This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft File: FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft (raw, json) Hash identifier: 0zUDP64RDzeHuiNDbgZysPe2e2cXTT3YqRUgTcnRQi8= Subject key identifier: 5B:FC:0D:02:79:FA:78:BD:17:35:50:E2:FD:9F:84:48:E5:E1:E0:79 Authority key identifier: 16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE Certificate issuer: /CN=1617d0afeabbf339b06db283c4b8e027a04abcae Certificate serial: 019B3D5A845710B88F309971783375AF0FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft Manifest number: 0537 Signing time: Sat 20 Dec 2025 20:01:40 +0000 Manifest this update: Sat 20 Dec 2025 20:01:40 +0000 Manifest next update: Sun 21 Dec 2025 20:01:40 +0000 Files and hashes: 1: FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl (hash: HZcDMal/MJxfJ+w0h66jiS2RgryZwKldEqL0uavtVWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:84:57:10:b8:8f:30:99:71:78:33:75:af:0f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1617d0afeabbf339b06db283c4b8e027a04abcae Validity Not Before: Dec 20 20:01:40 2025 GMT Not After : Dec 21 20:01:40 2025 GMT Subject: CN=5bfc0d0279fa78bd173550e2fd9f8448e5e1e079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:17:aa:91:98:0c:de:34:be:fd:62:43:e1: e3:9e:e7:7a:75:34:bc:3f:5e:6f:d0:93:8f:8a:36: ef:23:44:02:92:b4:12:e6:d9:ad:d0:15:94:0c:67: be:f0:d1:97:e9:32:72:5f:f4:20:8d:64:a4:a6:60: 47:09:17:a0:38:96:a5:77:24:92:cb:62:96:75:b3: eb:7b:31:37:2c:f0:d6:e3:f1:64:39:49:b9:c9:ab: aa:ac:0c:6f:c4:07:34:12:ad:51:b2:53:93:d7:5e: 4b:6d:c3:00:02:31:2d:6a:35:2f:47:36:1d:8f:89: fe:77:69:77:97:5d:b1:c9:87:8e:d5:c4:d3:ea:fd: be:b9:87:f5:71:cf:c4:3b:5a:8c:73:48:77:21:fa: 9f:9c:b2:1b:02:60:fe:fa:82:25:bb:d0:5a:19:c4: 4a:65:b9:37:3b:bf:21:1f:81:ac:9f:ba:03:df:90: 7c:3b:18:ae:58:87:36:02:63:73:21:95:32:66:b4: 7e:18:97:7b:33:47:05:b8:37:f7:68:5e:c9:b5:eb: 96:c7:02:e8:04:66:e1:41:59:43:e7:c5:3b:c4:4d: ce:72:16:b4:88:a3:78:a7:bb:91:d7:00:49:f5:91: d0:c7:e2:42:3b:77:4d:77:51:c5:11:f1:6e:b9:2b: e5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FC:0D:02:79:FA:78:BD:17:35:50:E2:FD:9F:84:48:E5:E1:E0:79 X509v3 Authority Key Identifier: keyid:16:17:D0:AF:EA:BB:F3:39:B0:6D:B2:83:C4:B8:E0:27:A0:4A:BC:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FhfQr-q78zmwbbKDxLjgJ6BKvK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a4a2cd-5dbf-4029-a8a1-d7f21fc1350e/1/FhfQr-q78zmwbbKDxLjgJ6BKvK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:8b:e8:28:ca:bd:74:ab:89:37:0e:2d:32:ac:15:8c:e8:9f: 