This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft File: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json) Hash identifier: XKPZ+sUQRqPIYO1zTkO/BvIZakPIABev3CUofSIwpz0= Subject key identifier: E1:D6:89:DF:46:A6:FE:0F:9E:45:AA:3C:C7:47:39:37:BD:7C:54:5D Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 Certificate issuer: /CN=14c66a786e6ef31674bec6833c78aebec1633972 Certificate serial: 019AF277226BFF93BDF0435CD6E8FC3CC0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:01:24 +0000 Manifest this update: Sat 06 Dec 2025 07:01:24 +0000 Manifest next update: Sun 07 Dec 2025 07:01:24 +0000 Files and hashes: 1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: 5gcVQS92ajSJvJ+1mCu3vTUTyP81XidbopRNINH6r90=) 2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:22:6b:ff:93:bd:f0:43:5c:d6:e8:fc:3c:c0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972 Validity Not Before: Dec 6 07:01:24 2025 GMT Not After : Dec 7 07:01:24 2025 GMT Subject: CN=e1d689df46a6fe0f9e45aa3cc7473937bd7c545d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7f:e3:64:21:39:41:b4:17:6f:64:f9:95:f1: 2a:aa:1c:00:11:82:14:dd:be:22:6b:a8:92:2a:22: 9b:63:a8:85:f6:6b:7c:9d:08:0c:41:52:64:95:83: 35:cd:f5:dd:99:fb:8e:ab:b1:ec:bc:9d:3d:3a:42: 02:3f:cc:40:6f:c8:07:2c:84:65:5c:04:bb:52:75: 3a:18:72:3c:94:b8:2d:d1:f9:7f:55:98:fa:e9:3b: 46:a6:4f:9a:46:31:e1:c3:29:cd:ba:3e:57:25:a2: 5f:34:47:3b:25:a6:fd:a3:e6:1c:1d:68:39:fb:81: 87:df:43:ad:e4:8c:64:a0:0b:5c:40:8d:f5:20:65: 08:58:b4:46:34:53:27:9a:3f:eb:01:28:b0:7c:f8: f2:93:31:57:e5:7e:5b:b8:33:84:74:2f:92:f4:d3: 61:b1:01:bb:c8:e5:ad:ca:59:23:ea:88:9b:b9:f3: fd:86:23:0c:ac:1d:72:b0:8a:a3:ee:23:6e:81:2c: b0:c2:f4:2d:34:67:fd:29:90:0a:1b:9c:1b:68:93: 28:30:3f:a5:b9:bd:3f:6b:27:47:d6:e8:d5:a6:b1: 5e:85:ab:bd:49:39:63:78:9d:25:47:50:ee:49:da: b2:7a:ec:22:ae:69:11:c8:8c:27:be:ae:c5:e1:b9: ef:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D6:89:DF:46:A6:FE:0F:9E:45:AA:3C:C7:47:39:37:BD:7C:54:5D X509v3 Authority Key Identifier: keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:1f:82:27:19:fd:cc:ee:3b:39:52:b3:2c:e9:ac:d6:69:73: 84:2e:c8:80:73:9e:3d:9b:2a:8a:70:1f:1c:dd:88:91:85:ca: b9:88:dc:ad:bd:ec:75:d1:dd:84:46:b7:bb:b6:ca:a7:be:77: 34:97:0f:a5:ab:4e:f6:d6:56:23:18:9f:a7:51:01:02:f7:a9: 0a:fa:8c:e8:02:50:64:a3:29:7f:11:d5:82:23:5d:26:f4:e8: 44:65:00:0e:5c:2c:52:37:87:a1:6e:73:d5:75:ea:87:1b:1e: 5b:84:49:4c:2d:3c:ad:82:1e:16:fe:a6:8a:ae:07:aa:71:f2: d9:a7:2c:c9:bf:d3:76:17:bb:a9:e6:fd:84:1a:ef:b4:88:4b: 89:78:13:df:13:7a:7f:1a:1a:55:4b:94:67:b7:a0:ba:99:bd: 91:36:95:2b:86:21:2e:71:c7:b6:99:18:65:b5:7a:33:5e:8f: 60:5c:66:7f:30:00:7b:50:d8:8f:ac:74:4b:58:d0:b5:a2:ec: a2:18:0b:06:d6:92:ad:99:43:3f:6f:28:c9:c5:75:d7:43:c2: 51:76:bc:b7:79:c9:5e:26:08:89:c0:cb:f2:0d:72:53:07:4e: 4c:cf:a6:6d:ca:25:5d:ca:f2:54:76:a1:02:98:0f:79:0f:af: 1d:4b:0d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyJr/5O98ENc1uj8PMDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzY2YTc4NmU2ZWYzMTY3NGJlYzY4MzNjNzhhZWJlYzE2 MzM5NzIwHhcNMjUxMjA2MDcwMTI0WhcNMjUxMjA3MDcwMTI0WjAzMTEwLwYDVQQD EyhlMWQ2ODlkZjQ2YTZmZTBmOWU0NWFhM2NjNzQ3MzkzN2JkN2M1NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoX/jZCE5QbQXb2T5lfEqqhwAEYIU 3b4ia6iSKiKbY6iF9mt8nQgMQVJklYM1zfXdmfuOq7HsvJ09OkICP8xAb8gHLIRl XAS7UnU6GHI8lLgt0fl/VZj66TtGpk+aRjHhwynNuj5XJaJfNEc7Jab9o+YcHWg5 +4GH30Ot5IxkoAtcQI31IGUIWLRGNFMnmj/rASiwfPjykzFX5X5buDOEdC+S9NNh sQG7yOWtylkj6oibufP9hiMMrB1ysIqj7iNugSywwvQtNGf9KZAKG5wbaJMoMD+l ub0/aydH1ujVprFehau9STljeJ0lR1DuSdqyeuwirmkRyIwnvq7F4bnvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHWid9Gpv4PnkWqPMdHOTe9fFRdMB8GA1UdIwQY MBaAFBTGanhubvMWdL7Ggzx4rr7BYzlyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWIt MzllNzZkYjJmODA4LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hMTZjNGUtYjVhZC00N2Q3LThiNWItMzllNzZkYjJmODA4 LzEvRk1acWVHNXU4eFowdnNhRFBIaXV2c0ZqT1hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdB+CJxn9 zO47OVKzLOms1mlzhC7IgHOePZsqinAfHN2IkYXKuYjcrb3sddHdhEa3u7bKp753 NJcPpatO9tZWIxifp1EBAvepCvqM6AJQZKMpfxHVgiNdJvToRGUADlwsUjeHoW5z 1XXqhxseW4RJTC08rYIeFv6miq4HqnHy2acsyb/Tdhe7qeb9hBrvtIhLiXgT3xN6 fxoaVUuUZ7egupm9kTaVK4YhLnHHtpkYZbV6M16PYFxmfzAAe1DYj6x0S1jQtaLs ohgLBtaSrZlDP28oycV110PCUXa8t3nJXiYIicDL8g1yUwdOTM+mbcolXcryVHah ApgPeQ+vHUsNsw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:00 2025 by rpki-client