This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json) Hash identifier: sTr0FpLlPeYo1+h8L/3M5EhRmhFCrRgGMoSt14rASxQ= Subject key identifier: A5:0E:84:81:4B:4F:20:49:2A:9B:A9:3C:A1:44:D6:62:EF:4E:FE:5B Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff Certificate serial: 019AF12E4A1D9769BB0E3040470AEA2988E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft Manifest number: 11E9 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: tIhf6hzAbJt++bfKLn9pgpY2AsOdOiyXwK9IUxNGhtw=) 2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:4a:1d:97:69:bb:0e:30:40:47:0a:ea:29:88:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=a50e84814b4f20492a9ba93ca144d662ef4efe5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:47:3f:af:dd:35:a9:d8:34:de:03:90:e8: 3c:ae:4b:76:b5:96:b1:41:0d:76:94:3f:19:bf:ed: a3:76:53:34:82:b1:43:ad:fc:19:98:08:69:df:ab: 69:48:94:9d:d1:f5:06:8b:1c:a1:e2:16:94:ab:e4: 92:19:f2:1a:8e:46:0e:7c:df:b9:c1:d1:71:e9:af: 1d:2d:39:20:11:5a:7f:ed:ce:b7:6d:d2:f6:38:3d: 48:39:aa:ad:03:eb:54:80:84:00:0d:db:da:a8:22: ed:3d:98:72:3e:6b:df:74:b6:a7:52:30:d4:67:c5: 73:24:bc:49:ca:03:b6:11:10:1f:91:3b:4c:be:ec: c3:2b:0b:9b:5b:47:cb:f7:ad:5d:42:5d:8a:a8:84: 01:33:c7:47:6a:7d:56:aa:9e:8d:a4:77:7d:80:71: ec:16:84:ff:29:a5:dc:cf:28:4f:28:8a:e0:39:0c: 0c:ea:da:e5:1b:b9:4a:b6:33:3f:0c:4b:3e:e9:08: 53:f3:eb:0b:3f:48:ad:d4:d8:4b:33:ae:18:3b:00: 28:74:ed:5d:79:bc:dc:07:eb:04:c4:49:59:42:31: 1a:79:69:9a:75:c8:38:a6:94:f5:ce:99:25:27:06: a8:ed:33:6b:9a:a3:5c:5a:41:4d:61:50:2f:de:57: 28:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0E:84:81:4B:4F:20:49:2A:9B:A9:3C:A1:44:D6:62:EF:4E:FE:5B X509v3 Authority Key Identifier: keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ef:05:78:09:c2:83:c0:17:11:8b:fb:c1:96:03:95:f6:71: 6d:25:d5:e6:ec:31:2f:27:f0:b7:ee:76:7c:35:df:70:60:37: 4a:24:a7:e0:7c:64:62:78:29:a3:3f:fc:13:3a:dd:54:a4:84: 8b:9f:7d:31:25:e7:73:99:6f:61:6d:a8:09:d2:c1:12:13:0b: e3:65:06:59:26:94:b4:fb:fc:9c:93:a3:82:1d:07:6d:02:e0: 34:70:05:05:08:4c:06:21:37:ba:d3:b5:f3:cb:7f:f2:c3:7f: ed:fd:45:35:d9:1c:02:74:b8:82:39:22:a4:d1:91:4b:28:1b: 66:e5:dd:ed:0a:e9:a9:a9:4c:59:1c:d9:89:e2:57:76:91:d0: 44:54:bd:6d:b8:6f:e6:09:3c:c3:e6:42:e2:40:8c:8e:19:bb: 28:bd:e4:8c:06:f6:83:23:2e:c9:83:27:a1:2d:2f:92:cf:ba: 49:6e:dd:c1:60:21:0d:3c:f4:90:d9:07:ac:07:93:c3:9c:7f: 5f:6b:0e:f8:6f:e0:57:63:bb:d9:14:bd:0c:92:3c:9b:c8:e3: e4:86:99:28:c0:e0:44:37:ed:57:e4:ae:2c:b4:0f:53:fb:22: f1:67:83:c5:7d:25:f2:1c:ad:34:60:61:89:dc:5e:89:bd:1c: e6:11:6c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkodl2m7DjBARwrqKYjjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmE5ODY2OTgwMDVkNTdlN2I5MmY3YTM4ZDIxOWJiYjgw ZmUxZmYwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD EyhhNTBlODQ4MTRiNGYyMDQ5MmE5YmE5M2NhMTQ0ZDY2MmVmNGVmZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujhHP6/dNanYNN4DkOg8rkt2tZax QQ12lD8Zv+2jdlM0grFDrfwZmAhp36tpSJSd0fUGixyh4haUq+SSGfIajkYOfN+5 wdFx6a8dLTkgEVp/7c63bdL2OD1IOaqtA+tUgIQADdvaqCLtPZhyPmvfdLanUjDU Z8VzJLxJygO2ERAfkTtMvuzDKwubW0fL961dQl2KqIQBM8dHan1Wqp6NpHd9gHHs FoT/KaXczyhPKIrgOQwM6trlG7lKtjM/DEs+6QhT8+sLP0it1NhLM64YOwAodO1d ebzcB+sExElZQjEaeWmadcg4ppT1zpklJwao7TNrmqNcWkFNYVAv3lcoCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUOhIFLTyBJKpupPKFE1mLvTv5bMB8GA1UdIwQY MBaAFBZqmGaYAF1X57kvejjSGbu4D+H/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAt ZGM3NzYyNTRjYmY2LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAtZGM3NzYyNTRjYmY2 LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqe8FeAnC g8AXEYv7wZYDlfZxbSXV5uwxLyfwt+52fDXfcGA3SiSn4HxkYngpoz/8EzrdVKSE i599MSXnc5lvYW2oCdLBEhML42UGWSaUtPv8nJOjgh0HbQLgNHAFBQhMBiE3utO1 88t/8sN/7f1FNdkcAnS4gjkipNGRSygbZuXd7QrpqalMWRzZieJXdpHQRFS9bbhv 5gk8w+ZC4kCMjhm7KL3kjAb2gyMuyYMnoS0vks+6SW7dwWAhDTz0kNkHrAeTw5x/ X2sO+G/gV2O72RS9DJI8m8jj5IaZKMDgRDftV+SuLLQPU/si8WeDxX0l8hytNGBh idxeib0c5hFsoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:51 2025 by rpki-client