This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft File: fmjbaSbQRXjYWfB9PdiQubr2RP0.mft (raw, json) Hash identifier: Rf/o7OpnsV9Fh4WkBwVJaXhj+CTmJpyNvBI+Nu85MNY= Subject key identifier: 72:17:CF:D9:41:D1:B6:C9:00:2C:8F:30:98:9C:B8:BB:1D:9D:39:C6 Authority key identifier: 7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD Certificate issuer: /CN=7e68db6926d04578d859f07d3dd890b9baf644fd Certificate serial: 019AF31D6D0E07A8D15C1AB25E50F9E4DF9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft Manifest number: 0AF2 Signing time: Sat 06 Dec 2025 10:03:03 +0000 Manifest this update: Sat 06 Dec 2025 10:03:03 +0000 Manifest next update: Sun 07 Dec 2025 10:03:03 +0000 Files and hashes: 1: fmjbaSbQRXjYWfB9PdiQubr2RP0.crl (hash: hrMJllSlME55yenG83w9nv2b89yOM/yqgXw6Yu0Zr2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:6d:0e:07:a8:d1:5c:1a:b2:5e:50:f9:e4:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e68db6926d04578d859f07d3dd890b9baf644fd Validity Not Before: Dec 6 10:03:03 2025 GMT Not After : Dec 7 10:03:03 2025 GMT Subject: CN=7217cfd941d1b6c9002c8f30989cb8bb1d9d39c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:4b:f5:49:46:61:98:b9:30:8e:b9:3b:f1: 28:76:45:5c:50:cd:47:9f:c0:4e:96:9a:35:d5:7f: 08:57:2e:16:a9:71:98:49:11:03:df:94:70:bb:1e: 4f:f2:e8:e3:56:3e:88:97:36:fe:61:d4:3c:dc:74: 97:11:a9:b5:c0:6e:66:50:0d:48:18:8c:2a:13:de: 34:c6:69:c8:a0:b6:31:5e:f0:f6:b7:c5:a0:06:7a: e5:7a:ac:f8:dd:32:28:28:ce:32:ba:da:36:9f:ec: 22:0a:b7:46:b9:bc:f3:90:db:73:39:c8:22:71:ca: 76:57:42:40:19:19:74:60:a9:2a:da:ac:d5:fe:87: b8:e0:03:03:52:72:94:19:57:7e:10:79:3d:3b:53: c4:ef:b1:5d:0a:c0:38:af:1d:81:5c:49:de:f0:eb: 93:e0:ff:7f:61:c6:72:95:87:09:fb:b4:a8:8f:6f: f3:71:60:fc:59:05:04:26:55:bb:38:65:06:c2:cb: 91:ea:23:30:49:cd:cb:46:47:7d:a2:bc:4b:b1:c5: fa:33:c8:f2:2d:12:3e:b2:df:63:af:9d:9f:8c:3b: cd:dd:95:6a:b5:8d:c4:1a:79:e4:8e:25:a7:88:b5: a1:eb:6e:3e:87:53:f3:70:f9:f8:46:b4:7c:82:fe: 3d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:17:CF:D9:41:D1:B6:C9:00:2C:8F:30:98:9C:B8:BB:1D:9D:39:C6 X509v3 Authority Key Identifier: keyid:7E:68:DB:69:26:D0:45:78:D8:59:F0:7D:3D:D8:90:B9:BA:F6:44:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmjbaSbQRXjYWfB9PdiQubr2RP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e9042b-2061-49aa-869f-4f6900ff846d/1/fmjbaSbQRXjYWfB9PdiQubr2RP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:64:77:58:10:8d:53:ad:ac:51:91:27:ae:d0:31:8f:c6:16: