This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json) Hash identifier: 23lauKcJApPk+Z0Qxwzb6yJ3oGPxPloYVnFYcIsRcG8= Subject key identifier: ED:E7:C9:90:30:61:CB:64:B8:53:20:BE:ED:18:A2:FF:52:EC:22:C9 Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8 Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8 Certificate serial: 019AF19B183B98456641ADD37372844175D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: B9YjHlIrS/HMvuBLzM1Iy6zPJMgHwOBbK5gAM3VyWc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:18:3b:98:45:66:41:ad:d3:73:72:84:41:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=ede7c9903061cb64b85320beed18a2ff52ec22c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:11:ac:0f:ef:8b:a0:e6:3b:1b:9c:66:d4:84: 47:bc:99:29:ca:8e:d8:e9:91:36:09:4e:67:db:02: 0e:94:c3:1b:20:45:bf:46:17:f1:6e:c0:cb:93:65: cf:0b:2e:c5:90:c7:08:4b:a3:c2:81:4a:b7:53:62: 85:7c:1b:a6:ec:b3:b7:27:4b:ea:94:13:27:27:17: a5:2d:7c:5b:a6:f4:e3:a5:a4:10:97:fb:b1:2e:0c: 6e:b8:62:93:cd:1f:df:95:74:6b:49:52:50:45:60: 5b:d2:07:1b:4b:83:13:a7:94:7d:d5:68:a1:fa:3c: 49:6e:62:1e:f3:c7:c8:a4:56:3c:1f:87:0c:9b:a0: 6f:93:54:1c:a6:8c:e2:3b:2b:15:f9:db:63:0b:96: e8:ed:19:e9:11:00:27:95:a3:54:fc:e0:d4:2a:d7: de:fb:14:b4:2a:23:f2:b1:fb:01:ad:05:09:18:bc: 75:c3:72:14:c5:e3:c4:c4:69:bc:51:fa:03:ed:b0: 2b:13:86:95:58:42:6a:31:0f:60:d4:d1:2f:fe:b9: a9:49:b5:b8:47:5c:d2:d2:e1:f5:65:62:bf:65:e7: 7b:29:22:91:ff:7e:54:58:b7:ed:6a:34:38:37:10: 5e:98:f4:23:4c:a1:8c:5e:3d:4e:2b:1d:9a:ce:eb: 81:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E7:C9:90:30:61:CB:64:B8:53:20:BE:ED:18:A2:FF:52:EC:22:C9 X509v3 Authority Key Identifier: keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:40:68:2d:99:ea:8d:8d:13:db:0c:b2:2f:eb:1a:6c:dd:0a: 84:20:7f:7d:8e:3f:89:e2:fa:24:bc:29:1b:e9:c0:39:e8:00: f9:29:d6:df:98:1f:72:d6:ca:c4:a1:52:c7:9e:42:df:5e:31: c2:e8:d4:01:63:55:0b:1a:8e:0e:79:81:0c:18:4e:5d:e4:b6: e0:c9:70:cc:a5:f2:4d:6e:2b:9b:fa:12:38:de:b3:32:27:5a: 8a:70:bc:5c:c0:98:c6:47:57:7f:ca:6d:93:06:a0:ca:19:c7: 3e:c5:db:75:d4:64:b3:fd:0b:c8:92:bb:d9:74:0b:be:f8:29: f5:53:63:3c:56:eb:4e:18:7a:df:1e:63:d0:1e:17:94:ce:4f: 13:d9:82:3c:96:c5:7b:f2:c3:e4:db:1e:24:32:28:1d:11:35: a7:fc:c1:42:09:b5:da:7e:d6:c3:b4:0a:38:73:29:29:80:37: 02:ac:7a:d3:fe:51:e7:b1:34:85:80:4c:00:4d:7d:90:db:48: 57:a7:22:c6:4c:87:fd:98:f8:3e:b4:22:04:1e:5a:cf:c9:2c: a5:14:af:a8:80:d6:ef:ee:1b:12:c3:28:38:08:4b:63:c3:21: 94:c2:68:ab:3a:0f:83:d0:57:3b:45:1c:fa:67:54:33:54:b0: 31:98:e3:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxg7mEVmQa3Tc3KEQXXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzBhMWU1MGQxYzAwOGUxZmZhZDVmMmY3NTc5ODI5NGQ1 YzRlZDgwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhlZGU3Yzk5MDMwNjFjYjY0Yjg1MzIwYmVlZDE4YTJmZjUyZWMyMmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xGsD++LoOY7G5xm1IRHvJkpyo7Y 6ZE2CU5n2wIOlMMbIEW/RhfxbsDLk2XPCy7FkMcIS6PCgUq3U2KFfBum7LO3J0vq lBMnJxelLXxbpvTjpaQQl/uxLgxuuGKTzR/flXRrSVJQRWBb0gcbS4MTp5R91Wih +jxJbmIe88fIpFY8H4cMm6Bvk1QcpoziOysV+dtjC5bo7RnpEQAnlaNU/ODUKtfe +xS0KiPysfsBrQUJGLx1w3IUxePExGm8UfoD7bArE4aVWEJqMQ9g1NEv/rmpSbW4 R1zS0uH1ZWK/Zed7KSKR/35UWLftajQ4NxBemPQjTKGMXj1OKx2azuuB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3nyZAwYctkuFMgvu0Yov9S7CLJMB8GA1UdIwQY MBaAFH7AoeUNHACOH/rV8vdXmClNXE7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTkt MzcyZmY2NjZiZTJlLzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTktMzcyZmY2NjZiZTJl LzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVUBoLZnq jY0T2wyyL+sabN0KhCB/fY4/ieL6JLwpG+nAOegA+SnW35gfctbKxKFSx55C314x wujUAWNVCxqODnmBDBhOXeS24MlwzKXyTW4rm/oSON6zMidainC8XMCYxkdXf8pt kwagyhnHPsXbddRks/0LyJK72XQLvvgp9VNjPFbrThh63x5j0B4XlM5PE9mCPJbF e/LD5NseJDIoHRE1p/zBQgm12n7Ww7QKOHMpKYA3Aqx60/5R57E0hYBMAE19kNtI V6cixkyH/Zj4PrQiBB5az8kspRSvqIDW7+4bEsMoOAhLY8MhlMJoqzoPg9BXO0Uc +mdUM1SwMZjjqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:27 2025 by rpki-client