This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json) Hash identifier: eMzdnCe1hdfN4F/niNaJk/tnCKrxCTqK+Z26jfQ0z6w= Subject key identifier: 48:5B:12:CD:C0:F9:1A:FB:CC:EE:98:71:6B:43:C1:75:D1:E3:97:FC Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77 Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77 Certificate serial: 019AF1647DEE352181BECE5E488C4FCC546E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft Manifest number: 0E88 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: 2CYNXB5qZHN7in7RGaGVmXvb7Xs.roa (hash: n74UAylTv760Shvrd+PI6ipCj4rV+2WaR3QnP3+8e6Y=) 2: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: u6T0sMeYD4R6UpIji1RF7uTKwk8x82OE3DMogOWwS+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7d:ee:35:21:81:be:ce:5e:48:8c:4f:cc:54:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=485b12cdc0f91afbccee98716b43c175d1e397fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:55:d6:9a:52:9b:5e:77:08:9f:f0:4d:48:3b: d4:ec:c7:15:03:66:24:74:94:41:8e:e6:23:6c:d5: f8:3a:34:6b:8b:90:7f:1c:01:0a:42:3f:af:65:d2: eb:b7:39:9b:d1:e9:17:24:b8:10:07:b0:7d:4d:68: d6:b6:20:e6:d1:5e:47:26:6c:e8:b2:4a:71:da:c1: 8c:cf:b1:5a:9b:96:49:05:80:51:b4:e7:31:07:56: 29:fe:a9:ae:59:33:8a:7a:19:ef:44:09:e0:d2:3d: 19:1d:f2:d0:2b:7d:28:8e:ec:25:3f:f9:c7:49:d3: d0:f1:c1:5f:52:10:90:97:6f:2f:ad:44:fd:06:22: a9:67:e9:11:b9:35:12:3b:81:d6:14:8a:dc:ae:88: d7:a1:a6:4f:ba:46:6c:d6:e7:42:40:09:05:de:3c: ec:cb:d5:7c:e0:26:b4:40:54:40:53:b6:f8:a7:df: 60:b0:4c:0d:a6:f6:20:88:27:40:85:90:15:62:bc: e7:78:8b:74:75:5e:cf:ba:9e:c1:d7:2c:81:5b:83: ad:6d:93:12:e6:05:a0:ea:12:7b:06:07:43:4a:d4: 3a:5a:f7:a3:eb:c6:26:fb:53:50:9d:62:34:40:3d: 17:a1:c4:fd:24:94:72:f1:0e:6d:2a:de:78:1e:12: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5B:12:CD:C0:F9:1A:FB:CC:EE:98:71:6B:43:C1:75:D1:E3:97:FC X509v3 Authority Key Identifier: keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:69:b3:4e:eb:8e:95:58:f6:fa:ad:84:4e:6d:f4:12:a0:72: ba:fe:8e:b6:4f:f3:a0:08:7e:e4:ed:a2:eb:fe:c4:79:40:20: ae:e6:73:d3:ed:0c:22:07:17:ef:65:a7:b5:f1:c4:e4:c7:c0: 62:6b:ee:d6:4e:1e:1c:b5:ec:3c:1f:eb:d0:22:09:66:c5:a1: 1f:b2:85:77:c1:ce:5c:8e:94:b6:72:f9:a8:ef:14:ec:cc:e3: 96:1b:e2:b8:c9:b0:34:ad:fb:d2:25:27:36:a2:ba:55:e3:83: 0f:83:a1:85:e2:e9:c6:78:70:31:7c:c4:22:d6:06:81:27:2f: b6:c5:be:51:e6:da:e8:4f:7d:6a:1c:8f:af:67:4a:40:2e:ce: 8d:03:a8:23:2f:2c:f9:1a:a2:57:71:79:6c:cd:8b:53:68:82: b3:4f:8b:be:bc:f6:1c:70:0c:98:1e:02:23:22:c2:45:86:b2: 02:d0:23:ab:53:91:54:aa:bb:85:a7:94:09:24:fb:57:3d:ae: 0c:73:61:3d:51:ef:7c:92:17:1c:3e:5b:ce:a8:73:65:be:0e: e6:a3:94:01:47:4e:12:f5:2b:93:b5:b5:9b:8e:ea:8a:1c:1f: 67:43:e0:5d:91:e3:37:37:6b:f8:4c:c7:43:0f:d0:98:5c:96: be:d6:98:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZH3uNSGBvs5eSIxPzFRuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkOTJiNjc0NzUyNzA3NTUxMzZhOGEzY2E4MDJjYTEyYzhh YzdlNzcwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD Eyg0ODViMTJjZGMwZjkxYWZiY2NlZTk4NzE2YjQzYzE3NWQxZTM5N2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXWmlKbXncIn/BNSDvU7McVA2Yk dJRBjuYjbNX4OjRri5B/HAEKQj+vZdLrtzmb0ekXJLgQB7B9TWjWtiDm0V5HJmzo skpx2sGMz7Fam5ZJBYBRtOcxB1Yp/qmuWTOKehnvRAng0j0ZHfLQK30ojuwlP/nH SdPQ8cFfUhCQl28vrUT9BiKpZ+kRuTUSO4HWFIrcrojXoaZPukZs1udCQAkF3jzs y9V84Ca0QFRAU7b4p99gsEwNpvYgiCdAhZAVYrzneIt0dV7Pup7B1yyBW4OtbZMS 5gWg6hJ7BgdDStQ6Wvej68Ym+1NQnWI0QD0XocT9JJRy8Q5tKt54HhI/pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhbEs3A+Rr7zO6YcWtDwXXR45f8MB8GA1UdIwQY MBaAFH2StnR1JwdVE2qKPKgCyhLIrH53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUt NDEwYzY3MWU3NTc3LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wNWU4MTQtY2FjNC00MWE4LTg3NWUtNDEwYzY3MWU3NTc3 LzEvZlpLMmRIVW5CMVVUYW9vOHFBTEtFc2lzZm5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUmmzTuuO lVj2+q2ETm30EqByuv6Otk/zoAh+5O2i6/7EeUAgruZz0+0MIgcX72WntfHE5MfA Ymvu1k4eHLXsPB/r0CIJZsWhH7KFd8HOXI6UtnL5qO8U7MzjlhviuMmwNK370iUn NqK6VeODD4OhheLpxnhwMXzEItYGgScvtsW+Ueba6E99ahyPr2dKQC7OjQOoIy8s +RqiV3F5bM2LU2iCs0+Lvrz2HHAMmB4CIyLCRYayAtAjq1ORVKq7haeUCST7Vz2u DHNhPVHvfJIXHD5bzqhzZb4O5qOUAUdOEvUrk7W1m47qihwfZ0PgXZHjNzdr+EzH Qw/QmFyWvtaYGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:49 2025 by rpki-client