This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft File: fSiu_AZob_0_snjG3lKXc-2r3p4.mft (raw, json) Hash identifier: QWS/SzFMzXNrAgHE/7vl5/R1hUNTDaH5Mp4I2W1kJnY= Subject key identifier: 67:43:8E:C2:8C:E2:5A:A4:79:1A:15:6F:6F:17:3D:58:8C:DC:2C:2D Authority key identifier: 7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E Certificate issuer: /CN=7d28aefc06686ffd3fb278c6de529773edabde9e Certificate serial: 019AF352B3D9E44AD442EDD14ACB48A28219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft Manifest number: 0133 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: fSiu_AZob_0_snjG3lKXc-2r3p4.crl (hash: gUVdKaALEAU002qlAnhKiNdEstqw6nnn341hr5VWQdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b3:d9:e4:4a:d4:42:ed:d1:4a:cb:48:a2:82:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d28aefc06686ffd3fb278c6de529773edabde9e Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=67438ec28ce25aa4791a156f6f173d588cdc2c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c7:c9:49:6d:5d:23:a8:9d:d5:ba:cb:d9:73: 58:b7:a2:29:85:00:94:42:d2:e1:7e:5b:5f:50:27: 1e:04:a9:1e:e6:60:d9:fa:2e:38:82:c3:45:b1:00: c0:0c:e1:01:c1:8d:d0:9f:cd:a6:52:7d:2c:57:28: 16:83:19:a7:08:bb:a4:2b:c6:c2:2e:eb:50:af:fa: 64:b3:6f:be:06:0b:5e:fc:97:54:6e:62:6f:48:f6: 8d:c6:86:ea:ea:84:44:59:c3:c1:b1:8d:6c:d3:3b: 35:34:25:38:d6:30:3b:47:94:ae:fe:99:1a:9b:51: 8b:61:90:94:d5:25:2f:5f:79:0a:ab:0d:18:3a:af: f7:2a:52:dc:2b:ad:b5:b5:b4:6d:97:7b:66:e1:c2: f1:1d:0c:38:ac:97:6f:e0:54:c4:c5:1e:0f:72:22: 87:6b:98:e7:db:bc:b8:1b:fc:43:bc:5f:aa:52:0a: 79:5c:6d:e9:89:44:0d:cd:05:70:9c:81:a5:9b:7a: 8b:c6:d8:a1:95:5e:8e:d1:4c:6e:71:d2:5b:89:a4: 22:fc:c8:f7:0f:78:89:88:06:4c:c9:1e:0f:a4:d0: 59:fe:c7:d2:40:39:12:24:1b:fd:a4:9a:5f:e9:d8: 23:67:e3:31:8d:f9:a0:62:63:d6:af:17:88:ee:cc: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:8E:C2:8C:E2:5A:A4:79:1A:15:6F:6F:17:3D:58:8C:DC:2C:2D X509v3 Authority Key Identifier: keyid:7D:28:AE:FC:06:68:6F:FD:3F:B2:78:C6:DE:52:97:73:ED:AB:DE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fSiu_AZob_0_snjG3lKXc-2r3p4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90233f-bd56-4314-9f38-934f5437d548/1/fSiu_AZob_0_snjG3lKXc-2r3p4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:df:8c:a2:07:ac:a0:de:52:99:9b:67:a2:21:43:66:4a:e3: 30:f3:0d:de:04:41:cd:ca:80:25:46:40:3e:c9:cf:4e:0f:20: 9e:16:b4:a1:93:c4:2d:ab:4f:4e:ac:33:70:6f:b5:25:52:bf: e1:11:21:58:66:67:0a:e7:75:1d:91:31:68:b2:b3:64:d1:3f: 99:3a:1d:c3:89:f4:dd:9d:af:3e:97:08:fb:ef:48:8e:c4:d8: c0:86:4a:cf:ce:5f:10:0d:10:0d:fc:76:d9:88:bd:4b:f1:42: 41:30:d7:10:b3:5e:79:e8:df:e4:b0:48:54:d1:d1:32:03:ab: c2:11:ac:a8:da:03:5d:96:4c:67:f5:0f:b9:81:81:00:88:9b: 23:b9:8b:5d:cb:53:5c:45:7e:96:b8:ab:c0:4b:e2:a3:83:c6: db:15:fb:f4:78:e2:c1:2c:47:58:c9:f6:a4:29:86:fc:bf:cb: 3f:af:24:51:f2:98:ee:5a:0c:7e:92:5c:37:c7:7f:18:5c:94: a6:3e:19:b1:69:c8:88:ba:dd:b6:cd:cf:8a:16:27:68:ab:d5: 82:4c:6c:7e:f8:b4:31:0a:0b:84:16:64:33:7c:3e:13:09:17: e8:69:ee:95:51:eb:97:73:5d:4b:b4:1d:76:18:32:e0:48:8a: 25:03:46:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrPZ5ErUQu3RSstIooIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMjhhZWZjMDY2ODZmZmQzZmIyNzhjNmRlNTI5NzczZWRh YmRlOWUwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD Eyg2NzQzOGVjMjhjZTI1YWE0NzkxYTE1NmY2ZjE3M2Q1ODhjZGMyYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38fJSW1dI6id1brL2XNYt6IphQCU QtLhfltfUCceBKke5mDZ+i44gsNFsQDADOEBwY3Qn82mUn0sVygWgxmnCLukK8bC LutQr/pks2++Bgte/JdUbmJvSPaNxobq6oREWcPBsY1s0zs1NCU41jA7R5Su/pka m1GLYZCU1SUvX3kKqw0YOq/3KlLcK621tbRtl3tm4cLxHQw4rJdv4FTExR4PciKH a5jn27y4G/xDvF+qUgp5XG3piUQNzQVwnIGlm3qLxtihlV6O0UxucdJbiaQi/Mj3 D3iJiAZMyR4PpNBZ/sfSQDkSJBv9pJpf6dgjZ+MxjfmgYmPWrxeI7sy2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdDjsKM4lqkeRoVb28XPViM3CwtMB8GA1UdIwQY MBaAFH0orvwGaG/9P7J4xt5Sl3Ptq96eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgt OTM0ZjU0MzdkNTQ4LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85MDIzM2YtYmQ1Ni00MzE0LTlmMzgtOTM0ZjU0MzdkNTQ4 LzEvZlNpdV9BWm9iXzBfc25qRzNsS1hjLTJyM3A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt+Moges oN5SmZtnoiFDZkrjMPMN3gRBzcqAJUZAPsnPTg8gnha0oZPELatPTqwzcG+1JVK/ 4REhWGZnCud1HZExaLKzZNE/mTodw4n03Z2vPpcI++9IjsTYwIZKz85fEA0QDfx2 2Yi9S/FCQTDXELNeeejf5LBIVNHRMgOrwhGsqNoDXZZMZ/UPuYGBAIibI7mLXctT XEV+lrirwEvio4PG2xX79HjiwSxHWMn2pCmG/L/LP68kUfKY7loMfpJcN8d/GFyU pj4ZsWnIiLrdts3PihYnaKvVgkxsfvi0MQoLhBZkM3w+EwkX6GnulVHrl3NdS7Qd dhgy4EiKJQNGZw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:19 2025 by rpki-client