This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json) Hash identifier: /zVQzAItsDDoLdT//h94fHAkuNTbAFC9284EU2c5tYs= Subject key identifier: 96:E9:72:53:0C:29:6E:17:0C:28:25:EC:5A:5A:24:88:5F:2A:6F:1E Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Certificate serial: 019AF2771CD9078161E454A25267560E2CE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 07:01:23 +0000 Manifest this update: Sat 06 Dec 2025 07:01:23 +0000 Manifest next update: Sun 07 Dec 2025 07:01:23 +0000 Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: 7NfyLAuPiKsiNJqX6uDsXqJMUuAtFRCuq65rNalWM4k=) 2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:1c:d9:07:81:61:e4:54:a2:52:67:56:0e:2c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679 Validity Not Before: Dec 6 07:01:23 2025 GMT Not After : Dec 7 07:01:23 2025 GMT Subject: CN=96e972530c296e170c2825ec5a5a24885f2a6f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:94:e9:7f:05:8a:52:68:99:53:f3:c3:77:1b: fe:43:f5:f8:a0:37:f2:83:77:73:2c:7a:c4:6c:53: d1:61:2a:cd:09:13:78:cd:47:99:88:7b:57:df:a3: 11:b7:a6:7a:ed:f5:ec:8a:27:de:fb:c4:90:59:29: 72:4c:ee:17:b9:33:12:03:c3:58:e7:8b:fd:ff:46: ea:30:5b:51:e1:23:2b:30:e2:d8:f6:af:06:59:7d: 7d:d7:90:2b:6b:44:da:80:23:a1:96:5b:13:7d:a2: eb:a3:ea:42:90:53:cb:d2:36:3e:fa:78:e3:74:61: c0:79:48:6d:07:46:0e:43:ce:85:d3:ea:5e:b2:17: c2:32:8d:49:f9:7d:91:39:cb:99:a8:8b:26:70:65: a1:81:7b:d2:1f:a5:f7:16:cc:6f:ee:7a:e4:a4:cc: 92:c5:bd:bf:ce:c2:ad:65:54:52:4f:12:ee:10:9b: 75:46:f7:3c:e2:aa:19:03:ad:56:d0:74:2e:7b:c6: 53:eb:7f:ca:a0:e7:2a:95:ef:91:2d:58:70:c6:2f: 8b:1e:fb:43:4b:58:59:ce:3c:2a:a9:c4:d6:0f:f2: 11:4b:18:dc:a8:cc:60:32:cf:ac:7b:67:17:5a:60: 48:fa:f1:6b:60:c8:5b:9e:3f:41:e6:67:85:2a:0d: cb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E9:72:53:0C:29:6E:17:0C:28:25:EC:5A:5A:24:88:5F:2A:6F:1E X509v3 Authority Key Identifier: keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:e5:1d:15:82:99:ba:77:1c:51:b4:6a:ff:e8:9f:ab:07:b6: 38:24:86:b0:be:f8:15:bf:95:f2:fe:77:02:cf:53:f3:9a:be: fa:28:be:b5:be:43:07:23:1d:4e:bd:43:80:80:fe:11:f1:3f: 44:ce:78:8f:77:ee:87:7d:b8:19:4b:c2:20:66:2a:dc:fe:de: c2:ab:06:33:ba:fb:6a:fc:da:dc:2f:34:8c:62:f7:ab:a3:93: b5:97:8f:51:49:2f:95:91:cb:3a:8c:f3:05:fa:8b:4e:f7:ec: 99:05:79:b7:2a:85:04:83:18:18:43:c2:39:80:b0:91:e7:8d: e7:ce:00:e6:41:9d:27:f3:1e:36:87:47:9a:b7:56:61:34:c8: b5:82:bf:27:f5:5f:c3:06:26:05:f2:b3:db:12:fd:32:bd:3d: 7e:15:8a:bf:ae:42:96:28:42:fe:4c:08:09:a1:41:06:c1:bc: 04:73:47:cc:27:23:a6:56:e5:07:cd:71:72:ac:3a:22:b8:63: 1f:ce:8d:dc:10:ec:ca:32:27:79:10:99:06:fb:0d:26:ec:b4: ba:96:e4:41:fa:1c:34:f5:b4:28:8d:7c:80:f2:5a:8f:af:02: 90:da:9c:4c:6b:ea:86:dd:a0:ad:32:18:f2:5d:fa:bf:86:e1: 75:fd:00:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxzZB4Fh5FSiUmdWDizgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDRlNmM1MGNiNjkyZGZiNjQwZjZmODhlMjI4YTJkOWIw NmM2NzkwHhcNMjUxMjA2MDcwMTIzWhcNMjUxMjA3MDcwMTIzWjAzMTEwLwYDVQQD Eyg5NmU5NzI1MzBjMjk2ZTE3MGMyODI1ZWM1YTVhMjQ4ODVmMmE2ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5TpfwWKUmiZU/PDdxv+Q/X4oDfy g3dzLHrEbFPRYSrNCRN4zUeZiHtX36MRt6Z67fXsiife+8SQWSlyTO4XuTMSA8NY 54v9/0bqMFtR4SMrMOLY9q8GWX1915Ara0TagCOhllsTfaLro+pCkFPL0jY++njj dGHAeUhtB0YOQ86F0+peshfCMo1J+X2ROcuZqIsmcGWhgXvSH6X3Fsxv7nrkpMyS xb2/zsKtZVRSTxLuEJt1Rvc84qoZA61W0HQue8ZT63/KoOcqle+RLVhwxi+LHvtD S1hZzjwqqcTWD/IRSxjcqMxgMs+se2cXWmBI+vFrYMhbnj9B5meFKg3LMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbpclMMKW4XDCgl7FpaJIhfKm8eMB8GA1UdIwQY MBaAFBZE5sUMtpLftkD2+I4iii2bBsZ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQt ZmRlYmYxMjViNDhlLzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9kMmUxNGUtZjkwMC00YWIwLTkzZmQtZmRlYmYxMjViNDhl LzEvRmtUbXhReTJrdC0yUVBiNGppS0tMWnNHeG5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAceUdFYKZ unccUbRq/+ifqwe2OCSGsL74Fb+V8v53As9T85q++ii+tb5DByMdTr1DgID+EfE/ RM54j3fuh324GUvCIGYq3P7ewqsGM7r7avza3C80jGL3q6OTtZePUUkvlZHLOozz BfqLTvfsmQV5tyqFBIMYGEPCOYCwkeeN584A5kGdJ/MeNodHmrdWYTTItYK/J/Vf wwYmBfKz2xL9Mr09fhWKv65ClihC/kwICaFBBsG8BHNHzCcjplblB81xcqw6Irhj H86N3BDsyjIneRCZBvsNJuy0upbkQfocNPW0KI18gPJaj68CkNqcTGvqht2grTIY 8l36v4bhdf0AQw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:21:14 2025 by rpki-client