This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft File: fciRFoK8XKcc7OHv46wTW_21ndY.mft (raw, json) Hash identifier: 19yoGTCAkPAyHva7PW02wDXNtcbqLneo5wH/uR4uulw= Subject key identifier: 37:A3:F9:67:EB:3B:F0:E6:B5:62:50:64:A2:3F:A5:DF:77:98:98:E1 Authority key identifier: 7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 Certificate issuer: /CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Certificate serial: 019AF389113F2E091A4F09B441DC83F2294D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft Manifest number: 1266 Signing time: Sat 06 Dec 2025 12:00:37 +0000 Manifest this update: Sat 06 Dec 2025 12:00:37 +0000 Manifest next update: Sun 07 Dec 2025 12:00:37 +0000 Files and hashes: 1: 1C7VKc2u55exTPgbJjVVBkVOjI0.roa (hash: KRmVo74m9sWKSF23ay7PgVm1woGp8Zi9hAMJIltDmzQ=) 2: 89VDXzZ_2U543z47EHsX9vI7wvM.roa (hash: n04qxgmbLydbIkFMhKcNu86o1ZcGuCf69Uot3/FJo18=) 3: NFCSs01oWicTZXFure0N-PnCCWU.roa (hash: IkEQYNHCh8tUXj0EFqiGDLC3qEKoo3Zp0TKOGNH6Vmc=) 4: StBmHSx-w-_okioInyoONk2sjLg.roa (hash: knizJ5Gckrod+kfPvKDkALhiu4VWJTPtSPrk3JWpWfY=) 5: fciRFoK8XKcc7OHv46wTW_21ndY.crl (hash: nHFsPWgmAq2L5SjKix8ubaEXJnwN953pTGSNCpDlX5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:11:3f:2e:09:1a:4f:09:b4:41:dc:83:f2:29:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc8911682bc5ca71cece1efe3ac135bfdb59dd6 Validity Not Before: Dec 6 12:00:37 2025 GMT Not After : Dec 7 12:00:37 2025 GMT Subject: CN=37a3f967eb3bf0e6b5625064a23fa5df779898e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a5:a8:19:c1:ca:43:f9:5a:b7:3a:0c:f6:13: 5a:55:22:48:9d:77:2a:dc:2d:a4:5c:94:a9:66:d7: e8:5a:6c:ea:60:d8:19:2c:34:a0:89:28:fc:01:2e: d3:2b:59:74:b6:6f:fa:58:a9:a2:43:ee:6e:33:a6: b5:f1:83:f6:cb:ed:d3:80:c0:79:ba:17:96:ec:e6: 77:8e:1c:bd:d0:a2:bf:46:1a:70:aa:1a:65:8a:32: a3:35:21:d4:6e:c8:be:aa:c1:78:4c:5f:11:36:8e: 5c:72:b0:a1:26:4c:94:19:c3:a1:47:50:ab:ae:98: 82:1a:92:69:48:60:08:d6:c5:5a:cb:cd:9d:96:b3: 24:32:df:7c:2b:02:03:52:16:bb:37:d3:6c:5f:df: 65:43:66:ea:1c:3f:26:97:5e:55:99:c3:31:c2:b0: 30:b6:30:14:36:99:56:73:89:bb:fd:69:40:4c:47: d5:00:1a:6f:ac:54:4c:f2:8d:e8:cb:af:03:96:b2: 89:a1:ad:85:1b:f6:f2:08:88:a5:71:33:64:74:ce: f3:3c:02:4a:11:8b:92:33:57:f0:fa:0b:ea:a5:f9: b2:cc:cb:05:5c:b9:39:a4:eb:1f:08:69:25:bd:34: 96:a4:e8:26:41:29:78:53:2a:16:eb:71:a8:ff:1a: 3c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A3:F9:67:EB:3B:F0:E6:B5:62:50:64:A2:3F:A5:DF:77:98:98:E1 X509v3 Authority Key Identifier: