This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json) Hash identifier: adu4m3JizvsvStd8GEUzjWWNVYmpIeKMThKTKq/unDA= Subject key identifier: 32:D1:9B:1B:6F:DE:B7:DE:C7:43:45:53:B5:C4:8D:22:29:65:3D:5C Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913 Certificate serial: 019AF163D56952F8140E8493123BB735D963 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft Manifest number: 1077 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=) 2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: GnYumh7eehGqfFJqnf6gGfVsHakvoHD9EiAPIoT3H5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d5:69:52:f8:14:0e:84:93:12:3b:b7:35:d9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=32d19b1b6fdeb7dec7434553b5c48d2229653d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:87:be:d2:ed:3f:94:67:51:59:9f:85:d7:8f: 94:86:1a:f6:d5:63:f6:a5:45:5d:13:05:cf:f8:85: 54:ab:99:90:cc:33:57:33:7b:ab:b7:4a:87:55:9e: 09:fa:91:6e:cb:81:a1:e0:13:0b:5c:29:c1:41:e1: 3b:18:25:8e:30:85:a8:6b:8d:c7:4c:52:3b:a9:51: cc:92:38:e6:00:19:00:a7:c2:38:ea:48:a8:34:27: d4:69:58:4e:3b:97:3f:54:80:65:ae:ba:10:25:f5: fe:e7:4b:c8:8e:04:8a:cf:e7:12:a7:92:77:a1:99: 55:d3:d9:67:00:5e:2e:5b:8e:8d:d5:46:f0:42:3f: fd:56:51:9a:1f:99:09:1d:87:c0:98:ad:d0:5f:78: 25:63:35:86:35:88:62:2d:69:4f:e1:32:29:a9:46: a1:01:47:87:39:99:70:86:14:6b:44:e4:5f:11:31: 43:c2:01:51:30:a5:eb:91:43:5a:f7:f3:a4:45:5b: ba:ec:62:4d:30:aa:04:e6:f1:7e:d3:29:0f:74:79: 45:3d:18:db:dd:53:92:a2:78:a3:e7:f2:cc:35:fc: 3f:f0:c5:d2:e0:11:4b:a7:54:e0:c6:94:ef:9f:a9: 1b:3a:d9:64:6a:7d:24:2e:39:31:13:58:43:9d:55: 10:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D1:9B:1B:6F:DE:B7:DE:C7:43:45:53:B5:C4:8D:22:29:65:3D:5C X509v3 Authority Key Identifier: keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:84:b0:b0:0a:a8:81:a8:f1:50:33:ae:21:e7:63:21:80:c5: f5:ab:3d:e8:70:85:2e:9d:96:e0:ad:a0:06:e0:21:a5:7f:51: 44:82:3c:e1:42:a0:eb:e3:0d:8d:36:b3:8e:f8:46:99:e3:dd: 9a:20:8c:6c:e1:f5:e6:2c:4f:d6:5d:33:10:59:30:70:10:c5: 81:b9:d5:ec:1c:96:f2:b4:e5:4e:cc:46:3e:e3:31:24:4c:b9: db:11:ef:ba:6a:af:f9:f0:79:ac:9f:36:f2:ed:aa:ca:3c:a2: 8d:04:5f:12:93:60:36:8a:54:49:fa:8c:07:24:02:c5:e8:3d: 49:76:db:0c:7b:14:6d:66:3b:b2:b9:dd:06:a5:8c:fb:c2:52: d6:0d:0a:aa:f5:63:bc:4a:dd:4c:f6:31:be:96:ea:fd:2d:a3: ab:e2:e7:a1:ab:5b:77:7a:ed:31:48:68:4b:80:2f:a9:78:de: b2:80:14:72:60:ca:55:d2:96:6c:b8:f0:7c:bd:bd:82:85:c7: be:b1:91:61:f2:f4:b1:a0:dc:5a:4a:d1:db:a0:84:6a:45:3d: d7:bb:de:dc:46:d9:d0:82:58:b1:2c:bc:86:36:2d:88:fb:1b: d5:b8:47:18:61:a4:84:35:a3:c0:b9:5e:06:d2:b1:74:3b:c6: d3:c8:06:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9VpUvgUDoSTEju3NdljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk YjA5MTMwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EygzMmQxOWIxYjZmZGViN2RlYzc0MzQ1NTNiNWM0OGQyMjI5NjUzZDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIe+0u0/lGdRWZ+F14+Uhhr21WP2 pUVdEwXP+IVUq5mQzDNXM3urt0qHVZ4J+pFuy4Gh4BMLXCnBQeE7GCWOMIWoa43H TFI7qVHMkjjmABkAp8I46kioNCfUaVhOO5c/VIBlrroQJfX+50vIjgSKz+cSp5J3 oZlV09lnAF4uW46N1UbwQj/9VlGaH5kJHYfAmK3QX3glYzWGNYhiLWlP4TIpqUah AUeHOZlwhhRrRORfETFDwgFRMKXrkUNa9/OkRVu67GJNMKoE5vF+0ykPdHlFPRjb 3VOSonij5/LMNfw/8MXS4BFLp1TgxpTvn6kbOtlkan0kLjkxE1hDnVUQJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLRmxtv3rfex0NFU7XEjSIpZT1cMB8GA1UdIwQY MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2 LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4SwsAqo gajxUDOuIedjIYDF9as96HCFLp2W4K2gBuAhpX9RRII84UKg6+MNjTazjvhGmePd miCMbOH15ixP1l0zEFkwcBDFgbnV7ByW8rTlTsxGPuMxJEy52xHvumqv+fB5rJ82 8u2qyjyijQRfEpNgNopUSfqMByQCxeg9SXbbDHsUbWY7srndBqWM+8JS1g0KqvVj vErdTPYxvpbq/S2jq+Lnoatbd3rtMUhoS4AvqXjesoAUcmDKVdKWbLjwfL29goXH vrGRYfL0saDcWkrR26CEakU917ve3EbZ0IJYsSy8hjYtiPsb1bhHGGGkhDWjwLle BtKxdDvG08gGWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:18 2025 by rpki-client