This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft File: fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft (raw, json) Hash identifier: DkFVwdkowHXb5X7ymcT9oCx9VDf6vS4y8Eo9JHVVZ4w= Subject key identifier: 32:37:BC:CD:28:E7:20:22:2B:E1:83:A8:21:BD:1A:60:F9:CE:C7:BF Authority key identifier: 7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71 Certificate issuer: /CN=7ec363a584e66e40c48164d00a8f6c184c74b671 Certificate serial: 019AF509B754242623190245A39A20611A3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft Manifest number: 0A95 Signing time: Sat 06 Dec 2025 19:00:45 +0000 Manifest this update: Sat 06 Dec 2025 19:00:45 +0000 Manifest next update: Sun 07 Dec 2025 19:00:45 +0000 Files and hashes: 1: fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl (hash: 2vLjHdJkkAritsd8onyNERJFhK+B4uGDHgB7gOFbuiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b7:54:24:26:23:19:02:45:a3:9a:20:61:1a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec363a584e66e40c48164d00a8f6c184c74b671 Validity Not Before: Dec 6 19:00:45 2025 GMT Not After : Dec 7 19:00:45 2025 GMT Subject: CN=3237bccd28e720222be183a821bd1a60f9cec7bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:33:7a:86:01:f9:ef:11:56:3c:04:4a:92:be: ac:c0:58:29:97:34:53:52:ee:b3:2a:4c:c0:8b:e1: 7a:a6:b0:65:bb:65:bb:6d:e3:73:91:01:00:b2:f3: 5e:83:f6:f9:8a:1e:d8:23:a4:38:95:0d:9b:c1:c3: 77:42:a0:52:dc:4e:3a:4c:22:85:9d:93:01:41:1d: 4d:86:3c:e0:1d:68:fa:1a:3b:59:08:aa:9e:e5:99: b3:66:d4:d9:05:04:b0:67:22:ee:43:f4:7c:ba:0d: b8:98:29:4b:93:67:91:5a:6f:2d:90:39:20:df:43: 75:46:3b:7c:8f:e1:71:cb:ac:5f:22:a8:0d:5a:f2: e3:d2:47:b7:7d:df:9b:92:0e:39:48:e1:79:70:0a: 86:12:53:c1:59:77:5b:ba:0d:2f:c4:16:47:b3:c7: b9:8e:ad:e0:9e:01:4f:85:02:14:bf:e1:1b:b3:44: 1b:ac:22:eb:69:27:10:be:0e:b1:67:32:91:cc:01: 44:93:ee:d4:9f:90:67:a2:45:81:51:14:32:e2:61: d2:8c:b5:29:d6:05:40:aa:98:35:ee:e0:9d:4f:a8: 87:e4:8b:52:12:3b:50:08:cb:e5:af:50:0f:c2:3a: 32:67:a7:b7:24:ca:a3:27:1c:c9:7e:db:ae:fe:ef: 06:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:37:BC:CD:28:E7:20:22:2B:E1:83:A8:21:BD:1A:60:F9:CE:C7:BF X509v3 Authority Key Identifier: keyid:7E:C3:63:A5:84:E6:6E:40:C4:81:64:D0:0A:8F:6C:18:4C:74:B6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsNjpYTmbkDEgWTQCo9sGEx0tnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c2f7c3-961f-4ed6-af5d-7209a362b62b/1/fsNjpYTmbkDEgWTQCo9sGEx0tnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2a:48:59:76:6d:34:6d:f6:a1:65:d1:56:ff:34:35:68:98: 01:59:bf:f8:af:f4:4d:f0:25:77:46:e6:b8:b0:fa:66:82:25: 4f:c5:19:ee:1c:b9:a2:ce:9b:96:45:a7:dc:30:57:1c:23:60: 5e:49:e8:f3:42:f3:96:1d:1e:22:c1:f1:7e:84:cd:1a:d1:f9: 36:e4:b5:e3:95:99:c4:14:f4:59:5e:a7:0a:3c:37:05:54:af: 91:51:b0:0a:66:f0:03:cd:f1:76:50:c6:12:2e:d6:62:53:5b: ea:dd:af:43:f3:ac:40:18:a6:1e:2a:a3:4c:ff:af:cc:36:a6: 9e:d2:da:31:c4:c4:3c:1b:be:df:ac:20:c3:56:54:3f:fe:25: 7a:93:fd:c5:59:25:28:07:e0:95:19:f2:84:f5:97:d6:35:cc: d7:a6:3b:14:85:ec:e9:30:7d:98:8b:29:8b:a8:3d:3a:61:ba: 8f:48:29:7c:55:0b:37:7e:ce:c3:17:dd:ff:84:1a:e3:ed:c4: 85:85:e6:f5:3b:00:60:aa:ab:67:5f:d4:47:b0:8f:f3:6f:26: 2b:cf:30:40:67:d5:2d:39:6e:eb:99:36:48:db:c9:71:38:87: f6:79:63:1b:75:8f:e2:ba:23:7b:28:f5:e6:db:15:5e:b3:a8: b7:ab:4c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbdUJCYjGQJFo5ogYRo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzM2M2E1ODRlNjZlNDBjNDgxNjRkMDBhOGY2YzE4NGM3 NGI2NzEwHhcNMjUxMjA2MTkwMDQ1WhcNMjUxMjA3MTkwMDQ1WjAzMTEwLwYDVQQD EygzMjM3YmNjZDI4ZTcyMDIyMmJlMTgzYTgyMWJkMWE2MGY5Y2VjN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jN6hgH57xFWPARKkr6swFgplzRT Uu6zKkzAi+F6prBlu2W7beNzkQEAsvNeg/b5ih7YI6Q4lQ2bwcN3QqBS3E46TCKF nZMBQR1NhjzgHWj6GjtZCKqe5ZmzZtTZBQSwZyLuQ/R8ug24mClLk2eRWm8tkDkg 30N1Rjt8j+Fxy6xfIqgNWvLj0ke3fd+bkg45SOF5cAqGElPBWXdbug0vxBZHs8e5 jq3gngFPhQIUv+Ebs0QbrCLraScQvg6xZzKRzAFEk+7Un5BnokWBURQy4mHSjLUp 1gVAqpg17uCdT6iH5ItSEjtQCMvlr1APwjoyZ6e3JMqjJxzJftuu/u8GEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDI3vM0o5yAiK+GDqCG9GmD5zse/MB8GA1UdIwQY MBaAFH7DY6WE5m5AxIFk0AqPbBhMdLZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQt NzIwOWEzNjJiNjJiLzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9jMmY3YzMtOTYxZi00ZWQ2LWFmNWQtNzIwOWEzNjJiNjJi LzEvZnNOanBZVG1ia0RFZ1dUUUNvOXNHRXgwdG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJypIWXZt NG32oWXRVv80NWiYAVm/+K/0TfAld0bmuLD6ZoIlT8UZ7hy5os6blkWn3DBXHCNg Xkno80Lzlh0eIsHxfoTNGtH5NuS145WZxBT0WV6nCjw3BVSvkVGwCmbwA83xdlDG Ei7WYlNb6t2vQ/OsQBimHiqjTP+vzDamntLaMcTEPBu+36wgw1ZUP/4lepP9xVkl KAfglRnyhPWX1jXM16Y7FIXs6TB9mIspi6g9OmG6j0gpfFULN37Owxfd/4Qa4+3E hYXm9TsAYKqrZ1/UR7CP828mK88wQGfVLTlu65k2SNvJcTiH9nljG3WP4rojeyj1 5tsVXrOot6tM1w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:18 2025 by rpki-client