keyid:7D:C8:91:16:82:BC:5C:A7:1C:EC:E1:EF:E3:AC:13:5B:FD:B5:9D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fciRFoK8XKcc7OHv46wTW_21ndY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0831bf-118c-4ece-934d-75295251b1e8/1/fciRFoK8XKcc7OHv46wTW_21ndY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fe:01:8a:24:39:5b:64:f8:74:4d:e4:89:d4:6a:55:f3:38: 57:9d:2c:a5:71:98:67:4e:6b:82:58:8e:e1:54:96:3c:08:33: 47:5c:70:0d:30:19:78:4b:55:41:bb:83:ef:04:85:26:62:f4: 8a:b8:be:61:e0:60:75:39:e2:ed:12:e1:5f:62:cf:a8:1f:cb: 55:45:23:90:92:13:05:ed:6e:a3:69:97:ff:a5:6d:89:e1:83: 26:da:a1:2c:c0:0f:83:3b:08:b4:91:e1:5f:44:a4:ff:e3:83: 64:bd:e7:e7:91:23:b3:dc:ec:29:4e:36:2d:34:44:da:4f:c5: 35:16:c1:29:ee:b0:af:8c:d9:e5:8f:12:bc:fa:bc:bb:a4:c4: 0d:9a:9c:28:6f:55:46:52:88:b5:e9:67:63:39:32:8a:38:9b: 47:e0:2c:8f:b1:3b:5f:c5:30:78:4f:0d:13:23:cb:e1:d8:f6: e3:62:9f:c1:93:75:3a:16:53:b1:73:23:d9:31:03:fa:ab:8d: 16:dc:6e:dc:0f:2d:75:52:47:bd:e8:9b:6d:ac:ee:a0:9c:eb: 61:98:6a:63:86:b4:6e:1e:50:ff:7b:43:fc:73:f1:48:49:8d: 70:a2:27:e3:43:25:26:62:56:21:c1:c1:df:ae:8a:fa:de:c0: b7:06:93:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRE/LgkaTwm0QdyD8ilNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzg5MTE2ODJiYzVjYTcxY2VjZTFlZmUzYWMxMzViZmRi NTlkZDYwHhcNMjUxMjA2MTIwMDM3WhcNMjUxMjA3MTIwMDM3WjAzMTEwLwYDVQQD EygzN2EzZjk2N2ViM2JmMGU2YjU2MjUwNjRhMjNmYTVkZjc3OTg5OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaWoGcHKQ/latzoM9hNaVSJInXcq 3C2kXJSpZtfoWmzqYNgZLDSgiSj8AS7TK1l0tm/6WKmiQ+5uM6a18YP2y+3TgMB5 uheW7OZ3jhy90KK/RhpwqhplijKjNSHUbsi+qsF4TF8RNo5ccrChJkyUGcOhR1Cr rpiCGpJpSGAI1sVay82dlrMkMt98KwIDUha7N9NsX99lQ2bqHD8ml15VmcMxwrAw tjAUNplWc4m7/WlATEfVABpvrFRM8o3oy68DlrKJoa2FG/byCIilcTNkdM7zPAJK EYuSM1fw+gvqpfmyzMsFXLk5pOsfCGklvTSWpOgmQSl4UyoW63Go/xo8FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDej+WfrO/DmtWJQZKI/pd93mJjhMB8GA1UdIwQY MBaAFH3IkRaCvFynHOzh7+OsE1v9tZ3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQt NzUyOTUyNTFiMWU4LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wODMxYmYtMTE4Yy00ZWNlLTkzNGQtNzUyOTUyNTFiMWU4 LzEvZmNpUkZvSzhYS2NjN09IdjQ2d1RXXzIxbmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/4BiiQ5 W2T4dE3kidRqVfM4V50spXGYZ05rgliO4VSWPAgzR1xwDTAZeEtVQbuD7wSFJmL0 iri+YeBgdTni7RLhX2LPqB/LVUUjkJITBe1uo2mX/6VtieGDJtqhLMAPgzsItJHh X0Sk/+ODZL3n55Ejs9zsKU42LTRE2k/FNRbBKe6wr4zZ5Y8SvPq8u6TEDZqcKG9V RlKItelnYzkyijibR+Asj7E7X8UweE8NEyPL4dj242KfwZN1OhZTsXMj2TED+quN Ftxu3A8tdVJHveibbazuoJzrYZhqY4a0bh5Q/3tD/HPxSEmNcKIn40MlJmJWIcHB 366K+t7AtwaTbw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:48:55 2025 by rpki-client