This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json) Hash identifier: c9KJj0tFSAIxpKPrJCZlOqwOS7RUxRuggm5MbfjeUhY= Subject key identifier: 6B:B2:9D:45:41:B0:AC:78:76:1C:7E:F1:5D:2D:2D:21:9D:0B:25:98 Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a Certificate serial: 019B416D770211AD28DA4F4F45EBD5F47A3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft Manifest number: 09F4 Signing time: Sun 21 Dec 2025 15:00:51 +0000 Manifest this update: Sun 21 Dec 2025 15:00:51 +0000 Manifest next update: Mon 22 Dec 2025 15:00:51 +0000 Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: aPyaJ3cHQXz5IT6t4S3/YIEuNTMpuyuKtbUoPvgBgbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:77:02:11:ad:28:da:4f:4f:45:eb:d5:f4:7a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a Validity Not Before: Dec 21 15:00:51 2025 GMT Not After : Dec 22 15:00:51 2025 GMT Subject: CN=6bb29d4541b0ac78761c7ef15d2d2d219d0b2598 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5c:98:44:8a:ab:d9:93:6a:01:28:ec:b8:c5: 9c:11:b3:7a:15:e2:92:00:b0:49:d5:22:11:16:73: a8:3f:18:5b:ff:56:12:77:bb:68:3b:c1:6c:ce:df: 4c:d4:de:f8:c5:ed:2c:a2:80:bd:79:97:06:7f:5b: 27:5a:b8:0d:03:de:86:4d:25:29:5c:35:14:f4:6d: 12:22:eb:f5:af:d9:d6:a9:54:8e:bf:cf:47:73:20: 33:24:98:f6:5f:47:43:be:ee:56:42:16:69:ea:65: 9c:ed:1e:4b:c6:84:1a:89:cc:9e:e8:ae:fc:c1:aa: b4:22:31:ec:35:68:b7:66:04:ee:25:c2:2e:f3:24: 51:c7:f2:55:20:ee:c3:80:14:69:ee:5e:da:a5:4a: 1f:34:34:82:3d:7d:a5:8c:cc:47:14:28:c7:d8:51: 72:0e:58:9a:ca:16:39:24:92:42:c5:a0:47:fe:9a: 00:f0:72:02:69:29:93:ee:2f:4a:bf:f1:b5:56:5e: fb:ce:1f:e6:79:79:6d:9e:2c:b5:5a:85:71:63:b6: f2:cc:94:1f:9c:a0:ad:6f:2d:d0:fd:e3:e5:ef:4e: 5f:92:cd:00:c6:5a:35:ce:f3:c5:c6:b3:a1:35:a7: e7:ac:8a:59:40:97:9c:3b:d2:7e:60:c1:e6:4d:72: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B2:9D:45:41:B0:AC:78:76:1C:7E:F1:5D:2D:2D:21:9D:0B:25:98 X509v3 Authority Key Identifier: keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d6:c8:34:62:57:d0:7b:4a:87:f3:10:3b:05:49:2c:d2:40: de:e0:0c:55:a4:b5:ac:b9:c3:5c:a5:d4:23:e8:75:c2:7c:4c: 15:91:8a:48:0e:82:57:89:15:d8:9e:91:e5:00:78:72:5c:7e: 52:fb:0d:cf:36:a9:8c:e3:b5:4c:54:5f:b8:38:b4:1e:57:dc: a9:cf:91:f2:59:a9:ed:06:bb:e8:3a:1b:3e:c8:1d:83:89:e8: 13:d6:8a:71:b7:07:df:ab:7d:4d:35:e6:28:45:c8:c8:01:80: 4f:fb:99:0f:f0:36:9e:aa:0e:60:72:a7:37:b4:d4:03:34:da: bd:10:5b:9f:c2:92:a0:66:e6:f7:91:3e:71:3e:f9:f0:18:01: 81:5c:91:26:a7:97:31:25:0d:03:9a:1b:ad:15:24:f5:cd:16: 24:c8:27:5a:a9:97:da:aa:e4:59:f5:32:02:0a:30:f8:1c:6c: 13:40:90:5d:7c:6d:b3:30:ce:eb:4a:6e:c3:d1:de:93:2a:3e: 87:f1:cb:78:90:43:7a:7d:bc:49:2d:2c:7f:6c:f9:60:c8:e2: db:25:4c:89:f2:a2:b9:f2:5b:9b:fe:2c:7e:e6:1a:32:dd:20: 57:b6:45:36:b6:23:e5:61:10:08:df:5d:3c:0e:c3:90:4b:a8: 25:13:f5:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbXcCEa0o2k9PRevV9Ho9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTllMTU4ZGNhNTU4NGYzN2ExZjgzNDliMjg5YTY4MTJk YjkyNGEwHhcNMjUxMjIxMTUwMDUxWhcNMjUxMjIyMTUwMDUxWjAzMTEwLwYDVQQD Eyg2YmIyOWQ0NTQxYjBhYzc4NzYxYzdlZjE1ZDJkMmQyMTlkMGIyNTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FyYRIqr2ZNqASjsuMWcEbN6FeKS ALBJ1SIRFnOoPxhb/1YSd7toO8Fszt9M1N74xe0sooC9eZcGf1snWrgNA96GTSUp XDUU9G0SIuv1r9nWqVSOv89HcyAzJJj2X0dDvu5WQhZp6mWc7R5LxoQaicye6K78 waq0IjHsNWi3ZgTuJcIu8yRRx/JVIO7DgBRp7l7apUofNDSCPX2ljMxHFCjH2FFy DliayhY5JJJCxaBH/poA8HICaSmT7i9Kv/G1Vl77zh/meXltniy1WoVxY7byzJQf nKCtby3Q/ePl705fks0Axlo1zvPFxrOhNafnrIpZQJecO9J+YMHmTXJNKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuynUVBsKx4dhx+8V0tLSGdCyWYMB8GA1UdIwQY MBaAFHyp4VjcpVhPN6H4NJsommgS25JKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQt NzhhNzdmN2ExMzQyLzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQtNzhhNzdmN2ExMzQy LzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC9bINGJX 0HtKh/MQOwVJLNJA3uAMVaS1rLnDXKXUI+h1wnxMFZGKSA6CV4kV2J6R5QB4clx+ UvsNzzapjOO1TFRfuDi0Hlfcqc+R8lmp7Qa76DobPsgdg4noE9aKcbcH36t9TTXm KEXIyAGAT/uZD/A2nqoOYHKnN7TUAzTavRBbn8KSoGbm95E+cT758BgBgVyRJqeX MSUNA5obrRUk9c0WJMgnWqmX2qrkWfUyAgow+BxsE0CQXXxtszDO60puw9Hekyo+ h/HLeJBDen28SS0sf2z5YMji2yVMifKiufJbm/4sfuYaMt0gV7ZFNrYj5WEQCN9d PA7DkEuoJRP1cg== -----END CERTIFICATE-----Generated at Sun Dec 21 18:56:15 2025 by rpki-client