This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json) Hash identifier: 1X8aI/vqJXyT4TLL7wA+QWM3tsjREnbdrxZK+k1MD/0= Subject key identifier: 47:03:01:D5:38:96:D4:E7:E6:92:C4:8F:6F:3E:C1:92:2F:FD:C1:EF Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Certificate serial: 019AF42DFF118F86296B78AF74833830A596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft Manifest number: 1749 Signing time: Sat 06 Dec 2025 15:00:46 +0000 Manifest this update: Sat 06 Dec 2025 15:00:46 +0000 Manifest next update: Sun 07 Dec 2025 15:00:46 +0000 Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: sWI/uMfD7IDWWkuz2ViSYC7VvaRQy8QaD9AP59XpXVk=) 2: g44wD4exlc1l3mqvr27NiUmB6UU.roa (hash: O/hdodBPqzpKMCb1MTByZVkRCwAsxnmyTBvaXtpscq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ff:11:8f:86:29:6b:78:af:74:83:38:30:a5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Validity Not Before: Dec 6 15:00:46 2025 GMT Not After : Dec 7 15:00:46 2025 GMT Subject: CN=470301d53896d4e7e692c48f6f3ec1922ffdc1ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:82:cb:d9:3b:2c:ef:43:9a:8f:53:b5:9a: 98:76:28:4f:78:8b:6e:c9:f9:75:ee:47:7e:bc:c3: dc:5a:d8:3a:43:0a:63:48:3c:76:81:b3:16:61:29: 81:4d:08:8a:14:00:af:88:66:4c:65:d7:71:dd:1b: 4c:a3:78:43:e8:67:76:d3:a5:de:f6:4a:c0:04:ee: 43:e9:df:25:2d:1c:30:b1:a9:8a:c1:18:e6:0d:e9: d2:17:90:14:d6:20:ce:c4:cb:5a:51:da:4f:dc:4b: 45:c2:88:f3:fc:34:3c:f3:31:3a:e7:c3:33:38:08: 25:02:71:47:cb:61:3f:90:44:37:64:e2:7d:6a:75: 2d:07:83:1a:c8:a3:bc:e3:b8:f0:21:ca:5d:7e:4c: 88:c7:b3:6e:2a:44:70:f5:a0:f3:d1:b7:9a:21:1d: 0e:a7:9e:5a:18:3d:db:5b:ef:eb:de:26:5c:f7:a2: 96:07:d4:71:aa:a4:0b:f8:30:87:07:9c:de:cc:32: a7:54:c2:81:00:f5:c3:72:4c:46:97:75:fb:e8:9c: a6:79:e3:8e:3d:7b:9c:52:3c:20:76:24:4b:c3:6d: df:0e:b2:ed:a4:c4:f9:8b:78:b9:63:1b:6d:d6:c0: c4:2f:dc:2a:85:d7:18:56:d0:bd:04:7b:6d:a5:96: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:03:01:D5:38:96:D4:E7:E6:92:C4:8F:6F:3E:C1:92:2F:FD:C1:EF X509v3 Authority Key Identifier: keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:00:cd:26:88:d7:7e:d7:3e:75:4c:8a:9c:61:18:75:14:1e: de:7a:d7:42:9a:54:11:35:ad:54:f4:45:7a:45:b0:17:f4:37: c7:a5:d2:d4:23:70:f9:30:d6:f7:42:b1:92:b1:dc:2c:bd:3a: 69:67:7a:0b:12:a3:2d:45:a1:55:e9:4b:9d:63:33:b4:3d:08: 85:6e:27:39:9e:71:8e:8b:f2:2e:98:e7:45:90:cd:e8:9c:5c: 52:e5:bb:b0:af:2d:e5:3e:6a:30:e9:6a:ef:ec:85:3b:40:10: 2c:7f:02:a2:72:47:71:cb:17:21:74:94:c6:0d:da:b0:a6:4e: 83:8b:1e:9b:37:d6:67:83:c2:f3:89:ed:ac:dd:11:54:3c:5e: 0e:4c:cb:9f:86:f8:3a:77:a8:a0:8c:87:8a:0e:3d:4b:29:d1: 38:28:b4:72:dc:83:5a:a9:10:93:c5:48:f0:6b:a4:44:21:d3: 4e:6e:8c:19:c4:4f:cb:a0:a3:27:46:9a:33:a8:9e:82:ab:6c: d8:aa:03:2f:4a:4d:b6:aa:d7:1b:d6:ea:6f:89:ae:59:4c:be: 62:ef:e6:3a:bd:af:39:0e:db:21:5c:b9:a0:12:b2:cc:3e:4c: 5a:4a:d8:34:f7:b1:ed:eb:ee:8e:d9:e9:1b:1c:28:24:be:ed: b9:b0:5e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lf8Rj4Ypa3ivdIM4MKWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk YjZjZTcwHhcNMjUxMjA2MTUwMDQ2WhcNMjUxMjA3MTUwMDQ2WjAzMTEwLwYDVQQD Eyg0NzAzMDFkNTM4OTZkNGU3ZTY5MmM0OGY2ZjNlYzE5MjJmZmRjMWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJCCy9k7LO9Dmo9TtZqYdihPeItu yfl17kd+vMPcWtg6QwpjSDx2gbMWYSmBTQiKFACviGZMZddx3RtMo3hD6Gd206Xe 9krABO5D6d8lLRwwsamKwRjmDenSF5AU1iDOxMtaUdpP3EtFwojz/DQ88zE658Mz OAglAnFHy2E/kEQ3ZOJ9anUtB4MayKO847jwIcpdfkyIx7NuKkRw9aDz0beaIR0O p55aGD3bW+/r3iZc96KWB9RxqqQL+DCHB5zezDKnVMKBAPXDckxGl3X76JymeeOO PXucUjwgdiRLw23fDrLtpMT5i3i5Yxtt1sDEL9wqhdcYVtC9BHttpZZCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcDAdU4ltTn5pLEj28+wZIv/cHvMB8GA1UdIwQY MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQDNJojX ftc+dUyKnGEYdRQe3nrXQppUETWtVPRFekWwF/Q3x6XS1CNw+TDW90KxkrHcLL06 aWd6CxKjLUWhVelLnWMztD0IhW4nOZ5xjovyLpjnRZDN6JxcUuW7sK8t5T5qMOlq 7+yFO0AQLH8ConJHccsXIXSUxg3asKZOg4semzfWZ4PC84ntrN0RVDxeDkzLn4b4 OneooIyHig49SynROCi0ctyDWqkQk8VI8GukRCHTTm6MGcRPy6CjJ0aaM6iegqts 2KoDL0pNtqrXG9bqb4muWUy+Yu/mOr2vOQ7bIVy5oBKyzD5MWkrYNPex7evujtnp GxwoJL7tubBeow== -----END CERTIFICATE-----Generated at Sat Dec 6 20:50:11 2025 by rpki-client