This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft File: Fhw-D9hiGXEWBK524iPPC3MM37c.mft (raw, json) Hash identifier: ZW5Zfge8CjJZlX7VhWwonplpDRGVYFNIgvdeAIbI1zk= Subject key identifier: 2D:05:DE:DF:3B:3D:C1:27:09:72:1A:AD:04:12:E2:73:10:B8:46:22 Authority key identifier: 16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7 Certificate issuer: /CN=161c3e0fd86219711604ae76e223cf0b730cdfb7 Certificate serial: 019AF2773AD3D68996FC2AA4EE7A51B62303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft Manifest number: 1331 Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: Fhw-D9hiGXEWBK524iPPC3MM37c.crl (hash: yEKHCYY7f+IEutKbJ5fVWPF8D0pj1QlPhX/BnH0XGL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3a:d3:d6:89:96:fc:2a:a4:ee:7a:51:b6:23:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=161c3e0fd86219711604ae76e223cf0b730cdfb7 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=2d05dedf3b3dc12709721aad0412e27310b84622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:64:ac:77:b2:c8:ad:91:be:aa:da:a7:21:9c: c8:e3:05:d3:4d:45:d3:2b:e2:54:a0:22:7c:5e:c6: b2:4a:95:75:d3:41:7f:9a:68:ad:17:d7:a9:4d:68: e8:9c:17:4a:b6:73:09:62:05:e7:36:8f:00:2a:3e: 23:9a:2d:a7:db:15:d2:27:e0:a9:10:1c:c7:ac:8a: 19:d0:07:74:fe:95:0b:e5:ee:54:82:e6:8c:2c:bd: 0b:1c:45:55:d3:75:11:56:74:82:87:17:98:6e:04: 37:1b:aa:32:1f:21:4d:90:52:57:f5:fa:3a:6a:b0: c0:c8:c8:5a:1c:c7:6a:e3:98:d6:70:55:42:d2:e0: 5a:82:da:2f:3d:ef:fc:5d:aa:c6:bb:38:7e:92:81: 21:5c:1d:a3:62:09:de:49:2d:bc:ed:7c:de:4d:81: 8b:6f:02:22:a6:13:ed:6d:75:cc:a1:0a:25:de:32: f2:9c:c2:b5:53:7e:66:e0:67:ff:b4:5f:c6:13:07: d7:31:76:00:cd:a2:f8:60:04:c9:be:78:47:34:aa: 1e:e1:73:e2:b4:79:1e:29:2b:d5:cd:6a:3f:06:67: 64:f0:19:2a:df:f6:19:91:2c:30:a7:00:85:ea:bc: b9:af:33:25:72:5b:da:f4:59:ae:37:79:11:ce:7c: ca:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:05:DE:DF:3B:3D:C1:27:09:72:1A:AD:04:12:E2:73:10:B8:46:22 X509v3 Authority Key Identifier: keyid:16:1C:3E:0F:D8:62:19:71:16:04:AE:76:E2:23:CF:0B:73:0C:DF:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fhw-D9hiGXEWBK524iPPC3MM37c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/58b5d8-c308-48f6-a54c-cacb335ce975/1/Fhw-D9hiGXEWBK524iPPC3MM37c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fa:67:30:3c:91:04:03:84:84:dc:53:16:2e:cc:a1:7c:b5: 54:39:9d:24:6c:d9:19:d6:cc:51:c4:10:c5:83:61:00:7d:3e: 7e:51:d4:51:9e:bf:fb:50:a8:87:0f:1e:7f:75:96:61:b9:a8: c0:b9:10:d8:8e:38:ed:00:50:88:c3:f5:f6:17:dd:a9:d9:aa: fb:58:d4:b0:3c:55:ec:e7:7f:20:4b:01:8a:54:9d:72:b9:85: dd:aa:25:5f:12:04:32:45:22:a8:7b:41:6a:c2:d9:79:69:f8: 7e:b5:76:8e:5a:99:e9:3d:21:08:0b:28:78:45:72:ba:d5:08: 77:f9:e1:47:fe:29:8b:ed:f8:ad:c9:4a:0c:72:23:b4:e0:c6: 62:04:7a:42:a1:a7:d0:25:b2:88:6f:78:53:93:e4:67:59:c4: 79:23:0e:3b:9b:21:46:c0:4e:5c:33:5e:ce:b8:47:1c:fb:2f: 28:bb:7f:e8:b2:91:82:53:3b:7e:88:c4:4f:3a:17:4c:3c:26: 68:66:e9:28:15:7c:01:b7:31:f4:f6:62:ce:bd:7a:a3:49:a3: 62:00:46:5d:de:d7:50:52:5e:0d:53:a9:1c:d2:bb:f6:f5:fb: 78:9a:fb:cb:cd:62:3e:14:2b:00:af:e2:f3:e9:f8:42:39:8b: 8d:97:8d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzrT1omW/Cqk7npRtiMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MWMzZTBmZDg2MjE5NzExNjA0YWU3NmUyMjNjZjBiNzMw Y2RmYjcwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EygyZDA1ZGVkZjNiM2RjMTI3MDk3MjFhYWQwNDEyZTI3MzEwYjg0NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWSsd7LIrZG+qtqnIZzI4wXTTUXT K+JUoCJ8XsaySpV100F/mmitF9epTWjonBdKtnMJYgXnNo8AKj4jmi2n2xXSJ+Cp EBzHrIoZ0Ad0/pUL5e5UguaMLL0LHEVV03URVnSChxeYbgQ3G6oyHyFNkFJX9fo6 arDAyMhaHMdq45jWcFVC0uBagtovPe/8XarGuzh+koEhXB2jYgneSS287XzeTYGL bwIiphPtbXXMoQol3jLynMK1U35m4Gf/tF/GEwfXMXYAzaL4YATJvnhHNKoe4XPi tHkeKSvVzWo/Bmdk8Bkq3/YZkSwwpwCF6ry5rzMlclva9FmuN3kRznzKNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0F3t87PcEnCXIarQQS4nMQuEYiMB8GA1UdIwQY MBaAFBYcPg/YYhlxFgSuduIjzwtzDN+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMt Y2FjYjMzNWNlOTc1LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS81OGI1ZDgtYzMwOC00OGY2LWE1NGMtY2FjYjMzNWNlOTc1 LzEvRmh3LUQ5aGlHWEVXQks1MjRpUFBDM01NMzdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPpnMDyR BAOEhNxTFi7MoXy1VDmdJGzZGdbMUcQQxYNhAH0+flHUUZ6/+1Cohw8ef3WWYbmo wLkQ2I447QBQiMP19hfdqdmq+1jUsDxV7Od/IEsBilSdcrmF3aolXxIEMkUiqHtB asLZeWn4frV2jlqZ6T0hCAsoeEVyutUId/nhR/4pi+34rclKDHIjtODGYgR6QqGn 0CWyiG94U5PkZ1nEeSMOO5shRsBOXDNezrhHHPsvKLt/6LKRglM7fojETzoXTDwm aGbpKBV8Abcx9PZizr16o0mjYgBGXd7XUFJeDVOpHNK79vX7eJr7y81iPhQrAK/i 8+n4QjmLjZeN9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:21:46 2025 by rpki-client