This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft File: fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft (raw, json) Hash identifier: iFSeD4lEGeKmUpztxr0I30U/3KTKEB/H9iBBuY+rphM= Subject key identifier: 69:69:4F:A1:D1:7E:4F:19:C2:0E:91:E0:10:45:68:B7:72:E5:23:BD Authority key identifier: 7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D Certificate issuer: /CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Certificate serial: 019B2D79AB939E20844E6CDFDCE2D863F1CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 18:01:46 +0000 Manifest this update: Wed 17 Dec 2025 18:01:46 +0000 Manifest next update: Thu 18 Dec 2025 18:01:46 +0000 Files and hashes: 1: fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl (hash: 6JLXlPqj+H+7jTESCOYwsYHjpZTh8Vu3Q7ej7OC5OhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:ab:93:9e:20:84:4e:6c:df:dc:e2:d8:63:f1:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cc8bacbe73a40ce818a4bafa393a85297c19c0d Validity Not Before: Dec 17 18:01:46 2025 GMT Not After : Dec 18 18:01:46 2025 GMT Subject: CN=69694fa1d17e4f19c20e91e0104568b772e523bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:11:3b:c2:70:16:cb:0d:94:b0:19:24:90: ce:58:d6:9a:34:7b:ed:09:84:f6:69:34:ed:09:c1: 2c:e2:72:f6:67:e4:cd:07:2f:41:d7:12:14:9c:04: 93:07:50:50:6a:73:84:7a:de:9f:25:4e:db:cd:6c: 99:21:53:bd:57:81:2d:c4:8a:ae:23:42:0b:7e:6e: ff:d5:74:fa:ab:5d:34:c6:c4:78:40:65:fb:0d:60: 05:d2:66:a6:a3:b9:f7:e8:2c:24:9f:5b:61:29:2b: 29:b2:57:fb:00:45:04:b8:82:d7:70:d7:04:be:8e: 4d:79:f7:99:d9:d9:0e:91:60:4b:b7:14:be:02:90: 93:f3:46:b4:d4:3d:3f:f8:78:4a:71:30:b1:ca:63: d8:ed:63:ba:68:4e:4c:bc:c4:29:24:f0:ce:53:37: 69:bc:91:89:b1:0d:ec:c1:0a:9e:94:75:41:53:fb: 65:6f:8f:fb:53:bf:63:25:e3:7b:38:bd:56:9d:0b: fc:d4:95:75:7f:ab:1e:c5:b5:bc:19:d9:3a:bc:92: 9f:16:6a:16:3b:36:a8:4f:48:ad:6a:f2:5c:c5:0c: 09:5f:bc:6e:2e:51:79:98:2a:17:41:2b:01:f6:99: f7:1d:25:ea:34:87:fd:5a:95:0d:12:37:f6:da:e6: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:69:4F:A1:D1:7E:4F:19:C2:0E:91:E0:10:45:68:B7:72:E5:23:BD X509v3 Authority Key Identifier: keyid:7C:C8:BA:CB:E7:3A:40:CE:81:8A:4B:AF:A3:93:A8:52:97:C1:9C:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fMi6y-c6QM6Bikuvo5OoUpfBnA0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/322ec7-2131-4db4-8755-8b8b2ac56c9b/1/fMi6y-c6QM6Bikuvo5OoUpfBnA0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:0e:ee:a3:b9:c8:63:53:22:8f:38:e5:e9:52:71:48:32:c5: ab:b7:02:f5:9e:59:b1:0b:66:ca:a7:09:ce:a8:1b:b7:c2:bc: f3:16:6e:ba:35:f3:4a:19:db:6a:ce:2a:3d:e1:f5:fe:65:97: d6:8b:f9:44:ee:26:09:b9:a4:4b:67:6b:5e:2b:cd:e6:d1:ac: 80:b0:25:13:aa:e1:22:0d:64:5c:2b:4a:a1:2d:b7:6a:d4:c4: 6f:ce:aa:50:2e:91:fb:1a:be:e4:2e:27:a6:6b:2f:d8:a7:3f: d3:c6:e4:98:e4:01:ad:82:e7:ef:d6:e0:36:b8:9e:da:4a:9c: c0:46:c4:fd:98:13:ac:28:da:e2:13:d1:a9:58:e6:a2:02:34: 42:e5:7a:a0:f7:36:fd:70:b5:fc:af:a0:2e:67:cc:32:d0:6f: 11:09:cf:67:3f:aa:41:89:12:60:b1:a5:4a:ea:e7:53:0c:9e: f3:50:db:39:f2:41:3e:6a:89:8a:6f:cf:9b:c9:e3:ed:ad:52: 39:be:5b:4c:3d:5d:20:1f:69:33:89:a0:48:29:4b:7c:29:8d: 8a:e2:1e:c5:f6:1d:b2:61:dd:31:7a:25:25:7d:79:d9:21:a9: 52:1f:e4:7c:5b:32:f6:54:54:f0:db:9a:b7:27:13:c6:fb:42: c6:3f:ea:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteauTniCETmzf3OLYY/HPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYzhiYWNiZTczYTQwY2U4MThhNGJhZmEzOTNhODUyOTdj MTljMGQwHhcNMjUxMjE3MTgwMTQ2WhcNMjUxMjE4MTgwMTQ2WjAzMTEwLwYDVQQD Eyg2OTY5NGZhMWQxN2U0ZjE5YzIwZTkxZTAxMDQ1NjhiNzcyZTUyM2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOgRO8JwFssNlLAZJJDOWNaaNHvt CYT2aTTtCcEs4nL2Z+TNBy9B1xIUnASTB1BQanOEet6fJU7bzWyZIVO9V4EtxIqu I0ILfm7/1XT6q100xsR4QGX7DWAF0mamo7n36Cwkn1thKSspslf7AEUEuILXcNcE vo5NefeZ2dkOkWBLtxS+ApCT80a01D0/+HhKcTCxymPY7WO6aE5MvMQpJPDOUzdp vJGJsQ3swQqelHVBU/tlb4/7U79jJeN7OL1WnQv81JV1f6sexbW8Gdk6vJKfFmoW OzaoT0itavJcxQwJX7xuLlF5mCoXQSsB9pn3HSXqNIf9WpUNEjf22ub25wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlpT6HRfk8Zwg6R4BBFaLdy5SO9MB8GA1UdIwQY MBaAFHzIusvnOkDOgYpLr6OTqFKXwZwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUt OGI4YjJhYzU2YzliLzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8zMjJlYzctMjEzMS00ZGI0LTg3NTUtOGI4YjJhYzU2Yzli LzEvZk1pNnktYzZRTTZCaWt1dm81T29VcGZCbkEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApA7uo7nI Y1Mijzjl6VJxSDLFq7cC9Z5ZsQtmyqcJzqgbt8K88xZuujXzShnbas4qPeH1/mWX 1ov5RO4mCbmkS2drXivN5tGsgLAlE6rhIg1kXCtKoS23atTEb86qUC6R+xq+5C4n pmsv2Kc/08bkmOQBrYLn79bgNrie2kqcwEbE/ZgTrCja4hPRqVjmogI0QuV6oPc2 /XC1/K+gLmfMMtBvEQnPZz+qQYkSYLGlSurnUwye81DbOfJBPmqJim/Pm8nj7a1S Ob5bTD1dIB9pM4mgSClLfCmNiuIexfYdsmHdMXolJX152SGpUh/kfFsy9lRU8Nua tycTxvtCxj/qoQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:05:48 2025 by rpki-client