This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft File: sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft (raw, json) Hash identifier: QDWNt6ka1hinlX3mSKGuYAtbmyUR5R2s92XV4qCfVsQ= Subject key identifier: FD:0D:98:F0:99:58:2A:60:8C:F9:03:02:4F:31:6D:1C:F7:4A:98:75 Authority key identifier: B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E Certificate issuer: /CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e Certificate serial: 019B3CB538ED44BEAB19771538AA77457F38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 17:01:08 +0000 Manifest this update: Sat 20 Dec 2025 17:01:08 +0000 Manifest next update: Sun 21 Dec 2025 17:01:08 +0000 Files and hashes: 1: sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl (hash: zbMg4PkZXJRanHNEiAharp1R5dcd0fgXe8TGJpO2UQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:38:ed:44:be:ab:19:77:15:38:aa:77:45:7f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b07fdf437c6f5bc73c7dcd55ce58cd92e49d602e Validity Not Before: Dec 20 17:01:08 2025 GMT Not After : Dec 21 17:01:08 2025 GMT Subject: CN=fd0d98f099582a608cf903024f316d1cf74a9875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c4:99:6c:5e:d5:c6:2f:4f:57:33:57:12:af: 6c:10:c0:0e:f3:46:58:95:6f:cb:a2:2f:88:24:15: c2:b9:16:46:60:51:81:cd:20:c0:3c:f5:1c:fa:76: 0c:69:bd:76:d7:d1:60:1a:83:18:ae:1d:d2:16:8a: 2b:77:46:81:6d:77:47:cb:79:1b:9d:da:82:35:38: 2e:d9:52:0c:50:ef:64:fa:fd:94:48:0f:d5:7f:4f: 9d:42:e5:50:fa:9f:58:58:87:2b:90:4b:d8:7e:2c: a6:02:b4:dd:99:19:f2:e1:eb:2d:22:98:ba:c2:b1: f5:28:fa:96:2b:10:a1:db:ac:89:6a:89:1a:32:a7: c7:74:33:81:c2:ae:76:fe:7b:da:20:30:22:f7:80: 57:fe:b4:99:50:e3:98:7a:c7:63:f3:43:9c:2d:e5: 24:b7:cd:3c:e1:9f:6e:fb:6f:bf:01:0b:a2:24:0d: b9:48:03:0d:e6:b8:e7:7d:29:ca:64:e6:83:24:37: 94:4e:b5:e8:b4:7b:64:30:eb:09:92:72:44:e7:80: d3:ed:98:20:bf:a8:c8:c3:99:e0:2e:0e:7a:d7:a1: 43:1e:f8:35:a5:f0:6f:f8:ec:a9:91:46:5e:81:04: f1:e3:22:93:99:8a:e0:da:3c:5d:e2:9e:07:11:45: e2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:98:F0:99:58:2A:60:8C:F9:03:02:4F:31:6D:1C:F7:4A:98:75 X509v3 Authority Key Identifier: keyid:B0:7F:DF:43:7C:6F:5B:C7:3C:7D:CD:55:CE:58:CD:92:E4:9D:60:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH_fQ3xvW8c8fc1VzljNkuSdYC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bb0a42-6a19-4577-99d2-a78b97eea5c1/1/sH_fQ3xvW8c8fc1VzljNkuSdYC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e6:72:da:21:cb:f1:ae:ed:32:12:68:4c:6a:ad:d0:25:27: 3b:75:f0:84:45:a1:e5:f2:52:b8:8d:aa:66:65:91:9a:28:5d: e4:32:29:43:17:d7:da:33:de:be:aa:43:ae:c8:e2:ab:65:df: fd:3f:b5:ec:b2:27:e2:8c:49:84:d6:d2:5a:02:75:0e:33:60: 86:a2:cf:86:92:e7:03:f7:72:0a:24:89:95:5e:d6:12:9c:bc: c5:4d:2d:65:ae:57:e5:d1:15:d2:a1:0f:04:6f:f5:15:2d:7e: db:6c:f9:e2:a7:d9:cd:1a:d1:3b:2d:be:1a:2e:42:d4:85:01: 6a:e8:f3:32:4f:ec:93:fa:ba:9e:67:bd:aa:63:cf:d1:54:59: 2f:f5:c3:3c:c5:a8:79:9f:d2:0e:ea:1a:d9:74:cb:c4:c2:2f: d3:34:4d:db:38:00:31:ca:9f:49:35:b5:1e:76:c9:00:1b:fc: d5:97:45:ed:9b:1c:d4:0e:11:be:33:2c:f9:9f:c2:6f:fb:31: 4d:ab:c4:94:ff:8a:90:8d:ae:da:f3:4d:c8:fc:b0:9f:ee:89: 27:8a:e9:9a:00:d5:6e:65:a0:55:8a:c6:75:5d:73:64:ed:f2: 45:39:27:9b:9a:40:79:eb:8f:47:e3:87:90:0c:b3:08:e2:3e: 06:5b:c2:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tTjtRL6rGXcVOKp3RX84MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwN2ZkZjQzN2M2ZjViYzczYzdkY2Q1NWNlNThjZDkyZTQ5 ZDYwMmUwHhcNMjUxMjIwMTcwMTA4WhcNMjUxMjIxMTcwMTA4WjAzMTEwLwYDVQQD EyhmZDBkOThmMDk5NTgyYTYwOGNmOTAzMDI0ZjMxNmQxY2Y3NGE5ODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8SZbF7Vxi9PVzNXEq9sEMAO80ZY lW/Loi+IJBXCuRZGYFGBzSDAPPUc+nYMab1219FgGoMYrh3SFoord0aBbXdHy3kb ndqCNTgu2VIMUO9k+v2USA/Vf0+dQuVQ+p9YWIcrkEvYfiymArTdmRny4estIpi6 wrH1KPqWKxCh26yJaokaMqfHdDOBwq52/nvaIDAi94BX/rSZUOOYesdj80OcLeUk t8084Z9u+2+/AQuiJA25SAMN5rjnfSnKZOaDJDeUTrXotHtkMOsJknJE54DT7Zgg v6jIw5ngLg5616FDHvg1pfBv+OypkUZegQTx4yKTmYrg2jxd4p4HEUXiPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0NmPCZWCpgjPkDAk8xbRz3Sph1MB8GA1UdIwQY MBaAFLB/30N8b1vHPH3NVc5YzZLknWAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDIt YTc4Yjk3ZWVhNWMxLzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYjBhNDItNmExOS00NTc3LTk5ZDItYTc4Yjk3ZWVhNWMx LzEvc0hfZlEzeHZXOGM4ZmMxVnpsak5rdVNkWUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+Zy2iHL 8a7tMhJoTGqt0CUnO3XwhEWh5fJSuI2qZmWRmihd5DIpQxfX2jPevqpDrsjiq2Xf /T+17LIn4oxJhNbSWgJ1DjNghqLPhpLnA/dyCiSJlV7WEpy8xU0tZa5X5dEV0qEP BG/1FS1+22z54qfZzRrROy2+Gi5C1IUBaujzMk/sk/q6nme9qmPP0VRZL/XDPMWo eZ/SDuoa2XTLxMIv0zRN2zgAMcqfSTW1HnbJABv81ZdF7Zsc1A4RvjMs+Z/Cb/sx TavElP+KkI2u2vNNyPywn+6JJ4rpmgDVbmWgVYrGdV1zZO3yRTknm5pAeeuPR+OH kAyzCOI+BlvCgg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:50:03 2025 by rpki-client