fb:8f:10:87:ae:aa:db:61:7e:3b:a5:73:e0:fa:ee:ac:7a:bf: 57:14:51:c8:9b:b0:e4:e5:60:bf:97:8a:83:3c:a7:d3:e8:dc: a7:35:b5:69:99:0c:b7:88:99:bd:27:6b:78:5b:c0:a2:21:43: 1e:90:db:60:19:2b:68:7c:b6:45:89:b1:2e:98:e0:ff:6d:88: 9d:ed:d0:32:98:53:94:84:40:15:6c:61:25:1e:41:cc:26:d0: 35:be:68:7d:95:03:73:e4:e1:69:49:3d:50:b4:74:6d:ee:2d: 63:fe:47:1b:3d:30:45:cd:f7:59:b0:50:28:44:99:b0:ea:5d: f7:29:a6:dd:f2:54:c5:d2:c3:70:5b:fe:a7:92:64:54:26:fe: 92:6a:26:4f:12:85:3b:e3:2c:3e:42:9e:4f:15:1d:a0:e6:76: cd:b1:ef:71:9e:3c:85:a5:bb:56:6b:7d:3c:ad:4a:34:dc:c3: d9:43:9e:e7:83:3b:a0:82:64:ab:eb:34:b6:8e:a4:00:ab:01: ba:ac:46:46:27:1d:be:f2:61:72:9a:1c:f3:5e:dc:99:65:c3: af:fc:19:be:22:a3:69:c7:79:e2:e0:a3:ec:65:92:82:b5:9b: b0:d4:a6:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHW0OB6jRXBqyXlD55N+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjhkYjY5MjZkMDQ1NzhkODU5ZjA3ZDNkZDg5MGI5YmFm NjQ0ZmQwHhcNMjUxMjA2MTAwMzAzWhcNMjUxMjA3MTAwMzAzWjAzMTEwLwYDVQQD Eyg3MjE3Y2ZkOTQxZDFiNmM5MDAyYzhmMzA5ODljYjhiYjFkOWQzOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1T1L9UlGYZi5MI65O/EodkVcUM1H n8BOlpo11X8IVy4WqXGYSRED35Rwux5P8ujjVj6Ilzb+YdQ83HSXEam1wG5mUA1I GIwqE940xmnIoLYxXvD2t8WgBnrleqz43TIoKM4yuto2n+wiCrdGubzzkNtzOcgi ccp2V0JAGRl0YKkq2qzV/oe44AMDUnKUGVd+EHk9O1PE77FdCsA4rx2BXEne8OuT 4P9/YcZylYcJ+7Soj2/zcWD8WQUEJlW7OGUGwsuR6iMwSc3LRkd9orxLscX6M8jy LRI+st9jr52fjDvN3ZVqtY3EGnnkjiWniLWh624+h1PzcPn4RrR8gv49TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIXz9lB0bbJACyPMJicuLsdnTnGMB8GA1UdIwQY MBaAFH5o22km0EV42FnwfT3YkLm69kT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYt NGY2OTAwZmY4NDZkLzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9lOTA0MmItMjA2MS00OWFhLTg2OWYtNGY2OTAwZmY4NDZk LzEvZm1qYmFTYlFSWGpZV2ZCOVBkaVF1YnIyUlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGR3WBCN U62sUZEnrtAxj8YW+48Qh66q22F+O6Vz4PrurHq/VxRRyJuw5OVgv5eKgzyn0+jc pzW1aZkMt4iZvSdreFvAoiFDHpDbYBkraHy2RYmxLpjg/22Ine3QMphTlIRAFWxh JR5BzCbQNb5ofZUDc+ThaUk9ULR0be4tY/5HGz0wRc33WbBQKESZsOpd9ymm3fJU xdLDcFv+p5JkVCb+kmomTxKFO+MsPkKeTxUdoOZ2zbHvcZ48haW7Vmt9PK1KNNzD 2UOe54M7oIJkq+s0to6kAKsBuqxGRicdvvJhcpoc817cmWXDr/wZviKjacd54uCj 7GWSgrWbsNSmBw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:38 2025 by rpki-client