This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json) Hash identifier: VVUBMyvHZMkZns16uqWYodElWiVu7WNZRgwZ+CD3FTE= Subject key identifier: 95:C5:42:FC:8D:E6:36:8D:84:A1:DD:C9:D8:71:A8:15:DA:28:B3:D7 Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85 Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785 Certificate serial: 019AF49C69BAF7754EF09ADCC9CC7C45BEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft Manifest number: 0882 Signing time: Sat 06 Dec 2025 17:01:22 +0000 Manifest this update: Sat 06 Dec 2025 17:01:22 +0000 Manifest next update: Sun 07 Dec 2025 17:01:22 +0000 Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: nvVSz2z4l3dmFDYTrdrTSZ3OWr4GWw66FPeGVjYNzFI=) 2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:69:ba:f7:75:4e:f0:9a:dc:c9:cc:7c:45:be:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d15539c01121066eafe95be3401dfa44407785 Validity Not Before: Dec 6 17:01:22 2025 GMT Not After : Dec 7 17:01:22 2025 GMT Subject: CN=95c542fc8de6368d84a1ddc9d871a815da28b3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:19:5f:d2:a4:30:39:ba:d8:4f:7c:ed:5f: da:e4:d5:e4:6b:ec:25:82:1c:59:81:a9:05:77:15: 1e:9c:a6:1c:19:6a:c7:8f:d2:28:69:94:13:bc:09: 9d:e8:71:a4:90:49:bf:7e:7a:f0:aa:cc:e0:06:0a: cb:4c:ad:5a:04:db:2e:29:d9:3f:4d:1e:d2:55:d2: a0:a8:aa:a9:8c:9d:13:31:50:60:56:3a:f3:e7:77: d4:72:7b:ad:72:a7:61:fb:86:41:74:6d:e1:54:9f: 68:b5:f3:06:38:94:e8:7c:1e:af:59:51:8a:da:d6: 9a:78:a2:6b:a0:ff:2e:b9:cd:32:69:75:52:9a:53: bb:fd:89:65:50:fb:00:dc:b0:b8:c7:e4:d2:fa:cc: b2:d9:81:bc:24:1b:1c:61:77:0e:9f:d1:6f:74:6c: 0c:ee:bc:a5:2b:4b:0e:74:03:1e:38:f5:de:66:63: 42:4f:1c:88:0d:4f:eb:41:6a:71:e8:d6:d4:52:df: ef:7e:44:4d:70:14:ee:4d:41:9d:28:f3:e5:4c:cb: 84:e4:7d:f3:93:c6:45:e6:a6:02:1f:a3:99:5f:c1: 27:d0:de:cc:b9:62:d7:ad:b1:2d:ce:a8:4a:ac:48: 32:a0:51:d2:04:be:77:9b:00:7a:3c:e0:5a:03:b1: 87:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C5:42:FC:8D:E6:36:8D:84:A1:DD:C9:D8:71:A8:15:DA:28:B3:D7 X509v3 Authority Key Identifier: keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:b2:ef:ee:cf:53:81:4d:bc:6a:53:d1:ba:fc:7c:aa:cd:1c: 8a:c0:d1:69:a2:95:9d:47:42:73:d1:a2:9b:1d:ee:d3:fa:1e: f2:b1:10:9e:fd:79:4c:48:da:02:05:02:8b:00:06:cd:9c:e4: 81:3f:96:32:40:e4:89:fa:83:2f:ce:b9:bc:b1:d9:28:b8:29: 2d:27:cc:14:bb:dc:9c:9c:c8:a7:b8:c5:99:5d:27:44:80:fd: 02:08:a1:98:2d:2f:9c:aa:ee:ed:e2:4f:7a:d7:eb:7b:d4:ae: 02:bc:cf:cd:ab:7b:51:9d:f4:6f:0f:c6:ee:9d:f4:94:da:80: 0f:c8:cc:da:12:33:16:a5:ba:ea:00:b6:e0:85:a5:fb:5b:9f: 7a:27:69:d3:6d:7d:f6:f3:ea:e3:b4:85:c6:c8:39:2c:5a:d7: 23:e4:44:fa:6e:b1:73:0e:6d:82:57:77:c5:17:20:dd:ac:53: 75:8b:75:d5:84:43:4b:f8:d5:43:57:05:77:54:7e:80:f8:41: 69:fc:76:dc:bb:37:c5:cf:f9:e7:12:0c:2a:ac:80:04:13:9c: b4:63:7f:ec:1e:3d:29:03:4d:6a:23:d8:57:93:0a:e2:b5:9f: a9:77:f8:db:ff:59:1e:2e:56:41:59:c6:ad:35:62:97:44:0f: 68:7b:cc:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nGm693VO8Jrcycx8Rb6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDE1NTM5YzAxMTIxMDY2ZWFmZTk1YmUzNDAxZGZhNDQ0 MDc3ODUwHhcNMjUxMjA2MTcwMTIyWhcNMjUxMjA3MTcwMTIyWjAzMTEwLwYDVQQD Eyg5NWM1NDJmYzhkZTYzNjhkODRhMWRkYzlkODcxYTgxNWRhMjhiM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSAZX9KkMDm62E987V/a5NXka+wl ghxZgakFdxUenKYcGWrHj9IoaZQTvAmd6HGkkEm/fnrwqszgBgrLTK1aBNsuKdk/ TR7SVdKgqKqpjJ0TMVBgVjrz53fUcnutcqdh+4ZBdG3hVJ9otfMGOJTofB6vWVGK 2taaeKJroP8uuc0yaXVSmlO7/YllUPsA3LC4x+TS+syy2YG8JBscYXcOn9FvdGwM 7rylK0sOdAMeOPXeZmNCTxyIDU/rQWpx6NbUUt/vfkRNcBTuTUGdKPPlTMuE5H3z k8ZF5qYCH6OZX8En0N7MuWLXrbEtzqhKrEgyoFHSBL53mwB6POBaA7GHQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXFQvyN5jaNhKHdydhxqBXaKLPXMB8GA1UdIwQY MBaAFBbRVTnAESEGbq/pW+NAHfpEQHeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUt ZTg2ZmZmOTNmNDVkLzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUtZTg2ZmZmOTNmNDVk LzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAibLv7s9T gU28alPRuvx8qs0cisDRaaKVnUdCc9Gimx3u0/oe8rEQnv15TEjaAgUCiwAGzZzk gT+WMkDkifqDL865vLHZKLgpLSfMFLvcnJzIp7jFmV0nRID9AgihmC0vnKru7eJP etfre9SuArzPzat7UZ30bw/G7p30lNqAD8jM2hIzFqW66gC24IWl+1ufeidp0219 9vPq47SFxsg5LFrXI+RE+m6xcw5tgld3xRcg3axTdYt11YRDS/jVQ1cFd1R+gPhB afx23Ls3xc/55xIMKqyABBOctGN/7B49KQNNaiPYV5MK4rWfqXf42/9ZHi5WQVnG rTVil0QPaHvMoQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:56 2025 by rpki-client