This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft File: fySblURiBoP5SziKdVGmimST7RI.mft (raw, json) Hash identifier: t7ERkdHBPcQftyp6hhBEyntvocfy3uNTzU8rFeZSaJU= Subject key identifier: 97:51:C4:B1:22:26:0A:22:B7:DE:CA:69:80:8C:99:0E:BE:46:A7:DB Authority key identifier: 7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 Certificate issuer: /CN=7f249b9544620683f94b388a7551a68a6493ed12 Certificate serial: 019AF464ECE97908502F93D52F4D8E7F7EF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft Manifest number: 0392 Signing time: Sat 06 Dec 2025 16:00:46 +0000 Manifest this update: Sat 06 Dec 2025 16:00:46 +0000 Manifest next update: Sun 07 Dec 2025 16:00:46 +0000 Files and hashes: 1: fySblURiBoP5SziKdVGmimST7RI.crl (hash: 9ADC3Y7qKT4PBGVZtk2AKZn4zDrV7n2vAK8dXmXd44Q=) 2: h7ETLfyQmL_b22CUnmqfJbv8XcU.roa (hash: GvscP45iqYd2rs4fdmtdGUU7bJ6EyKUaKDdAzQiywgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ec:e9:79:08:50:2f:93:d5:2f:4d:8e:7f:7e:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f249b9544620683f94b388a7551a68a6493ed12 Validity Not Before: Dec 6 16:00:46 2025 GMT Not After : Dec 7 16:00:46 2025 GMT Subject: CN=9751c4b122260a22b7deca69808c990ebe46a7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:fc:44:84:6d:2c:5d:b4:25:dc:f8:42:b4: 3b:36:e1:02:04:09:26:4f:1c:88:ee:d3:10:ef:3f: ed:4f:ce:2b:8e:c1:25:3f:e5:ab:73:a3:72:25:a3: 6f:8d:cf:3f:70:33:80:c2:17:79:be:f5:fa:88:2d: 6e:cf:52:22:3f:ed:a7:f5:2c:18:dc:0b:d3:1c:d7: 1d:b3:8f:ba:df:18:ae:21:f0:5a:84:88:e7:3f:61: 9b:82:2b:b8:43:2f:64:54:c4:17:9f:62:9a:3b:b8: 9a:ac:63:f9:b4:0b:03:62:36:36:eb:94:d9:ab:c1: 60:f0:eb:1e:2c:95:31:56:2d:db:f1:53:56:0e:75: f2:b1:ae:37:26:c1:4a:89:a5:04:ed:1b:01:01:2f: de:e2:b2:39:64:bf:d7:86:2d:5f:bc:7a:20:bf:79: b1:c8:a5:20:78:9e:27:8c:5e:fe:32:49:00:d8:51: 3c:46:8e:3a:11:55:15:21:5d:2d:45:37:26:d1:e1: 32:23:f7:d8:67:61:13:d5:c2:f8:fa:9e:96:8d:75: 9a:9c:28:f6:46:6c:b5:ab:79:35:58:24:e8:df:7d: 50:45:53:37:87:3d:63:69:a3:06:02:ef:ef:40:98: 3f:06:b8:e2:39:5a:a7:a8:1c:bc:c2:28:0f:c1:ef: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:51:C4:B1:22:26:0A:22:B7:DE:CA:69:80:8C:99:0E:BE:46:A7:DB X509v3 Authority Key Identifier: keyid:7F:24:9B:95:44:62:06:83:F9:4B:38:8A:75:51:A6:8A:64:93:ED:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fySblURiBoP5SziKdVGmimST7RI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7aa04e-4807-4988-9103-842397e30643/1/fySblURiBoP5SziKdVGmimST7RI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:26:cb:d1:75:0e:4d:98:87:12:3e:fd:93:99:6a:60:08:09: 