This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft File: Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft (raw, json) Hash identifier: Ha8pXsaB9jI294/9Q4M27WHRW2DpeOURxQ/opCBxT8o= Subject key identifier: 78:41:FF:D0:9D:E2:80:1D:97:25:11:58:5A:EA:6A:A6:7E:87:E8:F1 Authority key identifier: 16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35 Certificate issuer: /CN=16edcfec9f6e325bc2c39d24193f830f43183135 Certificate serial: 019AF42DD61FD2857EF13BC9AC795988E5EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft Manifest number: 09B3 Signing time: Sat 06 Dec 2025 15:00:35 +0000 Manifest this update: Sat 06 Dec 2025 15:00:35 +0000 Manifest next update: Sun 07 Dec 2025 15:00:35 +0000 Files and hashes: 1: Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl (hash: zXy7Y4GQe+mwy8FdULC6MVMu0U+2U+/4ElLxVV+mbuQ=) 2: a6yjRQPaEVSmn2Af_50hlyGwo-8.roa (hash: f+GvZNBih0mNs6EfHvNm1HRb2NXRxOiIU+W+BUZl09g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d6:1f:d2:85:7e:f1:3b:c9:ac:79:59:88:e5:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16edcfec9f6e325bc2c39d24193f830f43183135 Validity Not Before: Dec 6 15:00:35 2025 GMT Not After : Dec 7 15:00:35 2025 GMT Subject: CN=7841ffd09de2801d972511585aea6aa67e87e8f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:0d:d5:e4:03:94:59:85:06:d2:03:a8:ea: ce:03:39:2f:0d:ff:69:d0:87:87:1f:82:e9:09:60: b3:3c:8d:e3:9f:3f:87:b9:f2:f7:7b:74:f8:a6:2e: 55:a5:9d:ca:26:4f:0d:63:dd:47:49:83:34:90:77: c6:13:0d:c9:07:8b:ad:d6:c6:b0:56:06:b9:45:79: 4b:86:42:a6:2b:2f:19:c9:95:f6:8b:40:f0:ea:19: e0:e1:64:97:a2:eb:53:98:e9:cc:38:5e:f6:dc:e4: d6:e8:16:c7:a1:91:a5:0e:1d:a4:18:4d:67:e1:3f: 0f:cc:72:7c:22:1a:a1:9e:e8:26:0d:d9:d7:29:22: 1f:05:2f:be:8c:82:93:a1:8e:60:39:1b:0a:43:a5: 83:ba:fe:4e:d3:7e:bb:fa:8c:d2:98:23:a6:62:02: d3:82:ac:58:62:b8:8b:59:8b:65:05:1b:a0:7b:88: 48:49:87:df:66:47:75:52:45:7c:6e:7a:46:fe:58: 84:00:e0:88:81:c4:ed:ff:8a:66:81:d8:6d:4e:20: c3:e3:0e:1f:68:14:5f:d7:7e:99:e3:7a:a5:8e:c0: 84:eb:ea:ba:aa:22:93:d4:61:9b:96:88:7a:ae:ac: f7:72:7b:8a:7a:18:90:56:d3:38:d7:0f:29:9f:ce: 91:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:41:FF:D0:9D:E2:80:1D:97:25:11:58:5A:EA:6A:A6:7E:87:E8:F1 X509v3 Authority Key Identifier: keyid:16:ED:CF:EC:9F:6E:32:5B:C2:C3:9D:24:19:3F:83:0F:43:18:31:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fu3P7J9uMlvCw50kGT-DD0MYMTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/5911d5-160e-4635-9297-5e5b04693adc/1/Fu3P7J9uMlvCw50kGT-DD0MYMTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c7:c7:bd:63:7d:34:cd:3b:80:64:95:8c:e2:52:37:9e:b1: 