This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json) Hash identifier: rZuckAdSo7Ma7k9ivkQWBuBgOBSepikLIi39WCse5MY= Subject key identifier: 6E:D9:29:40:09:52:A7:02:6B:1A:A0:55:31:B1:88:82:DF:1F:C9:78 Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272 Certificate serial: 019B3532586216FD6028879D4AE476ED01A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft Manifest number: 0283 Signing time: Fri 19 Dec 2025 06:00:50 +0000 Manifest this update: Fri 19 Dec 2025 06:00:50 +0000 Manifest next update: Sat 20 Dec 2025 06:00:50 +0000 Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: OmN6DXUrFg+d/ohaFJcsx4o23SXmuE2qW7dAoYPPP/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:58:62:16:fd:60:28:87:9d:4a:e4:76:ed:01:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272 Validity Not Before: Dec 19 06:00:50 2025 GMT Not After : Dec 20 06:00:50 2025 GMT Subject: CN=6ed929400952a7026b1aa05531b18882df1fc978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f8:dd:bf:45:6e:7e:85:a0:05:b7:06:08:c6: b3:15:f4:f6:01:94:b0:1c:87:ba:49:71:93:87:12: ec:5d:ec:dc:c9:ec:97:af:19:20:e9:41:ec:c0:10: 4f:86:d0:61:24:b5:29:0f:43:a0:21:1f:36:ba:08: 9b:88:33:e2:7e:50:ea:bc:14:19:ba:cb:49:d5:4a: 9a:dd:08:fb:7f:0d:f3:f4:de:34:7a:0c:fb:05:f7: b5:bd:6f:02:ec:2e:e3:e4:6d:10:79:2c:e6:3c:7f: f4:b4:13:a4:0d:ac:77:95:47:08:1d:82:92:39:54: 10:0d:b4:2a:15:e3:aa:82:fb:89:b7:c7:21:a8:b0: e8:34:c8:d4:76:bc:54:86:a8:a0:6b:1e:e1:f0:7e: cb:18:49:fb:5e:ef:f2:46:98:0f:67:50:81:63:31: 66:fc:12:74:c6:0f:11:62:24:ec:ea:b1:a8:f5:b8: a8:41:f2:5b:a9:7c:be:a7:3f:5c:0d:af:8a:37:91: 98:d0:a5:8f:78:98:30:29:02:81:53:b0:31:26:e1: d1:ee:a8:69:c0:ec:e3:f4:b4:14:21:96:f9:f9:5d: 90:78:10:60:7e:b0:73:cb:ed:6a:74:a3:b3:d3:84: 9a:79:74:a6:c3:cf:3c:3e:3c:97:66:92:82:fa:bd: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:D9:29:40:09:52:A7:02:6B:1A:A0:55:31:B1:88:82:DF:1F:C9:78 X509v3 Authority Key Identifier: keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:12:fe:3c:dc:3d:06:e5:d7:8c:60:f6:36:0f:40:b9:a2:aa: 82:d4:25:91:25:17:7e:7b:da:82:f3:f3:92:19:2d:a8:c1:78: 95:0d:04:5d:ea:89:82:b7:50:12:7a:85:67:16:a1:8b:96:47: 12:a4:c9:7f:e9:8f:91:35:bc:42:32:4c:b3:88:c3:9d:44:aa: 1e:8f:fa:26:55:a1:71:b9:a4:34:64:57:f5:df:93:e2:2e:0b: c0:c8:44:64:b4:24:ab:ab:7d:22:00:ce:2d:44:f4:63:5a:18: c3:a0:94:38:50:ab:1b:b3:5a:70:f1:f2:ef:e1:6e:b8:ac:c4: 31:ea:5c:1a:44:2b:63:a7:4f:f8:36:59:31:aa:18:9e:aa:6c: f3:f5:5f:20:1e:36:e1:b5:25:88:20:47:72:6a:03:a9:98:f5: 50:5a:d4:b4:a1:df:cb:95:e2:d6:25:bb:80:f6:48:f4:0c:61: a8:6a:10:fe:3d:49:ad:4c:9a:a2:cd:09:1c:b9:56:56:53:80: 9b:cf:6f:96:0b:0e:e8:5a:07:c7:f3:d0:49:06:7e:a9:a1:af: 02:77:cd:ba:6b:7c:0c:17:e9:75:cf:f2:db:6a:95:46:10:2f: 5f:b3:b6:5d:2c:e9:ae:71:30:8d:6c:d2:ea:d2:b5:99:0e:ff: d2:ab:5c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MlhiFv1gKIedSuR27QGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy ODQyNzIwHhcNMjUxMjE5MDYwMDUwWhcNMjUxMjIwMDYwMDUwWjAzMTEwLwYDVQQD Eyg2ZWQ5Mjk0MDA5NTJhNzAyNmIxYWEwNTUzMWIxODg4MmRmMWZjOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufjdv0VufoWgBbcGCMazFfT2AZSw HIe6SXGThxLsXezcyeyXrxkg6UHswBBPhtBhJLUpD0OgIR82ugibiDPiflDqvBQZ ustJ1Uqa3Qj7fw3z9N40egz7Bfe1vW8C7C7j5G0QeSzmPH/0tBOkDax3lUcIHYKS OVQQDbQqFeOqgvuJt8chqLDoNMjUdrxUhqigax7h8H7LGEn7Xu/yRpgPZ1CBYzFm /BJ0xg8RYiTs6rGo9bioQfJbqXy+pz9cDa+KN5GY0KWPeJgwKQKBU7AxJuHR7qhp wOzj9LQUIZb5+V2QeBBgfrBzy+1qdKOz04SaeXSmw888PjyXZpKC+r3EZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7ZKUAJUqcCaxqgVTGxiILfH8l4MB8GA1UdIwQY MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRL+PNw9 BuXXjGD2Ng9AuaKqgtQlkSUXfnvagvPzkhktqMF4lQ0EXeqJgrdQEnqFZxahi5ZH EqTJf+mPkTW8QjJMs4jDnUSqHo/6JlWhcbmkNGRX9d+T4i4LwMhEZLQkq6t9IgDO LUT0Y1oYw6CUOFCrG7NacPHy7+FuuKzEMepcGkQrY6dP+DZZMaoYnqps8/VfIB42 4bUliCBHcmoDqZj1UFrUtKHfy5Xi1iW7gPZI9AxhqGoQ/j1JrUyaos0JHLlWVlOA m89vlgsO6FoHx/PQSQZ+qaGvAnfNumt8DBfpdc/y22qVRhAvX7O2XSzprnEwjWzS 6tK1mQ7/0qtcGA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:54 2025 by rpki-client