28:b5:44:85:0e:51:ce:c5:78:1b:24:b9:9f:ff:15:68:63:54: 26:76:29:88:ae:6e:69:c6:a1:73:f4:f3:16:c3:ad:93:ce:a5: b5:f6:9a:84:61:c3:4a:7e:8f:60:2c:39:ee:5a:3d:26:08:49: f1:e9:aa:69:be:37:9b:00:55:79:34:cb:99:37:eb:df:dc:98: a2:b5:8e:2a:35:b3:00:92:d8:49:89:c5:d4:3c:85:58:b2:6f: 70:a1:4a:e8:c3:01:b0:70:ef:56:b8:b3:7b:82:92:59:d3:67: 0b:e5:8b:25:15:8a:35:f0:09:f4:ed:ab:b6:0c:a5:6c:65:de: 52:67:6a:27:5f:e9:21:48:b4:69:60:4f:9e:7c:38:34:f0:03: 51:0b:21:36:e8:f3:7f:48:f8:ae:2d:ec:72:13:15:51:c7:92: 98:45:d8:97:60:62:58:f5:de:da:91:cb:2f:45:f4:af:be:5f: 0a:52:1c:7f:fd:ba:94:b5:44:1b:39:6c:cb:44:0e:2d:00:8c: a8:bb:fb:f6:c8:d7:a6:5d:6c:1c:f5:81:80:bc:8c:5d:df:70: 43:8e:30:79:1b:eb:0a:6d:f6:74:11:9c:c0:8b:1c:34:08:ce: 79:02:e3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOzpeQhQL5PVL02Of37xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmMjQ5Yjk1NDQ2MjA2ODNmOTRiMzg4YTc1NTFhNjhhNjQ5 M2VkMTIwHhcNMjUxMjA2MTYwMDQ2WhcNMjUxMjA3MTYwMDQ2WjAzMTEwLwYDVQQD Eyg5NzUxYzRiMTIyMjYwYTIyYjdkZWNhNjk4MDhjOTkwZWJlNDZhN2RiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnr8RIRtLF20Jdz4QrQ7NuECBAkm TxyI7tMQ7z/tT84rjsElP+Wrc6NyJaNvjc8/cDOAwhd5vvX6iC1uz1IiP+2n9SwY 3AvTHNcds4+63xiuIfBahIjnP2Gbgiu4Qy9kVMQXn2KaO7iarGP5tAsDYjY265TZ q8Fg8OseLJUxVi3b8VNWDnXysa43JsFKiaUE7RsBAS/e4rI5ZL/Xhi1fvHogv3mx yKUgeJ4njF7+MkkA2FE8Ro46EVUVIV0tRTcm0eEyI/fYZ2ET1cL4+p6WjXWanCj2 Rmy1q3k1WCTo331QRVM3hz1jaaMGAu/vQJg/BrjiOVqnqBy8wigPwe+ULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdRxLEiJgoit97KaYCMmQ6+RqfbMB8GA1UdIwQY MBaAFH8km5VEYgaD+Us4inVRpopkk+0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMt ODQyMzk3ZTMwNjQzLzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83YWEwNGUtNDgwNy00OTg4LTkxMDMtODQyMzk3ZTMwNjQz LzEvZnlTYmxVUmlCb1A1U3ppS2RWR21pbVNUN1JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSbL0XUO TZiHEj79k5lqYAgJKLVEhQ5RzsV4GyS5n/8VaGNUJnYpiK5uacahc/TzFsOtk86l tfaahGHDSn6PYCw57lo9JghJ8emqab43mwBVeTTLmTfr39yYorWOKjWzAJLYSYnF 1DyFWLJvcKFK6MMBsHDvVrize4KSWdNnC+WLJRWKNfAJ9O2rtgylbGXeUmdqJ1/p IUi0aWBPnnw4NPADUQshNujzf0j4ri3schMVUceSmEXYl2BiWPXe2pHLL0X0r75f ClIcf/26lLVEGzlsy0QOLQCMqLv79sjXpl1sHPWBgLyMXd9wQ44weRvrCm32dBGc wIscNAjOeQLjFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:24:52 2025 by rpki-client