This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft File: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json) Hash identifier: NuEgxSZO42OLtG7rVZrwTWn7M2D5iz0QXsICxhnKjEc= Subject key identifier: C6:55:24:5D:77:83:33:7F:6B:96:70:0F:96:0C:17:90:2D:02:12:32 Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C Certificate issuer: /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c Certificate serial: 019AF23FA9C43C12E4E9972F0412CCB1C4F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft Manifest number: 0482 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: +UbHc34J2bRXuzoP40U3iM+m5Xd8L1UJfCprAX/kGh8=) 2: QXxZoEDTfmfi2igFXO5o23qZxBE.roa (hash: rgCm3B0IpeTPYIjtwWWmsRXdZPZn8nOJAF/gu4jmo9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a9:c4:3c:12:e4:e9:97:2f:04:12:cc:b1:c4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=c655245d7783337f6b96700f960c17902d021232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9b:a9:e2:2d:f9:19:9e:0e:4f:f0:8d:76:fc: e7:c3:9b:a2:07:5a:1a:71:bf:80:1a:81:1d:af:d5: 54:19:b9:4c:95:43:81:4b:82:c6:62:3d:88:57:4d: ff:7d:47:0d:f8:50:83:d8:4c:13:34:ee:3c:a1:b8: d0:f5:76:2f:0c:74:a0:ca:d5:f9:2a:05:87:bf:a7: 1e:39:bc:96:23:9f:df:a4:a6:03:30:95:c4:87:16: bb:d4:33:73:94:3c:73:19:12:3f:55:07:8a:7c:66: 25:6a:ce:43:aa:78:0b:f9:80:4d:8b:63:70:1a:ed: 93:1e:7e:ae:35:23:5a:71:0c:73:61:65:98:2f:7f: 95:8c:5c:76:62:30:81:1c:16:4a:90:91:9a:a4:0e: 04:aa:14:fc:63:9d:3e:51:06:bd:0a:ae:2c:95:24: 70:88:a8:a3:f2:6c:9e:33:b8:86:d8:48:de:7d:69: 8e:54:8d:28:69:e3:33:97:89:31:ee:9c:cc:c4:40: 1a:bc:a6:7e:7f:6f:35:b9:95:c4:46:3f:6f:06:04: 6b:51:15:78:94:56:f8:35:08:42:65:b7:dd:fe:95: 36:aa:c0:df:18:74:3d:da:fc:e0:ae:53:23:46:77: 0d:6e:a3:43:9a:17:2e:5c:6d:46:04:09:f1:28:41: 76:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:55:24:5D:77:83:33:7F:6B:96:70:0F:96:0C:17:90:2D:02:12:32 X509v3 Authority Key Identifier: keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c4:ce:fa:41:98:be:b2:12:8c:4b:d3:30:1e:88:54:ee:11: e6:e3:c0:1d:88:f6:98:f6:20:87:00:ba:78:a6:6f:9a:af:33: b2:5a:08:0b:8e:86:f4:48:34:ce:41:46:72:a9:19:aa:42:af: f4:67:8b:b7:8a:c2:1a:45:9e:32:26:c8:8b:0a:54:d8:9b:04: 20:ce:5e:60:ca:6b:55:d8:1f:31:11:05:3a:c0:0b:3b:db:15: 26:d3:d9:97:9b:e6:91:43:16:43:e8:45:1f:bf:b8:22:95:c2: 4c:6d:28:8d:c0:5f:d0:14:8a:ca:21:92:6f:f7:98:2a:f6:81: 1e:4d:89:83:41:74:a3:56:ae:31:19:03:4f:cd:dc:2a:d0:9e: 38:3e:d1:24:fb:cd:fa:c1:92:32:fc:79:4b:1f:75:2e:7d:22: 49:a2:5f:6f:14:ae:0f:17:37:09:ea:79:b7:73:fd:32:e0:cf: ad:59:38:c3:9e:bf:64:e6:d4:8f:0c:c4:f8:a8:95:f7:c0:33: 99:72:81:95:2d:79:6b:a7:33:50:bb:4b:3e:8f:1c:a3:8c:27: ee:0f:be:2e:e2:8c:50:b3:7f:1e:c5:00:4c:48:06:7d:66:c8: 6b:b9:ad:0e:61:f0:65:2d:ac:57:ae:69:82:cb:e1:a7:b2:d4: 67:75:61:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6nEPBLk6ZcvBBLMscT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2ZjZmNlZjgyZjdkMWM1OTA4YTJlNWEwMDlmZDFiMzQz OTgxN2MwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhjNjU1MjQ1ZDc3ODMzMzdmNmI5NjcwMGY5NjBjMTc5MDJkMDIxMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5up4i35GZ4OT/CNdvznw5uiB1oa cb+AGoEdr9VUGblMlUOBS4LGYj2IV03/fUcN+FCD2EwTNO48objQ9XYvDHSgytX5 KgWHv6ceObyWI5/fpKYDMJXEhxa71DNzlDxzGRI/VQeKfGYlas5DqngL+YBNi2Nw Gu2THn6uNSNacQxzYWWYL3+VjFx2YjCBHBZKkJGapA4EqhT8Y50+UQa9Cq4slSRw iKij8myeM7iG2EjefWmOVI0oaeMzl4kx7pzMxEAavKZ+f281uZXERj9vBgRrURV4 lFb4NQhCZbfd/pU2qsDfGHQ92vzgrlMjRncNbqNDmhcuXG1GBAnxKEF2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZVJF13gzN/a5ZwD5YMF5AtAhIyMB8GA1UdIwQY MBaAFBXPz874L30cWQii5aAJ/Rs0OYF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMt NjExZWE0NDJkMmYzLzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kMzc5MGQtOTcyMy00YjUzLWFkMTMtNjExZWE0NDJkMmYz LzEvRmNfUHp2Z3ZmUnhaQ0tMbG9BbjlHelE1Z1h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsTO+kGY vrISjEvTMB6IVO4R5uPAHYj2mPYghwC6eKZvmq8zsloIC46G9Eg0zkFGcqkZqkKv 9GeLt4rCGkWeMibIiwpU2JsEIM5eYMprVdgfMREFOsALO9sVJtPZl5vmkUMWQ+hF H7+4IpXCTG0ojcBf0BSKyiGSb/eYKvaBHk2Jg0F0o1auMRkDT83cKtCeOD7RJPvN +sGSMvx5Sx91Ln0iSaJfbxSuDxc3Cep5t3P9MuDPrVk4w56/ZObUjwzE+KiV98Az mXKBlS15a6czULtLPo8co4wn7g++LuKMULN/HsUATEgGfWbIa7mtDmHwZS2sV65p gsvhp7LUZ3Vhqw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:11 2025 by rpki-client