This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json) Hash identifier: 91r3YRPi59v2oHbxuat1uXSdgg+z+fBgDS5dIA+SSJQ= Subject key identifier: A4:AC:E1:37:ED:5B:CB:66:95:12:50:01:9F:00:8C:13:35:F8:27:BA Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Certificate serial: 019B31FA8CDE174AEE7722EFFD4A03A9BAE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft Manifest number: 1769 Signing time: Thu 18 Dec 2025 15:01:02 +0000 Manifest this update: Thu 18 Dec 2025 15:01:02 +0000 Manifest next update: Fri 19 Dec 2025 15:01:02 +0000 Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: YwJxBEpCu1IWg8fagvVe+b6QGFLAULvUNUDJ0O79Wzs=) 2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:8c:de:17:4a:ee:77:22:ef:fd:4a:03:a9:ba:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Validity Not Before: Dec 18 15:01:02 2025 GMT Not After : Dec 19 15:01:02 2025 GMT Subject: CN=a4ace137ed5bcb66951250019f008c1335f827ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:f6:0d:6c:76:27:94:ef:fc:ed:19:4b:72: b5:60:44:00:7d:f5:c0:d1:24:cc:32:bc:57:59:e7: bf:5b:6f:df:0e:7e:ac:50:0a:a6:17:e6:4e:84:14: 9e:8e:e0:3f:5a:57:e7:6d:43:c4:5f:8b:e3:e8:ec: ae:01:8f:4a:49:67:e1:a0:75:9b:23:48:d1:fe:30: d9:fe:f6:9b:30:75:29:63:10:fd:b6:db:7c:e6:8d: 08:83:af:4b:03:86:16:aa:93:df:5b:ce:b4:77:08: 4e:06:52:26:fc:d8:cf:46:4f:55:89:1b:76:6d:78: a4:b4:e3:65:3f:ca:42:1d:a0:25:e7:3f:2e:08:93: b4:31:34:25:30:23:b5:98:be:de:5a:40:f2:3b:17: bc:32:43:7b:f3:ae:5f:2f:3f:c7:9f:61:6d:c1:e8: f1:a0:60:ce:31:40:0f:34:e0:be:ed:b3:f5:db:da: 46:f5:ca:d6:c6:89:26:1c:70:48:a6:90:c2:f7:d7: ed:98:bd:cd:7f:3b:84:44:02:54:f5:70:3f:8c:53: a7:16:fc:da:5a:a8:65:79:9a:36:85:52:b3:5a:f7: 7a:02:01:46:03:eb:a4:04:e3:a0:f6:00:f4:1a:4e: e4:91:50:40:6b:16:8f:da:dc:b2:10:e0:70:90:63: e0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AC:E1:37:ED:5B:CB:66:95:12:50:01:9F:00:8C:13:35:F8:27:BA X509v3 Authority Key Identifier: keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:60:ee:61:6e:b0:45:b3:c1:3c:c5:e5:c5:f5:4a:53:13:d4: cd:ac:ed:2b:31:5a:e9:1b:6b:57:c4:40:8c:aa:50:60:02:46: 21:8b:47:f7:8e:91:13:d1:3f:e7:b5:e0:e7:ce:2a:b9:2f:1d: 09:2e:c4:c4:53:94:93:1d:6d:b9:2c:f5:a2:c9:00:b8:82:b7: f1:1d:94:db:48:47:70:d1:73:5b:11:34:b7:fb:22:8d:f9:ed: 8f:39:db:4e:4b:e1:b0:2e:17:f3:3e:a1:0c:2d:89:24:2d:a7: c4:8f:a0:59:17:64:ae:c4:a9:d4:42:38:a7:27:07:35:68:a4: 57:70:11:b7:08:59:2c:d8:98:7b:4a:9c:6d:2e:a6:94:f4:13: 42:37:8e:86:d2:52:ad:41:c3:c0:49:a2:27:ff:73:20:1a:1e: a2:4d:6d:39:04:ee:47:34:f2:9d:cf:fc:98:d3:75:51:fe:d7: cc:26:34:d4:5a:1a:c2:0e:ba:c0:a1:22:1b:31:0b:03:44:35: 00:45:f6:ac:99:a8:71:4c:64:6d:75:bf:71:8b:c0:54:5d:0f: 7f:91:71:56:1c:8d:f7:df:fb:01:01:11:2c:97:7a:a0:35:bf: 89:dc:58:64:76:55:14:eb:3b:91:bd:19:64:1c:2c:9a:c6:ef: 9d:d3:05:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+ozeF0rudyLv/UoDqbrkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk YjZjZTcwHhcNMjUxMjE4MTUwMTAyWhcNMjUxMjE5MTUwMTAyWjAzMTEwLwYDVQQD EyhhNGFjZTEzN2VkNWJjYjY2OTUxMjUwMDE5ZjAwOGMxMzM1ZjgyN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDX2DWx2J5Tv/O0ZS3K1YEQAffXA 0STMMrxXWee/W2/fDn6sUAqmF+ZOhBSejuA/WlfnbUPEX4vj6OyuAY9KSWfhoHWb I0jR/jDZ/vabMHUpYxD9ttt85o0Ig69LA4YWqpPfW860dwhOBlIm/NjPRk9ViRt2 bXiktONlP8pCHaAl5z8uCJO0MTQlMCO1mL7eWkDyOxe8MkN7865fLz/Hn2Ftwejx oGDOMUAPNOC+7bP129pG9crWxokmHHBIppDC99ftmL3NfzuERAJU9XA/jFOnFvza WqhleZo2hVKzWvd6AgFGA+ukBOOg9gD0Gk7kkVBAaxaP2tyyEOBwkGPg3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSs4TftW8tmlRJQAZ8AjBM1+Ce6MB8GA1UdIwQY MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWDuYW6w RbPBPMXlxfVKUxPUzaztKzFa6RtrV8RAjKpQYAJGIYtH946RE9E/57Xg584quS8d CS7ExFOUkx1tuSz1oskAuIK38R2U20hHcNFzWxE0t/sijfntjznbTkvhsC4X8z6h DC2JJC2nxI+gWRdkrsSp1EI4pycHNWikV3ARtwhZLNiYe0qcbS6mlPQTQjeOhtJS rUHDwEmiJ/9zIBoeok1tOQTuRzTync/8mNN1Uf7XzCY01Foawg66wKEiGzELA0Q1 AEX2rJmocUxkbXW/cYvAVF0Pf5FxVhyN99/7AQERLJd6oDW/idxYZHZVFOs7kb0Z ZBwsmsbvndMFFg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:03:14 2025 by rpki-client