92:48:df:39:22: 05:6c:e8:d0:70:4a:c4:61:88:70:f1:76:5a:82:bf: 66:4a:22:90:14:b9:63:bd:f6:43:14:e9:d4:3b:0b: b7:97:b4:45:54:dc:3e:57:2f:a0:58:d5:38:50:aa: 75:c3:46:2c:4c:59:70:41:87:ce:69:38:dc:f7:75: 78:97:85:63:1f:ed:18:98:c7:45:17:63:5b:3f:88: 49:4f:32:a6:76:17:42:b2:84:2c:53:b0:0b:df:e8: 90:9f:6f:43:73:6c:77:ae:fd:8c:83:86:1d:1e:01: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:21:15:8C:D6:46:6B:29:00:55:99:C3:8E:35:E6:04:32:D3:44:6B X509v3 Authority Key Identifier: keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f1:6f:5f:bf:5e:b3:31:26:a4:0f:83:a6:f6:be:2a:28:b8: 30:1c:78:50:5a:5a:1e:90:4e:41:27:eb:49:25:10:dd:85:cf: 42:6a:d4:47:8c:ea:ba:b2:09:91:44:52:06:b8:f9:05:7b:d4: 81:2b:5d:04:d2:1c:99:b1:b2:41:e3:7a:a9:e7:2a:14:77:dd: b8:f8:01:2f:ba:06:06:3c:b1:a0:c8:10:ed:76:88:f2:81:86: de:85:64:63:a1:55:1a:55:c7:bb:d8:69:ec:7c:cf:65:98:97: d8:5e:6d:ef:51:a2:e6:50:02:22:43:0a:5d:ca:f0:c9:e3:be: 43:e2:a0:fa:c6:ba:f5:53:12:f8:12:01:8d:ca:f2:8a:c6:f3: 09:08:90:1b:4e:da:42:32:6b:30:04:7e:bd:f2:da:d4:63:e1: f9:a7:f1:bb:ee:b3:61:19:c6:a7:66:f3:6e:c4:af:80:b4:eb: a2:26:f1:d1:f9:94:db:b5:c3:e0:15:d0:66:49:fc:e2:0b:01: 3d:ed:9c:5f:01:06:a0:f5:45:f0:51:5a:97:39:f1:a8:8c:78: 0b:54:b4:41:db:ad:f7:3f:f0:74:b5:57:01:8c:da:0a:01:21: b0:82:4f:2e:b6:2d:14:f1:09:1c:aa:40:5f:62:97:2c:dd:a8: b5:de:fb:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu4xvSWJqlEyx0uzl0kJeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl NDZlNmIwHhcNMjUxMjEzMjIwMTIwWhcNMjUxMjE0MjIwMTIwWjAzMTEwLwYDVQQD Eyg3MDIxMTU4Y2Q2NDY2YjI5MDA1NTk5YzM4ZTM1ZTYwNDMyZDM0NDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYO23JYgs6HyVmtK+1ShI66BRKRp VN6yJuLcvOpOgzwKR5gli80e0jzlpaINltBDq4P6+6LKkH3cABvnUX5wiA1WIeTF v0/MWiGvgepBmbftdy+btE3tubt1Go1+xEstplGvmmGhxoSCjpSIWLyU6EH29M+B qIGSi1IiIKiFSD7Ja9I3JPomCfeLnsrZBQsvkkjfOSIFbOjQcErEYYhw8XZagr9m SiKQFLljvfZDFOnUOwu3l7RFVNw+Vy+gWNU4UKp1w0YsTFlwQYfOaTjc93V4l4Vj H+0YmMdFF2NbP4hJTzKmdhdCsoQsU7AL3+iQn29Dc2x3rv2Mg4YdHgFMUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAhFYzWRmspAFWZw4415gQy00RrMB8GA1UdIwQY MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5 LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfFvX79e szEmpA+Dpva+Kii4MBx4UFpaHpBOQSfrSSUQ3YXPQmrUR4zqurIJkURSBrj5BXvU gStdBNIcmbGyQeN6qecqFHfduPgBL7oGBjyxoMgQ7XaI8oGG3oVkY6FVGlXHu9hp 7HzPZZiX2F5t71Gi5lACIkMKXcrwyeO+Q+Kg+sa69VMS+BIBjcryisbzCQiQG07a QjJrMAR+vfLa1GPh+afxu+6zYRnGp2bzbsSvgLTroibx0fmU27XD4BXQZkn84gsB Pe2cXwEGoPVF8FFalznxqIx4C1S0Qdut9z/wdLVXAYzaCgEhsIJPLrYtFPEJHKpA X2KXLN2otd77rg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:31:07 2025 by rpki-client