This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft File: fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft (raw, json) Hash identifier: E9ZY5XR4Eo62lwNlYzVC64r6ntgCraEvnrK3RpfIqK8= Subject key identifier: 14:46:39:62:47:F8:68:2A:9E:E1:EE:E5:28:B5:58:D4:57:23:88:49 Authority key identifier: 7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD Certificate issuer: /CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Certificate serial: 019B44374842C58D734DA1AC18EFF3DC9706 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 04:00:32 +0000 Manifest this update: Mon 22 Dec 2025 04:00:32 +0000 Manifest next update: Tue 23 Dec 2025 04:00:32 +0000 Files and hashes: 1: fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl (hash: K5so5NfPDj2x6wmVzOB9wdxHW4/8IuRQlHal0xMTU9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:48:42:c5:8d:73:4d:a1:ac:18:ef:f3:dc:97:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c1e84e1854b1660c5bd02819e420e9fdcc116bd Validity Not Before: Dec 22 04:00:32 2025 GMT Not After : Dec 23 04:00:32 2025 GMT Subject: CN=1446396247f8682a9ee1eee528b558d457238849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ca:fa:06:0d:cc:2c:00:a5:83:41:09:8d:86: b7:23:77:27:8e:70:bb:6a:9f:6c:63:11:01:5c:fb: 82:02:26:d7:6e:bb:86:c7:12:d7:a9:7b:e2:13:2e: 44:6a:d6:29:32:18:f6:11:dc:15:a0:df:1d:f6:fe: a6:ec:17:ce:59:78:96:34:31:e6:6a:ec:f8:ab:e5: 8b:a9:d4:4c:18:2d:13:8b:ea:c9:3a:27:f8:3a:8a: b9:00:01:59:a6:cd:16:b2:a5:30:6e:cd:1f:19:3d: 61:fb:f6:2b:12:21:31:c0:12:37:3b:05:07:cc:90: b5:06:6e:28:b4:a4:c9:2d:d0:5a:c1:d4:f1:fe:8a: c1:7d:78:f8:57:c0:dc:0d:17:fa:02:54:5f:b8:6e: 6a:45:c2:38:ea:aa:c7:98:65:dc:e8:51:4e:89:12: 5a:e2:ca:91:55:0e:9d:09:3b:8e:d5:3f:ff:8b:86: 85:87:47:76:f0:06:c1:24:1e:8b:02:07:f9:d8:0a: d2:fd:77:f0:f9:c6:62:ea:5a:9b:ce:6e:ae:c6:71: 96:59:b3:f7:28:dd:cd:a7:2f:ae:33:87:83:89:d6: 09:92:a9:44:6b:3f:ca:d2:2a:96:f9:ac:12:73:7b: d9:70:e1:fe:18:a0:56:25:c3:f6:4c:dc:21:f7:d1: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:46:39:62:47:F8:68:2A:9E:E1:EE:E5:28:B5:58:D4:57:23:88:49 X509v3 Authority Key Identifier: keyid:7C:1E:84:E1:85:4B:16:60:C5:BD:02:81:9E:42:0E:9F:DC:C1:16:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fB6E4YVLFmDFvQKBnkIOn9zBFr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c6c19c-1ade-4397-9b61-39c56b63b183/1/fB6E4YVLFmDFvQKBnkIOn9zBFr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:15:24:6b:1d:bb:04:1c:1e:e8:4a:85:f8:c6:cf:55:ed:16: b2:39:2c:13:b7:93:10:1e:a4:f7:f8:28:1a:72:32:30:bc:ca: 2e:d0:9c:bb:a5:53:11:2e:9f:73:96:07:6f:3a:3c:78:8b:72: 39:44:7b:d3:87:a6:27:98:c0:b2:d4:10:40:79:fb:6a:1a:72: b0:14:e6:8a:95:b3:e8:e7:ea:d9:d0:ce:ba:12:2b:ef:49:f6: 04:3d:d9:20:6b:03:27:92:bb:86:21:b7:e9:9f:6f:1d:28:a1: 8a:3e:11:cc:e0:77:4a:91:36:05:48:1d:46:15:e2:c6:e3:5e: ee:ec:98:b6:74:61:14:96:10:e8:54:ee:de:2f:80:19:bf:af: 23:ca:ee:16:fd:b5:9f:c9:62:02:5e:b9:dd:e9:bc:a7:85:90: 5d:52:af:91:da:87:1b:17:8a:e8:40:e1:a7:20:2a:b3:9b:eb: 6c:4e:1d:64:81:1f:0d:14:38:93:ea:fe:97:85:91:79:76:a6: f0:ee:02:d0:06:26:fc:96:f7:7f:fa:f6:20:bf:d0:dc:ad:6f: da:7f:4d:63:3c:99:db:90:1e:6c:be:23:94:06:2d:98:43:0f: e3:cd:5f:df:77:63:1c:f4:9f:ff:a9:49:a8:df:56:5a:58:b4: f7:ad:1c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN0hCxY1zTaGsGO/z3JcGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjMWU4NGUxODU0YjE2NjBjNWJkMDI4MTllNDIwZTlmZGNj MTE2YmQwHhcNMjUxMjIyMDQwMDMyWhcNMjUxMjIzMDQwMDMyWjAzMTEwLwYDVQQD EygxNDQ2Mzk2MjQ3Zjg2ODJhOWVlMWVlZTUyOGI1NThkNDU3MjM4ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18r6Bg3MLAClg0EJjYa3I3cnjnC7 ap9sYxEBXPuCAibXbruGxxLXqXviEy5EatYpMhj2EdwVoN8d9v6m7BfOWXiWNDHm auz4q+WLqdRMGC0Ti+rJOif4Ooq5AAFZps0WsqUwbs0fGT1h+/YrEiExwBI3OwUH zJC1Bm4otKTJLdBawdTx/orBfXj4V8DcDRf6AlRfuG5qRcI46qrHmGXc6FFOiRJa 4sqRVQ6dCTuO1T//i4aFh0d28AbBJB6LAgf52ArS/Xfw+cZi6lqbzm6uxnGWWbP3 KN3Npy+uM4eDidYJkqlEaz/K0iqW+awSc3vZcOH+GKBWJcP2TNwh99EtiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRGOWJH+GgqnuHu5Si1WNRXI4hJMB8GA1UdIwQY MBaAFHwehOGFSxZgxb0CgZ5CDp/cwRa9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEt MzljNTZiNjNiMTgzLzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jNmMxOWMtMWFkZS00Mzk3LTliNjEtMzljNTZiNjNiMTgz LzEvZkI2RTRZVkxGbURGdlFLQm5rSU9uOXpCRnIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxUkax27 BBwe6EqF+MbPVe0WsjksE7eTEB6k9/goGnIyMLzKLtCcu6VTES6fc5YHbzo8eIty OUR704emJ5jAstQQQHn7ahpysBTmipWz6Ofq2dDOuhIr70n2BD3ZIGsDJ5K7hiG3 6Z9vHSihij4RzOB3SpE2BUgdRhXixuNe7uyYtnRhFJYQ6FTu3i+AGb+vI8ruFv21 n8liAl653em8p4WQXVKvkdqHGxeK6EDhpyAqs5vrbE4dZIEfDRQ4k+r+l4WReXam 8O4C0AYm/Jb3f/r2IL/Q3K1v2n9NYzyZ25AebL4jlAYtmEMP481f33djHPSf/6lJ qN9WWli0960cWw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:11:18 2025 by rpki-client