This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json) Hash identifier: 4p6WmT6tNsNPZxG4qEUkiQqDSRO+UyGvdrSjqKVbCsE= Subject key identifier: 1B:72:4C:1C:08:67:60:80:8B:2F:3A:B0:8F:0D:D1:FC:78:15:C5:D8 Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90 Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90 Certificate serial: 019AF277396699F81BB64DD69F184018A1C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft Manifest number: 0126 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: iJgVhf7xtm1l82qUpPP3pf8DDDBOP1jAJREv24yWHLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:39:66:99:f8:1b:b6:4d:d6:9f:18:40:18:a1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1422879087dd292680263bc394e31c8759722d90 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=1b724c1c086760808b2f3ab08f0dd1fc7815c5d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:c4:a1:89:65:30:3e:28:d7:5f:23:30:24: d3:71:a8:7e:29:21:ed:8f:bd:91:1f:ce:5a:69:9e: 12:16:1e:40:99:40:23:fd:ef:a0:5c:d3:4c:04:9c: e7:1d:68:a2:71:dc:76:ae:72:0e:b3:d3:cf:c5:68: 28:d6:4a:3a:c7:66:64:15:73:0a:1a:b3:cd:e8:c5: b6:7e:7f:fb:ee:f2:93:48:7d:cf:15:e5:84:72:7d: 46:2b:d1:77:d6:c3:90:f9:15:08:00:92:23:3c:04: 87:55:76:aa:2f:84:69:14:39:a1:34:3e:0e:41:0e: e7:b5:86:7b:9e:d7:37:9d:5e:92:5a:98:ef:28:94: a7:9d:81:72:d9:56:a6:ae:e6:0e:d4:dd:c2:7b:a9: dd:f0:ef:9f:f0:33:88:25:0b:6d:81:b4:f5:1c:e2: bb:eb:67:80:a2:28:e7:f5:86:87:dc:59:c4:a5:c2: f7:a1:3b:25:bc:34:e5:d8:d8:ec:1e:4c:50:e4:e9: 63:ab:2b:35:2e:2f:87:ae:87:5b:5f:6f:09:4c:dc: de:43:87:e1:e4:04:89:7e:ca:b3:23:a7:2e:ac:22: 4d:5b:7e:6b:ac:47:21:ee:20:16:96:8d:25:e3:fa: c0:13:80:44:74:1d:0f:bd:83:bd:cc:7b:c5:3b:12: 3b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:4C:1C:08:67:60:80:8B:2F:3A:B0:8F:0D:D1:FC:78:15:C5:D8 X509v3 Authority Key Identifier: keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:38:4e:82:b5:95:ee:bf:26:88:91:a6:e2:47:c6:86:87:e6: 2b:81:75:f4:46:43:0b:3f:db:7f:9c:aa:1e:b8:b6:fc:bb:4c: 36:5d:16:95:69:a0:ad:10:79:7f:fa:28:80:e8:99:e9:35:8c: ad:7a:c3:57:2c:78:33:83:a0:49:73:36:25:ad:60:1d:dd:94: 04:af:7e:7b:6c:7b:ff:de:7c:3b:ec:20:b5:78:75:d8:66:16: 51:48:e8:5d:ea:2e:a2:0b:d7:80:92:e9:9f:21:23:7d:d0:b4: 7d:f8:50:1b:e3:08:2b:2d:0e:a1:e7:1a:05:ae:f4:19:17:d3: 03:2f:72:55:ad:71:09:fa:e5:f0:f7:cf:3d:d9:c9:8f:99:05: 5a:cf:f3:0c:38:5d:ad:80:08:90:4a:d2:fb:82:c3:c9:45:f5: 2d:92:10:bc:82:ae:af:1a:61:f3:da:e4:7d:71:2c:73:bb:e2: 17:06:9c:08:47:32:96:03:53:ef:a4:1a:dd:ae:d4:06:38:15: 14:5c:de:41:ef:72:bb:3d:d0:66:9c:a9:04:96:77:ae:06:e5: bc:63:6a:dd:72:bc:78:3a:bc:23:47:48:1f:b1:d1:25:e3:e1: 2a:84:91:18:56:27:69:83:76:90:bb:3e:a4:1a:cb:c5:4d:bd: ca:ca:94:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzlmmfgbtk3WnxhAGKHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MjI4NzkwODdkZDI5MjY4MDI2M2JjMzk0ZTMxYzg3NTk3 MjJkOTAwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EygxYjcyNGMxYzA4Njc2MDgwOGIyZjNhYjA4ZjBkZDFmYzc4MTVjNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTDEoYllMD4o118jMCTTcah+KSHt j72RH85aaZ4SFh5AmUAj/e+gXNNMBJznHWiicdx2rnIOs9PPxWgo1ko6x2ZkFXMK GrPN6MW2fn/77vKTSH3PFeWEcn1GK9F31sOQ+RUIAJIjPASHVXaqL4RpFDmhND4O QQ7ntYZ7ntc3nV6SWpjvKJSnnYFy2VamruYO1N3Ce6nd8O+f8DOIJQttgbT1HOK7 62eAoijn9YaH3FnEpcL3oTslvDTl2NjsHkxQ5Oljqys1Li+HrodbX28JTNzeQ4fh 5ASJfsqzI6curCJNW35rrEch7iAWlo0l4/rAE4BEdB0PvYO9zHvFOxI7bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtyTBwIZ2CAiy86sI8N0fx4FcXYMB8GA1UdIwQY MBaAFBQih5CH3SkmgCY7w5TjHIdZci2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUt NzU1M2EwMmM0Mjk3LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUtNzU1M2EwMmM0Mjk3 LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjhOgrWV 7r8miJGm4kfGhofmK4F19EZDCz/bf5yqHri2/LtMNl0WlWmgrRB5f/oogOiZ6TWM rXrDVyx4M4OgSXM2Ja1gHd2UBK9+e2x7/958O+wgtXh12GYWUUjoXeouogvXgJLp nyEjfdC0ffhQG+MIKy0OoecaBa70GRfTAy9yVa1xCfrl8PfPPdnJj5kFWs/zDDhd rYAIkErS+4LDyUX1LZIQvIKurxph89rkfXEsc7viFwacCEcylgNT76Qa3a7UBjgV FFzeQe9yuz3QZpypBJZ3rgblvGNq3XK8eDq8I0dIH7HRJePhKoSRGFYnaYN2kLs+ pBrLxU29ysqUhw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:56 2025 by rpki-client