This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft File: fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft (raw, json) Hash identifier: U8vCPcJHwfhzo1j7Bq0SqHNUxwhB8N1Ro71CzrgXlqA= Subject key identifier: 7D:B2:22:EF:67:2D:19:17:42:2D:2B:4E:90:A6:16:3D:61:A3:AC:ED Authority key identifier: 7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4 Certificate issuer: /CN=7e04dd9c82b191a5f09d606ca550c017785aeec4 Certificate serial: 019AF12D23E2F66482641D2BF29A28518681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 01:00:58 +0000 Manifest this update: Sat 06 Dec 2025 01:00:58 +0000 Manifest next update: Sun 07 Dec 2025 01:00:58 +0000 Files and hashes: 1: fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl (hash: Y9FB2oiSOyUJSBhJPEiscDM7x7k4e/ZrfoBsSFExY9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:23:e2:f6:64:82:64:1d:2b:f2:9a:28:51:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e04dd9c82b191a5f09d606ca550c017785aeec4 Validity Not Before: Dec 6 01:00:58 2025 GMT Not After : Dec 7 01:00:58 2025 GMT Subject: CN=7db222ef672d1917422d2b4e90a6163d61a3aced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:c0:ac:ee:a1:20:5c:a8:bb:a6:c6:f9:bd: 3d:3a:b1:fe:ab:d3:4b:d9:21:b8:31:4b:e9:71:ba: e7:8f:ce:c1:c8:f8:84:18:ac:c7:b2:9a:5e:f0:6f: 45:14:6d:7f:36:92:c0:69:53:13:52:bc:5f:a7:9f: a0:fc:0b:81:66:83:18:f4:9a:c1:24:92:be:14:54: 01:73:28:99:ec:b6:a9:92:85:8e:7f:b4:bd:0a:ed: ba:2f:d3:04:ca:d3:d5:ca:48:52:f5:25:20:9e:4c: 51:72:57:31:ad:47:7a:78:e2:22:04:79:c3:b1:4b: 1b:71:d8:8b:be:4a:2c:14:bd:37:d6:33:23:82:dc: 76:25:0f:fe:5d:af:16:63:a8:c1:aa:72:b8:77:7e: 5d:2e:76:72:cb:f8:6b:2f:e8:ae:0d:23:0d:d3:3e: d8:52:b7:7d:7b:14:9a:4c:45:de:83:c4:af:9c:10: b1:c6:44:80:c0:5e:6d:0a:67:bb:05:40:24:2c:0d: 3a:2f:b2:b8:5a:84:fc:ee:3d:a6:09:c2:b4:99:07: 5a:4d:94:5c:96:fd:5c:f1:ca:0a:80:93:32:58:28: 8f:8b:e8:c1:3f:cf:40:a8:de:ec:05:59:21:04:71: a8:65:ab:d9:47:8e:8d:c7:af:a3:00:6a:8d:62:8d: dc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B2:22:EF:67:2D:19:17:42:2D:2B:4E:90:A6:16:3D:61:A3:AC:ED X509v3 Authority Key Identifier: keyid:7E:04:DD:9C:82:B1:91:A5:F0:9D:60:6C:A5:50:C0:17:78:5A:EE:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgTdnIKxkaXwnWBspVDAF3ha7sQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/55b8b2-18d4-4527-8f6b-56e44f9f9914/1/fgTdnIKxkaXwnWBspVDAF3ha7sQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:1f:2f:96:1c:48:06:e9:94:a6:1d:b7:c7:19:7a:b4:d0: 96:57:e4:33:c0:ef:21:65:4e:70:55:5f:49:ca:ce:3d:a6:2a: 39:86:f0:d8:e0:b5:82:d7:8e:41:b4:48:9f:b8:7c:07:8d:8d: 05:be:3f:cf:13:c0:1b:48:d2:0e:c5:3e:be:e7:37:aa:2f:29: bf:09:4e:79:83:86:70:14:2b:cb:56:00:3c:fc:8d:58:50:18: 8c:6e:9b:9a:c9:1a:36:f1:04:e1:2d:b9:b7:2f:0d:8f:ac:81: ac:a0:de:76:11:0f:29:82:86:d8:15:6f:5c:48:09:dc:51:08: 77:84:78:88:1e:78:f0:5b:57:4e:aa:32:3d:3e:1c:5d:f7:97: 13:4c:09:c2:4b:1b:97:bb:4f:25:3e:d3:31:bd:c5:2c:2a:7f: 1c:9e:26:b9:b8:cd:59:70:b0:49:1e:5f:be:72:95:b0:ab:d5: e0:03:86:0b:3b:e2:ec:af:52:87:2f:af:fc:e3:b0:06:5c:29: 19:3e:c5:0b:9c:57:f2:7e:2f:55:68:f4:47:13:3f:40:b3:60: 46:53:a9:af:82:05:a3:ca:33:ab:20:f2:3a:88:2a:02:49:ec: 1b:aa:eb:71:62:31:11:9c:a0:67:5d:4d:3d:7a:62:2f:91:49: 01:a9:b1:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSPi9mSCZB0r8pooUYaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDRkZDljODJiMTkxYTVmMDlkNjA2Y2E1NTBjMDE3Nzg1 YWVlYzQwHhcNMjUxMjA2MDEwMDU4WhcNMjUxMjA3MDEwMDU4WjAzMTEwLwYDVQQD Eyg3ZGIyMjJlZjY3MmQxOTE3NDIyZDJiNGU5MGE2MTYzZDYxYTNhY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JLArO6hIFyou6bG+b09OrH+q9NL 2SG4MUvpcbrnj87ByPiEGKzHsppe8G9FFG1/NpLAaVMTUrxfp5+g/AuBZoMY9JrB JJK+FFQBcyiZ7LapkoWOf7S9Cu26L9MEytPVykhS9SUgnkxRclcxrUd6eOIiBHnD sUsbcdiLvkosFL031jMjgtx2JQ/+Xa8WY6jBqnK4d35dLnZyy/hrL+iuDSMN0z7Y Urd9exSaTEXeg8SvnBCxxkSAwF5tCme7BUAkLA06L7K4WoT87j2mCcK0mQdaTZRc lv1c8coKgJMyWCiPi+jBP89AqN7sBVkhBHGoZavZR46Nx6+jAGqNYo3cUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2yIu9nLRkXQi0rTpCmFj1ho6ztMB8GA1UdIwQY MBaAFH4E3ZyCsZGl8J1gbKVQwBd4Wu7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmIt NTZlNDRmOWY5OTE0LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81NWI4YjItMThkNC00NTI3LThmNmItNTZlNDRmOWY5OTE0 LzEvZmdUZG5JS3hrYVh3bldCc3BWREFGM2hhN3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHQfL5Yc SAbplKYdt8cZerTQllfkM8DvIWVOcFVfScrOPaYqOYbw2OC1gteOQbRIn7h8B42N Bb4/zxPAG0jSDsU+vuc3qi8pvwlOeYOGcBQry1YAPPyNWFAYjG6bmskaNvEE4S25 ty8Nj6yBrKDedhEPKYKG2BVvXEgJ3FEId4R4iB548FtXTqoyPT4cXfeXE0wJwksb l7tPJT7TMb3FLCp/HJ4mubjNWXCwSR5fvnKVsKvV4AOGCzvi7K9Shy+v/OOwBlwp GT7FC5xX8n4vVWj0RxM/QLNgRlOpr4IFo8ozqyDyOogqAknsG6rrcWIxEZygZ11N PXpiL5FJAamxlg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:24 2025 by rpki-client