This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json) Hash identifier: ljQsl9fKA4QNWu33KuVGR0q/zV7cKLdxnHaeTYwdqqY= Subject key identifier: 6A:BD:11:08:FA:1A:E0:F4:C1:78:3B:06:5C:6B:D5:6A:70:4D:E7:0C Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a Certificate serial: 019B2098D0114D7DCCA51029E24227E20F17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft Manifest number: 09E3 Signing time: Mon 15 Dec 2025 06:00:44 +0000 Manifest this update: Mon 15 Dec 2025 06:00:44 +0000 Manifest next update: Tue 16 Dec 2025 06:00:44 +0000 Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: FNAgY/WWUXCnk4v9ZQQ7f2hqppkQfZxD1SUP3X01aUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:d0:11:4d:7d:cc:a5:10:29:e2:42:27:e2:0f:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a Validity Not Before: Dec 15 06:00:44 2025 GMT Not After : Dec 16 06:00:44 2025 GMT Subject: CN=6abd1108fa1ae0f4c1783b065c6bd56a704de70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:75:fc:d2:a7:17:d7:b9:e2:94:19:fd:2d: 35:46:24:d5:1e:53:20:9b:13:4b:fc:1a:93:26:04: e2:c9:93:a7:be:06:f4:b3:30:2a:3e:42:8e:0b:4f: d3:64:dd:f2:f7:cf:0f:67:7f:86:48:5b:66:ee:97: 6e:95:ab:bc:5b:35:cc:05:ea:c2:91:89:6d:01:27: e9:34:a6:bf:cd:97:0e:46:a5:86:bc:2c:1d:ce:a6: a3:13:7e:d6:d6:12:39:3f:35:7f:d4:1c:e3:2c:24: 32:13:59:76:d9:00:9c:ab:6b:6f:e2:36:bf:27:0e: fd:fc:54:5b:dd:13:2a:eb:19:6d:46:d2:93:3f:c2: d3:5c:6e:20:63:69:96:16:da:4f:7e:aa:a7:51:af: 53:2b:9f:21:96:66:3e:1f:d8:8e:1f:65:97:d3:c7: 69:d1:bb:89:b7:55:41:11:74:e2:f4:13:b4:53:ae: d4:95:8e:8b:f5:88:82:24:4d:0c:5e:ab:e5:b8:db: f5:37:01:5a:c6:33:81:2c:6f:52:bc:35:e2:e1:0b: 24:0b:19:eb:e7:01:52:8a:40:be:2d:45:aa:29:44: 09:89:38:2c:8a:ac:58:d8:1d:b7:47:f2:a1:b0:f1: b2:28:22:34:f6:a0:da:6b:6f:a6:c0:a8:12:52:4c: 5c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BD:11:08:FA:1A:E0:F4:C1:78:3B:06:5C:6B:D5:6A:70:4D:E7:0C X509v3 Authority Key Identifier: keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ca:2f:cd:1e:89:7b:04:b6:9a:6b:ee:83:03:e5:c5:c7:fc: 2e:14:ae:71:76:d9:36:3c:0e:1d:40:db:3c:44:50:b2:d1:63: a8:83:0a:02:40:c5:89:dc:1f:24:43:37:72:87:a4:12:c3:da: 98:65:d7:fc:6d:67:56:05:41:24:a6:22:0f:6f:5e:1c:ae:ad: 12:63:85:ff:94:c6:2f:de:d0:78:2e:0f:cf:ce:3c:9f:da:17: 9a:0e:bf:90:77:4a:e0:58:cb:09:56:80:8b:92:65:fc:1f:4b: 7a:99:84:66:32:52:7e:ed:09:da:c9:62:8b:6f:ce:95:f0:25: 9c:cf:ef:1e:19:1e:29:a8:46:e7:79:d6:2d:a9:a6:b0:15:10: 5b:81:47:27:26:eb:65:59:78:18:61:d4:35:76:58:0f:60:ed: 7d:cd:9f:9b:5a:a6:d5:a3:86:16:68:5e:57:ba:48:8b:d1:fe: 63:57:f3:8c:9b:a2:71:9d:02:b7:c2:0c:e0:99:e5:db:33:08: a8:58:ba:51:c1:66:85:ff:c8:5d:9d:f3:60:ee:23:5b:e3:03: a0:da:27:d3:cf:5a:e8:57:a0:6f:ef:d4:a9:e2:82:fd:b5:57: 10:66:8c:8d:25:13:7e:d5:bf:e3:d5:ee:dd:9c:c7:b6:a9:e6: 52:de:de:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmNARTX3MpRAp4kIn4g8XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTllMTU4ZGNhNTU4NGYzN2ExZjgzNDliMjg5YTY4MTJk YjkyNGEwHhcNMjUxMjE1MDYwMDQ0WhcNMjUxMjE2MDYwMDQ0WjAzMTEwLwYDVQQD Eyg2YWJkMTEwOGZhMWFlMGY0YzE3ODNiMDY1YzZiZDU2YTcwNGRlNzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy51/NKnF9e54pQZ/S01RiTVHlMg mxNL/BqTJgTiyZOnvgb0szAqPkKOC0/TZN3y988PZ3+GSFtm7pdulau8WzXMBerC kYltASfpNKa/zZcORqWGvCwdzqajE37W1hI5PzV/1BzjLCQyE1l22QCcq2tv4ja/ Jw79/FRb3RMq6xltRtKTP8LTXG4gY2mWFtpPfqqnUa9TK58hlmY+H9iOH2WX08dp 0buJt1VBEXTi9BO0U67UlY6L9YiCJE0MXqvluNv1NwFaxjOBLG9SvDXi4QskCxnr 5wFSikC+LUWqKUQJiTgsiqxY2B23R/KhsPGyKCI09qDaa2+mwKgSUkxcYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGq9EQj6GuD0wXg7Blxr1WpwTecMMB8GA1UdIwQY MBaAFHyp4VjcpVhPN6H4NJsommgS25JKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQt NzhhNzdmN2ExMzQyLzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQtNzhhNzdmN2ExMzQy LzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOcovzR6J ewS2mmvugwPlxcf8LhSucXbZNjwOHUDbPERQstFjqIMKAkDFidwfJEM3coekEsPa mGXX/G1nVgVBJKYiD29eHK6tEmOF/5TGL97QeC4Pz848n9oXmg6/kHdK4FjLCVaA i5Jl/B9LepmEZjJSfu0J2slii2/OlfAlnM/vHhkeKahG53nWLammsBUQW4FHJybr ZVl4GGHUNXZYD2Dtfc2fm1qm1aOGFmheV7pIi9H+Y1fzjJuicZ0Ct8IM4Jnl2zMI qFi6UcFmhf/IXZ3zYO4jW+MDoNon089a6Fegb+/UqeKC/bVXEGaMjSUTftW/49Xu 3ZzHtqnmUt7eVw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:22 2025 by rpki-client