This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft File: fjGzT4SD1T_rGSrhFFSs43vH9YE.mft (raw, json) Hash identifier: b1wDJb2Hmr+UGiPXC6Gc0joa8YYtUGYd6/Y9A6sxfco= Subject key identifier: 70:48:67:09:62:A2:D1:AC:C1:43:2B:CD:DE:0B:7B:6D:73:73:7C:4D Authority key identifier: 7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81 Certificate issuer: /CN=7e31b34f8483d53feb192ae11454ace37bc7f581 Certificate serial: 019AF577EBF440C16E9AD3DBF4FFFAD13F32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft Manifest number: 0531 Signing time: Sat 06 Dec 2025 21:01:08 +0000 Manifest this update: Sat 06 Dec 2025 21:01:08 +0000 Manifest next update: Sun 07 Dec 2025 21:01:08 +0000 Files and hashes: 1: fjGzT4SD1T_rGSrhFFSs43vH9YE.crl (hash: VgNVFMc3aKJZsNH4wwkhu6tM/kTqhYYLEB4dNUueGyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:eb:f4:40:c1:6e:9a:d3:db:f4:ff:fa:d1:3f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e31b34f8483d53feb192ae11454ace37bc7f581 Validity Not Before: Dec 6 21:01:08 2025 GMT Not After : Dec 7 21:01:08 2025 GMT Subject: CN=7048670962a2d1acc1432bcdde0b7b6d73737c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:6b:63:fd:9d:3e:e5:b8:e8:24:8b:99:24: e4:07:4b:07:cf:fe:cf:13:bc:d0:62:65:fb:5c:a3: 7f:13:b1:9d:9c:6e:8a:04:2d:9e:67:a6:05:03:9f: d4:28:cf:b8:09:7c:c8:bc:6b:34:c1:61:db:1d:cd: 13:cf:fd:67:ad:58:1e:6a:24:cf:8e:e9:56:eb:54: 14:c1:f9:51:6b:a7:3e:7e:e7:18:f2:27:25:d1:85: d0:1c:0c:e8:35:f9:3c:7b:31:f3:ae:17:25:a2:f6: 78:7b:5c:9c:18:b8:a6:cc:27:7e:39:3a:29:23:2e: 52:9f:47:b2:01:6f:74:fb:36:0c:18:cc:88:e3:6c: 4f:37:f3:ff:e3:6d:2d:31:b5:7e:75:48:31:b4:6b: 56:87:fe:5d:18:5c:d4:a0:29:8f:da:ba:46:61:13: a1:a6:68:d8:73:be:e8:4b:8e:20:df:e6:81:8c:73: 23:b7:c0:36:fe:cd:05:48:70:45:cf:04:98:17:db: ee:b2:27:b3:5b:89:74:84:61:39:07:4a:42:9f:7b: c2:f0:6b:d4:aa:a9:78:fa:26:b8:1a:a5:c3:24:31: cb:fb:e5:1b:4e:ac:fb:2e:a5:14:7d:9e:3d:e7:4e: a1:30:41:11:92:2c:a1:b4:1d:ff:3e:f1:b6:94:63: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:48:67:09:62:A2:D1:AC:C1:43:2B:CD:DE:0B:7B:6D:73:73:7C:4D X509v3 Authority Key Identifier: keyid:7E:31:B3:4F:84:83:D5:3F:EB:19:2A:E1:14:54:AC:E3:7B:C7:F5:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjGzT4SD1T_rGSrhFFSs43vH9YE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2f686-42ba-478b-9c9d-6126adec23ab/1/fjGzT4SD1T_rGSrhFFSs43vH9YE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:75:04:b0:0e:a5:99:86:df:90:07:4a:a6:9d:35:1c:78:61: 