This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json) Hash identifier: ZZcSl+IWr7TH15ZSNyRoRdCVRLCd43KT4eznOVGpgto= Subject key identifier: AC:2E:A0:13:02:00:F0:AB:80:71:62:A6:17:66:AF:FA:C2:E2:A8:B3 Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0 Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0 Certificate serial: 019AF19AD61F8316C3FD87FB2A327E8EE6BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: JHhfHSeiokqtmSK7OLFDchjTFBEA/AtrAMMGChH0Fx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d6:1f:83:16:c3:fd:87:fb:2a:32:7e:8e:e6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=ac2ea0130200f0ab807162a61766affac2e2a8b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:da:eb:6a:3f:f2:ef:cc:21:29:4b:76:c3:25: 34:78:9b:73:5f:52:c5:e6:35:58:16:d4:38:a9:a0: 0f:0b:57:5b:b0:e4:51:94:8d:f5:39:60:44:b7:da: f6:a8:8a:c9:84:e4:ae:80:be:b9:7d:9e:7a:5f:cb: 6e:a3:52:57:55:4f:e0:38:59:03:a6:41:50:1d:28: e6:17:49:e8:61:15:22:2a:3c:d1:55:9f:7c:29:3a: 55:ff:24:39:b6:83:b1:c2:68:b1:99:2b:9f:7e:7b: cd:6d:d9:4b:61:c2:3c:80:6b:de:b3:7c:9b:28:b9: f3:94:1d:62:bb:31:2e:91:bc:b9:f2:14:62:9d:ae: fe:02:e3:33:0d:21:52:1d:6e:45:33:eb:a4:7a:df: fd:9f:00:b5:cd:d7:1f:2f:60:1f:f1:a8:cb:4d:f0: 22:c3:e0:b5:dd:41:2a:68:d4:f4:23:89:e7:b8:6f: 20:8a:e9:69:c5:a8:59:c5:9a:e5:ea:26:9a:81:2d: e5:f4:51:00:99:25:5f:c0:b1:86:f7:79:7f:3d:cf: 98:e8:c3:13:42:cc:cc:7d:1a:c4:5c:0a:02:59:19: 29:f6:3c:01:f8:d2:66:fc:f5:e0:21:39:7a:14:b3: d2:66:d5:75:38:38:25:eb:a0:72:72:99:ea:af:1b: 8f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:2E:A0:13:02:00:F0:AB:80:71:62:A6:17:66:AF:FA:C2:E2:A8:B3 X509v3 Authority Key Identifier: keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:84:68:e6:2f:2f:d0:b7:9f:b9:68:d1:3c:dc:3c:74:ab:08: df:2c:3b:fa:90:7b:95:cd:83:4d:d6:68:0c:be:fc:3e:bf:8a: a8:0d:35:9b:d0:b4:96:24:7f:c0:bd:e4:cf:fd:ad:c2:e7:0a: 3d:a4:bc:b0:58:2f:43:5b:34:7f:7c:99:93:34:81:5a:ab:47: 5d:85:17:30:9a:f5:16:07:46:4a:70:3e:5e:51:f9:9e:a0:cf: af:02:2d:f2:32:46:b0:ea:70:c0:c3:0b:24:e6:fb:d2:77:19: e5:61:da:8e:a6:37:2e:2a:2d:4d:de:f5:27:7f:3d:7b:7e:e3: 24:1a:15:8c:07:ba:e5:d0:87:66:d1:c3:55:2c:4a:86:45:c9: 45:fd:58:45:6e:39:49:34:32:d7:d3:02:cd:e0:35:ce:cd:8b: 5c:1e:9a:16:47:7e:9f:1c:a6:57:57:b7:79:53:99:fb:06:57: 6e:b0:cf:56:5a:69:8d:40:34:c9:ef:c8:0b:3c:6d:47:bf:dd: 3c:34:f1:0b:55:0b:f0:f7:62:35:75:3b:6c:66:86:23:a9:b6: f2:8b:2f:c7:63:87:0e:3d:45:98:6a:d6:1e:3d:c6:4a:f1:0a: e4:4e:6c:60:b1:19:25:e3:6c:c5:51:42:cf:bc:8b:d5:4a:23: 28:00:e8:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtYfgxbD/Yf7KjJ+jua7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDk4MzQxZjI2YmI1NDQ2NDA1MDdiZDg4MGE5OWE3ZTdh MjM1ZDAwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EyhhYzJlYTAxMzAyMDBmMGFiODA3MTYyYTYxNzY2YWZmYWMyZTJhOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9rraj/y78whKUt2wyU0eJtzX1LF 5jVYFtQ4qaAPC1dbsORRlI31OWBEt9r2qIrJhOSugL65fZ56X8tuo1JXVU/gOFkD pkFQHSjmF0noYRUiKjzRVZ98KTpV/yQ5toOxwmixmSuffnvNbdlLYcI8gGves3yb KLnzlB1iuzEukby58hRina7+AuMzDSFSHW5FM+uket/9nwC1zdcfL2Af8ajLTfAi w+C13UEqaNT0I4nnuG8giulpxahZxZrl6iaagS3l9FEAmSVfwLGG93l/Pc+Y6MMT QszMfRrEXAoCWRkp9jwB+NJm/PXgITl6FLPSZtV1ODgl66BycpnqrxuPgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwuoBMCAPCrgHFiphdmr/rC4qizMB8GA1UdIwQY MBaAFBUJg0Hya7VEZAUHvYgKmafnojXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQt OWVkOWE5OTNmNTA4LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi8xZjJlYTEtYTAxNy00Mzg1LTgzOTQtOWVkOWE5OTNmNTA4 LzEvRlFtRFFmSnJ0VVJrQlFlOWlBcVpwLWVpTmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoRo5i8v 0LefuWjRPNw8dKsI3yw7+pB7lc2DTdZoDL78Pr+KqA01m9C0liR/wL3kz/2twucK PaS8sFgvQ1s0f3yZkzSBWqtHXYUXMJr1FgdGSnA+XlH5nqDPrwIt8jJGsOpwwMML JOb70ncZ5WHajqY3LiotTd71J389e37jJBoVjAe65dCHZtHDVSxKhkXJRf1YRW45 STQy19MCzeA1zs2LXB6aFkd+nxymV1e3eVOZ+wZXbrDPVlppjUA0ye/ICzxtR7/d PDTxC1UL8PdiNXU7bGaGI6m28osvx2OHDj1FmGrWHj3GSvEK5E5sYLEZJeNsxVFC z7yL1UojKADojQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:39:32 2025 by rpki-client