This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft File: fAVoDtezkIbfBF_4vOx13J2_iY4.mft (raw, json) Hash identifier: 7Q7rlMJI5/cAW8b12lnoi3a/WYvGIjv5EKQxNdXOZI0= Subject key identifier: 2D:C6:C8:CF:96:89:B3:C4:64:E7:D2:C6:A3:79:F2:F1:10:18:CA:5B Authority key identifier: 7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E Certificate issuer: /CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e Certificate serial: 019B4FCE61457B2E25CA5CD60BD3E57ACD7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 10:01:23 +0000 Manifest this update: Wed 24 Dec 2025 10:01:23 +0000 Manifest next update: Thu 25 Dec 2025 10:01:23 +0000 Files and hashes: 1: fAVoDtezkIbfBF_4vOx13J2_iY4.crl (hash: uVWum9fm8tz79MPwT3+1UjGael5JzXObtW6PzB4N6PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:61:45:7b:2e:25:ca:5c:d6:0b:d3:e5:7a:cd:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c05680ed7b39086df045ff8bcec75dc9dbf898e Validity Not Before: Dec 24 10:01:23 2025 GMT Not After : Dec 25 10:01:23 2025 GMT Subject: CN=2dc6c8cf9689b3c464e7d2c6a379f2f11018ca5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:22:0e:bb:d1:88:9d:16:1f:b2:af:6b:42:ac: 6c:2c:79:44:ac:6c:ad:d3:46:17:ce:f9:38:86:a8: 46:21:80:ea:1d:ca:02:ea:67:97:2b:97:3e:ee:e5: bc:9a:c7:52:06:37:90:16:c0:4a:94:92:a5:16:18: 45:77:d3:4b:8b:6c:86:db:52:5a:c7:55:c5:11:c7: 57:9b:6d:2f:29:4d:cc:c3:4c:bd:9c:0c:50:5f:e2: 8c:73:bf:b0:f4:13:45:d5:0c:d0:30:4a:c7:ba:48: 58:0b:78:95:f6:9e:a2:e4:c9:66:3b:bb:3a:67:2c: 58:89:8a:af:75:27:8f:65:cb:2b:50:24:84:32:e8: 92:bb:8f:ec:d8:3c:38:85:35:5e:c0:f2:79:f9:bd: 3c:e0:68:07:81:c7:d3:05:13:18:03:13:ed:a4:34: e0:17:8d:34:e2:ee:d3:7d:87:53:cc:a7:c2:79:77: 60:7b:f6:7c:7d:b1:13:d3:52:91:04:1a:b8:26:bb: 75:2d:38:60:a2:60:f3:22:94:3d:ca:68:79:d6:f7: 46:04:95:1e:cf:c5:ae:dd:0e:a1:b9:2e:ca:46:bc: c5:48:dd:38:4a:a4:79:ab:7c:45:f1:e7:eb:44:d8: 02:32:cf:75:39:51:7d:b8:42:e7:ab:63:06:68:77: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:C8:CF:96:89:B3:C4:64:E7:D2:C6:A3:79:F2:F1:10:18:CA:5B X509v3 Authority Key Identifier: keyid:7C:05:68:0E:D7:B3:90:86:DF:04:5F:F8:BC:EC:75:DC:9D:BF:89:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAVoDtezkIbfBF_4vOx13J2_iY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/eb1c30-d126-4a5b-ab65-1cb2958d689b/1/fAVoDtezkIbfBF_4vOx13J2_iY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e7:fd:79:0d:87:74:91:63:ca:4a:04:4f:9f:ea:b5:50:19: 