This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json) Hash identifier: 0dHLXz2/tPxghrGNHBTINwahAEODX/pZYnaXBny2DKw= Subject key identifier: 89:0A:4A:B1:8D:66:55:9B:67:15:F1:F6:80:9F:02:4B:5C:68:90:AF Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Certificate serial: 019B3B6B72973F6E97C1872EAC9BD406261A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft Manifest number: 15DC Signing time: Sat 20 Dec 2025 11:00:56 +0000 Manifest this update: Sat 20 Dec 2025 11:00:56 +0000 Manifest next update: Sun 21 Dec 2025 11:00:56 +0000 Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: ILR3Cr21YYbwaroF69xZcmT2kHpU4JOCqOzhFC9KDfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:72:97:3f:6e:97:c1:87:2e:ac:9b:d4:06:26:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Validity Not Before: Dec 20 11:00:56 2025 GMT Not After : Dec 21 11:00:56 2025 GMT Subject: CN=890a4ab18d66559b6715f1f6809f024b5c6890af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2c:2c:69:9a:df:18:27:9a:9c:36:97:23:1c: 1a:c9:b0:68:f8:67:fb:e5:b3:87:40:0a:8b:97:d4: b3:55:42:75:50:d5:6b:fb:69:ea:64:bb:00:7a:55: 09:b8:9b:0e:ff:54:e9:f0:9c:73:41:be:0c:3b:9b: 51:6f:b6:fa:aa:1f:15:39:c1:5f:78:03:76:a5:75: 15:2f:c6:a4:7a:b5:17:c0:3f:2e:7f:82:a5:1c:be: 4c:3e:bc:07:00:28:80:0b:90:47:5f:c2:a9:cd:00: ac:bb:15:0b:c5:61:9a:df:e2:4e:91:3a:46:5d:4b: cb:cd:a1:23:80:0c:f2:53:f1:03:b0:ce:7e:dd:de: 22:26:59:b8:c0:90:6d:6d:3d:b8:4a:92:66:39:93: a6:2f:24:3e:cd:11:e3:35:74:89:bd:a4:39:42:ed: 0b:d1:ed:35:4d:35:a6:59:1c:7d:ad:3f:c4:1d:13: d0:90:3c:42:97:70:aa:cd:07:1e:94:57:17:fc:85: a8:04:ac:18:01:4f:07:1f:cb:c2:5b:3c:d0:fa:b2: 53:60:1e:f5:85:cb:7c:36:f8:f5:89:d4:6d:cf:fb: 54:5f:05:b4:a4:08:d5:51:75:78:7a:38:0e:2d:34: bf:02:98:5f:16:b5:94:63:90:87:69:60:7e:7f:e8: c3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0A:4A:B1:8D:66:55:9B:67:15:F1:F6:80:9F:02:4B:5C:68:90:AF X509v3 Authority Key Identifier: keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a8:a3:8d:3f:cb:a3:b5:70:b2:8c:e0:6c:e6:69:10:64:06: f0:2d:1f:84:bc:35:9d:c3:86:71:e9:23:b0:e4:cc:fc:87:14: 63:a0:d2:04:ef:4e:a8:84:78:84:c4:7c:c0:84:45:b9:65:7b: e6:25:13:4a:66:bc:2e:e1:1d:32:c5:85:a4:d6:c8:3c:8b:94: 13:f2:2a:e9:85:db:49:a5:2d:2e:42:9f:8a:9a:e0:76:ac:99: 7e:81:3b:49:c7:91:fc:eb:0e:ea:45:b8:8c:ec:99:65:a5:98: 91:1d:34:21:6d:f3:9b:6c:30:69:94:a1:a9:1d:a1:40:97:50: 2b:39:b8:81:c4:4f:f9:17:73:c3:18:48:79:35:0e:3c:00:2f: 16:97:15:d4:e7:dd:d7:e9:f9:34:b5:9b:25:c4:5a:5d:f1:50: 6d:08:b9:11:76:e0:c1:cc:ff:c0:4f:0d:6c:31:12:40:b2:4a: bd:e3:e0:4f:e6:80:d8:a4:01:9b:07:4f:e4:b0:eb:c2:80:ab: 6b:c1:6e:2a:51:9e:ca:4b:db:2b:9a:37:91:64:9e:64:03:f9: bb:50:8b:8b:e9:cb:06:29:16:42:52:bd:8c:08:d9:65:ff:7f: 3c:f4:6a:25:7b:0a:a1:6f:05:5f:86:7b:57:bf:b8:d2:1a:c6: 2c:d6:f1:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3KXP26XwYcurJvUBiYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj YmI2NjEwHhcNMjUxMjIwMTEwMDU2WhcNMjUxMjIxMTEwMDU2WjAzMTEwLwYDVQQD Eyg4OTBhNGFiMThkNjY1NTliNjcxNWYxZjY4MDlmMDI0YjVjNjg5MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSwsaZrfGCeanDaXIxwaybBo+Gf7 5bOHQAqLl9SzVUJ1UNVr+2nqZLsAelUJuJsO/1Tp8JxzQb4MO5tRb7b6qh8VOcFf eAN2pXUVL8akerUXwD8uf4KlHL5MPrwHACiAC5BHX8KpzQCsuxULxWGa3+JOkTpG XUvLzaEjgAzyU/EDsM5+3d4iJlm4wJBtbT24SpJmOZOmLyQ+zRHjNXSJvaQ5Qu0L 0e01TTWmWRx9rT/EHRPQkDxCl3CqzQcelFcX/IWoBKwYAU8HH8vCWzzQ+rJTYB71 hct8Nvj1idRtz/tUXwW0pAjVUXV4ejgOLTS/AphfFrWUY5CHaWB+f+jDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkKSrGNZlWbZxXx9oCfAktcaJCvMB8GA1UdIwQY MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaijjT/L o7VwsozgbOZpEGQG8C0fhLw1ncOGcekjsOTM/IcUY6DSBO9OqIR4hMR8wIRFuWV7 5iUTSma8LuEdMsWFpNbIPIuUE/Iq6YXbSaUtLkKfiprgdqyZfoE7SceR/OsO6kW4 jOyZZaWYkR00IW3zm2wwaZShqR2hQJdQKzm4gcRP+RdzwxhIeTUOPAAvFpcV1Ofd 1+n5NLWbJcRaXfFQbQi5EXbgwcz/wE8NbDESQLJKvePgT+aA2KQBmwdP5LDrwoCr a8FuKlGeykvbK5o3kWSeZAP5u1CLi+nLBikWQlK9jAjZZf9/PPRqJXsKoW8FX4Z7 V7+40hrGLNbxtw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:13:57 2025 by rpki-client