This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json) Hash identifier: ImCXXJ3uyIPq6XPas3yLBpOv8yHVV4keQK4WMpulF+U= Subject key identifier: BF:77:07:B2:2F:24:E1:E7:40:EC:AE:60:66:A4:C5:22:80:7C:25:E8 Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481 Certificate serial: 019B3D9118D3B7B72657C9B3367A93F52C6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: HBZ1ahQ7o2JfeT3yKU+2Yx73l5Sas5bMjZMIwsSfNMU=) 2: eiCYc7LGel4A0s7nCbJtNFosupQ.roa (hash: 8W4lu3bDrwDuQAGx18vFknQRfaq7UHlaqfsbiBLj5pU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:18:d3:b7:b7:26:57:c9:b3:36:7a:93:f5:2c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481 Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=bf7707b22f24e1e740ecae6066a4c522807c25e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:85:fc:9b:09:9f:f6:1e:91:85:55:8c:16:bb: 56:49:ac:82:a7:b5:6f:8c:a3:8f:8d:34:3d:4a:a4: 59:a7:45:a3:bf:91:09:76:e2:a1:96:26:df:32:61: 1c:b2:a9:69:d1:59:1a:d0:d8:08:8c:75:b4:3e:e1: 43:2a:84:ee:73:2f:ad:66:1e:7a:0a:09:f1:67:fd: 3b:ca:c5:2b:6b:94:a8:99:85:18:b4:eb:08:2b:66: 7b:05:01:4d:32:bd:cf:d3:5c:5e:09:a1:6a:44:d8: 30:0f:ba:08:ba:61:b0:1a:c3:e9:8a:e1:32:74:3b: 07:27:6d:21:ea:c3:5a:07:14:b6:ad:6b:8d:0a:c3: 0a:a9:f1:1f:d4:60:ae:dc:17:11:16:7c:61:bf:99: 44:e3:07:cd:a7:8b:a1:db:7d:f3:f0:3b:b9:25:4e: ee:6f:5e:32:4b:66:41:71:f1:f3:69:9d:53:38:b1: 63:bf:ec:a5:12:1d:c3:6b:c1:15:c4:b0:c5:33:ba: b4:0e:af:81:31:67:4b:61:8c:90:7c:fb:65:05:d8: 5b:ec:ea:25:60:95:34:48:a9:93:37:52:4a:5c:6e: aa:29:5a:92:2c:9b:86:b9:a5:8c:fd:a7:b7:54:0d: 40:8d:c0:a6:d2:1a:61:41:b3:6f:e9:31:37:e5:2c: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:77:07:B2:2F:24:E1:E7:40:EC:AE:60:66:A4:C5:22:80:7C:25:E8 X509v3 Authority Key Identifier: keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ab:e9:19:dc:b7:cb:f3:d2:f8:38:1b:60:f3:45:bc:a6:15: 22:e3:f4:70:fa:5c:dc:d3:08:e7:04:18:60:27:94:cf:61:0b: b2:41:ee:a3:55:a8:a7:94:af:58:ac:97:1e:34:14:f8:a4:42: 1f:43:7b:2d:63:11:34:d1:ad:86:69:92:23:01:dd:17:b7:e9: 9f:06:4e:3b:b7:20:e2:a0:b4:95:85:2b:ed:85:fc:cf:92:ab: a8:19:84:73:db:c4:bd:0f:15:1b:dd:c4:16:23:14:85:87:60: a2:f2:f4:3b:ec:1d:ff:b3:a3:96:9d:9d:ed:c2:97:39:4a:2a: ec:ea:2d:28:44:98:ed:c6:5f:de:31:fb:e0:7b:a6:89:7c:2f: db:d4:15:b1:e0:bc:8f:5c:7f:cb:0c:1c:0f:d2:8d:74:fe:1a: 0d:d3:70:71:8c:95:2f:48:2e:ab:79:fb:02:6f:aa:bd:77:f1: d9:76:b3:0e:32:f1:f3:6a:3b:f4:76:ab:7d:29:8d:ee:b4:15: 76:8e:37:65:8b:d6:77:bb:48:2a:1d:8d:f9:ed:cc:5f:a0:0c: 1e:7e:8c:a1:ff:a0:96:c8:b5:8f:8b:29:44:ef:e3:79:1e:f6: 7b:cc:0b:cb:7f:b3:36:5a:25:09:c6:ed:fb:11:d1:36:ec:60: 03:82:89:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRjTt7cmV8mzNnqT9SxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Nzc4MmJlYTQ2ZmQyNzE3NjhmZjQ2ZDliNDVjMDU3YTlk ZjU0ODEwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD EyhiZjc3MDdiMjJmMjRlMWU3NDBlY2FlNjA2NmE0YzUyMjgwN2MyNWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4X8mwmf9h6RhVWMFrtWSayCp7Vv jKOPjTQ9SqRZp0Wjv5EJduKhlibfMmEcsqlp0Vka0NgIjHW0PuFDKoTucy+tZh56 CgnxZ/07ysUra5SomYUYtOsIK2Z7BQFNMr3P01xeCaFqRNgwD7oIumGwGsPpiuEy dDsHJ20h6sNaBxS2rWuNCsMKqfEf1GCu3BcRFnxhv5lE4wfNp4uh233z8Du5JU7u b14yS2ZBcfHzaZ1TOLFjv+ylEh3Da8EVxLDFM7q0Dq+BMWdLYYyQfPtlBdhb7Ool YJU0SKmTN1JKXG6qKVqSLJuGuaWM/ae3VA1AjcCm0hphQbNv6TE35SyEEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL93B7IvJOHnQOyuYGakxSKAfCXoMB8GA1UdIwQY MBaAFBZ3gr6kb9Jxdo/0bZtFwFep31SBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEt OWEzNTgzNjI4MjljLzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9lZjBiOTItNWQ4NS00NzkyLWI1NTEtOWEzNTgzNjI4Mjlj LzEvRm5lQ3ZxUnYwbkYyal9SdG0wWEFWNm5mVklFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsavpGdy3 y/PS+DgbYPNFvKYVIuP0cPpc3NMI5wQYYCeUz2ELskHuo1Wop5SvWKyXHjQU+KRC H0N7LWMRNNGthmmSIwHdF7fpnwZOO7cg4qC0lYUr7YX8z5KrqBmEc9vEvQ8VG93E FiMUhYdgovL0O+wd/7Ojlp2d7cKXOUoq7OotKESY7cZf3jH74HumiXwv29QVseC8 j1x/ywwcD9KNdP4aDdNwcYyVL0guq3n7Am+qvXfx2XazDjLx82o79HarfSmN7rQV do43ZYvWd7tIKh2N+e3MX6AMHn6Mof+glsi1j4spRO/jeR72e8wLy3+zNlolCcbt +xHRNuxgA4KJWw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:41 2025 by rpki-client