This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json) Hash identifier: Ir13v+5DzRz8I+7SjNrR3EUDx3jCTbvWPdS4/j+Sa04= Subject key identifier: 18:F8:05:E6:38:2A:6D:D6:CE:0F:71:6B:D3:67:31:F0:E1:7E:26:BB Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6 Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6 Certificate serial: 019AF12CECB4A424C0F678ECE1D9E1C71CDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft Manifest number: 0A33 Signing time: Sat 06 Dec 2025 01:00:44 +0000 Manifest this update: Sat 06 Dec 2025 01:00:44 +0000 Manifest next update: Sun 07 Dec 2025 01:00:44 +0000 Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: 7s/BfUfFz0emyAGPJONMEFvXZ/HTnIJWeIrYMXIUhiQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ec:b4:a4:24:c0:f6:78:ec:e1:d9:e1:c7:1c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6 Validity Not Before: Dec 6 01:00:44 2025 GMT Not After : Dec 7 01:00:44 2025 GMT Subject: CN=18f805e6382a6dd6ce0f716bd36731f0e17e26bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:2b:af:ac:5a:8e:0f:09:05:47:7e:ed:6c: 65:c4:3f:86:ad:8c:f6:d0:fb:ef:b7:63:88:12:71: df:ad:9e:1d:f2:89:ec:87:79:e7:b2:75:f5:33:81: c9:ed:ab:d1:d7:4f:60:00:25:28:3d:3a:78:71:25: 5d:ba:cc:86:14:6d:5b:d2:ed:e2:60:89:f9:ca:b4: ea:9d:b3:0d:0b:52:0d:5b:c1:e4:c8:7f:f3:4c:00: f3:86:32:de:e1:cb:90:74:51:1c:cb:9b:c3:48:22: c6:f1:2c:26:02:a5:3f:69:e2:22:d7:4c:c6:11:2e: f0:b5:54:59:75:df:e5:20:7c:0e:ac:82:48:84:11: b5:e0:a6:fe:b8:6f:b5:2d:9c:d4:93:4c:8f:37:dc: e5:49:a0:da:73:2a:a7:6b:17:e7:23:91:76:ad:db: 9b:23:8d:d8:0a:18:e8:46:1e:50:6f:b7:61:79:cf: 28:44:68:91:d3:b2:5f:3f:68:b3:4c:3d:74:a6:63: 6a:32:e7:48:50:fc:1c:f5:67:0d:86:e0:9c:31:90: 58:73:71:17:e6:d3:62:60:96:a0:b0:6a:db:e0:5a: 92:22:08:45:d3:4d:c1:0a:b8:fa:26:87:77:5c:ad: de:32:eb:8e:ce:a9:98:87:30:da:a0:c6:8b:42:35: 15:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:F8:05:E6:38:2A:6D:D6:CE:0F:71:6B:D3:67:31:F0:E1:7E:26:BB X509v3 Authority Key Identifier: keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e3:a3:89:33:c8:cf:db:84:55:c8:46:9d:bd:86:88:41:51: 53:2f:e2:82:56:9b:0b:c0:94:46:7e:08:6f:86:9a:bc:98:74: 49:58:a9:97:96:af:0f:02:22:f9:4d:bb:a0:0f:b7:fa:e5:ac: a3:ed:c9:73:78:ca:4c:16:4d:a8:74:5c:ee:0d:7f:ac:3b:99: ff:06:de:b6:e0:06:b2:e5:70:54:8c:8a:51:ae:6b:d4:25:a3: da:1f:fe:53:8a:89:5b:a7:1d:80:2e:65:3a:cd:7d:cc:f7:b3: a2:ab:e2:e6:46:f2:84:91:51:1d:4b:88:15:87:f0:eb:65:b4: b4:28:85:0c:9f:53:0e:e8:30:3d:d3:ad:84:34:27:6c:17:1d: 87:c2:42:3e:dd:d1:57:06:b2:55:3f:33:d3:0b:6b:d0:67:32: 99:77:36:a4:78:e8:8f:ba:d0:1d:ca:b7:6b:f3:0a:7c:a0:4f: d1:d8:82:ea:dd:57:5a:cb:12:e0:87:2f:ba:c6:f8:33:f0:19: 7a:9c:8a:0e:36:7a:6a:00:fb:c0:1c:ad:5a:51:3c:83:7c:c4: c4:df:e5:bf:ad:73:9a:5c:90:35:d7:3a:c2:be:5a:b9:fe:dc: 6a:9e:b1:2d:64:15:3a:7f:ef:cf:33:82:fc:e6:dd:d4:1d:81: 35:df:0c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOy0pCTA9njs4dnhxxzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZjllNWNmOTEwNWZiNWQ0NWRmOGMxZmI5ZDRmMWM3YTU5 MDU0YzYwHhcNMjUxMjA2MDEwMDQ0WhcNMjUxMjA3MDEwMDQ0WjAzMTEwLwYDVQQD EygxOGY4MDVlNjM4MmE2ZGQ2Y2UwZjcxNmJkMzY3MzFmMGUxN2UyNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuR8rr6xajg8JBUd+7WxlxD+GrYz2 0Pvvt2OIEnHfrZ4d8onsh3nnsnX1M4HJ7avR109gACUoPTp4cSVdusyGFG1b0u3i YIn5yrTqnbMNC1INW8HkyH/zTADzhjLe4cuQdFEcy5vDSCLG8SwmAqU/aeIi10zG ES7wtVRZdd/lIHwOrIJIhBG14Kb+uG+1LZzUk0yPN9zlSaDacyqnaxfnI5F2rdub I43YChjoRh5Qb7dhec8oRGiR07JfP2izTD10pmNqMudIUPwc9WcNhuCcMZBYc3EX 5tNiYJagsGrb4FqSIghF003BCrj6Jod3XK3eMuuOzqmYhzDaoMaLQjUVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBj4BeY4Km3Wzg9xa9NnMfDhfia7MB8GA1UdIwQY MBaAFP355c+RBftdRd+MH7nU8celkFTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS8wN2QyMjktNzA3Ny00YjgwLTkyOTUt ZWMwYjZmNGQ0YTZjLzEvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS8wN2QyMjktNzA3Ny00YjgwLTkyOTUtZWMwYjZmNGQ0YTZj LzEvX2ZubHo1RUYtMTFGMzR3ZnVkVHh4NldRVk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+OjiTPI z9uEVchGnb2GiEFRUy/iglabC8CURn4Ib4aavJh0SVipl5avDwIi+U27oA+3+uWs o+3Jc3jKTBZNqHRc7g1/rDuZ/wbetuAGsuVwVIyKUa5r1CWj2h/+U4qJW6cdgC5l Os19zPezoqvi5kbyhJFRHUuIFYfw62W0tCiFDJ9TDugwPdOthDQnbBcdh8JCPt3R VwayVT8z0wtr0GcymXc2pHjoj7rQHcq3a/MKfKBP0diC6t1XWssS4Icvusb4M/AZ epyKDjZ6agD7wBytWlE8g3zExN/lv61zmlyQNdc6wr5auf7cap6xLWQVOn/vzzOC /Obd1B2BNd8MfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:25 2025 by rpki-client