This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft File: fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json) Hash identifier: QZsQ74nW0p190jjjPMnlVEdtUOQBPVu5kKpisdShPkQ= Subject key identifier: D1:E3:2C:49:5E:3C:E8:37:BB:66:58:44:2A:A0:13:FD:EA:B5:4D:3E Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 Certificate issuer: /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Certificate serial: 019AF23FE85CA935B3926307D439BDF83C1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft Manifest number: 1434 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: /+tNUTYL/gNk64adIBUO1v8gd5itPpNHs6Yhi4TGo7I=) 2: utLJ7YGi1SD6bf2E3cIfMW0icz0.roa (hash: bwpJCF2pXOs/NsitTdh/ToVpeQtbypYmGT2uF/B4Dn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e8:5c:a9:35:b3:92:63:07:d4:39:bd:f8:3c:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=d1e32c495e3ce837bb6658442aa013fdeab54d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4e:a2:31:52:f6:91:9e:87:82:8e:e7:8a:b5: c2:73:2f:e4:fc:74:96:d3:5e:77:7b:42:55:34:4a: e1:de:93:f6:24:67:25:f0:37:e5:5b:c4:c6:92:40: d5:53:8e:d5:01:41:5c:19:8e:1a:e0:08:12:17:9b: 3d:18:98:a5:de:91:d8:4c:4e:80:3b:c1:d1:39:e2: 45:b8:37:85:60:7d:e8:ad:2b:ee:eb:75:15:70:ad: b7:18:62:07:84:db:a4:bd:1d:53:ff:7f:20:01:90: f2:8b:9b:a5:6e:33:1e:8e:a6:e3:96:ff:87:78:32: 41:8f:bd:23:64:a7:19:5a:5c:57:11:bd:1d:5a:c6: 1c:b5:ab:82:37:ee:57:3a:26:d4:0e:97:71:a3:74: 1d:69:c4:ab:b6:57:bc:b8:e2:74:5d:bb:45:ab:5f: a0:1a:fd:3c:44:ab:7d:09:36:76:ca:7d:bd:51:52: 88:d3:49:98:2b:fc:64:80:f3:18:b6:b9:ae:5a:63: 3b:88:52:0a:09:a1:f8:41:03:50:0d:5b:50:c9:92: 99:61:92:e3:b6:8c:c2:e8:5a:19:8a:15:a1:2e:a1: df:c6:e0:8f:89:30:e1:62:18:1a:00:7b:46:3c:b5: c2:23:de:05:f4:4a:5d:d9:8b:90:5e:ee:37:f0:30: fa:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E3:2C:49:5E:3C:E8:37:BB:66:58:44:2A:A0:13:FD:EA:B5:4D:3E X509v3 Authority Key Identifier: keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f5:af:4b:21:4e:08:0e:93:c1:d1:13:42:a8:09:08:7d:00: f1:2c:e1:01:0a:6d:59:02:4c:38:70:2c:d1:2d:88:e9:a2:e8: 65:96:fe:4d:a6:b1:6f:94:87:0d:88:b3:ca:80:92:24:cb:36: d1:c0:cb:67:62:81:88:7f:75:c6:4e:e1:62:b7:a3:e6:76:ab: 2c:fb:ea:1f:14:b0:90:47:a5:a5:9b:62:28:9e:ae:ac:31:da: 9f:fa:0c:d8:6d:be:3c:b9:b7:02:c8:ad:22:a4:0f:ab:0c:09: c0:b1:f0:77:94:f1:61:f7:89:02:3a:4c:7d:22:df:f4:91:00: a2:48:64:23:b8:32:9b:38:d1:01:3b:32:3d:5a:fe:8c:cc:db: a4:f2:fc:4d:b3:7c:69:10:6e:7a:0e:a1:7f:dd:99:ad:ce:de: 05:53:a6:60:91:36:5c:3e:b2:9b:45:05:3d:c7:cb:9d:19:1a: c1:95:28:37:63:b8:1d:f5:bd:d2:c7:89:b4:f1:d1:57:f3:24: 21:e4:a9:ab:45:74:7d:75:d9:07:83:50:73:e3:8d:a0:8e:b8: 01:0f:b1:67:bd:63:4e:ba:fe:cd:32:df:ef:bd:49:04:9b:0c: 7b:10:de:be:62:84:ac:67:f3:af:e1:01:3b:fc:2d:dd:e3:a3: 84:39:a6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+hcqTWzkmMH1Dm9+DwaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZTMyMDhlODE4ZGQ3NGMwZDZiNDNkOTI3ZWEwZDE4OTNi ZWQ2NTAwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhkMWUzMmM0OTVlM2NlODM3YmI2NjU4NDQyYWEwMTNmZGVhYjU0ZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp06iMVL2kZ6Hgo7nirXCcy/k/HSW 0153e0JVNErh3pP2JGcl8DflW8TGkkDVU47VAUFcGY4a4AgSF5s9GJil3pHYTE6A O8HROeJFuDeFYH3orSvu63UVcK23GGIHhNukvR1T/38gAZDyi5ulbjMejqbjlv+H eDJBj70jZKcZWlxXEb0dWsYctauCN+5XOibUDpdxo3QdacSrtle8uOJ0XbtFq1+g Gv08RKt9CTZ2yn29UVKI00mYK/xkgPMYtrmuWmM7iFIKCaH4QQNQDVtQyZKZYZLj tozC6FoZihWhLqHfxuCPiTDhYhgaAHtGPLXCI94F9Epd2YuQXu438DD6AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHjLElePOg3u2ZYRCqgE/3qtU0+MB8GA1UdIwQY MBaAFH7jII6BjddMDWtD2SfqDRiTvtZQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUt ZmY0YTk5NzgzYWI0LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hNGE4N2EtNGY3ZC00MGJkLWIxZjUtZmY0YTk5NzgzYWI0 LzEvZnVNZ2pvR04xMHdOYTBQWkotb05HSk8tMWxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfWvSyFO CA6TwdETQqgJCH0A8SzhAQptWQJMOHAs0S2I6aLoZZb+Taaxb5SHDYizyoCSJMs2 0cDLZ2KBiH91xk7hYrej5narLPvqHxSwkEelpZtiKJ6urDHan/oM2G2+PLm3Asit IqQPqwwJwLHwd5TxYfeJAjpMfSLf9JEAokhkI7gymzjRATsyPVr+jMzbpPL8TbN8 aRBueg6hf92Zrc7eBVOmYJE2XD6ym0UFPcfLnRkawZUoN2O4HfW90seJtPHRV/Mk IeSpq0V0fXXZB4NQc+ONoI64AQ+xZ71jTrr+zTLf771JBJsMexDevmKErGfzr+EB O/wt3eOjhDmmOA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:04:15 2025 by rpki-client