This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft File: sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json) Hash identifier: YtrYnIAvrOup6Px9CeaEmGoZaLxvdvxxd0UL1B2ouW4= Subject key identifier: 61:DD:65:B1:1C:4D:2D:5A:39:EB:A8:3C:35:F3:7C:60:85:B6:54:B5 Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903 Certificate serial: 019AF276D2BCFF7B79A0D5EF4EE5BC8D35DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft Manifest number: 151A Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: 2eKsq5jA6VcPDqKfgIi0E91JruI.roa (hash: qGG/9s4LOddy+BisdFXc5EQ3ZhAY8xD4+uBXz/g3pwU=) 2: gEXvMQFDNz1aGEXTxBfhGOGVeNo.roa (hash: ajVAuxCTYl0Gl8xjRk/pbvxecOxPr7KE3CecnpOLH8Y=) 3: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: Udkn2kYNpxKTCK4xV8FzFEZ6QRoF5hYktaXX0MqR9hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d2:bc:ff:7b:79:a0:d5:ef:4e:e5:bc:8d:35:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903 Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=61dd65b11c4d2d5a39eba83c35f37c6085b654b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:fe:d3:bf:ba:72:04:96:d9:74:b3:82:75: e5:9a:9a:70:0a:8a:6f:31:0d:48:b1:23:7b:48:6e: 4c:36:9d:17:ae:cf:96:dd:26:cc:d4:f8:98:f7:53: 18:6b:5f:cf:ab:fc:53:e3:9d:18:34:f6:86:6a:82: 10:67:18:76:58:b1:e7:ea:e5:54:01:5d:0d:06:a2: 36:b8:b7:7f:8e:41:a2:56:fc:29:71:44:86:0b:72: 06:0c:33:49:7f:a2:25:4d:e4:54:1d:3e:b5:17:92: b4:5e:55:dd:23:b0:5a:7e:ad:bd:d4:31:77:48:dd: fd:a2:50:8c:99:9d:c4:2e:d0:fa:4e:8e:d5:3b:09: 5d:c7:3f:87:8a:8c:27:1a:b9:7b:53:b1:9b:f9:6e: ce:01:2f:96:d9:0b:99:c3:ae:51:61:df:3e:af:43: 27:07:f7:04:81:01:5b:31:36:02:82:90:71:b7:1d: c5:a0:74:57:77:f7:93:7b:cc:e4:9c:af:fd:1e:a6: ac:db:f3:7b:7d:36:51:9c:8e:d6:e0:c2:1e:ff:8f: a2:57:27:59:9c:32:16:03:12:4d:e5:6a:0f:cd:d8: 04:51:0c:0c:61:fe:25:02:9d:68:7c:24:b9:f0:3d: 08:59:8a:17:69:28:92:fd:88:6e:ef:b1:bc:03:f0: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DD:65:B1:1C:4D:2D:5A:39:EB:A8:3C:35:F3:7C:60:85:B6:54:B5 X509v3 Authority Key Identifier: keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:65:82:55:52:96:2a:c3:e0:c9:ef:81:bf:e0:98:5b:d1:25: c6:df:8f:db:5b:0f:3c:34:97:2d:f9:5c:23:4d:ce:b2:e3:49: 54:f3:b6:59:2a:25:f7:93:e3:09:77:4f:0e:90:6b:a6:43:96: af:ac:6d:99:44:17:d9:39:4c:4d:fb:e6:58:75:39:3b:d1:a9: ab:91:4e:6a:47:bf:be:2b:f3:dd:a2:4b:25:98:9e:cb:c2:33: af:5f:d8:38:d3:1f:15:aa:6d:53:f3:cc:96:25:ed:9f:ca:89: 2d:17:b8:df:8e:c8:a9:47:40:c2:c3:17:6a:27:aa:87:11:f0: e5:3a:5f:e9:96:6b:c8:a1:e7:55:fb:e8:be:69:b9:9b:e9:06: 20:2d:cd:27:bd:78:27:15:a9:54:d4:95:fa:f9:b3:22:17:92: a3:a3:ce:36:fa:58:4c:ee:09:a4:06:64:5e:09:01:4c:ca:59: 4b:ba:4c:df:e0:49:c7:4c:54:0d:31:d6:3a:52:10:25:df:44: 2b:bd:d2:85:97:81:e7:e8:a4:b1:9b:91:81:3c:b5:57:71:47: 83:08:4b:9f:81:29:b2:c0:06:ec:0c:09:c3:c6:00:80:09:36: 75:76:33:89:cf:02:6b:b5:c9:2f:f4:8a:a1:a5:58:39:ba:93: ec:b9:cf:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtK8/3t5oNXvTuW8jTXaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz OGY5MDMwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD Eyg2MWRkNjViMTFjNGQyZDVhMzllYmE4M2MzNWYzN2M2MDg1YjY1NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztL+07+6cgSW2XSzgnXlmppwCopv MQ1IsSN7SG5MNp0Xrs+W3SbM1PiY91MYa1/Pq/xT450YNPaGaoIQZxh2WLHn6uVU AV0NBqI2uLd/jkGiVvwpcUSGC3IGDDNJf6IlTeRUHT61F5K0XlXdI7Bafq291DF3 SN39olCMmZ3ELtD6To7VOwldxz+HiownGrl7U7Gb+W7OAS+W2QuZw65RYd8+r0Mn B/cEgQFbMTYCgpBxtx3FoHRXd/eTe8zknK/9Hqas2/N7fTZRnI7W4MIe/4+iVydZ nDIWAxJN5WoPzdgEUQwMYf4lAp1ofCS58D0IWYoXaSiS/Yhu77G8A/AGgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHdZbEcTS1aOeuoPDXzfGCFtlS1MB8GA1UdIwQY MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt NmVkMzMxZjMxZTA5LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5 LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGWCVVKW KsPgye+Bv+CYW9Elxt+P21sPPDSXLflcI03OsuNJVPO2WSol95PjCXdPDpBrpkOW r6xtmUQX2TlMTfvmWHU5O9Gpq5FOake/vivz3aJLJZiey8Izr1/YONMfFaptU/PM liXtn8qJLRe4347IqUdAwsMXaieqhxHw5Tpf6ZZryKHnVfvovmm5m+kGIC3NJ714 JxWpVNSV+vmzIheSo6PONvpYTO4JpAZkXgkBTMpZS7pM3+BJx0xUDTHWOlIQJd9E K73ShZeB5+iksZuRgTy1V3FHgwhLn4EpssAG7AwJw8YAgAk2dXYzic8Ca7XJL/SK oaVYObqT7LnPog== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:05 2025 by rpki-client