This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft File: FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json) Hash identifier: AGSAH3/lOpKmNrTHl/wP+VRbipYDWIw9gNbycAFFN2c= Subject key identifier: 00:26:20:EF:04:4B:DA:20:31:BE:26:1D:61:FA:9E:2D:93:C7:F8:A4 Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A Certificate issuer: /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a Certificate serial: 019B4FCE324F32847F100957C341E36E01C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft Manifest number: 0AB3 Signing time: Wed 24 Dec 2025 10:01:11 +0000 Manifest this update: Wed 24 Dec 2025 10:01:11 +0000 Manifest next update: Thu 25 Dec 2025 10:01:11 +0000 Files and hashes: 1: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: pvJLzsECXJDN3QP4mLbibH4sHcfNk7wScK2CbnvpXZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:32:4f:32:84:7f:10:09:57:c3:41:e3:6e:01:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a Validity Not Before: Dec 24 10:01:11 2025 GMT Not After : Dec 25 10:01:11 2025 GMT Subject: CN=002620ef044bda2031be261d61fa9e2d93c7f8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:88:69:ea:3b:4c:4b:c3:31:d1:b2:58:01:4a: a4:d8:ad:be:55:e1:75:66:b1:af:fd:26:ec:c2:82: be:46:98:7b:ad:c9:f6:31:db:8f:3d:ca:71:1d:91: d6:b8:6a:ec:cd:85:9b:ad:e1:98:f7:32:fc:96:3d: 76:eb:84:6e:ec:fa:2a:2b:d4:87:d1:66:d7:1f:dd: 1e:b3:4b:a1:33:42:10:56:9d:97:fc:47:8e:a7:b6: d4:54:5c:a4:b6:38:ba:9d:62:1c:48:38:1e:7d:e8: 3d:5e:f6:26:c5:6f:4b:63:f0:c2:ae:7c:6b:50:66: 90:76:34:8c:d8:3e:3d:1b:67:22:25:0f:5a:1c:f1: d6:93:90:93:d8:44:2a:93:1c:1f:cb:ba:63:f2:8a: ad:a0:4e:cb:0c:ec:57:19:35:92:3b:f8:f4:d0:01: 9c:6d:10:39:5a:94:f4:55:d7:4b:63:73:3d:4a:b1: b6:89:65:c4:b5:9b:b7:41:58:db:8b:fe:b4:5c:ac: 27:af:13:c6:9e:c0:e2:7b:22:16:23:9f:07:e4:e7: 9f:79:7c:c9:77:1c:25:65:ff:eb:31:51:19:b3:30: 38:a0:4e:4a:c2:fb:5f:f8:47:cd:3e:90:62:59:c8: e2:59:19:93:cd:8e:b4:33:a5:5e:d5:e5:4f:5d:5d: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:26:20:EF:04:4B:DA:20:31:BE:26:1D:61:FA:9E:2D:93:C7:F8:A4 X509v3 Authority Key Identifier: keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:cd:4b:b6:a9:d9:95:b8:d6:db:79:19:3b:71:91:8a:9f:ef: da:81:55:80:ae:31:fc:05:7d:90:4d:6d:d5:1c:75:4d:5e:d0: 40:0f:45:41:5a:5f:d0:b7:3b:0f:d1:db:4e:4d:de:5c:e0:a1: b6:c3:c7:79:3c:e1:b7:df:0a:49:44:41:3f:74:7a:ae:56:de: 3c:5f:c0:48:6f:40:ca:84:99:4b:09:88:68:35:f2:a0:27:9a: 80:77:2a:09:fd:35:d1:df:17:e7:64:89:94:5b:88:94:8e:a7: 96:8d:39:f5:65:39:c2:4c:86:5e:3a:52:26:f0:df:96:ce:59: 87:43:ed:9e:02:0b:2c:c1:82:c1:18:3f:2a:c2:ee:d4:92:69: af:28:9b:fa:0e:88:12:3d:56:65:65:e7:4a:9e:ae:f6:2b:cb: a7:9e:c0:b9:df:83:70:33:33:c7:c7:08:fb:dc:21:fa:7d:33: f1:5f:34:04:99:29:ea:4b:5b:21:ae:89:fc:19:45:8b:93:13: 47:10:d8:99:e6:3c:73:de:f2:90:a0:f2:30:e2:a4:20:59:90: 50:b8:ee:06:0a:a8:c5:2a:b7:bd:9e:ce:c9:1a:df:d3:dd:a6: b9:7f:58:c0:6c:41:0c:8f:12:b4:30:b6:b6:e6:97:37:5f:e3: d2:28:2c:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzjJPMoR/EAlXw0HjbgHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzczNTI1OWZkYjdiODNmMjc3YWRmMTJkMDhjYzk4YjVh NjEwMGEwHhcNMjUxMjI0MTAwMTExWhcNMjUxMjI1MTAwMTExWjAzMTEwLwYDVQQD EygwMDI2MjBlZjA0NGJkYTIwMzFiZTI2MWQ2MWZhOWUyZDkzYzdmOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4hp6jtMS8Mx0bJYAUqk2K2+VeF1 ZrGv/SbswoK+Rph7rcn2MduPPcpxHZHWuGrszYWbreGY9zL8lj1264Ru7PoqK9SH 0WbXH90es0uhM0IQVp2X/EeOp7bUVFyktji6nWIcSDgefeg9XvYmxW9LY/DCrnxr UGaQdjSM2D49G2ciJQ9aHPHWk5CT2EQqkxwfy7pj8oqtoE7LDOxXGTWSO/j00AGc bRA5WpT0VddLY3M9SrG2iWXEtZu3QVjbi/60XKwnrxPGnsDieyIWI58H5OefeXzJ dxwlZf/rMVEZszA4oE5Kwvtf+EfNPpBiWcjiWRmTzY60M6Ve1eVPXV15ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAAmIO8ES9ogMb4mHWH6ni2Tx/ikMB8GA1UdIwQY MBaAFBTHNSWf23uD8net8S0IzJi1phAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWIt ZGJlYWY3ODQ4MTdhLzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9kZTJiMTYtZmEyYi00YTExLTk1YWItZGJlYWY3ODQ4MTdh LzEvRk1jMUpaX2JlNFB5ZDYzeExRak1tTFdtRUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoc1LtqnZ lbjW23kZO3GRip/v2oFVgK4x/AV9kE1t1Rx1TV7QQA9FQVpf0Lc7D9HbTk3eXOCh tsPHeTzht98KSURBP3R6rlbePF/ASG9AyoSZSwmIaDXyoCeagHcqCf010d8X52SJ lFuIlI6nlo059WU5wkyGXjpSJvDfls5Zh0PtngILLMGCwRg/KsLu1JJpryib+g6I Ej1WZWXnSp6u9ivLp57Aud+DcDMzx8cI+9wh+n0z8V80BJkp6ktbIa6J/BlFi5MT RxDYmeY8c97ykKDyMOKkIFmQULjuBgqoxSq3vZ7OyRrf092muX9YwGxBDI8StDC2 tuaXN1/j0igshQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:02:16 2025 by rpki-client