This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft File: FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json) Hash identifier: PAF1KQuYV4TYAbQFPvpLVKlkycKJc0esvJU8xXq+Ya4= Subject key identifier: 80:ED:92:05:B9:7F:19:2B:43:86:87:5B:0E:77:80:02:1C:A7:BA:C7 Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B Certificate issuer: /CN=154e2f85361ff5d06309c25684b908d7b702439b Certificate serial: 019AF208E47B08E65EA298818E92692B2C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft Manifest number: 0540 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: a36hVwBD4DD2UonQxps2DgGFSLAxcQVHsZ0dEXr6Rmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e4:7b:08:e6:5e:a2:98:81:8e:92:69:2b:2c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=80ed9205b97f192b4386875b0e7780021ca7bac7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cd:d8:45:3e:6d:bd:60:56:34:13:6f:ed:85: 3d:05:39:33:47:b8:0d:cf:5d:95:19:9b:4a:fb:f6: b1:94:f3:56:97:13:4a:b1:d4:d4:10:f7:7d:ce:1d: fa:ed:a4:d0:75:58:46:60:28:26:93:cf:5c:71:fb: 5e:67:d0:f6:45:23:36:5e:7c:e4:fe:4b:33:79:03: 12:94:01:ec:43:b8:09:88:3f:41:6d:7e:73:f5:35: 2e:da:a2:0e:f4:b5:6a:ce:09:b3:03:81:ee:a7:5d: 5f:04:62:65:3f:7b:81:d6:eb:0f:cd:46:45:d8:95: 65:f1:ad:34:96:f5:d1:f9:62:86:7d:f2:7f:20:c9: f9:a8:64:62:28:33:df:ca:70:de:03:99:d5:36:3d: 2a:4a:62:bb:1b:66:aa:fe:48:98:73:2e:8a:3d:ad: 41:78:10:0c:38:81:fe:b2:76:4b:90:d0:b8:99:88: 01:ec:e5:4d:3a:3e:46:dc:39:28:d1:ab:ea:81:cf: c8:1a:f7:31:58:ef:9a:4e:0a:e3:c7:82:ab:a6:97: 73:66:12:d6:8a:a7:27:4f:dd:00:a8:59:c4:8d:c2: 62:ae:bd:3f:38:e2:1d:ce:35:c0:fb:57:d4:6b:9e: f2:99:ed:68:f2:59:52:3b:3f:55:cb:13:fb:46:97: 7c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:ED:92:05:B9:7F:19:2B:43:86:87:5B:0E:77:80:02:1C:A7:BA:C7 X509v3 Authority Key Identifier: keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:f7:e2:dc:43:a1:2e:eb:06:be:7a:4f:58:3e:65:4e:0f:df: 24:8e:52:f9:7d:23:c6:fd:c7:79:65:e7:26:7e:21:56:fc:a6: c1:5f:af:98:47:f4:bc:8a:e9:ed:26:09:69:77:0e:37:2f:cf: 2d:31:d2:01:f4:45:7a:3b:51:74:15:80:8a:0b:3b:50:3d:40: db:12:9d:37:a0:34:db:fb:b3:78:ed:50:a2:0b:ed:58:e9:2f: 2b:e3:25:59:cb:c6:8b:ac:e0:4d:26:b9:48:3a:9f:34:5c:8f: 63:f5:f2:97:1f:33:7e:a6:69:ae:bb:24:ee:5c:a7:68:80:99: cc:3b:d2:87:2f:16:74:0c:71:bc:d8:3f:74:5c:02:f6:08:d8: 5b:69:3b:16:1c:28:2e:68:5e:2a:0f:6c:4a:53:dc:af:38:8f: c5:e1:9d:18:fa:3b:06:bc:cc:3b:f5:d8:8f:b6:cf:4b:16:5e: 02:d2:c1:f5:e3:ac:5b:16:0f:fe:b0:06:74:f6:23:64:bc:58: a5:09:16:9a:7f:b6:74:4f:ef:b6:76:b1:f3:ab:3e:61:f7:72: c2:b9:59:40:8d:b6:a7:f2:5a:e6:19:bd:3a:f2:6d:5e:65:2e: 4c:c9:11:b6:1b:50:f9:d3:a4:be:8a:3f:39:8d:73:e9:b6:ff: 15:d0:12:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOR7COZeopiBjpJpKywVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NGUyZjg1MzYxZmY1ZDA2MzA5YzI1Njg0YjkwOGQ3Yjcw MjQzOWIwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD Eyg4MGVkOTIwNWI5N2YxOTJiNDM4Njg3NWIwZTc3ODAwMjFjYTdiYWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv83YRT5tvWBWNBNv7YU9BTkzR7gN z12VGZtK+/axlPNWlxNKsdTUEPd9zh367aTQdVhGYCgmk89ccfteZ9D2RSM2Xnzk /kszeQMSlAHsQ7gJiD9BbX5z9TUu2qIO9LVqzgmzA4Hup11fBGJlP3uB1usPzUZF 2JVl8a00lvXR+WKGffJ/IMn5qGRiKDPfynDeA5nVNj0qSmK7G2aq/kiYcy6KPa1B eBAMOIH+snZLkNC4mYgB7OVNOj5G3Dko0avqgc/IGvcxWO+aTgrjx4KrppdzZhLW iqcnT90AqFnEjcJirr0/OOIdzjXA+1fUa57yme1o8llSOz9VyxP7Rpd81QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDtkgW5fxkrQ4aHWw53gAIcp7rHMB8GA1UdIwQY MBaAFBVOL4U2H/XQYwnCVoS5CNe3AkObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEt NTUyODg5MGY5ZGIzLzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEtNTUyODg5MGY5ZGIz LzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABPfi3EOh LusGvnpPWD5lTg/fJI5S+X0jxv3HeWXnJn4hVvymwV+vmEf0vIrp7SYJaXcONy/P LTHSAfRFejtRdBWAigs7UD1A2xKdN6A02/uzeO1QogvtWOkvK+MlWcvGi6zgTSa5 SDqfNFyPY/Xylx8zfqZprrsk7lynaICZzDvShy8WdAxxvNg/dFwC9gjYW2k7Fhwo LmheKg9sSlPcrziPxeGdGPo7BrzMO/XYj7bPSxZeAtLB9eOsWxYP/rAGdPYjZLxY pQkWmn+2dE/vtnax86s+YfdywrlZQI22p/Ja5hm9OvJtXmUuTMkRthtQ+dOkvoo/ OY1z6bb/FdAS3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:55:56 2025 by rpki-client