This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft File: fkL5qpHFODs-cnVy67GVWRqHYM4.mft (raw, json) Hash identifier: Q1cgUfJGdCTKaT5XnE94gSgVPgV8Lx3hvNkDV6dw2NQ= Subject key identifier: D1:7A:0D:A2:D9:9C:F3:FA:58:0F:B9:45:CF:5E:34:42:35:2C:83:36 Authority key identifier: 7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE Certificate issuer: /CN=7e42f9aa91c5383b3e727572ebb195591a8760ce Certificate serial: 019AF50B4C24FF3D4A814A77F88F01D5B513 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft Manifest number: 07FA Signing time: Sat 06 Dec 2025 19:02:29 +0000 Manifest this update: Sat 06 Dec 2025 19:02:29 +0000 Manifest next update: Sun 07 Dec 2025 19:02:29 +0000 Files and hashes: 1: fkL5qpHFODs-cnVy67GVWRqHYM4.crl (hash: D0ittPh9F/CM6u0IZx8P5yO8Gdr21jHq3kSeVUw3MAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:4c:24:ff:3d:4a:81:4a:77:f8:8f:01:d5:b5:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42f9aa91c5383b3e727572ebb195591a8760ce Validity Not Before: Dec 6 19:02:29 2025 GMT Not After : Dec 7 19:02:29 2025 GMT Subject: CN=d17a0da2d99cf3fa580fb945cf5e3442352c8336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:fe:e5:61:c6:4d:58:ea:80:44:a2:1d:86: a8:b4:77:b7:bc:1b:c0:8f:1c:44:c8:ec:02:b8:d0: ce:43:7a:be:fa:45:7e:5d:d9:ae:68:f9:ce:ff:ed: d8:06:4c:2d:32:59:51:c9:9a:28:87:6b:13:15:40: 93:45:96:5d:c0:70:75:72:fb:23:55:62:9a:3e:e6: fa:6b:20:10:ea:98:09:6e:e9:af:cd:5d:09:da:41: fe:39:5e:42:13:88:a2:94:38:46:57:4e:e1:68:9c: cf:cb:81:ff:3c:c0:14:57:a9:b5:1c:a0:a7:73:13: b0:14:aa:28:f6:a6:b8:9a:d8:e6:67:16:da:a1:46: 65:a7:dc:d2:fc:9c:0b:fa:bb:70:a6:f2:9c:f0:99: 61:bd:c2:3a:06:14:5d:f4:4f:38:be:29:29:c2:80: cf:c7:38:e8:c5:ef:53:13:12:3f:a2:65:ba:d6:1b: 5e:ff:25:fb:ba:73:db:95:1a:46:90:68:f6:15:2c: 47:18:2a:34:d4:ae:5a:54:97:9e:01:5c:20:2c:5d: ce:36:61:86:54:5f:e2:53:10:b6:56:39:dc:54:fb: 5f:2a:81:fc:54:6f:55:d7:e7:90:89:ba:d4:2f:6e: a2:90:fe:06:d6:33:c2:17:e8:88:30:7f:a9:18:08: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:7A:0D:A2:D9:9C:F3:FA:58:0F:B9:45:CF:5E:34:42:35:2C:83:36 X509v3 Authority Key Identifier: keyid:7E:42:F9:AA:91:C5:38:3B:3E:72:75:72:EB:B1:95:59:1A:87:60:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkL5qpHFODs-cnVy67GVWRqHYM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/81d8dd-4cd3-4378-b067-7cd472864bf8/1/fkL5qpHFODs-cnVy67GVWRqHYM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:28:ae:bf:eb:a2:81:1b:d8:f6:15:f7:18:36:64:e1:8f:88: