This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft File: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json) Hash identifier: 8kjCw5GHbZ/VjbmIkcoA4/W6oW+i4FR4WkX0JhjAAdk= Subject key identifier: 46:5B:70:A1:DB:DB:DD:A8:39:C1:84:7C:9C:F9:41:4A:DC:1A:6D:B7 Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D Certificate issuer: /CN=16f91ff671f1de5143aa21a008e26e27946ab85d Certificate serial: 019B5975DB06A40D89BBE736945C4FE05D20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 07:00:54 +0000 Manifest this update: Fri 26 Dec 2025 07:00:54 +0000 Manifest next update: Sat 27 Dec 2025 07:00:54 +0000 Files and hashes: 1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: qX9ldoKWW0GCSklFILBjfXMYZdyRl6W23zGCUZ17Vf4=) 2: Ga3e6QHsTUZGTikjmdN4xgpIHeY.roa (hash: P6IjosmlOiqXveubqIomO6KehA4R0g/PyjiODsr89zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:db:06:a4:0d:89:bb:e7:36:94:5c:4f:e0:5d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d Validity Not Before: Dec 26 07:00:54 2025 GMT Not After : Dec 27 07:00:54 2025 GMT Subject: CN=465b70a1dbdbdda839c1847c9cf9414adc1a6db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:ef:68:90:50:61:11:ed:a9:a0:42:d6:39: 18:47:9d:d5:87:3b:9f:92:99:b9:a3:ac:d2:c3:8e: 26:8d:18:ec:6c:c3:5c:b0:e3:f1:04:74:84:6f:c1: aa:7e:95:12:4a:8d:a0:6b:40:9e:42:95:19:b0:86: fa:67:7f:e8:48:27:52:df:ce:84:85:eb:29:38:49: e1:64:28:37:18:e2:92:16:33:31:87:b2:e6:f4:23: e7:cf:f4:1e:d9:6c:d4:ec:b9:4c:41:6f:ba:cb:99: cf:de:a9:c1:8a:0b:b4:19:34:fc:3d:65:3e:04:f9: 71:09:1d:db:e8:01:b2:0d:bd:3b:c9:97:db:41:32: bf:92:fc:b6:50:f9:81:33:a1:f6:36:c2:14:1c:45: f3:2c:8f:7d:c3:d8:e7:94:74:85:49:37:5b:21:d6: 74:e5:d6:2b:cc:29:6f:06:19:3d:5f:bb:c5:35:cb: e1:e4:2b:b1:83:02:f7:85:ad:59:52:05:8b:1d:d2: a4:e7:ba:8f:1e:35:ec:a6:08:a0:1f:b8:ba:ad:04: 8a:cc:b3:3c:d0:fb:e8:f8:18:af:b6:21:29:8f:44: 12:ee:f8:d2:b0:fb:4a:7c:ab:c0:f3:f2:68:76:d1: 3b:3e:27:f0:4a:b7:11:1a:08:bd:84:91:09:d0:9e: ef:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:5B:70:A1:DB:DB:DD:A8:39:C1:84:7C:9C:F9:41:4A:DC:1A:6D:B7 X509v3 Authority Key Identifier: keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7a:80:8a:3c:56:7b:27:af:63:8b:01:24:47:4c:3e:ae:d6: 1f:48:4e:0e:72:03:41:52:fb:67:d8:9b:aa:18:64:fd:57:db: f3:3d:1d:f4:7a:63:03:89:31:e1:da:e7:fb:14:42:33:c1:b3: 78:a5:c7:a7:aa:1a:b8:0b:d5:a7:fd:72:c3:df:78:e7:50:43: 64:d8:f0:0d:c0:d6:44:de:ef:3e:45:63:c3:e9:fa:7a:7c:f5: a1:5e:a3:5c:36:fa:60:9d:62:10:fd:d7:bc:8d:6d:ea:b4:dc: 38:87:dc:78:75:42:9f:98:82:7a:2f:89:5d:c5:17:2a:14:35: 4d:1e:dc:1a:b9:68:36:10:6a:0c:89:16:5c:11:33:b5:84:83: 82:80:8f:83:50:65:50:c4:fc:6e:97:ce:d4:4c:47:a0:22:de: 24:c2:7a:64:36:89:4b:aa:42:91:26:9b:48:6b:e5:7c:7c:78: 88:75:af:dd:f0:d5:54:47:12:5f:3d:35:61:e9:bf:25:8f:f8: d6:01:ce:ff:c8:8e:3f:5a:6d:31:97:1f:6c:48:b5:81:35:7d: 3e:25:2e:3e:f8:af:b0:e1:b5:03:65:06:4e:84:65:b2:1a:26: 5e:cc:e0:d6:1d:dc:21:07:5f:09:fb:80:01:61:a4:74:14:22: 01:20:c9:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZddsGpA2Ju+c2lFxP4F0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjkxZmY2NzFmMWRlNTE0M2FhMjFhMDA4ZTI2ZTI3OTQ2 YWI4NWQwHhcNMjUxMjI2MDcwMDU0WhcNMjUxMjI3MDcwMDU0WjAzMTEwLwYDVQQD Eyg0NjViNzBhMWRiZGJkZGE4MzljMTg0N2M5Y2Y5NDE0YWRjMWE2ZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkufvaJBQYRHtqaBC1jkYR53Vhzuf kpm5o6zSw44mjRjsbMNcsOPxBHSEb8GqfpUSSo2ga0CeQpUZsIb6Z3/oSCdS386E hespOEnhZCg3GOKSFjMxh7Lm9CPnz/Qe2WzU7LlMQW+6y5nP3qnBigu0GTT8PWU+ BPlxCR3b6AGyDb07yZfbQTK/kvy2UPmBM6H2NsIUHEXzLI99w9jnlHSFSTdbIdZ0 5dYrzClvBhk9X7vFNcvh5CuxgwL3ha1ZUgWLHdKk57qPHjXspgigH7i6rQSKzLM8 0Pvo+BivtiEpj0QS7vjSsPtKfKvA8/JodtE7PifwSrcRGgi9hJEJ0J7vPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZbcKHb292oOcGEfJz5QUrcGm23MB8GA1UdIwQY MBaAFBb5H/Zx8d5RQ6ohoAjibieUarhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1Zjkt YWE4NWE4YzBhZWMxLzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wOTY5NTEtZDU3My00Y2VlLTk1ZjktYWE4NWE4YzBhZWMx LzEvRnZrZjluSHgzbEZEcWlHZ0NPSnVKNVJxdUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXqAijxW eyevY4sBJEdMPq7WH0hODnIDQVL7Z9ibqhhk/Vfb8z0d9HpjA4kx4drn+xRCM8Gz eKXHp6oauAvVp/1yw99451BDZNjwDcDWRN7vPkVjw+n6enz1oV6jXDb6YJ1iEP3X vI1t6rTcOIfceHVCn5iCei+JXcUXKhQ1TR7cGrloNhBqDIkWXBEztYSDgoCPg1Bl UMT8bpfO1ExHoCLeJMJ6ZDaJS6pCkSabSGvlfHx4iHWv3fDVVEcSXz01Yem/JY/4 1gHO/8iOP1ptMZcfbEi1gTV9PiUuPvivsOG1A2UGToRlshomXszg1h3cIQdfCfuA AWGkdBQiASDJOw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:01 2025 by rpki-client