This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft File: fnogtIaCHWJ702CV56Ba-fqhUpw.mft (raw, json) Hash identifier: IkHpLRJHkNykhzN6nzWjmbrtnsTEFAMd9GLKBfjCUV0= Subject key identifier: BD:35:19:C1:F8:8F:FE:6F:5D:DC:A1:8E:88:A1:0E:D3:14:77:D8:4C Authority key identifier: 7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C Certificate issuer: /CN=7e7a20b486821d627bd36095e7a05af9faa1529c Certificate serial: 019AF2401A02C11E44925932B5CE6C004760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft Manifest number: 080E Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: fnogtIaCHWJ702CV56Ba-fqhUpw.crl (hash: 3LzmfBSTd72eGmTYo+ouDSmU74Jz/maG+8IJojOa7zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1a:02:c1:1e:44:92:59:32:b5:ce:6c:00:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e7a20b486821d627bd36095e7a05af9faa1529c Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=bd3519c1f88ffe6f5ddca18e88a10ed31477d84c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ae:1a:b9:3d:0c:d8:af:f5:ca:f3:7c:c7:e0: bf:ce:07:05:25:18:92:b4:04:6d:67:1f:5f:e5:8d: 1a:f8:ba:bb:51:1e:bf:19:67:39:5b:57:5d:ec:b0: 5f:3b:29:2e:aa:e3:49:b5:2c:37:ca:63:a9:d6:fc: a5:4b:40:6b:aa:84:21:a2:ae:9f:2e:2b:fe:17:25: 58:6a:6c:8f:93:7d:51:6b:49:af:cc:f0:96:df:e3: 39:67:da:b1:43:64:5e:5f:c3:9a:a7:60:44:18:dc: 17:bf:9f:17:eb:ed:e9:ae:30:93:cc:70:5b:9e:4e: 71:b6:8f:22:e8:6b:37:61:f8:3e:95:7b:7c:e5:8f: 74:17:9c:a6:ec:3a:e9:12:8d:c5:50:e4:23:91:9f: 40:26:11:6e:22:9b:a7:60:73:4c:fb:65:a7:cb:cf: e0:fa:bb:3b:88:90:9b:be:cc:09:a7:32:75:7b:61: 5d:a4:33:78:7f:1e:b0:25:86:49:b5:af:c5:ef:57: e8:cf:88:46:16:42:d7:02:cd:cd:22:62:62:a0:6d: 41:ec:78:9d:f9:d0:e7:e1:03:67:09:32:33:ce:33: 2c:50:a4:b6:4a:b4:d6:ac:67:fd:d2:58:88:e8:19: 1d:11:37:e6:07:60:4e:ff:1b:04:16:4f:01:54:6f: b1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:35:19:C1:F8:8F:FE:6F:5D:DC:A1:8E:88:A1:0E:D3:14:77:D8:4C X509v3 Authority Key Identifier: keyid:7E:7A:20:B4:86:82:1D:62:7B:D3:60:95:E7:A0:5A:F9:FA:A1:52:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fnogtIaCHWJ702CV56Ba-fqhUpw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e384e9-0e7c-44d1-9ce5-ba75f475fc3e/1/fnogtIaCHWJ702CV56Ba-fqhUpw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a7:80:c6:2c:36:70:85:30:c0:ce:4c:96:24:d8:f1:5a:a1: e9:64:62:b0:ff:1c:64:62:01:5a:08:38:b4:a3:14:c7:e6:33: db:a6:9b:21:1c:09:e5:72:87:50:f8:a7:b1:18:13:9b:77:d9: 60:72:9f:0d:02:2a:e1:88:d8:31:76:fd:ee:59:48:25:79:ce: b6:73:20:f3:a0:29:1f:5c:d5:ad:a3:ef:2d:52:b4:36:37:b4: e8:9f:5b:13:c6:fa:df:b9:a3:e7:a1:44:23:9e:17:e3:95:02: c9:ab:66:30:b5:07:b0:b4:5f:9a:af:06:1c:b1:0d:cb:ea:25: 0d:12:67:a1:20:be:e0:af:42:ef:99:d1:37:da:d2:b3:56:7c: 59:c8:83:4b:14:d6:9b:08:34:af:88:a0:f3:33:25:19:ca:5d: c5:48:fa:05:f7:4c:84:b4:54:a5:cf:b5:a9:e3:33:08:8e:4e: 30:ad:f6:16:fd:ca:cc:41:73:d0:71:aa:e8:e6:0c:e5:63:ae: 7a:2a:7a:b8:0c:bb:80:89:8f:32:f8:35:82:d1:a2:21:04:67: 6d:1f:80:19:7d:91:de:52:17:15:5e:a7:07:37:84:0b:95:34: 0c:95:69:93:9d:ca:d3:84:11:bf:3f:d6:6e:19:c3:c6:4f:b9: 6e:7e:5a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBoCwR5Eklkytc5sAEdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlN2EyMGI0ODY4MjFkNjI3YmQzNjA5NWU3YTA1YWY5ZmFh MTUyOWMwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhiZDM1MTljMWY4OGZmZTZmNWRkY2ExOGU4OGExMGVkMzE0NzdkODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K4auT0M2K/1yvN8x+C/zgcFJRiS tARtZx9f5Y0a+Lq7UR6/GWc5W1dd7LBfOykuquNJtSw3ymOp1vylS0BrqoQhoq6f Liv+FyVYamyPk31Ra0mvzPCW3+M5Z9qxQ2ReX8Oap2BEGNwXv58X6+3prjCTzHBb nk5xto8i6Gs3Yfg+lXt85Y90F5ym7DrpEo3FUOQjkZ9AJhFuIpunYHNM+2Wny8/g +rs7iJCbvswJpzJ1e2FdpDN4fx6wJYZJta/F71foz4hGFkLXAs3NImJioG1B7Hid +dDn4QNnCTIzzjMsUKS2SrTWrGf90liI6BkdETfmB2BO/xsEFk8BVG+xDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL01GcH4j/5vXdyhjoihDtMUd9hMMB8GA1UdIwQY MBaAFH56ILSGgh1ie9NgleegWvn6oVKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUt YmE3NWY0NzVmYzNlLzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lMzg0ZTktMGU3Yy00NGQxLTljZTUtYmE3NWY0NzVmYzNl LzEvZm5vZ3RJYUNIV0o3MDJDVjU2QmEtZnFoVXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKeAxiw2 cIUwwM5MliTY8Vqh6WRisP8cZGIBWgg4tKMUx+Yz26abIRwJ5XKHUPinsRgTm3fZ YHKfDQIq4YjYMXb97llIJXnOtnMg86ApH1zVraPvLVK0Nje06J9bE8b637mj56FE I54X45UCyatmMLUHsLRfmq8GHLENy+olDRJnoSC+4K9C75nRN9rSs1Z8WciDSxTW mwg0r4ig8zMlGcpdxUj6BfdMhLRUpc+1qeMzCI5OMK32Fv3KzEFz0HGq6OYM5WOu eip6uAy7gImPMvg1gtGiIQRnbR+AGX2R3lIXFV6nBzeEC5U0DJVpk53K04QRvz/W bhnDxk+5bn5afA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:13 2025 by rpki-client