This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft File: Fas-cvc0DahW6T1i7o0CPx18juc.mft (raw, json) Hash identifier: M4r39/wamtAVx6YBcm8Pp/J6RjcSrpzC8qxv+WsVDTc= Subject key identifier: 53:82:1D:4A:3C:14:93:81:6D:02:5E:93:9C:DF:B2:B4:90:8B:57:2D Authority key identifier: 15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7 Certificate issuer: /CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7 Certificate serial: 019AF23FC331EFD92167B88DF1BADB850507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft Manifest number: 0CA7 Signing time: Sat 06 Dec 2025 06:00:56 +0000 Manifest this update: Sat 06 Dec 2025 06:00:56 +0000 Manifest next update: Sun 07 Dec 2025 06:00:56 +0000 Files and hashes: 1: 7JWKgvAHAa8B28vXNz3LbsvM1_0.roa (hash: aiThNQ8MveF/powu4k+TgcUEIjwVdj4V/Vhk6YBFQDA=) 2: Fas-cvc0DahW6T1i7o0CPx18juc.crl (hash: d4nveAcjA0e4oaw6itbn70cjB32PC28L/b00PZrxcQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c3:31:ef:d9:21:67:b8:8d:f1:ba:db:85:05:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ab3e72f7340da856e93d62ee8d023f1d7c8ee7 Validity Not Before: Dec 6 06:00:56 2025 GMT Not After : Dec 7 06:00:56 2025 GMT Subject: CN=53821d4a3c1493816d025e939cdfb2b4908b572d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5a:64:1a:3b:64:ac:07:1f:a2:38:97:bb:9c: ea:0d:b3:e9:e2:f8:4a:c5:85:05:80:58:20:63:6a: b5:bd:cd:0b:79:49:6e:27:f3:20:e9:42:ef:a5:74: 97:f0:03:ad:9b:ea:72:02:a0:ae:d0:f8:96:f8:4d: b0:a8:87:9b:8e:ac:f9:29:6f:87:25:93:49:6c:25: 29:6e:26:19:23:80:f9:b9:03:30:20:ab:32:61:1e: af:56:7b:62:7a:28:e2:50:69:70:13:b1:e6:0d:35: 49:c1:73:9d:bb:51:a0:ca:cf:0a:eb:1e:0b:2a:8a: 87:23:08:5e:37:19:b0:ff:66:ce:c8:af:66:f8:6d: f7:2d:f5:37:ff:bd:1b:49:41:3e:62:73:d7:5b:0c: fb:e6:a6:77:09:45:ae:33:2e:04:bb:d5:ab:23:e9: 9d:36:eb:97:bc:07:69:fb:3e:75:a3:5f:b0:cc:87: ce:f7:2e:60:c5:54:45:33:47:1a:22:7e:e8:28:13: 73:80:f4:dd:55:98:b1:8e:22:c5:8b:4b:39:b9:9d: a2:00:3f:01:6f:d4:8d:52:d6:d5:e3:38:6f:10:df: c2:bf:ed:20:6e:f9:40:45:06:57:4b:57:0f:f3:6d: b8:f9:a4:cc:02:d4:84:e7:ac:ab:2d:e2:71:fe:81: c7:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:82:1D:4A:3C:14:93:81:6D:02:5E:93:9C:DF:B2:B4:90:8B:57:2D X509v3 Authority Key Identifier: keyid:15:AB:3E:72:F7:34:0D:A8:56:E9:3D:62:EE:8D:02:3F:1D:7C:8E:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fas-cvc0DahW6T1i7o0CPx18juc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9c130b-e15e-4b6d-b5fb-719b0497e7cc/1/Fas-cvc0DahW6T1i7o0CPx18juc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:48:b4:4f:48:f5:80:ae:47:a9:2b:c0:4f:26:e0:be:e2:23: