This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft File: FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json) Hash identifier: bDX5dT0zCIveWy1ueVUQoDSK4UAEyP0tLoewJ/Wgk1Q= Subject key identifier: 58:94:B1:07:8F:61:49:FB:17:6C:7D:73:CB:69:E9:E4:84:09:7E:D6 Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3 Certificate serial: 019AF12D347A7BBDF9BCE68F0CBC16D85FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:02 +0000 Manifest this update: Sat 06 Dec 2025 01:01:02 +0000 Manifest next update: Sun 07 Dec 2025 01:01:02 +0000 Files and hashes: 1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: vT4KgMJiVqqvZ8f7a0y/XGhdInOTMaGIJZse48YncAU=) 2: LLBhXP40X-h2UsoEFv7dkYQg0WQ.roa (hash: ZLQQjKLBIHt19Vm7p7ixs8F7wMqUIQn9Y8DFLps+wZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:34:7a:7b:bd:f9:bc:e6:8f:0c:bc:16:d8:5f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3 Validity Not Before: Dec 6 01:01:02 2025 GMT Not After : Dec 7 01:01:02 2025 GMT Subject: CN=5894b1078f6149fb176c7d73cb69e9e484097ed6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:15:cd:c6:d5:3c:4d:15:cc:f4:16:ac:de: ef:27:da:14:ab:20:0b:bf:93:28:d6:2e:03:40:d4: 71:70:a6:c7:e1:7c:d2:35:07:74:b5:7a:82:60:6c: 28:bf:af:f5:7b:2b:4c:ca:bd:bc:8c:d3:7b:53:36: 29:d2:2c:7e:08:dd:16:08:3f:15:40:f7:c8:e4:d9: 9b:aa:c8:bf:4b:31:4e:cc:45:da:0d:aa:67:a3:b0: d0:41:f7:b9:d8:e2:c4:e4:a1:ef:43:96:1f:18:19: 68:b6:ab:95:e0:c2:58:ae:79:fd:6b:31:29:f2:fd: 8a:9c:5e:b9:32:ec:a0:7d:ff:cf:8c:79:8d:6f:a3: 8c:5a:91:9c:92:c4:f7:19:54:a1:7d:e6:12:14:6d: c6:96:5b:2e:6c:9a:0c:96:05:8b:ee:f6:e0:a0:a5: 10:e8:44:9b:a0:11:ae:78:b7:72:e8:65:33:9c:45: 21:d7:1f:74:43:d8:45:da:21:3d:fd:0a:7c:e6:46: 26:98:60:aa:28:d6:f4:86:5b:5a:59:3c:92:01:5f: ab:d2:05:16:7d:f7:45:54:8b:09:b7:8c:15:fe:08: b7:53:05:c9:06:ae:29:41:f6:64:b9:5d:d3:78:1f: 3f:84:c2:2f:a8:a5:6d:d5:21:2d:b5:6b:01:53:f5: db:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:94:B1:07:8F:61:49:FB:17:6C:7D:73:CB:69:E9:E4:84:09:7E:D6 X509v3 Authority Key Identifier: keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a9:43:79:1d:57:10:4e:7f:2e:15:a2:3b:7c:4f:d4:3a:1f: f7:f7:96:45:ed:70:fd:da:79:f3:21:55:20:8d:3b:e7:77:ab: 4f:5e:4b:d8:28:b0:2a:1f:8c:7b:e2:4a:03:f6:6a:4f:92:dc: 00:e3:1f:86:16:92:d1:72:43:24:6e:60:f5:44:06:9b:55:04: c0:9b:5b:87:8d:e4:fc:7d:22:4b:47:3e:7a:fe:46:a5:1e:77: 3b:b8:8a:d0:a1:11:f1:21:df:a0:0a:bb:81:57:d9:b5:63:bf: ad:76:c1:8b:55:73:56:19:e7:5d:b0:e0:f4:58:36:4c:d2:8a: f4:2e:ed:ef:ba:a1:d0:16:4f:81:b3:3e:af:4d:34:14:18:98: 51:5c:ff:a9:54:73:55:00:35:61:34:2c:69:f0:ad:2c:f8:d3: a8:fa:6a:97:6b:57:94:c3:c6:48:ad:78:8f:91:11:1d:6e:7d: cd:50:c8:76:e5:93:4a:dd:9d:d2:1d:48:4b:f7:70:12:cb:18: f6:1f:45:8f:9b:8d:39:00:e9:85:79:b7:39:da:ba:ed:13:51: ff:25:a9:fa:23:5d:1d:5b:e0:98:13:c8:62:3a:d0:6f:07:fb: 3c:01:d5:ac:3b:6c:b0:0a:8a:d2:11:68:cb:e8:ab:a7:6b:f2: 44:4b:d5:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTR6e735vOaPDLwW2F/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3M2IwZDdmMGVhYzY2NTczM2Q5MjgxNmRkNDkxNjJkNzJl MjIxZjMwHhcNMjUxMjA2MDEwMTAyWhcNMjUxMjA3MDEwMTAyWjAzMTEwLwYDVQQD Eyg1ODk0YjEwNzhmNjE0OWZiMTc2YzdkNzNjYjY5ZTllNDg0MDk3ZWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KQVzcbVPE0VzPQWrN7vJ9oUqyAL v5Mo1i4DQNRxcKbH4XzSNQd0tXqCYGwov6/1eytMyr28jNN7UzYp0ix+CN0WCD8V QPfI5Nmbqsi/SzFOzEXaDapno7DQQfe52OLE5KHvQ5YfGBlotquV4MJYrnn9azEp 8v2KnF65Muygff/PjHmNb6OMWpGcksT3GVShfeYSFG3GllsubJoMlgWL7vbgoKUQ 6ESboBGueLdy6GUznEUh1x90Q9hF2iE9/Qp85kYmmGCqKNb0hltaWTySAV+r0gUW ffdFVIsJt4wV/gi3UwXJBq4pQfZkuV3TeB8/hMIvqKVt1SEttWsBU/Xb+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFiUsQePYUn7F2x9c8tp6eSECX7WMB8GA1UdIwQY MBaAFBc7DX8OrGZXM9koFt1JFi1y4iHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEt ZTIzYTM5MzRiNmY3LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEtZTIzYTM5MzRiNmY3 LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6lDeR1X EE5/LhWiO3xP1Dof9/eWRe1w/dp58yFVII0753erT15L2CiwKh+Me+JKA/ZqT5Lc AOMfhhaS0XJDJG5g9UQGm1UEwJtbh43k/H0iS0c+ev5GpR53O7iK0KER8SHfoAq7 gVfZtWO/rXbBi1VzVhnnXbDg9Fg2TNKK9C7t77qh0BZPgbM+r000FBiYUVz/qVRz VQA1YTQsafCtLPjTqPpql2tXlMPGSK14j5ERHW59zVDIduWTSt2d0h1IS/dwEssY 9h9Fj5uNOQDphXm3Odq67RNR/yWp+iNdHVvgmBPIYjrQbwf7PAHVrDtssAqK0hFo y+irp2vyREvVUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:51 2025 by rpki-client