This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json) Hash identifier: LguDbSGKevcIxunnQeHNU/gk2GHTNJoKMu1VyiXlZh0= Subject key identifier: 71:11:65:33:B3:97:44:E6:6C:DA:D9:08:C5:94:D4:39:F8:3A:C0:D3 Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82 Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382 Certificate serial: 019AF31BFAE77A00B55AC6F7E66FE42ABDBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 10:01:28 +0000 Manifest this update: Sat 06 Dec 2025 10:01:28 +0000 Manifest next update: Sun 07 Dec 2025 10:01:28 +0000 Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: 0mbpoJ/8Tw3Bg1RwgNX6SIhO5ar3pWgKmDSTqXR4Dc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:fa:e7:7a:00:b5:5a:c6:f7:e6:6f:e4:2a:bd:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382 Validity Not Before: Dec 6 10:01:28 2025 GMT Not After : Dec 7 10:01:28 2025 GMT Subject: CN=71116533b39744e66cdad908c594d439f83ac0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:a2:06:9b:d8:41:35:48:cc:b0:c0:3c:b6: 9f:bd:b9:06:b3:ad:14:51:af:f5:95:44:af:b6:a4: e4:1f:17:2f:f2:05:e8:77:1c:84:fd:13:7b:b2:25: 5c:48:3f:02:b7:d4:fc:83:27:95:66:7c:93:c3:ab: 7d:ca:dd:aa:7c:d5:dc:4b:a3:8d:ba:07:94:5b:6b: 12:5a:01:04:cd:6f:83:05:5a:b8:48:78:82:a3:b3: af:b5:44:96:ff:b1:0b:d6:a4:69:a8:6a:91:39:95: fc:9d:44:78:02:9c:62:19:c0:c8:fa:01:4e:ea:9d: 61:d2:a7:42:92:67:a6:ed:94:93:ee:c5:d9:dd:b1: c5:cb:2e:cd:45:37:37:b1:5d:ed:8e:3f:fb:f7:c1: df:e9:56:aa:c9:e4:54:8d:ac:3e:80:90:af:2d:5f: 32:ed:21:4f:c4:e8:e3:27:ff:e9:0f:4d:76:f7:3e: 9d:5f:5b:10:c7:d3:3b:47:32:aa:df:79:6b:97:cf: 7e:67:fe:a3:51:2c:10:8e:90:0f:8c:50:b7:e8:9a: 6a:d0:b7:b2:fa:86:ab:65:24:9a:44:e9:0f:50:9c: db:be:98:c3:e7:bb:71:ac:97:78:fa:f8:e8:7b:76: 6b:be:a3:8e:95:6e:55:f1:d4:89:2e:c5:fc:5e:df: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:11:65:33:B3:97:44:E6:6C:DA:D9:08:C5:94:D4:39:F8:3A:C0:D3 X509v3 Authority Key Identifier: keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9f:d2:0f:04:71:44:70:0b:b9:6d:3d:1f:ef:b7:0e:c7:df: 25:28:19:e9:bf:ac:2c:27:dc:ff:a0:04:06:9b:1e:b7:f4:fb: d7:fc:6d:4a:d7:2b:d9:06:37:cb:bf:f5:ed:e3:f4:e4:a7:ef: cc:bf:25:92:30:49:40:16:6e:96:60:da:15:0e:84:67:6a:40: c1:e3:9b:be:a9:39:d6:1a:5c:8d:ee:f9:48:d7:f1:d7:11:b7: fa:f1:f2:e9:20:b3:56:e8:a4:37:b2:63:fb:17:01:55:91:d8: f8:67:af:e3:fd:da:d7:fd:cf:3c:4e:55:0f:24:27:b8:17:2b: 35:a7:10:78:60:fb:42:d4:a0:2e:13:9f:dd:c1:cf:4e:79:be: d8:2f:e2:3e:83:81:0e:5d:7d:0e:57:27:92:a7:54:90:db:5f: c8:78:3d:ba:dd:d3:ef:44:ca:f4:69:a5:e9:98:28:f0:f6:8d: 46:6b:ff:fc:45:c1:af:35:ce:20:cd:1c:c6:46:72:6e:b5:08: 02:83:7a:be:4b:9e:30:28:34:0c:f2:33:22:64:81:24:11:38: 65:c3:b0:81:93:99:01:7f:0b:78:f4:a2:28:4f:85:b5:c6:16: 89:87:79:93:ad:cd:b8:3a:ce:24:bd:58:66:4f:75:40:e2:69: 81:5c:e8:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/rnegC1Wsb35m/kKr2+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2QzZDE4YWM5M2I1NmZkMmIzMTgwMDAxNjVkY2Q2Y2Mz MDEzODIwHhcNMjUxMjA2MTAwMTI4WhcNMjUxMjA3MTAwMTI4WjAzMTEwLwYDVQQD Eyg3MTExNjUzM2IzOTc0NGU2NmNkYWQ5MDhjNTk0ZDQzOWY4M2FjMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjuiBpvYQTVIzLDAPLafvbkGs60U Ua/1lUSvtqTkHxcv8gXodxyE/RN7siVcSD8Ct9T8gyeVZnyTw6t9yt2qfNXcS6ON ugeUW2sSWgEEzW+DBVq4SHiCo7OvtUSW/7EL1qRpqGqROZX8nUR4ApxiGcDI+gFO 6p1h0qdCkmem7ZST7sXZ3bHFyy7NRTc3sV3tjj/798Hf6VaqyeRUjaw+gJCvLV8y 7SFPxOjjJ//pD0129z6dX1sQx9M7RzKq33lrl89+Z/6jUSwQjpAPjFC36Jpq0Ley +oarZSSaROkPUJzbvpjD57txrJd4+vjoe3ZrvqOOlW5V8dSJLsX8Xt/c5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHERZTOzl0TmbNrZCMWU1Dn4OsDTMB8GA1UdIwQY MBaAFBXNPRisk7Vv0rMYAAFl3NbMMBOCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUt NDFiYzI4YzFkY2FjLzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzI2NjktOTc3ZS00MzA5LWE4ZGUtNDFiYzI4YzFkY2Fj LzEvRmMwOUdLeVR0V19Tc3hnQUFXWGMxc3d3RTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJ/SDwRx RHALuW09H++3DsffJSgZ6b+sLCfc/6AEBpset/T71/xtStcr2QY3y7/17eP05Kfv zL8lkjBJQBZulmDaFQ6EZ2pAweObvqk51hpcje75SNfx1xG3+vHy6SCzVuikN7Jj +xcBVZHY+Gev4/3a1/3PPE5VDyQnuBcrNacQeGD7QtSgLhOf3cHPTnm+2C/iPoOB Dl19DlcnkqdUkNtfyHg9ut3T70TK9Gml6Zgo8PaNRmv//EXBrzXOIM0cxkZybrUI AoN6vkueMCg0DPIzImSBJBE4ZcOwgZOZAX8LePSiKE+FtcYWiYd5k63NuDrOJL1Y Zk91QOJpgVzoaw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:54 2025 by rpki-client