This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json) Hash identifier: IrBzM0npKsYHodcbeolXlChBz9KuqAwkGEtsdTUs6tk= Subject key identifier: AA:57:2D:97:88:D5:F9:18:29:3C:91:85:21:42:D4:70:BD:99:0F:79 Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6 Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6 Certificate serial: 019AF12E6A580741F42D7F8FDA921E92DFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft Manifest number: 0EC1 Signing time: Sat 06 Dec 2025 01:02:22 +0000 Manifest this update: Sat 06 Dec 2025 01:02:22 +0000 Manifest next update: Sun 07 Dec 2025 01:02:22 +0000 Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: c3xKve7YPYIyxgRfGy11o4sY5oGKQFHHowUJ1jWSS+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:6a:58:07:41:f4:2d:7f:8f:da:92:1e:92:df:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6 Validity Not Before: Dec 6 01:02:22 2025 GMT Not After : Dec 7 01:02:22 2025 GMT Subject: CN=aa572d9788d5f918293c91852142d470bd990f79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4b:84:30:2e:ca:5b:26:0a:c1:30:e7:90:6f: e5:ab:d1:20:c6:5c:78:5b:0e:cd:52:7e:f8:a6:8d: fc:09:72:f4:9c:42:4d:15:68:7e:03:2b:16:43:1d: 2b:96:c3:21:db:10:a8:ed:c0:f8:2a:8a:11:f4:98: 4f:43:cb:d3:0d:d8:6a:93:4d:fb:90:85:5d:02:f0: 61:d5:ff:9d:e1:22:2e:70:62:f9:82:cc:96:c1:9e: 22:b8:58:92:f3:d1:6f:cb:1d:4c:bf:c0:6b:56:93: e8:49:b6:c9:63:9a:d3:29:91:4c:2f:da:84:86:5a: c7:02:86:30:5e:96:04:4c:0e:eb:63:10:6f:fe:24: 78:23:8e:78:3d:f5:f5:ae:9e:90:1a:7e:35:18:3e: 0b:f7:95:18:86:94:0f:c4:48:40:63:de:34:cf:21: 36:6e:f3:e8:7c:c4:d1:73:cb:6f:cc:e5:83:f8:20: b7:2c:02:89:12:5d:e5:4e:de:38:a0:f8:d0:de:8b: b2:ef:78:85:ab:44:5a:74:27:6e:fe:12:cc:7f:d0: e5:40:f4:d3:64:79:d6:58:95:b5:b0:09:41:c1:05: 7d:33:ba:1b:1e:5c:ad:cb:5f:cb:ed:d6:76:c7:44: 39:60:8e:71:0d:79:91:12:cc:89:92:ad:4a:3a:f4: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:57:2D:97:88:D5:F9:18:29:3C:91:85:21:42:D4:70:BD:99:0F:79 X509v3 Authority Key Identifier: keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9e:6b:1a:8e:a0:38:99:e1:9c:74:01:78:5b:24:c9:35:94: c9:3a:6c:6a:6b:3b:9f:92:37:00:de:2d:70:96:0e:4d:da:79: ef:85:7a:88:b1:5a:be:6b:8a:ad:d0:31:3e:9f:3f:77:d3:bb: 78:10:3d:b0:9a:36:c6:e9:a2:a5:fa:8e:bf:a8:fa:68:bc:95: 9e:64:3e:df:99:52:aa:27:f9:f2:60:bf:0e:24:ef:0c:de:4d: ec:db:a2:e0:36:26:d3:f9:06:41:fd:da:6f:19:f4:02:3d:16: c7:de:70:9b:7e:56:b5:cf:37:c8:93:37:36:a6:94:91:da:05: e7:13:8b:6c:56:6c:06:50:47:54:d4:d2:50:1c:f9:bb:43:4e: 4a:31:c5:73:6d:74:c2:fa:bc:a6:fe:59:2e:3e:50:ad:18:b2: 2b:20:3d:99:0f:20:c4:e8:76:c4:98:24:4e:09:e5:c6:2d:8e: 3a:a0:90:11:43:97:09:52:49:f4:d0:4d:84:ed:25:fe:01:78: d1:22:8c:06:79:c8:2e:b9:40:12:22:d7:39:6c:1b:90:76:d2: 00:18:c6:55:04:5c:12:b2:b6:54:19:37:b1:70:04:84:86:b2: 2f:c4:2e:a1:76:78:5c:15:f2:66:5e:e9:71:e3:21:30:d8:d6: e4:e1:57:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmpYB0H0LX+P2pIekt/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzgyZTQ1ZTdlOGU5MjljNWMzZjk2NDQxYTdlNjRjNTQx ZjgyZTYwHhcNMjUxMjA2MDEwMjIyWhcNMjUxMjA3MDEwMjIyWjAzMTEwLwYDVQQD EyhhYTU3MmQ5Nzg4ZDVmOTE4MjkzYzkxODUyMTQyZDQ3MGJkOTkwZjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEuEMC7KWyYKwTDnkG/lq9Egxlx4 Ww7NUn74po38CXL0nEJNFWh+AysWQx0rlsMh2xCo7cD4KooR9JhPQ8vTDdhqk037 kIVdAvBh1f+d4SIucGL5gsyWwZ4iuFiS89Fvyx1Mv8BrVpPoSbbJY5rTKZFML9qE hlrHAoYwXpYETA7rYxBv/iR4I454PfX1rp6QGn41GD4L95UYhpQPxEhAY940zyE2 bvPofMTRc8tvzOWD+CC3LAKJEl3lTt44oPjQ3ouy73iFq0RadCdu/hLMf9DlQPTT ZHnWWJW1sAlBwQV9M7obHlyty1/L7dZ2x0Q5YI5xDXmREsyJkq1KOvSjNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpXLZeI1fkYKTyRhSFC1HC9mQ95MB8GA1UdIwQY MBaAFBZ4LkXn6OkpxcP5ZEGn5kxUH4LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgt N2Q1N2Y1ODM2MGEwLzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9lZjAxYTUtNTg2Ny00MTlmLTgzYzgtN2Q1N2Y1ODM2MGEw LzEvRm5ndVJlZm82U25Gd19sa1FhZm1URlFmZ3VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJ5rGo6g OJnhnHQBeFskyTWUyTpsams7n5I3AN4tcJYOTdp574V6iLFavmuKrdAxPp8/d9O7 eBA9sJo2xumipfqOv6j6aLyVnmQ+35lSqif58mC/DiTvDN5N7Nui4DYm0/kGQf3a bxn0Aj0Wx95wm35Wtc83yJM3NqaUkdoF5xOLbFZsBlBHVNTSUBz5u0NOSjHFc210 wvq8pv5ZLj5QrRiyKyA9mQ8gxOh2xJgkTgnlxi2OOqCQEUOXCVJJ9NBNhO0l/gF4 0SKMBnnILrlAEiLXOWwbkHbSABjGVQRcErK2VBk3sXAEhIayL8QuoXZ4XBXyZl7p ceMhMNjW5OFX7w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:45 2025 by rpki-client