This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json) Hash identifier: O2uZuROcMnafFYUt4kAU5SZaus1s3U3i+oPiXn9Y4t4= Subject key identifier: D7:9D:38:DD:09:DD:2A:5A:69:66:63:FB:32:60:50:08:ED:85:CC:FF Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481 Certificate serial: 019B50E0C486AFD5991FFDE91C5375EB4759 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 15:01:06 +0000 Manifest this update: Wed 24 Dec 2025 15:01:06 +0000 Manifest next update: Thu 25 Dec 2025 15:01:06 +0000 Files and hashes: 1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: XkjpHfV3vzQZLIG+qEwHmCXHNc4+SClROnnNbbc0e/8=) 2: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (hash: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:c4:86:af:d5:99:1f:fd:e9:1c:53:75:eb:47:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481 Validity Not Before: Dec 24 15:01:06 2025 GMT Not After : Dec 25 15:01:06 2025 GMT Subject: CN=d79d38dd09dd2a5a696663fb32605008ed85ccff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fc:3c:91:d9:c6:ce:3e:ad:8c:7a:d2:39:fb: ce:b5:7b:5f:35:b6:ae:60:3d:5d:1c:bf:0e:0a:7e: 9a:44:6e:d6:65:3e:b5:fe:27:81:6d:55:b9:64:33: 52:0c:cb:31:4d:ca:a6:b6:5f:fc:42:6f:7d:95:d1: 48:b3:cc:e2:99:81:40:7d:82:6f:a5:bd:69:d6:61: c1:d4:03:94:86:13:09:79:c9:ba:b3:0d:c8:0c:70: 7e:1b:82:62:21:c7:0d:1d:44:42:04:8f:0c:1f:30: e9:d4:67:9e:38:66:25:8e:f9:bf:b3:e0:b1:8f:0c: 07:5d:f0:3a:3c:a7:a0:01:af:be:7f:29:78:17:bc: 86:83:ca:93:1b:11:39:5d:fe:97:55:3a:bc:a2:01: ae:4e:ea:b4:d5:45:36:97:26:8b:d0:c7:c2:54:63: 69:e2:c0:c4:0d:d5:d2:34:eb:c8:f2:7e:d1:db:10: 7f:a3:ca:b2:70:f9:d3:de:b8:58:e3:fc:51:3e:6f: 5b:10:1e:d8:28:ce:cc:9c:21:ca:3b:43:80:90:34: 0d:e3:3c:07:27:b9:d2:3c:2b:9a:db:2a:a3:16:94: 86:b6:28:49:9d:0f:69:58:98:f6:90:84:8b:28:1f: 50:3e:47:dc:4e:c2:2a:8d:f1:1a:9d:a6:c2:cb:58: 8f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9D:38:DD:09:DD:2A:5A:69:66:63:FB:32:60:50:08:ED:85:CC:FF X509v3 Authority Key Identifier: keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2e:da:65:67:b5:a2:05:07:94:66:13:89:c6:b0:fd:ed:69: f6:dc:d1:3e:4c:03:07:67:15:05:ca:9d:00:75:03:44:fc:cc: d5:70:cf:64:b9:b8:ec:0d:bb:74:0d:4c:ee:43:26:98:7c:33: 3e:09:9d:9a:10:e1:13:b8:c5:88:db:3a:91:3a:72:96:3f:d7: 21:e0:28:12:47:c2:51:43:88:d0:77:b2:a0:40:a9:fa:f6:0e: 42:b1:1b:02:85:03:d0:1e:ab:4e:aa:58:73:ae:0a:2b:03:2c: 8b:d9:14:cc:31:6d:e5:93:3d:64:ca:21:c5:a4:55:94:ac:99: e8:94:2f:68:cb:f9:c9:de:c6:92:8d:f3:2e:4b:b4:d1:f8:30: 3c:72:02:ca:48:4b:da:6f:ca:bc:14:63:04:86:98:7e:3d:b6: 71:e7:9c:ce:73:9b:e8:9e:2a:1b:df:31:b3:e5:08:84:25:99: 45:f1:3e:78:be:2d:9e:f8:a9:ec:c2:31:33:ae:b3:e1:c7:84: cf:20:d5:4e:f0:5a:a3:36:5d:e8:09:a8:3c:25:03:85:83:67: 8d:3a:8e:8e:a0:e7:b9:04:75:35:35:d6:06:72:9f:09:83:f6: 52:bb:ef:30:90:20:5f:00:5d:c8:61:0f:ac:30:d2:2c:44:c6: 95:cf:f0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4MSGr9WZH/3pHFN160dZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk ZjU0ODEwHhcNMjUxMjI0MTUwMTA2WhcNMjUxMjI1MTUwMTA2WjAzMTEwLwYDVQQD EyhkNzlkMzhkZDA5ZGQyYTVhNjk2NjYzZmIzMjYwNTAwOGVkODVjY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvw8kdnGzj6tjHrSOfvOtXtfNbau YD1dHL8OCn6aRG7WZT61/ieBbVW5ZDNSDMsxTcqmtl/8Qm99ldFIs8zimYFAfYJv pb1p1mHB1AOUhhMJecm6sw3IDHB+G4JiIccNHURCBI8MHzDp1GeeOGYljvm/s+Cx jwwHXfA6PKegAa++fyl4F7yGg8qTGxE5Xf6XVTq8ogGuTuq01UU2lyaL0MfCVGNp 4sDEDdXSNOvI8n7R2xB/o8qycPnT3rhY4/xRPm9bEB7YKM7MnCHKO0OAkDQN4zwH J7nSPCua2yqjFpSGtihJnQ9pWJj2kISLKB9QPkfcTsIqjfEanabCy1iPUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNedON0J3SpaaWZj+zJgUAjthcz/MB8GA1UdIwQY MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfy7aZWe1 ogUHlGYTicaw/e1p9tzRPkwDB2cVBcqdAHUDRPzM1XDPZLm47A27dA1M7kMmmHwz PgmdmhDhE7jFiNs6kTpylj/XIeAoEkfCUUOI0HeyoECp+vYOQrEbAoUD0B6rTqpY c64KKwMsi9kUzDFt5ZM9ZMohxaRVlKyZ6JQvaMv5yd7Gko3zLku00fgwPHICykhL 2m/KvBRjBIaYfj22ceecznOb6J4qG98xs+UIhCWZRfE+eL4tnvip7MIxM66z4ceE zyDVTvBaozZd6AmoPCUDhYNnjTqOjqDnuQR1NTXWBnKfCYP2UrvvMJAgXwBdyGEP rDDSLETGlc/w4w== -----END CERTIFICATE-----Generated at Thu Dec 25 01:21:42 2025 by rpki-client