79:e0:da:15:2b:a5:4b:94:6e:7f:7f:43:b8:2a:c5:93:86:f0: 2f:bb:36:55:b5:ef:cb:31:98:b9:c5:f1:f4:ea:4b:7c:95:17: 0c:67:de:40:75:2d:27:d7:74:f0:69:88:c7:ba:46:9a:62:33: 84:50:a1:44:ef:d6:a5:7d:49:01:49:bf:f4:ea:ef:f7:a7:d7: 19:ff:ba:d5:b6:ee:9a:8a:27:c8:bd:bc:de:b6:af:e6:f8:56: 4c:d2:88:47:3a:4b:8d:c2:c1:aa:cc:cc:6d:16:cf:76:e2:8a: 30:45:ed:c5:f7:d3:4a:c1:0c:83:d4:d7:56:93:53:9e:7c:23: 51:c8:d8:ed:7e:3c:6e:66:d6:08:62:f5:d9:bd:ea:31:86:98: ce:56:72:5a:a6:e4:3b:93:5e:81:ff:75:56:39:ad:c3:82:98: 3b:02:96:a6:1f:41:32:59:bf:1b:50:7d:2b:61:35:e1:70:ef: 99:ff:47:8f:34:d5:0b:de:6e:37:84:02:57:20:2c:31:b1:14: 27:bb:51:5e:ec:cf:5a:7d:11:97:9f:96:b6:b4:61:0e:da:c0: 8e:5b:65:ff:58:0f:b7:86:c3:39:c6:5d:27:d3:e7:84:b7:ef: 71:9c:c6:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WoRXELiPMJlxeDN1rw/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MTdkMGFmZWFiYmYzMzliMDZkYjI4M2M0YjhlMDI3YTA0 YWJjYWUwHhcNMjUxMjIwMjAwMTQwWhcNMjUxMjIxMjAwMTQwWjAzMTEwLwYDVQQD Eyg1YmZjMGQwMjc5ZmE3OGJkMTczNTUwZTJmZDlmODQ0OGU1ZTFlMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE0XqpGYDN40vv1iQ+Hjnud6dTS8 P15v0JOPijbvI0QCkrQS5tmt0BWUDGe+8NGX6TJyX/QgjWSkpmBHCRegOJaldySS y2KWdbPrezE3LPDW4/FkOUm5yauqrAxvxAc0Eq1RslOT115LbcMAAjEtajUvRzYd j4n+d2l3l12xyYeO1cTT6v2+uYf1cc/EO1qMc0h3IfqfnLIbAmD++oIlu9BaGcRK Zbk3O78hH4Gsn7oD35B8OxiuWIc2AmNzIZUyZrR+GJd7M0cFuDf3aF7JteuWxwLo BGbhQVlD58U7xE3Ocha0iKN4p7uR1wBJ9ZHQx+JCO3dNd1HFEfFuuSvlzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv8DQJ5+ni9FzVQ4v2fhEjl4eB5MB8GA1UdIwQY MBaAFBYX0K/qu/M5sG2yg8S44CegSryuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEt ZDdmMjFmYzEzNTBlLzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9hNGEyY2QtNWRiZi00MDI5LWE4YTEtZDdmMjFmYzEzNTBl LzEvRmhmUXItcTc4em13YmJLRHhMamdKNkJLdks0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt4voKMq9 dKuJNw4tMqwVjOifeeDaFSulS5Ruf39DuCrFk4bwL7s2VbXvyzGYucXx9OpLfJUX DGfeQHUtJ9d08GmIx7pGmmIzhFChRO/WpX1JAUm/9Orv96fXGf+61bbumoonyL28 3rav5vhWTNKIRzpLjcLBqszMbRbPduKKMEXtxffTSsEMg9TXVpNTnnwjUcjY7X48 bmbWCGL12b3qMYaYzlZyWqbkO5Negf91Vjmtw4KYOwKWph9BMlm/G1B9K2E14XDv mf9HjzTVC95uN4QCVyAsMbEUJ7tRXuzPWn0Rl5+WtrRhDtrAjltl/1gPt4bDOcZd J9PnhLfvcZzGEw== -----END CERTIFICATE-----Generated at Sat Dec 20 21:29:01 2025 by rpki-client