This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft File: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json) Hash identifier: XJ1kB2vSC25u2SewA4uj54MzdY56BFdIiQT33I+xmDk= Subject key identifier: AC:D9:28:88:29:0F:8F:6E:FE:A9:7F:F3:DC:26:C7:0A:6A:7F:41:72 Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 Certificate issuer: /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Certificate serial: 019AF209408A7A17FB0E419D4939A0A788D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: ke1NZ9/NCOCeIVDInG+8v8sT/W4TvgR5+uMrhH+GXYQ=) 2: JFz1OMtyYE0bdrPpAzWAHxoNfr0.roa (hash: GCMi3F+baVVPvUwQFwt0LCTFyVV4lIfA34WPsvrvO6A=) 3: RnPjQu1TRB6OusL4aMQpC4JKqmI.roa (hash: fzeYA/Ogqc2irWhfM/UbWuBPWyUJiutWTEcNUX+4+LU=) 4: Ut6Isd3FyfcwFqXffcOSTj20big.roa (hash: 6WWf7LzHGfNpFV/UMH6n5UZ2IDbI9b8RYTztg7MMT9k=) 5: YrBEbKYcRihrrXhf5rGMn4NnWP8.roa (hash: 0EjDwiQerEsJrNpiAV/U41dtG8QfC+EEgtF9mTKQLqE=) 6: oVdkjWCoO6UKiUnCLGAAHjBO9ms.roa (hash: 60Qb8QX+Ft+JLMQ7m3ymUwisPXVeh0oMfLPMdsaJtK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:40:8a:7a:17:fb:0e:41:9d:49:39:a0:a7:88:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56 Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=acd92888290f8f6efea97ff3dc26c70a6a7f4172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:09:18:9b:ec:42:b7:60:33:31:c3:1a:79: 72:83:99:f8:22:6a:9d:41:4e:b0:3e:a2:c9:77:e9: a5:ad:1a:74:2d:c0:3a:8e:6f:0b:62:3b:49:8a:47: 3a:71:f6:2f:f9:82:f0:55:29:3a:27:6e:54:60:29: 4d:90:2d:ce:7d:2d:ff:87:e5:f9:21:5b:25:8a:5b: 9d:8f:46:9f:18:8d:f4:2e:b3:eb:e0:64:f1:09:63: 2f:cb:10:1d:84:8a:de:97:70:fc:50:49:49:71:40: f4:8b:2e:a4:43:e5:5b:52:21:a5:36:6e:58:0a:05: cb:73:e5:24:cc:da:03:4b:81:1d:48:fc:5d:fa:57: d4:fd:3f:68:0e:d3:3d:fb:5c:44:86:78:cb:3f:1b: 2a:d3:97:8e:22:77:fe:5d:cb:17:aa:7e:70:21:c3: f5:4b:16:27:ac:c7:a0:e2:79:f1:52:9f:25:ae:00: e6:80:46:ed:16:0b:04:86:89:66:3d:93:a1:2a:5d: 6f:c0:7c:2b:9a:54:e6:09:e4:b6:ff:56:f9:c4:3d: 58:32:1e:4d:d4:62:ff:cf:9a:29:f6:32:7d:aa:72: f7:bb:bd:22:7c:39:a3:cd:38:4f:c5:5a:6f:0c:f0: 29:44:0c:d5:57:02:d5:4b:f5:1b:d9:46:02:b1:52: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D9:28:88:29:0F:8F:6E:FE:A9:7F:F3:DC:26:C7:0A:6A:7F:41:72 X509v3 Authority Key Identifier: keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2c:e2:96:00:60:c3:c7:db:6b:6c:00:cd:c9:f0:dd:9e:77: 3c:5c:fc:6d:ac:a4:9d:f9:57:6a:06:c5:f3:09:7c:af:04:29: 39:d9:8a:21:f7:46:6f:21:9a:aa:0b:64:ff:ad:31:32:58:15: 87:a6:e6:3c:70:3d:9e:cd:07:8e:02:64:c1:57:43:6d:3f:59: 34:76:54:47:92:f7:fa:b4:1e:3f:0b:67:f9:6c:ca:98:59:84: 28:fb:38:e9:ff:f2:d2:53:ce:09:d5:3c:fb:8c:df:bd:e7:1c: 6d:e5:9e:82:c1:92:31:24:8b:28:20:b6:72:4d:fc:dd:f9:2f: 7c:cb:8b:4d:47:74:eb:e1:14:d7:33:51:bb:d4:c1:0a:ad:d5: c5:6b:1f:7b:48:b7:e2:ff:ff:df:72:3a:9f:97:bf:fc:50:fc: a9:d3:2c:86:8f:2f:ec:6f:f0:4d:9f:c5:59:1d:2f:de:8f:59: 8b:99:65:65:b5:8d:0d:5c:36:9c:49:de:d4:c3:22:8f:5a:32: dd:cd:56:ae:a2:f4:6c:a6:71:bd:60:94:d9:01:bd:1d:b2:f2: 7f:69:9c:8b:47:50:c1:e0:65:65:6d:ba:93:e1:cf:92:79:89: 0a:71:39:81:7c:7e:12:72:1f:02:e2:ad:6c:47:2f:c4:e1:1e: eb:60:22:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUCKehf7DkGdSTmgp4jZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4 MzNjNTYwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhhY2Q5Mjg4ODI5MGY4ZjZlZmVhOTdmZjNkYzI2YzcwYTZhN2Y0MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK4JGJvsQrdgMzHDGnlyg5n4Imqd QU6wPqLJd+mlrRp0LcA6jm8LYjtJikc6cfYv+YLwVSk6J25UYClNkC3OfS3/h+X5 IVsliludj0afGI30LrPr4GTxCWMvyxAdhIrel3D8UElJcUD0iy6kQ+VbUiGlNm5Y CgXLc+UkzNoDS4EdSPxd+lfU/T9oDtM9+1xEhnjLPxsq05eOInf+XcsXqn5wIcP1 SxYnrMeg4nnxUp8lrgDmgEbtFgsEholmPZOhKl1vwHwrmlTmCeS2/1b5xD1YMh5N 1GL/z5op9jJ9qnL3u70ifDmjzThPxVpvDPApRAzVVwLVS/Ub2UYCsVJQMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzZKIgpD49u/ql/89wmxwpqf0FyMB8GA1UdIwQY MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt OGM1NmQ4ZmUxN2I1LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1 LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCzilgBg w8fba2wAzcnw3Z53PFz8bayknflXagbF8wl8rwQpOdmKIfdGbyGaqgtk/60xMlgV h6bmPHA9ns0HjgJkwVdDbT9ZNHZUR5L3+rQePwtn+WzKmFmEKPs46f/y0lPOCdU8 +4zfveccbeWegsGSMSSLKCC2ck383fkvfMuLTUd06+EU1zNRu9TBCq3VxWsfe0i3 4v//33I6n5e//FD8qdMsho8v7G/wTZ/FWR0v3o9Zi5llZbWNDVw2nEne1MMij1oy 3c1WrqL0bKZxvWCU2QG9HbLyf2mci0dQweBlZW26k+HPknmJCnE5gXx+EnIfAuKt bEcvxOEe62AiyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:46:00 2025 by rpki-client