af:a9:e4:bf:46:6c:89:47:ff:c9:cf:01:1d:60:5c:c4:9d:43: 6c:79:f3:af:cf:5e:d3:93:d7:9a:10:35:b7:ad:93:d5:ae:8e: f4:a4:ff:ac:d4:7d:8a:15:05:cd:4e:b5:56:42:49:8b:ed:8d: 2a:e7:8d:11:7d:12:c5:b6:24:61:b5:a8:1a:eb:62:5f:ee:2f: 8d:1b:ba:82:5f:02:1c:f7:46:ed:9b:dd:cb:a5:bc:dd:14:d5: 85:c5:49:aa:4f:b8:7e:c8:bc:7a:d4:d9:7a:b1:40:9c:fa:96: f3:c4:35:a2:32:7f:19:42:09:ba:90:d9:e6:81:57:e3:ec:93: 60:07:82:69:0f:a2:d9:e8:34:ff:d9:5b:16:e0:1e:dd:54:1b: a5:fd:84:7a:b8:a6:eb:61:05:d2:ad:67:a0:26:d1:3c:75:55: e1:0a:90:10:c5:f8:b8:ef:1c:b0:5e:13:55:38:20:84:e6:7d: 73:c5:29:57:72:2c:9b:7a:ee:6a:4e:79:fc:87:be:6a:e2:08: 7d:33:0e:ce:6a:4a:11:bc:35:88:c1:4b:22:52:44:0c:2d:79: f4:1d:4b:f9:f9:fa:4d:3d:34:47:32:75:31:fe:4a:50:76:6a: 3e:3d:91:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8Mx79khZ7iN8brbhQUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWIzZTcyZjczNDBkYTg1NmU5M2Q2MmVlOGQwMjNmMWQ3 YzhlZTcwHhcNMjUxMjA2MDYwMDU2WhcNMjUxMjA3MDYwMDU2WjAzMTEwLwYDVQQD Eyg1MzgyMWQ0YTNjMTQ5MzgxNmQwMjVlOTM5Y2RmYjJiNDkwOGI1NzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1pkGjtkrAcfojiXu5zqDbPp4vhK xYUFgFggY2q1vc0LeUluJ/Mg6ULvpXSX8AOtm+pyAqCu0PiW+E2wqIebjqz5KW+H JZNJbCUpbiYZI4D5uQMwIKsyYR6vVntieijiUGlwE7HmDTVJwXOdu1Ggys8K6x4L KoqHIwheNxmw/2bOyK9m+G33LfU3/70bSUE+YnPXWwz75qZ3CUWuMy4Eu9WrI+md NuuXvAdp+z51o1+wzIfO9y5gxVRFM0caIn7oKBNzgPTdVZixjiLFi0s5uZ2iAD8B b9SNUtbV4zhvEN/Cv+0gbvlARQZXS1cP8224+aTMAtSE56yrLeJx/oHH4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOCHUo8FJOBbQJek5zfsrSQi1ctMB8GA1UdIwQY MBaAFBWrPnL3NA2oVuk9Yu6NAj8dfI7nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmIt NzE5YjA0OTdlN2NjLzEvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85YzEzMGItZTE1ZS00YjZkLWI1ZmItNzE5YjA0OTdlN2Nj LzEvRmFzLWN2YzBEYWhXNlQxaTdvMENQeDE4anVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMki0T0j1 gK5HqSvATybgvuIjr6nkv0ZsiUf/yc8BHWBcxJ1DbHnzr89e05PXmhA1t62T1a6O 9KT/rNR9ihUFzU61VkJJi+2NKueNEX0SxbYkYbWoGutiX+4vjRu6gl8CHPdG7Zvd y6W83RTVhcVJqk+4fsi8etTZerFAnPqW88Q1ojJ/GUIJupDZ5oFX4+yTYAeCaQ+i 2eg0/9lbFuAe3VQbpf2Eerim62EF0q1noCbRPHVV4QqQEMX4uO8csF4TVTgghOZ9 c8UpV3Ism3ruak55/Ie+auIIfTMOzmpKEbw1iMFLIlJEDC159B1L+fn6TT00RzJ1 Mf5KUHZqPj2RRA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:27 2025 by rpki-client