28:42:61:b7:45:f9:6b:fe:20:00:92:b6:d0:3f:43:7a:be:89: e1:2c:90:04:b7:f5:94:04:55:3c:a2:8e:ca:5f:f1:50:a1:48: 1e:f0:c8:95:b6:36:44:62:1a:c2:51:c5:2d:af:e4:5b:a8:25: 53:6f:10:73:46:7e:14:3a:56:7b:86:04:7e:08:fd:36:b2:68: ff:ea:bc:80:01:18:f6:22:25:c5:b7:10:6d:70:fa:21:ba:48: de:d2:6e:e1:97:cf:3b:a6:1d:a3:3e:17:dc:9c:4f:27:77:07: b6:65:bd:19:f6:e5:37:ad:d0:c9:1e:ce:09:af:1a:30:d2:c6: e8:83:8a:23:f4:2c:35:c7:e8:a8:73:d0:2f:b9:b6:16:18:da: e5:a6:58:fe:ee:38:bf:c8:d2:c4:41:50:12:95:34:5c:ff:1e: f0:29:a5:61:ac:1f:3f:25:4b:82:54:f9:dd:8a:07:40:23:93: e1:f0:43:6e:24:70:73:f5:24:02:d4:c0:1c:23:fb:16:a6:41: 92:36:b5:ae:53:2c:dc:06:23:24:f1:f5:e5:34:c0:dc:19:ce: 1f:03:6f:9f:c9:50:cc:e0:88:07:09:48:ea:f0:10:aa:b4:85: 91:8a:7a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LdYf0oV+8TvJrHlZiOXrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZWRjZmVjOWY2ZTMyNWJjMmMzOWQyNDE5M2Y4MzBmNDMx ODMxMzUwHhcNMjUxMjA2MTUwMDM1WhcNMjUxMjA3MTUwMDM1WjAzMTEwLwYDVQQD Eyg3ODQxZmZkMDlkZTI4MDFkOTcyNTExNTg1YWVhNmFhNjdlODdlOGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsAN1eQDlFmFBtIDqOrOAzkvDf9p 0IeHH4LpCWCzPI3jnz+HufL3e3T4pi5VpZ3KJk8NY91HSYM0kHfGEw3JB4ut1saw Vga5RXlLhkKmKy8ZyZX2i0Dw6hng4WSXoutTmOnMOF723OTW6BbHoZGlDh2kGE1n 4T8PzHJ8IhqhnugmDdnXKSIfBS++jIKToY5gORsKQ6WDuv5O0367+ozSmCOmYgLT gqxYYriLWYtlBRuge4hISYffZkd1UkV8bnpG/liEAOCIgcTt/4pmgdhtTiDD4w4f aBRf136Z43qljsCE6+q6qiKT1GGbloh6rqz3cnuKehiQVtM41w8pn86RQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhB/9Cd4oAdlyURWFrqaqZ+h+jxMB8GA1UdIwQY MBaAFBbtz+yfbjJbwsOdJBk/gw9DGDE1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTct NWU1YjA0NjkzYWRjLzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC81OTExZDUtMTYwZS00NjM1LTkyOTctNWU1YjA0NjkzYWRj LzEvRnUzUDdKOXVNbHZDdzUwa0dULUREME1ZTVRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcfHvWN9 NM07gGSVjOJSN56xKEJht0X5a/4gAJK20D9Der6J4SyQBLf1lARVPKKOyl/xUKFI HvDIlbY2RGIawlHFLa/kW6glU28Qc0Z+FDpWe4YEfgj9NrJo/+q8gAEY9iIlxbcQ bXD6IbpI3tJu4ZfPO6Ydoz4X3JxPJ3cHtmW9GfblN63QyR7OCa8aMNLG6IOKI/Qs NcfoqHPQL7m2Fhja5aZY/u44v8jSxEFQEpU0XP8e8CmlYawfPyVLglT53YoHQCOT 4fBDbiRwc/UkAtTAHCP7FqZBkja1rlMs3AYjJPH15TTA3BnOHwNvn8lQzOCIBwlI 6vAQqrSFkYp6Sw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:36:48 2025 by rpki-client