66:a8:53:e2:b8:2a:e5:5a:ba:8a:ea:e2:2d:a4:0e:8a:33:c6: 09:a8:93:0b:f5:4c:5f:a5:3e:37:f1:c5:b0:f5:ee:4d:3d:92: f1:0d:ac:f7:0f:4f:76:b8:12:d0:84:45:58:cf:77:9b:f1:2a: b7:73:dd:a7:ad:4e:c5:d7:79:25:32:0d:12:ee:fe:5b:42:30: 2c:be:dc:e1:1a:3d:cf:3b:ab:a9:47:0a:a5:c0:da:8d:98:7b: 11:95:20:0d:ac:bc:dc:36:d7:4b:f0:02:87:53:a3:d8:17:16: 6d:67:fe:25:9f:9b:27:26:b9:70:fe:07:37:95:8c:00:75:dd: cf:8d:49:dc:cb:fa:c9:45:41:d3:f1:ad:4d:69:73:8f:f5:5e: 85:2b:86:db:99:73:db:06:c8:9a:a7:0f:30:b8:c1:df:4d:0e: bf:9a:9b:33:d4:65:a8:ee:72:90:c0:33:84:1e:6b:38:a9:fb: 52:3c:99:ca:c1:08:3b:47:63:bc:12:b2:00:cb:a7:20:1e:d5: 98:a8:2f:0c:bb:eb:f9:3b:4b:df:1a:8a:e7:23:f2:c5:c9:e8: bd:88:26:ce:38:43:0d:fa:71:7a:0d:d2:37:e8:ca:ea:38:35: 65:e3:c3:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzmFFey4lylzWC9Ples1/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMDU2ODBlZDdiMzkwODZkZjA0NWZmOGJjZWM3NWRjOWRi Zjg5OGUwHhcNMjUxMjI0MTAwMTIzWhcNMjUxMjI1MTAwMTIzWjAzMTEwLwYDVQQD EygyZGM2YzhjZjk2ODliM2M0NjRlN2QyYzZhMzc5ZjJmMTEwMThjYTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiIOu9GInRYfsq9rQqxsLHlErGyt 00YXzvk4hqhGIYDqHcoC6meXK5c+7uW8msdSBjeQFsBKlJKlFhhFd9NLi2yG21Ja x1XFEcdXm20vKU3Mw0y9nAxQX+KMc7+w9BNF1QzQMErHukhYC3iV9p6i5MlmO7s6 ZyxYiYqvdSePZcsrUCSEMuiSu4/s2Dw4hTVewPJ5+b084GgHgcfTBRMYAxPtpDTg F4004u7TfYdTzKfCeXdge/Z8fbET01KRBBq4Jrt1LThgomDzIpQ9ymh51vdGBJUe z8Wu3Q6huS7KRrzFSN04SqR5q3xF8efrRNgCMs91OVF9uELnq2MGaHerXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3GyM+WibPEZOfSxqN58vEQGMpbMB8GA1UdIwQY MBaAFHwFaA7Xs5CG3wRf+Lzsddydv4mOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkFWb0R0ZXprSWJmQkZfNHZPeDEzSjJfaVk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYjFjMzAtZDEyNi00YTViLWFiNjUt MWNiMjk1OGQ2ODliLzEvZkFWb0R0ZXprSWJmQkZfNHZPeDEzSjJfaVk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9lYjFjMzAtZDEyNi00YTViLWFiNjUtMWNiMjk1OGQ2ODli LzEvZkFWb0R0ZXprSWJmQkZfNHZPeDEzSjJfaVk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANuf9eQ2H dJFjykoET5/qtVAZZqhT4rgq5Vq6iuriLaQOijPGCaiTC/VMX6U+N/HFsPXuTT2S 8Q2s9w9PdrgS0IRFWM93m/Eqt3Pdp61Oxdd5JTINEu7+W0IwLL7c4Ro9zzurqUcK pcDajZh7EZUgDay83DbXS/ACh1Oj2BcWbWf+JZ+bJya5cP4HN5WMAHXdz41J3Mv6 yUVB0/GtTWlzj/VehSuG25lz2wbImqcPMLjB300Ov5qbM9RlqO5ykMAzhB5rOKn7 UjyZysEIO0djvBKyAMunIB7VmKgvDLvr+TtL3xqK5yPyxcnovYgmzjhDDfpxeg3S N+jK6jg1ZePDlA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:06:40 2025 by rpki-client