3e:04:71:26:13:c4:9a:d3:56:f4:b3:a0:bd:51:c6:7c:0e:df: 2b:5f:1f:34:58:14:97:6d:24:08:82:be:35:24:e0:61:51:3a: 4f:f7:c7:8b:00:52:73:0f:83:ab:a9:62:37:d7:b5:e8:65:ee: 8e:fa:16:42:43:c4:a3:7e:23:d9:62:88:0e:da:2b:6a:1b:12: ea:2b:bb:bd:ee:f9:24:99:35:33:eb:f2:a2:5f:78:7f:3c:72: f4:4b:41:eb:34:9e:06:72:12:c0:5b:20:33:6f:2d:28:dc:37: a0:bb:86:3a:6b:5d:df:5e:71:e2:91:24:07:c9:c3:17:9c:fa: 31:4e:3c:d4:2c:84:e3:8f:fb:fc:80:0d:0e:d5:77:f0:a5:91: 9a:14:6a:92:fe:54:48:22:7d:b4:0d:17:d8:a6:21:12:57:52: 26:31:95:27:04:25:3c:cc:23:43:26:f9:fe:e4:36:dd:3b:31: 25:8b:d3:9f:da:e5:c9:fc:89:af:61:8b:3d:26:75:dc:bb:97: 07:f6:1c:6f:59:80:f4:2c:8e:1c:88:b6:ee:51:dd:0d:1f:d9: cd:46:bf:e9:cd:12:e0:1c:0d:a3:70:9e:94:eb:31:db:71:7e: 19:70:03:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d+v0QMFumtPb9P/60T8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzFiMzRmODQ4M2Q1M2ZlYjE5MmFlMTE0NTRhY2UzN2Jj N2Y1ODEwHhcNMjUxMjA2MjEwMTA4WhcNMjUxMjA3MjEwMTA4WjAzMTEwLwYDVQQD Eyg3MDQ4NjcwOTYyYTJkMWFjYzE0MzJiY2RkZTBiN2I2ZDczNzM3YzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlRrY/2dPuW46CSLmSTkB0sHz/7P E7zQYmX7XKN/E7GdnG6KBC2eZ6YFA5/UKM+4CXzIvGs0wWHbHc0Tz/1nrVgeaiTP julW61QUwflRa6c+fucY8icl0YXQHAzoNfk8ezHzrhclovZ4e1ycGLimzCd+OTop Iy5Sn0eyAW90+zYMGMyI42xPN/P/420tMbV+dUgxtGtWh/5dGFzUoCmP2rpGYROh pmjYc77oS44g3+aBjHMjt8A2/s0FSHBFzwSYF9vusiezW4l0hGE5B0pCn3vC8GvU qql4+ia4GqXDJDHL++UbTqz7LqUUfZ49506hMEERkiyhtB3/PvG2lGNc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBIZwliotGswUMrzd4Le21zc3xNMB8GA1UdIwQY MBaAFH4xs0+Eg9U/6xkq4RRUrON7x/WBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmY2ODYtNDJiYS00NzhiLTljOWQt NjEyNmFkZWMyM2FiLzEvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9jMmY2ODYtNDJiYS00NzhiLTljOWQtNjEyNmFkZWMyM2Fi LzEvZmpHelQ0U0QxVF9yR1NyaEZGU3M0M3ZIOVlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYHUEsA6l mYbfkAdKpp01HHhhPgRxJhPEmtNW9LOgvVHGfA7fK18fNFgUl20kCIK+NSTgYVE6 T/fHiwBScw+Dq6liN9e16GXujvoWQkPEo34j2WKIDtorahsS6iu7ve75JJk1M+vy ol94fzxy9EtB6zSeBnISwFsgM28tKNw3oLuGOmtd315x4pEkB8nDF5z6MU481CyE 44/7/IANDtV38KWRmhRqkv5USCJ9tA0X2KYhEldSJjGVJwQlPMwjQyb5/uQ23Tsx JYvTn9rlyfyJr2GLPSZ13LuXB/Ycb1mA9CyOHIi27lHdDR/ZzUa/6c0S4BwNo3Ce lOsx23F+GXADEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:52 2025 by rpki-client