This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json) Hash identifier: nqQz/pjrzBua+InG/zNaSqyHAXbswMgDvRzNyWeX8OE= Subject key identifier: 35:F1:E7:7D:AF:51:B0:62:E4:27:7D:AC:E1:97:97:22:CF:20:25:41 Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a Certificate serial: 019AF19ACCEC8529E3B45FE8B02521DA4053 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft Manifest number: 093A Signing time: Sat 06 Dec 2025 03:00:45 +0000 Manifest this update: Sat 06 Dec 2025 03:00:45 +0000 Manifest next update: Sun 07 Dec 2025 03:00:45 +0000 Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: +ogiX1hmQKP42N6t5Z3FxQLiA59gmkiMwACnw/TDUpc=) 2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:cc:ec:85:29:e3:b4:5f:e8:b0:25:21:da:40:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a Validity Not Before: Dec 6 03:00:45 2025 GMT Not After : Dec 7 03:00:45 2025 GMT Subject: CN=35f1e77daf51b062e4277dace1979722cf202541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:7f:01:7e:fc:c2:ad:9e:7c:eb:56:e8:27: d6:6d:0c:72:16:11:e6:c4:5e:ee:8a:aa:31:00:b8: 55:59:16:e5:d3:11:30:93:55:68:77:5d:a3:8f:68: d6:c5:56:71:f7:3b:09:13:3e:67:27:e6:3d:3a:68: 57:83:9d:b5:01:52:a6:2f:7e:bf:a1:f0:d0:ed:e8: 10:28:ca:b3:a0:ca:a4:d9:b2:66:0e:4f:80:35:d9: b9:4a:cb:53:e1:39:6e:48:3f:ba:67:cf:44:08:0c: e7:2d:9f:82:34:cf:ac:a6:18:f9:2f:69:55:aa:17: 40:7e:62:d5:7b:68:72:4f:7c:6a:70:99:41:74:18: df:a9:9b:64:f0:94:8d:71:99:5f:e2:c8:0f:aa:8b: e1:9d:76:58:9a:0a:ac:0e:55:12:e6:f0:d3:7b:49: 9f:2d:43:fa:51:42:b7:60:72:19:58:52:2a:0a:5c: 8d:24:bf:30:57:a1:e1:34:22:1c:46:8d:20:00:b2: 96:34:64:0d:ca:43:11:08:0a:8f:7a:34:76:c4:e0: 9d:af:55:2d:65:44:db:93:b8:23:5b:5f:ab:c5:e3: ee:0a:76:e8:d3:29:66:db:49:82:b3:a2:6e:08:31: 07:89:33:8e:41:65:95:72:c9:ca:0f:18:87:d5:c4: ac:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F1:E7:7D:AF:51:B0:62:E4:27:7D:AC:E1:97:97:22:CF:20:25:41 X509v3 Authority Key Identifier: keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:67:ba:89:06:2d:35:2d:9d:7c:bd:76:ae:bc:17:a3:68:40: c1:bb:bf:95:c6:68:db:2b:e4:69:a5:3b:47:35:c8:82:d6:5a: c7:09:ba:31:a6:fb:c5:d1:61:57:b1:bc:15:df:b6:5d:4c:df: df:a1:12:f6:07:ca:d0:cd:5d:df:0d:3c:7b:85:bb:35:10:e4: fc:91:d3:80:a6:58:5e:93:b1:0b:75:45:dc:37:2e:c5:56:ef: d3:24:72:9b:45:6a:1c:b9:50:d2:76:21:19:2b:0e:4e:c8:57: 5c:4c:8f:36:31:b0:c0:d1:8e:d4:18:f9:79:2c:e7:b9:cc:cc: c3:e2:04:d4:3e:04:49:99:cb:09:c8:38:63:06:80:b5:78:64: 28:a7:2b:82:1e:33:7d:6b:40:70:43:a3:8c:b7:07:0b:1d:e7: 0a:a0:b5:9d:21:32:7a:57:a1:d3:40:b2:c7:8a:5f:13:94:83: 03:26:42:9d:30:71:78:35:27:ae:1b:73:8e:ce:a9:84:50:34: 97:ea:7f:c2:6a:32:3b:5b:a8:69:06:fa:0d:b6:1c:34:ab:ad: 47:e3:66:ae:b6:2d:27:dd:79:08:e3:bc:87:a5:28:cf:fb:91: b6:49:10:a8:27:5a:72:7f:ed:72:23:48:8b:f7:cc:fb:a5:f6: ff:f3:3d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmszshSnjtF/osCUh2kBTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0 MzFkN2EwHhcNMjUxMjA2MDMwMDQ1WhcNMjUxMjA3MDMwMDQ1WjAzMTEwLwYDVQQD EygzNWYxZTc3ZGFmNTFiMDYyZTQyNzdkYWNlMTk3OTcyMmNmMjAyNTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySZ/AX78wq2efOtW6CfWbQxyFhHm xF7uiqoxALhVWRbl0xEwk1Vod12jj2jWxVZx9zsJEz5nJ+Y9OmhXg521AVKmL36/ ofDQ7egQKMqzoMqk2bJmDk+ANdm5SstT4TluSD+6Z89ECAznLZ+CNM+sphj5L2lV qhdAfmLVe2hyT3xqcJlBdBjfqZtk8JSNcZlf4sgPqovhnXZYmgqsDlUS5vDTe0mf LUP6UUK3YHIZWFIqClyNJL8wV6HhNCIcRo0gALKWNGQNykMRCAqPejR2xOCdr1Ut ZUTbk7gjW1+rxePuCnbo0ylm20mCs6JuCDEHiTOOQWWVcsnKDxiH1cSsQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXx532vUbBi5Cd9rOGXlyLPICVBMB8GA1UdIwQY MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWe6iQYt NS2dfL12rrwXo2hAwbu/lcZo2yvkaaU7RzXIgtZaxwm6Mab7xdFhV7G8Fd+2XUzf 36ES9gfK0M1d3w08e4W7NRDk/JHTgKZYXpOxC3VF3DcuxVbv0yRym0VqHLlQ0nYh GSsOTshXXEyPNjGwwNGO1Bj5eSznuczMw+IE1D4ESZnLCcg4YwaAtXhkKKcrgh4z fWtAcEOjjLcHCx3nCqC1nSEyeleh00Cyx4pfE5SDAyZCnTBxeDUnrhtzjs6phFA0 l+p/wmoyO1uoaQb6DbYcNKutR+NmrrYtJ915COO8h6Uoz/uRtkkQqCdacn/tciNI i/fM+6X2//M96w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:50 2025 by rpki-client