This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json) Hash identifier: kJRNZ/PKzJRp/1MA9ssqTRLo+mb6uvoWcKY4W8jvRTQ= Subject key identifier: 3B:99:30:FB:66:C6:1A:F3:2E:9E:0F:86:CA:D1:D2:FE:AE:8D:1E:A8 Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Certificate serial: 019B2BF85C494E5C61C45302231BAD6F7DA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft Manifest number: 1565 Signing time: Wed 17 Dec 2025 11:00:55 +0000 Manifest this update: Wed 17 Dec 2025 11:00:55 +0000 Manifest next update: Thu 18 Dec 2025 11:00:55 +0000 Files and hashes: 1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: R0t70fwDMzgy0lIszzz9lVL9DovthIgBFTH+4UfrJPM=) 2: M6kd2OZVwbLsznfkTpr9P9tvc9U.roa (hash: Jp9yH5OnFSN9zDtKINo+7/MzPgxLUFZmRYughYu+MLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:5c:49:4e:5c:61:c4:53:02:23:1b:ad:6f:7d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Validity Not Before: Dec 17 11:00:55 2025 GMT Not After : Dec 18 11:00:55 2025 GMT Subject: CN=3b9930fb66c61af32e9e0f86cad1d2feae8d1ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0b:dd:b2:b2:8b:16:23:79:51:f3:78:d9:65: e0:f4:e9:00:c6:cb:53:02:ce:b9:2b:d8:c4:18:55: a4:06:93:bc:a5:e8:aa:61:c9:0e:03:82:6c:7d:5c: 5a:9f:8f:a5:b0:cb:55:4d:0a:7e:5b:70:19:3c:43: 18:81:05:c2:71:81:0c:02:dc:01:b8:7c:ca:00:1a: 9f:05:59:7c:a8:47:a5:07:25:22:10:67:0e:cf:1b: f9:69:ee:36:d5:59:cb:73:b3:30:96:df:f4:e2:0f: 48:53:21:5f:1c:6b:0d:e5:71:f1:41:6d:78:d9:0f: cb:bb:21:7c:81:44:34:e8:39:ad:9b:cb:57:fe:91: 0a:0c:f0:6d:91:84:75:32:9f:f5:47:db:eb:df:93: b8:46:5f:54:3f:4e:56:83:40:d5:30:4f:31:80:7a: 3e:70:ca:44:6d:a0:cf:41:1c:b2:1c:07:42:f4:4c: ae:65:07:81:df:41:04:23:b6:4e:45:2b:d1:32:fd: 35:be:c8:1c:6f:6c:50:04:13:9e:01:c5:09:41:d7: db:3b:a5:c3:a0:4b:d2:49:6a:e6:51:07:bb:9f:34: b7:9a:87:72:41:ad:cc:15:a4:a7:90:83:93:a3:11: 1a:30:17:65:ee:04:20:29:fa:10:4c:57:44:a2:68: aa:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:99:30:FB:66:C6:1A:F3:2E:9E:0F:86:CA:D1:D2:FE:AE:8D:1E:A8 X509v3 Authority Key Identifier: keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:c2:ae:7c:c3:06:8d:93:ec:fb:1b:c9:37:b2:1c:ef:61:b6: 48:dd:94:1c:19:b9:50:57:11:33:a3:aa:52:29:4f:1f:a6:8d: cb:2d:c6:75:f3:45:f2:52:b6:db:6e:86:20:5e:98:d8:5b:32: 84:e8:94:0b:17:bb:ac:2c:a9:be:45:25:ec:ee:f0:5f:e3:32: b0:19:93:a6:84:da:d5:f0:32:07:92:9e:c6:85:f1:89:92:b7: 29:b4:8c:49:ff:55:5d:97:ba:5a:54:70:ff:fe:6b:03:01:4e: b5:48:f8:b4:f7:c2:a6:80:f1:50:fc:56:b4:00:4f:3d:e7:d0: 69:fd:1b:62:14:b1:08:25:b7:0e:6f:07:93:6f:74:e2:b8:ab: 08:3c:33:5c:b7:5b:f1:b7:5e:d2:51:84:b2:b5:4b:ca:ca:45: 60:5d:04:0d:6c:21:07:48:1f:c3:48:34:54:54:59:51:99:11: 64:1f:65:98:c3:be:1f:85:05:1c:70:a1:61:0c:5c:7c:f5:c9: 6c:28:da:65:98:02:5b:21:b3:ab:73:9b:33:93:52:60:77:f0: 74:7f:f0:4d:05:e3:47:bc:6f:1c:61:75:3d:4e:74:1c:a8:3c: ce:41:e4:bc:10:90:43:23:fb:02:f6:84:41:e0:a5:a1:e4:9d: 18:db:4b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+FxJTlxhxFMCIxutb32pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjlmOTI4YjBhYzY3NzMxOTkxZjM3NGI4ZTE5NGViNjU0 MmFjMjQwHhcNMjUxMjE3MTEwMDU1WhcNMjUxMjE4MTEwMDU1WjAzMTEwLwYDVQQD EygzYjk5MzBmYjY2YzYxYWYzMmU5ZTBmODZjYWQxZDJmZWFlOGQxZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQvdsrKLFiN5UfN42WXg9OkAxstT As65K9jEGFWkBpO8peiqYckOA4JsfVxan4+lsMtVTQp+W3AZPEMYgQXCcYEMAtwB uHzKABqfBVl8qEelByUiEGcOzxv5ae421VnLc7Mwlt/04g9IUyFfHGsN5XHxQW14 2Q/LuyF8gUQ06Dmtm8tX/pEKDPBtkYR1Mp/1R9vr35O4Rl9UP05Wg0DVME8xgHo+ cMpEbaDPQRyyHAdC9EyuZQeB30EEI7ZORSvRMv01vsgcb2xQBBOeAcUJQdfbO6XD oEvSSWrmUQe7nzS3modyQa3MFaSnkIOToxEaMBdl7gQgKfoQTFdEomiqoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuZMPtmxhrzLp4PhsrR0v6ujR6oMB8GA1UdIwQY MBaAFBb5+SiwrGdzGZHzdLjhlOtlQqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYt NDJlYWFiYmZiZmQyLzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYtNDJlYWFiYmZiZmQy LzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyMKufMMG jZPs+xvJN7Ic72G2SN2UHBm5UFcRM6OqUilPH6aNyy3GdfNF8lK2226GIF6Y2Fsy hOiUCxe7rCypvkUl7O7wX+MysBmTpoTa1fAyB5KexoXxiZK3KbSMSf9VXZe6WlRw //5rAwFOtUj4tPfCpoDxUPxWtABPPefQaf0bYhSxCCW3Dm8Hk2904rirCDwzXLdb 8bde0lGEsrVLyspFYF0EDWwhB0gfw0g0VFRZUZkRZB9lmMO+H4UFHHChYQxcfPXJ bCjaZZgCWyGzq3ObM5NSYHfwdH/wTQXjR7xvHGF1PU50HKg8zkHkvBCQQyP7AvaE QeCloeSdGNtLRg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:04:28 2025 by rpki-client