This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft File: FczgYdJAjZqPayuUFi0fdPrD3Kw.mft (raw, json) Hash identifier: pgTl+D1rlQ0yQtXlhZCqMkVyKhL6wYSIzXGFyDdZdzc= Subject key identifier: 51:48:C1:09:D9:B2:D3:2C:DF:4D:0E:60:37:0D:FD:E8:D3:57:3C:61 Authority key identifier: 15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC Certificate issuer: /CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Certificate serial: 019AF2770961D73A945524AD5364E2ABEF27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft Manifest number: 1085 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: AHAoAS0NTz8rAfdAi1-FKZQiZzo.roa (hash: UPpJLytuKjP0PEtk9/ACh8gURBOrfTZUj6sBll9GGNE=) 2: FczgYdJAjZqPayuUFi0fdPrD3Kw.crl (hash: YHyTFgqmbdmXMOHqVt5SXgRnSWXUzHQMkvzlRfm3bkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:09:61:d7:3a:94:55:24:ad:53:64:e2:ab:ef:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cce061d2408d9a8f6b2b94162d1f74fac3dcac Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=5148c109d9b2d32cdf4d0e60370dfde8d3573c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:41:46:36:75:24:fd:7f:07:8a:ce:c0:da: c1:ca:8a:f6:ef:96:52:9c:1e:a9:85:1c:04:c0:3d: 16:83:e2:a2:33:79:da:14:6d:43:57:75:e2:5e:d4: e3:e2:bb:d8:47:c7:66:d6:56:f6:28:da:8c:ce:a7: 70:20:9a:0c:fa:43:5e:44:2b:b8:1b:96:ed:a1:1d: ca:14:a6:30:bb:a3:fd:f2:8e:b2:10:47:d6:14:de: a1:4a:d6:50:5a:5c:e2:9c:18:b2:83:b8:b7:40:a7: ec:15:f8:45:d5:5a:f9:21:81:70:33:67:c9:b1:25: 32:d0:06:c4:f0:d0:2e:1c:73:2d:a9:da:95:09:bc: 3b:30:c5:80:86:d7:bb:24:dc:48:f6:65:e6:b8:04: 2a:39:6f:e7:c0:be:c1:37:57:3a:4c:d2:e0:92:39: c0:d7:a3:56:25:9b:d4:c7:00:77:95:56:40:9c:55: 1d:f3:0d:d4:3d:9d:ca:42:e9:fa:7e:0b:04:74:bb: 54:54:45:92:91:ba:b7:84:24:bc:a7:bb:89:7b:9e: 91:7f:63:f3:a4:a5:f8:a7:b1:b3:2c:29:8a:62:13: 37:e5:17:04:35:07:c9:9b:d2:1c:9f:27:a2:e5:58: 08:a0:39:2c:26:44:a8:65:6a:d9:b6:6b:f4:4e:34: 19:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:C1:09:D9:B2:D3:2C:DF:4D:0E:60:37:0D:FD:E8:D3:57:3C:61 X509v3 Authority Key Identifier: keyid:15:CC:E0:61:D2:40:8D:9A:8F:6B:2B:94:16:2D:1F:74:FA:C3:DC:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FczgYdJAjZqPayuUFi0fdPrD3Kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/9af87c-e272-4f84-9143-6682f7827df0/1/FczgYdJAjZqPayuUFi0fdPrD3Kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d4:28:58:e8:a4:af:e7:18:87:2a:cb:06:57:43:3a:3d:94: b1:14:29:63:3c:6f:f4:61:1c:4c:d3:bc:ba:1e:8d:29:33:8b: 4f:69:02:51:be:c1:a2:46:05:2d:03:27:21:88:96:ab:26:3c: 7f:9c:3c:ed:ad:56:89:66:56:5b:b8:52:29:71:b6:7c:36:c4: 78:65:8a:6b:8b:1c:8d:b3:c6:53:0d:9e:b1:20:62:3e:fa:43: d8:d2:bb:1d:88:a6:07:0c:56:00:81:7f:9f:d7:8a:bd:8e:3f: 14:3d:e6:86:b4:d0:79:57:d9:75:18:7a:3d:74:7e:fd:75:cd: 8b:f4:60:f2:69:41:fa:23:74:0c:27:0c:ba:25:54:01:b4:db: 3c:f1:81:36:0a:b1:e7:2f:4d:79:87:d7:06:f2:f2:4f:7d:4d: 81:91:1d:99:8c:4a:b0:78:bb:91:29:64:4c:84:be:94:44:34: c8:46:21:9b:6c:fe:9b:1f:47:c9:d7:eb:13:86:e6:10:10:65: 1d:9d:3f:38:35:f0:38:07:fc:b8:21:e9:85:f3:c1:91:67:b3: 43:ef:60:14:4a:0f:55:4c:79:ea:ca:75:02:17:0e:59:54:2c: 13:a4:5f:81:e8:1f:41:ab:81:8c:e5:c6:6d:c4:3f:fb:89:c1: 85:c3:8a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwlh1zqUVSStU2Tiq+8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2NlMDYxZDI0MDhkOWE4ZjZiMmI5NDE2MmQxZjc0ZmFj M2RjYWMwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD Eyg1MTQ4YzEwOWQ5YjJkMzJjZGY0ZDBlNjAzNzBkZmRlOGQzNTczYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmytBRjZ1JP1/B4rOwNrByor275ZS nB6phRwEwD0Wg+KiM3naFG1DV3XiXtTj4rvYR8dm1lb2KNqMzqdwIJoM+kNeRCu4 G5btoR3KFKYwu6P98o6yEEfWFN6hStZQWlzinBiyg7i3QKfsFfhF1Vr5IYFwM2fJ sSUy0AbE8NAuHHMtqdqVCbw7MMWAhte7JNxI9mXmuAQqOW/nwL7BN1c6TNLgkjnA 16NWJZvUxwB3lVZAnFUd8w3UPZ3KQun6fgsEdLtUVEWSkbq3hCS8p7uJe56Rf2Pz pKX4p7GzLCmKYhM35RcENQfJm9Icnyei5VgIoDksJkSoZWrZtmv0TjQZhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFIwQnZstMs300OYDcN/ejTVzxhMB8GA1UdIwQY MBaAFBXM4GHSQI2aj2srlBYtH3T6w9ysMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMt NjY4MmY3ODI3ZGYwLzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS85YWY4N2MtZTI3Mi00Zjg0LTkxNDMtNjY4MmY3ODI3ZGYw LzEvRmN6Z1lkSkFqWnFQYXl1VUZpMGZkUHJEM0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9QoWOik r+cYhyrLBldDOj2UsRQpYzxv9GEcTNO8uh6NKTOLT2kCUb7BokYFLQMnIYiWqyY8 f5w87a1WiWZWW7hSKXG2fDbEeGWKa4scjbPGUw2esSBiPvpD2NK7HYimBwxWAIF/ n9eKvY4/FD3mhrTQeVfZdRh6PXR+/XXNi/Rg8mlB+iN0DCcMuiVUAbTbPPGBNgqx 5y9NeYfXBvLyT31NgZEdmYxKsHi7kSlkTIS+lEQ0yEYhm2z+mx9HydfrE4bmEBBl HZ0/ODXwOAf8uCHphfPBkWezQ+9gFEoPVUx56sp1AhcOWVQsE6RfgegfQauBjOXG bcQ/+4nBhcOKQw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:12 2025 by rpki-client