This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json) Hash identifier: ZzMQtkXgunVAACgKbYbGqhv39d4P8ri5eji1HBPJRxA= Subject key identifier: C5:74:59:A3:D1:E4:26:E6:04:EE:0B:35:D2:97:5D:72:BB:75:DD:9C Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Certificate serial: 019B4625A6F60C3F940FA83DEBFA6FBFE78A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 13:00:31 +0000 Manifest this update: Mon 22 Dec 2025 13:00:31 +0000 Manifest next update: Tue 23 Dec 2025 13:00:31 +0000 Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: 6jdHjgHLZz/AQIbfDWT/Xe93+AAwUhCRPCLBkKcMTM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:a6:f6:0c:3f:94:0f:a8:3d:eb:fa:6f:bf:e7:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Validity Not Before: Dec 22 13:00:31 2025 GMT Not After : Dec 23 13:00:31 2025 GMT Subject: CN=c57459a3d1e426e604ee0b35d2975d72bb75dd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:70:64:bc:d3:42:d4:9f:6a:06:d2:16:cb: bc:95:d0:09:59:49:75:27:dd:63:a4:55:48:d5:07: 4f:d4:62:23:5e:b0:7f:06:e2:56:0f:61:58:9d:ea: 3e:4f:0e:34:ea:66:f4:9b:fa:bd:ad:74:22:e8:ce: 36:2b:5d:4e:50:6d:a5:a3:45:ad:5e:3a:8f:64:b6: 40:97:94:36:2e:97:90:57:6e:3a:ce:3a:87:04:a5: 9b:c3:62:6a:93:87:4b:e7:dc:32:30:b6:a3:7d:9c: 97:95:7f:9b:fc:a7:4a:4f:95:72:7b:3d:17:91:4b: 2d:02:94:eb:02:f8:34:c9:19:31:70:d8:12:25:d3: 48:35:c9:4e:ef:21:81:05:06:d2:82:ea:71:9a:0c: eb:68:15:2a:be:34:49:b9:a9:4e:aa:20:2a:e2:dd: d2:48:ab:97:2a:17:75:7b:5b:0f:4c:68:f9:00:33: ce:ab:9f:b9:ad:d0:de:e9:ed:6e:6a:00:40:ac:58: 01:b2:78:48:e6:f2:30:8c:c9:44:e6:fe:fe:de:43: d4:aa:ad:ad:14:af:67:09:94:95:a2:a5:64:88:05: c2:4b:69:10:6a:a1:5b:5e:83:42:8d:45:4a:5a:2f: 4b:68:d4:9d:e2:33:e3:a2:54:a6:50:26:fc:57:d2: 8f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:74:59:A3:D1:E4:26:E6:04:EE:0B:35:D2:97:5D:72:BB:75:DD:9C X509v3 Authority Key Identifier: keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:19:9a:4b:6f:48:b0:45:f6:43:94:1e:0a:ff:d2:63:4e:07: 7d:4f:22:8f:92:88:ec:85:18:38:49:83:c2:92:94:f5:4f:c5: 2a:34:97:ef:96:46:79:9e:97:45:66:f7:ce:9b:97:3d:57:93: 3b:29:12:55:d8:16:85:1b:7d:b8:b9:25:f6:1d:60:52:b0:b8: 5c:c6:4c:5f:fa:0c:2c:22:96:c2:f3:18:4b:a6:09:01:f8:76: b5:93:f6:93:ee:bb:01:f4:27:83:0e:5d:f2:2b:1f:0e:80:67: 01:9b:ba:05:01:63:ca:76:45:96:51:c5:d2:10:a2:8e:34:3d: e1:76:aa:61:5e:74:a1:7b:c6:5f:30:92:33:06:4d:55:11:5f: 48:b1:12:b1:24:ab:85:2c:0f:9d:0f:c5:b1:f9:2f:b6:10:c0: b4:7f:8e:ef:39:e2:e3:ec:5b:e2:8b:b9:38:3d:bd:bb:95:d3: 9e:fb:31:7c:ae:15:18:e2:ab:53:6a:dc:59:34:0c:19:07:31: 5a:d5:ab:c8:29:58:ea:64:56:61:a6:b7:f7:01:d8:e7:dc:4d: 0a:46:29:e0:7c:31:3d:18:5f:2d:ef:52:ce:6e:5f:0b:5c:b0: 9c:a1:ee:3b:00:f3:09:bf:44:2d:18:a0:ef:f1:c4:66:ab:da: 23:e4:b5:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJab2DD+UD6g96/pvv+eKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWU4NGUxODU0YjE2NjBjNWJkMDI4MTllNDIwZTlmZGNj MTE2YmQwHhcNMjUxMjIyMTMwMDMxWhcNMjUxMjIzMTMwMDMxWjAzMTEwLwYDVQQD EyhjNTc0NTlhM2QxZTQyNmU2MDRlZTBiMzVkMjk3NWQ3MmJiNzVkZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cJwZLzTQtSfagbSFsu8ldAJWUl1 J91jpFVI1QdP1GIjXrB/BuJWD2FYneo+Tw406mb0m/q9rXQi6M42K11OUG2lo0Wt XjqPZLZAl5Q2LpeQV246zjqHBKWbw2Jqk4dL59wyMLajfZyXlX+b/KdKT5Vyez0X kUstApTrAvg0yRkxcNgSJdNINclO7yGBBQbSgupxmgzraBUqvjRJualOqiAq4t3S SKuXKhd1e1sPTGj5ADPOq5+5rdDe6e1uagBArFgBsnhI5vIwjMlE5v7+3kPUqq2t FK9nCZSVoqVkiAXCS2kQaqFbXoNCjUVKWi9LaNSd4jPjolSmUCb8V9KPDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV0WaPR5CbmBO4LNdKXXXK7dd2cMB8GA1UdIwQY MBaAFHwehOGFSxZgxb0CgZ5CDp/cwRa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEt MzljNTZiNjNiMTgzLzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEtMzljNTZiNjNiMTgz LzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxmaS29I sEX2Q5QeCv/SY04HfU8ij5KI7IUYOEmDwpKU9U/FKjSX75ZGeZ6XRWb3zpuXPVeT OykSVdgWhRt9uLkl9h1gUrC4XMZMX/oMLCKWwvMYS6YJAfh2tZP2k+67AfQngw5d 8isfDoBnAZu6BQFjynZFllHF0hCijjQ94XaqYV50oXvGXzCSMwZNVRFfSLESsSSr hSwPnQ/FsfkvthDAtH+O7zni4+xb4ou5OD29u5XTnvsxfK4VGOKrU2rcWTQMGQcx WtWryClY6mRWYaa39wHY59xNCkYp4HwxPRhfLe9Szm5fC1ywnKHuOwDzCb9ELRig 7/HEZqvaI+S1PA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:43:09 2025 by rpki-client