This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft File: fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json) Hash identifier: fM1auezOt6TQKiQoJqX3Gqpt1kpGA/3Rq/t+HMqxcpw= Subject key identifier: E6:7B:C0:4F:DC:02:50:82:E2:15:79:00:B7:18:15:13:5A:92:2D:DE Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F Certificate issuer: /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Certificate serial: 019AF276BD9A7CD408C27558A945262CCC37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft Manifest number: 0D15 Signing time: Sat 06 Dec 2025 07:00:59 +0000 Manifest this update: Sat 06 Dec 2025 07:00:59 +0000 Manifest next update: Sun 07 Dec 2025 07:00:59 +0000 Files and hashes: 1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=) 2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: u2d/dd0y2WHla1F5M+mf5hbfyLjIvBRfko+f5ogT+OA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bd:9a:7c:d4:08:c2:75:58:a9:45:26:2c:cc:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f Validity Not Before: Dec 6 07:00:59 2025 GMT Not After : Dec 7 07:00:59 2025 GMT Subject: CN=e67bc04fdc025082e2157900b71815135a922dde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:d5:c0:2b:b7:0d:2e:cb:46:db:11:6b:6c: e5:e9:84:97:d0:4d:9d:34:5e:fa:0b:87:fe:a0:9b: 74:ab:fd:2f:a8:fc:f5:3e:c3:56:d3:6d:07:94:2e: b3:17:64:af:8b:04:a2:db:09:28:28:06:6c:89:95: 66:af:96:95:9d:3d:2a:8f:b6:40:41:57:db:f3:88: fe:e1:1d:7a:d5:bb:da:fb:19:5b:6c:56:98:96:55: a9:c7:d7:43:66:2c:35:86:b8:c3:11:c0:af:20:2f: 7b:86:5a:95:f9:df:03:58:17:44:3e:c9:28:85:de: 23:d6:f6:f2:a3:6e:0b:b3:6a:bc:a0:c4:8d:f5:55: 39:c3:e4:27:a2:cb:d0:81:50:2e:59:f6:fa:e9:77: af:ae:25:0d:93:21:22:e6:6e:5a:40:10:86:4d:fd: 13:19:83:72:c7:17:42:54:63:48:18:a3:c6:99:70: 9a:54:ce:08:1d:bb:8c:1a:26:7d:9d:1b:64:1a:4d: b6:c0:e6:1b:be:d2:d3:fe:94:42:fc:00:3e:2b:9c: b5:7f:8a:62:c1:02:3e:b3:66:6d:99:d0:3e:0f:1b: 1e:af:74:fd:1a:1e:a4:60:ec:63:aa:a2:a3:e5:1c: 3d:5e:8a:6f:31:d2:d8:49:65:17:17:79:f9:a5:87: 8b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7B:C0:4F:DC:02:50:82:E2:15:79:00:B7:18:15:13:5A:92:2D:DE X509v3 Authority Key Identifier: keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:3c:78:11:80:06:6a:fa:6b:25:e8:10:b9:2d:34:51:e2: b0:34:89:80:cf:ba:3d:53:6b:a2:cb:ee:0f:d7:bd:5e:03:be: 48:bc:92:f0:42:fc:f6:49:3d:bb:d2:98:49:a9:db:5e:9e:61: b0:8e:7e:fd:92:94:f6:51:1d:9a:29:ce:fb:09:eb:ab:96:13: b6:69:aa:f3:90:a9:ac:c6:63:f0:bc:82:6d:f9:ce:54:96:d6: 60:b5:1a:d8:55:a6:28:f4:be:69:aa:08:d8:d7:65:49:4a:60: cf:be:ef:eb:7b:76:d1:ab:1d:3b:22:11:df:6f:9d:e0:52:c2: 88:38:8c:f5:fe:d1:36:74:2a:e8:a2:75:6b:db:6d:55:39:7b: e5:78:ae:9a:f3:e9:15:95:46:37:97:97:26:e8:bb:6a:4c:a4: fd:56:36:38:a5:87:f8:65:51:fe:5c:1c:46:6c:ec:45:2d:ae: e9:d2:2f:31:b1:dc:25:26:1a:45:f3:42:22:d8:34:e6:5d:23: 01:52:2d:20:65:f8:ac:49:09:9f:65:b3:aa:62:37:31:f4:94: 79:1b:ae:da:63:19:b6:0a:ce:18:e5:0d:45:d9:24:81:07:e1: 61:d5:cb:d4:6a:c1:fc:36:a1:28:49:0b:4c:2f:25:39:2d:53: dd:15:10:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydr2afNQIwnVYqUUmLMw3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNTU3NTJiN2Q2ZmNlNzI4NmIxYTFhMmU0M2JjODZkNDU4 NGU4M2YwHhcNMjUxMjA2MDcwMDU5WhcNMjUxMjA3MDcwMDU5WjAzMTEwLwYDVQQD EyhlNjdiYzA0ZmRjMDI1MDgyZTIxNTc5MDBiNzE4MTUxMzVhOTIyZGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdPVwCu3DS7LRtsRa2zl6YSX0E2d NF76C4f+oJt0q/0vqPz1PsNW020HlC6zF2SviwSi2wkoKAZsiZVmr5aVnT0qj7ZA QVfb84j+4R161bva+xlbbFaYllWpx9dDZiw1hrjDEcCvIC97hlqV+d8DWBdEPsko hd4j1vbyo24Ls2q8oMSN9VU5w+QnosvQgVAuWfb66XevriUNkyEi5m5aQBCGTf0T GYNyxxdCVGNIGKPGmXCaVM4IHbuMGiZ9nRtkGk22wOYbvtLT/pRC/AA+K5y1f4pi wQI+s2ZtmdA+Dxser3T9Gh6kYOxjqqKj5Rw9XopvMdLYSWUXF3n5pYeLfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ7wE/cAlCC4hV5ALcYFRNaki3eMB8GA1UdIwQY MBaAFHxVdSt9b85yhrGhouQ7yG1FhOg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUt ZTg4Njk1ZmRkNmU1LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUtZTg4Njk1ZmRkNmU1 LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIY8eBGA Bmr6ayXoELktNFHisDSJgM+6PVNrosvuD9e9XgO+SLyS8EL89kk9u9KYSanbXp5h sI5+/ZKU9lEdminO+wnrq5YTtmmq85CprMZj8LyCbfnOVJbWYLUa2FWmKPS+aaoI 2NdlSUpgz77v63t20asdOyIR32+d4FLCiDiM9f7RNnQq6KJ1a9ttVTl75XiumvPp FZVGN5eXJui7akyk/VY2OKWH+GVR/lwcRmzsRS2u6dIvMbHcJSYaRfNCItg05l0j AVItIGX4rEkJn2WzqmI3MfSUeRuu2mMZtgrOGOUNRdkkgQfhYdXL1GrB/DahKEkL TC8lOS1T3RUQ8w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:45 2025 by rpki-client