This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json) Hash identifier: AbG1+nNMklkKY4SUddV8przjoc9VD7e6nIrPsqGpHL4= Subject key identifier: AC:AF:A8:DA:2D:75:48:1F:44:5F:AD:8D:DB:5E:74:73:8B:0B:66:18 Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272 Certificate serial: 019AF38A034066D85B00548CE37B608690A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft Manifest number: 0261 Signing time: Sat 06 Dec 2025 12:01:39 +0000 Manifest this update: Sat 06 Dec 2025 12:01:39 +0000 Manifest next update: Sun 07 Dec 2025 12:01:39 +0000 Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: H9PjNscA8VuqUFMlq0QqTh4UcaYTXZIWx5t40MLytec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:03:40:66:d8:5b:00:54:8c:e3:7b:60:86:90:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272 Validity Not Before: Dec 6 12:01:39 2025 GMT Not After : Dec 7 12:01:39 2025 GMT Subject: CN=acafa8da2d75481f445fad8ddb5e74738b0b6618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e1:3a:e4:dd:89:11:f1:7e:10:ab:02:9d:f9: 71:3c:5d:10:c6:8d:59:bb:1d:27:db:c4:e5:38:4a: 85:28:03:8b:6d:1a:95:98:1e:73:c4:e8:7b:0d:c1: 2a:f6:62:b6:49:ec:82:98:07:fb:38:f8:8c:c6:dc: 4c:7f:86:d1:c5:14:7f:41:46:50:e1:63:de:66:42: 3a:f2:a7:40:67:b7:09:3d:41:6d:3e:85:cc:3f:17: b2:2b:78:71:52:c8:dd:a8:a7:80:26:1f:f5:ca:a7: 6b:d5:7f:f2:d9:5e:93:77:f0:e9:63:cb:79:f3:43: bd:4e:01:ed:6e:86:f7:89:41:ca:ed:11:73:74:1d: 06:24:47:99:1f:11:35:15:04:33:6e:4d:12:31:cf: 39:62:df:6f:f6:0d:71:0f:8f:c1:60:0b:18:39:70: aa:ce:55:de:d1:f8:86:ac:cd:f4:c7:44:f6:a8:48: 98:82:b5:18:fb:32:62:7c:5d:5f:20:c4:bf:b9:1d: 1c:36:31:84:39:1a:49:4f:f2:46:a7:b9:d1:1c:aa: f7:78:93:7e:be:9d:b3:27:62:50:55:c0:98:d0:a3: af:a4:06:ce:6f:88:5b:94:a1:0c:37:e3:2d:cd:51: 81:1a:7f:53:f5:9d:f7:78:b5:4c:5c:e8:70:d1:69: f6:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:A8:DA:2D:75:48:1F:44:5F:AD:8D:DB:5E:74:73:8B:0B:66:18 X509v3 Authority Key Identifier: keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:30:7b:b7:17:e8:d5:6d:5e:01:cc:0f:41:82:4b:d2:95:48: e4:9f:ac:0f:db:7a:0c:9b:4b:40:11:f5:18:5b:87:ac:cf:65: 4f:5e:da:38:e0:a0:4c:7c:25:42:27:c8:42:74:9e:90:97:89: c2:f6:cc:30:73:d9:19:f0:20:ce:8d:e6:3f:f9:ee:0e:05:5b: d3:a1:6e:cd:b3:22:26:2a:c7:9b:69:33:3b:b2:3d:e4:4c:26: 4d:0b:e1:bf:0a:b7:64:bd:c9:56:c7:b7:fe:a8:0e:d8:99:ee: 9f:7d:95:84:61:14:53:b3:ee:e7:47:c2:80:34:de:08:a0:19: af:81:ee:f4:a7:21:d8:8e:37:9d:e8:97:00:5c:93:6f:f6:96: 26:20:06:5b:5b:b9:92:35:d9:69:7c:ea:6e:cb:34:9d:c3:02: d5:d0:00:4a:f0:db:85:8d:03:e7:92:ad:95:b0:e1:14:fd:b5: e4:be:44:9b:76:44:35:a7:ad:e0:c8:18:c0:87:72:e8:a4:ec: 29:0a:a7:89:9e:89:8b:27:0f:2b:ef:4e:7c:3e:11:9a:26:e5: 3b:f4:f5:81:e3:c8:8c:a6:6e:2b:b9:3d:0c:60:b5:97:5f:5f: b1:9e:90:37:2e:91:b2:02:de:79:13:52:28:80:6b:0a:3b:8b: 47:cf:80:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigNAZthbAFSM43tghpCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy ODQyNzIwHhcNMjUxMjA2MTIwMTM5WhcNMjUxMjA3MTIwMTM5WjAzMTEwLwYDVQQD EyhhY2FmYThkYTJkNzU0ODFmNDQ1ZmFkOGRkYjVlNzQ3MzhiMGI2NjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+E65N2JEfF+EKsCnflxPF0Qxo1Z ux0n28TlOEqFKAOLbRqVmB5zxOh7DcEq9mK2SeyCmAf7OPiMxtxMf4bRxRR/QUZQ 4WPeZkI68qdAZ7cJPUFtPoXMPxeyK3hxUsjdqKeAJh/1yqdr1X/y2V6Td/DpY8t5 80O9TgHtbob3iUHK7RFzdB0GJEeZHxE1FQQzbk0SMc85Yt9v9g1xD4/BYAsYOXCq zlXe0fiGrM30x0T2qEiYgrUY+zJifF1fIMS/uR0cNjGEORpJT/JGp7nRHKr3eJN+ vp2zJ2JQVcCY0KOvpAbOb4hblKEMN+MtzVGBGn9T9Z33eLVMXOhw0Wn2wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyvqNotdUgfRF+tjdtedHOLC2YYMB8GA1UdIwQY MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjB7txfo 1W1eAcwPQYJL0pVI5J+sD9t6DJtLQBH1GFuHrM9lT17aOOCgTHwlQifIQnSekJeJ wvbMMHPZGfAgzo3mP/nuDgVb06FuzbMiJirHm2kzO7I95EwmTQvhvwq3ZL3JVse3 /qgO2Jnun32VhGEUU7Pu50fCgDTeCKAZr4Hu9Kch2I43neiXAFyTb/aWJiAGW1u5 kjXZaXzqbss0ncMC1dAASvDbhY0D55KtlbDhFP215L5Em3ZENaet4MgYwIdy6KTs KQqniZ6JiycPK+9OfD4RmiblO/T1gePIjKZuK7k9DGC1l19fsZ6QNy6RsgLeeRNS KIBrCjuLR8+A0w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:34 2025 by rpki-client