This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft File: FocxkXFwxLgb7jUdBFXDLLrWOyY.mft (raw, json) Hash identifier: GyO1DYnzH6rDwR0FHMDA/rjsU+r1r9uLO6RacmwAyeE= Subject key identifier: B6:E6:69:84:30:DC:6D:53:54:FA:E0:46:4D:23:51:38:C3:9E:B3:3D Authority key identifier: 16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26 Certificate issuer: /CN=168731917170c4b81bee351d0455c32cbad63b26 Certificate serial: 019AF27710121F16485830A2CB7DC3172A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft Manifest number: 0E57 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: FocxkXFwxLgb7jUdBFXDLLrWOyY.crl (hash: A1GoQm5cZjxQuixQdwAFigpjsV54gzCO7hl4mdN9ork=) 2: LhUj1mCFxgCVgOclN_x_EPQsaaM.roa (hash: TwspggDMx9eKuIFMwLPIl1QzksuuFso9cmuKcnRQwY4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:10:12:1f:16:48:58:30:a2:cb:7d:c3:17:2a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168731917170c4b81bee351d0455c32cbad63b26 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=b6e6698430dc6d5354fae0464d235138c39eb33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:64:cb:96:59:ed:92:b1:7f:e4:5a:f7:28: fb:69:2e:e2:21:dd:c3:77:e8:e5:c2:04:cd:7c:50: 0a:40:88:0d:32:5c:bf:f1:3f:62:ac:59:15:f8:0c: 8a:96:ce:7b:f9:58:5d:63:12:72:a3:c2:82:cb:01: 68:49:2a:c7:6a:ed:63:13:6e:57:2a:db:84:08:7c: 8b:50:13:84:67:77:61:19:14:54:22:a9:24:e8:47: 79:e3:08:2a:1a:de:71:04:27:fb:e4:2a:51:95:61: a5:86:82:3f:18:8b:1f:cc:99:9a:8f:fd:fc:1f:28: 6e:c1:4b:bd:74:46:fa:59:a3:8a:2c:5f:e3:fa:71: f2:08:36:96:c9:69:91:98:05:d9:6b:07:32:69:54: d2:a4:08:7b:62:4a:d6:9c:22:44:31:0a:e8:92:9b: c1:e6:6a:72:42:c8:fd:33:ca:9d:64:43:1d:dc:cd: f8:88:93:9a:76:28:9f:91:a0:9b:af:b3:5c:36:bc: 14:97:30:a4:81:ea:81:1e:9a:c5:27:06:0f:ef:c8: c5:b0:09:56:ec:ef:2d:37:23:9f:7f:0c:e7:65:a8: 3b:ba:e2:ee:3b:9a:e6:41:5a:88:4d:ab:24:67:87: 26:57:ce:8d:25:8f:41:65:64:4e:9e:75:ad:5a:9b: 4e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E6:69:84:30:DC:6D:53:54:FA:E0:46:4D:23:51:38:C3:9E:B3:3D X509v3 Authority Key Identifier: keyid:16:87:31:91:71:70:C4:B8:1B:EE:35:1D:04:55:C3:2C:BA:D6:3B:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FocxkXFwxLgb7jUdBFXDLLrWOyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b837f3-0852-4d7f-9c0e-b2d466697ac4/1/FocxkXFwxLgb7jUdBFXDLLrWOyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:db:71:15:5e:a1:d3:09:5b:3b:a9:ca:6e:56:ef:54:db:a2: bb:c1:30:9e:66:39:f6:22:c5:07:6c:fb:ce:22:3e:a1:85:c0: 34:e6:5f:85:96:d4:7e:15:34:a6:34:a1:af:3a:17:41:63:b8: 88:60:02:b1:91:b1:47:1a:6b:bd:16:18:df:a9:00:ad:19:b3: c5:e7:de:54:b6:c0:a6:37:ee:24:36:6d:27:c7:3f:6a:55:cf: 58:01:b0:0d:28:67:d4:18:c9:d5:9c:46:15:f7:af:a7:22:0e: 2c:89:da:9f:03:9d:4e:db:a3:3c:04:c2:23:1a:9c:2c:b0:7d: df:24:53:62:58:6f:10:b2:00:83:f1:a1:4e:e2:7f:5c:d3:bf: de:a6:a1:45:8f:97:b2:f7:b0:17:19:9e:5d:8c:67:97:1e:3a: c8:7e:cd:5a:a3:99:39:02:c0:6d:68:54:f2:3d:b5:31:d5:5a: b4:db:75:c4:a1:4b:4b:6d:1e:90:f5:65:33:15:a2:c4:d7:88: 0b:c5:ce:14:b7:0f:fa:06:aa:81:76:50:e0:5d:ef:31:77:06: 2d:d0:9c:5a:79:ca:9f:05:55:4c:cf:d1:1e:23:b5:b5:26:e4: 00:84:81:c5:7a:3c:28:bf:ba:8c:d2:fe:c5:0e:46:ac:a7:76: c0:ea:c5:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxASHxZIWDCiy33DFyouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODczMTkxNzE3MGM0YjgxYmVlMzUxZDA0NTVjMzJjYmFk NjNiMjYwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EyhiNmU2Njk4NDMwZGM2ZDUzNTRmYWUwNDY0ZDIzNTEzOGMzOWViMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn1ky5ZZ7ZKxf+Ra9yj7aS7iId3D d+jlwgTNfFAKQIgNMly/8T9irFkV+AyKls57+VhdYxJyo8KCywFoSSrHau1jE25X KtuECHyLUBOEZ3dhGRRUIqkk6Ed54wgqGt5xBCf75CpRlWGlhoI/GIsfzJmaj/38 HyhuwUu9dEb6WaOKLF/j+nHyCDaWyWmRmAXZawcyaVTSpAh7YkrWnCJEMQrokpvB 5mpyQsj9M8qdZEMd3M34iJOadiifkaCbr7NcNrwUlzCkgeqBHprFJwYP78jFsAlW 7O8tNyOffwznZag7uuLuO5rmQVqITaskZ4cmV86NJY9BZWROnnWtWptOUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbmaYQw3G1TVPrgRk0jUTjDnrM9MB8GA1UdIwQY MBaAFBaHMZFxcMS4G+41HQRVwyy61jsmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUt YjJkNDY2Njk3YWM0LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iODM3ZjMtMDg1Mi00ZDdmLTljMGUtYjJkNDY2Njk3YWM0 LzEvRm9jeGtYRnd4TGdiN2pVZEJGWERMTHJXT3lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdtxFV6h 0wlbO6nKblbvVNuiu8EwnmY59iLFB2z7ziI+oYXANOZfhZbUfhU0pjShrzoXQWO4 iGACsZGxRxprvRYY36kArRmzxefeVLbApjfuJDZtJ8c/alXPWAGwDShn1BjJ1ZxG FfevpyIOLInanwOdTtujPATCIxqcLLB93yRTYlhvELIAg/GhTuJ/XNO/3qahRY+X svewFxmeXYxnlx46yH7NWqOZOQLAbWhU8j21MdVatNt1xKFLS20ekPVlMxWixNeI C8XOFLcP+gaqgXZQ4F3vMXcGLdCcWnnKnwVVTM/RHiO1tSbkAISBxXo8KL+6jNL+ xQ5GrKd2wOrFAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:56 2025 by rpki-client