d2:7a:8b:d5:35:42:45:f1:7f:a2:01:cb:01:88:ba:7a:03:99: d2:d6:46:e8:00:d2:53:4d:34:5a:1b:e1:86:4f:1e:9e:79:55: 32:68:32:ca:1b:22:ef:92:96:3d:cd:ea:8e:7b:69:2b:3e:c5: fa:10:69:8b:02:44:19:ac:86:d0:c8:1b:fb:05:41:b4:4e:ae: b8:ed:82:62:1a:85:94:d7:89:c8:4b:65:11:95:c9:a6:67:a1: 5f:2f:0a:43:c8:eb:99:74:5a:48:9c:db:bc:39:a4:3a:e4:4f: 8f:7d:05:00:dd:f1:8a:fe:99:04:ac:0d:59:b0:9b:37:45:b9: d2:ef:16:26:5e:73:17:ba:1c:47:da:94:80:25:cf:92:b3:7f: bf:21:f6:b8:1c:36:f6:26:dc:e7:16:9d:cb:dc:5d:0f:19:5f: b0:b0:71:d8:1f:20:96:f8:eb:9e:39:16:13:5f:11:22:9b:a5: 91:77:aa:8d:fe:87:c9:12:c1:a0:d9:99:e5:28:ac:c8:fe:f5: 5b:5c:a2:17:87:14:07:1f:2c:3f:e5:69:02:3c:1a:7b:19:04: 2f:a8:9f:3b:f6:ed:aa:88:c7:bc:60:a7:f1:20:45:fc:27:5f: 49:36:b0:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0wk/z1KgUp3+I8B1bUTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNDJmOWFhOTFjNTM4M2IzZTcyNzU3MmViYjE5NTU5MWE4 NzYwY2UwHhcNMjUxMjA2MTkwMjI5WhcNMjUxMjA3MTkwMjI5WjAzMTEwLwYDVQQD EyhkMTdhMGRhMmQ5OWNmM2ZhNTgwZmI5NDVjZjVlMzQ0MjM1MmM4MzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eP+5WHGTVjqgESiHYaotHe3vBvA jxxEyOwCuNDOQ3q++kV+XdmuaPnO/+3YBkwtMllRyZooh2sTFUCTRZZdwHB1cvsj VWKaPub6ayAQ6pgJbumvzV0J2kH+OV5CE4iilDhGV07haJzPy4H/PMAUV6m1HKCn cxOwFKoo9qa4mtjmZxbaoUZlp9zS/JwL+rtwpvKc8JlhvcI6BhRd9E84vikpwoDP xzjoxe9TExI/omW61hte/yX7unPblRpGkGj2FSxHGCo01K5aVJeeAVwgLF3ONmGG VF/iUxC2VjncVPtfKoH8VG9V1+eQibrUL26ikP4G1jPCF+iIMH+pGAhVewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF6DaLZnPP6WA+5Rc9eNEI1LIM2MB8GA1UdIwQY MBaAFH5C+aqRxTg7PnJ1cuuxlVkah2DOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjct N2NkNDcyODY0YmY4LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC84MWQ4ZGQtNGNkMy00Mzc4LWIwNjctN2NkNDcyODY0YmY4 LzEvZmtMNXFwSEZPRHMtY25WeTY3R1ZXUnFIWU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSiuv+ui gRvY9hX3GDZk4Y+I0nqL1TVCRfF/ogHLAYi6egOZ0tZG6ADSU000Whvhhk8ennlV Mmgyyhsi75KWPc3qjntpKz7F+hBpiwJEGayG0Mgb+wVBtE6uuO2CYhqFlNeJyEtl EZXJpmehXy8KQ8jrmXRaSJzbvDmkOuRPj30FAN3xiv6ZBKwNWbCbN0W50u8WJl5z F7ocR9qUgCXPkrN/vyH2uBw29ibc5xady9xdDxlfsLBx2B8glvjrnjkWE18RIpul kXeqjf6HyRLBoNmZ5SisyP71W1yiF4cUBx8sP+VpAjwaexkEL6ifO/btqojHvGCn 8SBF/CdfSTawqQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:22 2025 by rpki-client